<html dir="ltr" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape" gpmc_reportInitialized="false">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>TNSOA-PO-WIN-SEC-User Configuration Agent</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:inline-table; height:24px; margin:0px,0px,0px,0px; padding-top:0px; position:relative; table-layout:fixed; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he0h_expanded   { background-color: #FEF0D0; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 5px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative;  }
                .he1h_expanded   { background-color: #7197B3; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 10px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; }

                .he2i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:35px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative;}
                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:60px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:65px; margin-right:0px; position:relative; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:65px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; }

                div .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#0000FF; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:53px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1h_expanded   { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

</style>
<!-- Scripts -->
<script type="text/javascript" language="javascript">
/*
String "strShowHide(0/1)"
0 = Hide all mode.
1 = Show all mode.
*/

var windowsArray = new Array();
var strShowHide = 1;

//Localized strings

var strShow = "show";
var strHide = "hide";
var strShowAll = "show all";
var strHideAll = "hide all";
var strShown = "shown";
var strHidden = "hidden";
var strExpandoNumPixelsFromEdge = "10px";


function IsSectionHeader(obj) {
    return (obj.className === "he0_expanded") || (obj.className === "he0h_expanded") || (obj.className === "he1h_expanded") || (obj.className === "he1_expanded") || (obj.className === "he1") || (obj.className === "he2") || (obj.className === "he3") || (obj.className === "he4") || (obj.className === "he4h") || (obj.className === "he5") || (obj.className === "he5h");
}

function IsSectionExpandedByDefault(objHeader) {
    if (objHeader === null) {
        return false;
    } else {
        return (objHeader.className.slice(objHeader.className.lastIndexOf("_")) === "_expanded");
    }
}

function SetSectionState(objHeader, strState) {
    var i = 0;
    var j;
    var all = objHeader.parentElement.ownerDocument.all;

    if (all === null) {
        return;
    }

    for (j = 0; j < all.length; j++) {
        if (all[j] === objHeader) {
            break;
        }
        i = i + 1;
    }

    for (j = i; j < all.length; j++) {
        if (all[i].className === "container") {
            break;
        }
        i = i + 1;
    }

    var objContainer = all[i];

    if (strState === "toggle") {
        if (objContainer.style.display === "none") {
            SetSectionState(objHeader, "show");
        }
        else {
            SetSectionState(objHeader, "hide");
        }
    }
    else {
        var objExpando = objHeader.children[1];

        if (strState === "show") {
            objContainer.style.display = "block";
            objExpando.innerText = strHide;
        }
        else if (strState === "hide") {
            objContainer.style.display = "none";
            objExpando.innerText = strShow;
        }
    }
}

function ShowSection(objHeader) {
    SetSectionState(objHeader, "show");
}

function HideSection(objHeader) {
    SetSectionState(objHeader, "hide");
}

function ToggleSection(objHeader) {
    SetSectionState(objHeader, "toggle");
}

/*================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
*/
function objshowhide_onClick() {
    var obji;
    var objBody = document.body.getElementsByTagName("*");

    if (objBody === null) {
        return;
    }
    
    switch (strShowHide) {
        case 0:
            strShowHide = 1;
            window.objshowhide.innerText = strShowAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    HideSection(objBody[obji]);
                }
            }
            break;
        case 1:
            strShowHide = 0;
            window.objshowhide.innerText = strHideAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
            }
            break;
    }
}

/*================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================*/
function window_onload() {
    // Only initialize once.  The UI may reinsert a report into the webbrowser control,
    // firing onLoad multiple times.
    if (document.documentElement.getAttribute("gpmc_reportInitialized").toUpperCase() !== "TRUE") {
        // Set text direction
        fDetDir(document.dir.toUpperCase());

        // Initialize sections to default expanded/collapsed state.
        var objBody = document.body.getElementsByTagName("*");

        if (objBody === null) {
            return;
        }

        for (var obji = 0; obji < objBody.length; obji++) {
            if (IsSectionHeader(objBody[obji])) {
                if (IsSectionExpandedByDefault(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
                else {
                    HideSection(objBody[obji]);
                }
            }
        }

        objshowhide.innerText = strShowAll;

        document.documentElement.setAttribute("gpmc_reportInitialized", "true");
    }
}

/*'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
*/
function document_onPropertyChange() {
    if (window.event.propertyName === "dir") {
        fDetDir(document.dir.toUpperCase());
    }
}

function fDetDir(strDir) {
    var colRules;
    var nug;
    var i;
    var strClass;

    switch (strDir.toUpperCase()) {
        case "LTR":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "right") {
                        nug.style.textAlign = "left";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = "";
                            nug.style.Right = strExpandoNumPixelsFromEdge;
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "right";
                            break;
                    }
                }
            }
            break;
        case "RTL":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "left") {
                        nug.style.textAlign = "right";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = strExpandoNumPixelsFromEdge;
                            nug.style.Right = "";
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "left";
                            break;
                    }
                }
            }
            break;
    }
}

/*'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI).
'================================================================================
*/
function window_onbeforeprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strHide) {
                    obji.innerText = strShown;
                }
                if (obji.innerText === strShow) {
                    obji.innerText = strHidden;
                }
            }
        }
    }
}

/*================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
*/
function window_onafterprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strShown) {
                    obji.innerText = strHide;
                }
                if (obji.innerText === strHidden) {
                    obji.innerText = strShow;
                }
            }
        }
    }
}

/*================================================================================
' Adding keypress support for accessibility
'================================================================================
*/
function document_onkeypress(event) {
    var chCode = ('charCode' in event) ? event.charCode : event.keyCode;

    //space bar (32) or carriage return (13) or line feed (10)
    if (chCode == "32" || chCode == "13" || chCode == "10") {
        if (event.srcElement.className === "expando") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.className === "sectionTitle") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.id === "objshowhide") {
            objshowhide_onClick();
            event.returnValue = false;
        }
    }
}

/*================================================================================
' When user clicks anywhere in the document body, determine if user is clicking
' on a header element.
'================================================================================
*/
function document_onclick() {
    var strsrc = window.event.srcElement;

    while (strsrc.className === "sectionTitle" || strsrc.className === "expando") {
        strsrc = strsrc.parentElement;
    }

    // Only handle clicks on headers.
    if (!IsSectionHeader(strsrc)) {
        return;
    }

    ToggleSection(strsrc);

    window.event.returnValue = false;
}

function ToggleState(e) {
    var objParentDisplayItem;
    var objDisplayItem;
    var i;

    if (e.innerText === strShow) {
        e.innerText = strHide;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "Block";
            }
        }
    }
    else {
        e.innerText = strShow;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "None";
            }
        }
    }
}

function traverseToURL(url) {
    if (url != null) {
        var urlInitialSubstr = url.substring(0, 4).toLowerCase();
        if (urlInitialSubstr === "http") {
            window.open(url, "_blank");
        }
    }
}

function getExplainWindowTitle() {
    return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles() {
    return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel() {
    return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel() {
    return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton() {
    return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton() {
    return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable() {
    return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel() {
    return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable() {
    return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strDiagArgs;

    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");

    if (strSettingDescription === "")
    {
        strSettingDescription = getNoExplainTextAvailable();
    }

    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported === "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html dir=" + document.dir +  ">\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    // IE specific method for showing the popup.
    if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
    {
        strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

        var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
        vModeless.document.write(strHtml);
        vModeless.document.close();
        vModeless.location.reload(false);
                        
        window.event.returnValue = false;
    }
    else
    {
        strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
        
        var expWin = window.open("", "expWin", strDiagArgs);
        expWin.document.write("");
        expWin.document.close();
        expWin.document.write(strHtml);
        expWin.document.close();
        expWin.focus();
    }
    
    return false;
}

function showEvents(srcElement,bVerbose,bInformational,bWarning,bError)
{
    var strWindowId = "EventDetails_" + srcElement.getAttribute("eventLogActivityId");
    if((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var eventIdLabelNode, eventTimeLabelNode, eventDescriptionLabelNode, eventDetailsLabelNode, eventXmlLabelNode, gpEventsTitleNode;
        var eventIdLabelNodeText, eventTimeLabelNodeText, eventDescriptionLabelNodeText, eventXmlLabelNodeText, gpEventsTitleNodeText, eventDetailsLabelNodeText;
        var singlePassEventsDetailsNode, eventRecordArray;
        var dataNotFoundWarningLabelNode, dataNotFoundWarningLabelNodeText;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var xmlDocumentRoot;
        var xmlDocument;
        var serializer;
        var itemSub;
        var doc;

        if (window.XMLSerializer) 
        {
           serializer = new XMLSerializer();
        }

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();

           doc = document.getElementById("data-island").textContent;
           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");
           xmlDocument = xmlDocumentRoot.documentElement;
           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name");
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_EventId') {
                                eventIdLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventTime') {
                                eventTimeLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDescription') {
                                eventDescriptionLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventXml') {
                                eventXmlLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDetails') {
                                eventDetailsLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_GPEvents') {
                                gpEventsTitleNode = node.childNodes[1];
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node.childNodes[1];
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    attributeValue = node.getAttribute("ActivityId");
                    if (attributeValue === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }
        }
        
        eventIdLabelNodeText = null;
        if (eventIdLabelNode != null) {
            if (eventIdLabelNode.childNodes.length > 0) {
                eventIdLabelNodeText = eventIdLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventIdLabelNodeText == null) {
            eventIdLabelNodeText = "Event ID";
        }

        eventTimeLabelNodeText = null;
        if (eventTimeLabelNode != null) {
            if (eventTimeLabelNode.firstChild.childNodes.length > 0) {
                eventTimeLabelNodeText = eventTimeLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventTimeLabelNodeText == null) {
            eventTimeLabelNodeText = "Event Time";
        }

        eventDescriptionLabelNodeText = null;
        if (eventDescriptionLabelNode != null) {
            if (eventDescriptionLabelNode.childNodes.length > 0) {
                eventDescriptionLabelNodeText = eventDescriptionLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDescriptionLabelNodeText == null) {
            eventDescriptionLabelNodeText = "Event Description";
        }

        eventXmlLabelNodeText = null;
        if (eventXmlLabelNode != null) {
            if (eventXmlLabelNode.childNodes.length > 0) {
                eventXmlLabelNodeText = eventXmlLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventXmlLabelNodeText == null) {
            eventXmlLabelNodeText = "Event XML";
        }

        gpEventsTitleNodeText = null;
        if (gpEventsTitleNode != null) {
            if (gpEventsTitleNode.childNodes.length > 0) {
                gpEventsTitleNodeText = gpEventsTitleNode.childNodes[0].nodeValue;
            }
        }
        if (gpEventsTitleNodeText == null) {
            gpEventsTitleNodeText = "Group Policy Events";
        }

        eventDetailsLabelNodeText = null;
        if (eventDetailsLabelNode != null) {
            if (eventDetailsLabelNode.childNodes.length > 0) {
                eventDetailsLabelNodeText = eventDetailsLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDetailsLabelNodeText == null) {
            eventDetailsLabelNodeText = "Event Details";
        }

        dataNotFoundWarningLabelNodeText = null;
        if (dataNotFoundWarningLabelNode != null) {
            if (dataNotFoundWarningLabelNode.childNodes.length > 0) {
                dataNotFoundWarningLabelNodeText = dataNotFoundWarningLabelNode.childNodes[0].nodeValue;
            }
        }
        if (dataNotFoundWarningLabelNodeText == null) {
            dataNotFoundWarningLabelNodeText = "Data Not Found";
        }
                
        if(singlePassEventsDetailsNode != null)
        {
            eventRecordArray = singlePassEventsDetailsNode.getElementsByTagName("EventRecord");
        }
        
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        htmlText = htmlText + "<title>" + gpEventsTitleNodeText + "</title>";
        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he1    { text-align: center; vertical-align: middle; background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:4em; position:relative; }";
        htmlText = htmlText + ".centerTxt { text-align: center; }";
        htmlText = htmlText + ".txtFormat1 { text-align: left; vertical-align:top; white-space:pre-line; }";
        htmlText = htmlText + "</style>";
      
        htmlText = htmlText + "<script> function toggle(e) {";
        htmlText = htmlText + "if (e.style.display === \"none\"){ e.style.display = \"\"; }";
        htmlText = htmlText + "else { e.style.display = \"none\"; }";
        htmlText = htmlText + "}</";
        htmlText = htmlText + "script";
        htmlText = htmlText + ">";
      
        htmlText = htmlText + "<body><table border=1><tr>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventIdLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventTimeLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDescriptionLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDetailsLabelNodeText + "</strong></th>";

        htmlText = htmlText + "</tr>";
        var i;
        var eventId;
        var eventTime;
        var eventDescription;
        var eventXml;
        var eventType;
        var displayEvent;
        var eventXmlId;
        var displayBgColor;

        if(eventRecordArray != null && eventRecordArray.length > 0)
        {
            for (i=0; i < eventRecordArray.length; i++)
            {
                displayEvent = false;
                var eventIdElements = eventRecordArray[i].getElementsByTagName("EventId");        
                if((eventIdElements != null) && (eventIdElements.length > 0) && (eventIdElements[0].firstChild != null))
                {
                    eventId =  eventIdElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventId =  dataNotFoundWarningLabelNodeText;
                }
                var eventTimeElements = eventRecordArray[i].getElementsByTagName("EventTime");
                if((eventTimeElements != null) && (eventTimeElements.length > 0) && (eventTimeElements[0].firstChild != null))
                {
                    eventTime = eventTimeElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventTime = dataNotFoundWarningLabelNodeText;
                }
                var eventDescriptionElements = eventRecordArray[i].getElementsByTagName("EventDescription");
                if((eventDescriptionElements != null) && (eventDescriptionElements.length > 0) && (eventDescriptionElements[0].firstChild != null))
                {
                        eventDescription = eventDescriptionElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventDescription = dataNotFoundWarningLabelNodeText;
                }
                var eventXmlElements = eventRecordArray[i].getElementsByTagName("EventXml");
                if((eventXmlElements != null) && (eventXmlElements.length > 0) && (eventXmlElements[0].firstChild != null))
                {
                    if (window.XMLSerializer) 
                    {
                       var xml = serializer.serializeToString(eventXmlElements[0].firstChild);
                       eventXml = xml;
                    } 
                    else 
                    {
                       if (typeof eventXmlElements[0].firstChild.xml != "undefined") 
                       {
                          eventXml = eventXmlElements[0].firstChild.xml;
                       }
                    }
                }
                else
                {
                    eventXml = dataNotFoundWarningLabelNodeText;
                }
                var eventLevelElements = eventRecordArray[i].getElementsByTagName("EventLevel");
                if((eventLevelElements != null) && (eventLevelElements.length > 0) && (eventLevelElements[0].firstChild != null))
                {
                    eventType = eventLevelElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventType = 5;
                }
                
                if((bVerbose === true)&&(eventType == 5))
                {
                    displayEvent = true;
                }
                else if((bInformational === true)&&(eventType == 4))
                {
                    displayEvent = true;
                }
                else if((bWarning === true)&&(eventType == 3))
                {
                    displayEvent = true;
                }
                else if((bError === true)&&((eventType == 1)||(eventType == 2)))
                {
                    displayEvent = true;
                }
                
                if (displayEvent === true)
                {
                    eventXmlId = "EventXml" + (i+"");
                    htmlText = htmlText + "<tr>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventId + "</td>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventTime + "</td>";
                    htmlText = htmlText + "<td class=\"txtFormat1\" style=\"background:" + displayBgColor +"\">" + eventDescription + "</td>";
                    htmlText = htmlText + "<td style=\"background:" + displayBgColor +"\"><span style=\"color:blue; cursor:hand\" onclick=\"toggle(" + eventXmlId +");\" onKeyPress=\"toggle(" + eventXmlId + ");\" tabIndex=1 >";
                    htmlText = htmlText + eventXmlLabelNodeText + "</span><br/>";
                    htmlText = htmlText + "<span style=\"display:none\" id=" + eventXmlId +">";
                    htmlText = htmlText + eventXml + "</span>";
                    htmlText = htmlText + "</td>";
                    htmlText = htmlText + "</tr>";
                }
            }
        }
        htmlText = htmlText + "</table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
        
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            var strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;            
        }
        else
        {
            var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "", strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        } 
    }

    xmlDocumentRoot = null;
}

function cleanUp() {
    var windowsArray = this.windowsArray;
    for (var currentWindow in windowsArray) {
        if (windowsArray.hasOwnProperty(currentWindow)) {
            windowsArray[currentWindow].close();
        }
    }
}

function getMessageText(messageNode) {
    if (messageNode != null) {
        if (messageNode.firstChild != null) {
            if (messageNode.firstChild.nodeType === 3) {
                for (var i = 0; i < messageNode.childNodes.length; i++) 
                {
                    var curNode = messageNode.childNodes[i];
                    if(curNode.nodeType === 1){
                        return curNode.childNodes[0].nodeValue;
                    }
                }
            } else {
                return messageNode.firstChild.childNodes[0].nodeValue;
            }
        }
    }
    return null;
}

function showComponentProcessingDetails(srcElement) {
    var strWindowId = "ProcessingDetails_" + srcElement.getAttribute("eventLogActivityId");
    if ((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var doc;
        var parser;
        var xmlDocumentRoot;
        var xmlDocument;

        var extensionsProcessedLabelNode, slowLinkThresholdLabelNode, linkSpeedLabelNode, extensionsProcessedTimeTakenNode;
        var domainControllerIpLabelNode, domainControllerNameLabelNode, processingTypeLabelNode, loopbackModeLabelNode;
        var processingTriggerLabelNode, extensionNameLabelNode, timeTakenLabelNode;
        var dataNotFoundWarningLabelNode;
        var singlePassEventsDetailsNode, totalProcessingTimeLabelNode, refreshMessageLabelNode;
        var processingDetailsUserTitleNode, processingDetailsComputerTitleNode;
        var policySectionNode;
        var policyEventsDetailsNode, detailsLabelNode;

        var extensionsProcessedLabelNodeText, slowLinkThresholdLabelNodeText, linkSpeedLabelNodeText, extensionsProcessedTimeTakenNodeText;
        var domainControllerIpLabelNodeText, domainControllerNameLabelNodeText, processingTypeLabelNodeText, loopbackModeLabelNodeText;
        var processingTriggerLabelNodeText, extensionNameLabelNodeText, timeTakenLabelNodeText;
        var dataNotFoundWarningLabelNodeText, totalProcessingTimeLabelNodeText, refreshMessageLabelNodeText;
        var processingDetailsUserTitleNodeText, processingDetailsComputerTitleNodeText;
        var detailsLabelNodeText;

        var slowLinkThresholdValue, linkSpeedValue, domainControllerIpValue, domainControllerNameValue;
        var processingTypeValue, loopbackModeValue, processingTriggerValue, totalPolicyProcessingTime, extensionProcessingTimeArray;
        var cseNameArray = new Array();
        var cseElapsedTimeArray = new Array();
        var policyApplicationFinishedTime;

        var isComputerProcessing;
        var strDiagArgs;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var itemSub;

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();
           doc = document.getElementById("data-island").textContent;

           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");

           xmlDocument = xmlDocumentRoot.documentElement;

           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name")
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_ExtensionsProcessed') {
                                extensionsProcessedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_SlowLinkThreshold') {
                                slowLinkThresholdLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LinkSpeed') {
                                linkSpeedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                extensionsProcessedTimeTakenNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerIP') {
                                domainControllerIpLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerName') {
                                domainControllerNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingTrigger') {
                                processingTriggerLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ExtensionName') {
                                extensionNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                timeTakenLabelNode = node;
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TotalProcessingTime') {
                                totalProcessingTimeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_RefreshMessage') {
                                refreshMessageLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                detailsLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingType') {
                                processingTypeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LoopbackMode') {
                                loopbackModeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                processingDetailsComputerTitleNode = node;
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    if (node.getAttribute("ActivityId") === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }

            if (singlePassEventsDetailsNode) {
                policyEventsDetailsNode = singlePassEventsDetailsNode.parentNode;
                if (policyEventsDetailsNode) {
                    policySectionNode = policyEventsDetailsNode.parentNode;
                    if (policySectionNode) {
                        if (policySectionNode.nodeName === 'UserPolicySection') {
                            isComputerProcessing = false;
                        }
                        if (policySectionNode.nodeName === 'ComputerPolicySection') {
                            isComputerProcessing = true;
                        }
                    }
                }
            }
        }

        
        extensionsProcessedLabelNodeText = getMessageText(extensionsProcessedLabelNode);
        slowLinkThresholdLabelNodeText = getMessageText(slowLinkThresholdLabelNode);
        linkSpeedLabelNodeText = getMessageText(linkSpeedLabelNode);
        domainControllerIpLabelNodeText = getMessageText(domainControllerIpLabelNode);
        domainControllerNameLabelNodeText = getMessageText(domainControllerNameLabelNode);
        processingTypeLabelNodeText = getMessageText(processingTypeLabelNode);
        loopbackModeLabelNodeText = getMessageText(loopbackModeLabelNode);
        processingTriggerLabelNodeText = getMessageText(processingTriggerLabelNode);
        extensionNameLabelNodeText = getMessageText(extensionNameLabelNode);
        timeTakenLabelNodeText = getMessageText(timeTakenLabelNode);
        processingDetailsUserTitleNodeText = getMessageText(processingDetailsUserTitleNode);
        processingDetailsComputerTitleNodeText = getMessageText(processingDetailsComputerTitleNode);
        dataNotFoundWarningLabelNodeText = getMessageText(dataNotFoundWarningLabelNode);
        totalProcessingTimeLabelNodeText = getMessageText(totalProcessingTimeLabelNode);
        refreshMessageLabelNodeText = getMessageText(refreshMessageLabelNode);
        detailsLabelNodeText = getMessageText(detailsLabelNode);
     

        slowLinkThresholdValue = null;
        linkSpeedValue = null;
        domainControllerIpValue = null;
        domainControllerNameValue = null;
        processingTypeValue = null;
        loopbackModeValue = null;
        processingTriggerValue = null;

        if (singlePassEventsDetailsNode != null) {
            slowLinkThresholdValue = singlePassEventsDetailsNode.getAttribute("SlowLinkThresholdInKbps");
            linkSpeedValue = singlePassEventsDetailsNode.getAttribute("LinkSpeedInKbps");
            domainControllerIpValue = singlePassEventsDetailsNode.getAttribute("DomainControllerIPAddress");
            domainControllerNameValue = singlePassEventsDetailsNode.getAttribute("DomainControllerName");
            processingTypeValue = singlePassEventsDetailsNode.getAttribute("ProcessingAppMode");
            loopbackModeValue = singlePassEventsDetailsNode.getAttribute("PolicyProcessingMode");
            processingTriggerValue = singlePassEventsDetailsNode.getAttribute("ProcessingTrigger");
            totalPolicyProcessingTime = singlePassEventsDetailsNode.getAttribute("PolicyElapsedTime");
            extensionProcessingTimeArray = singlePassEventsDetailsNode.getElementsByTagName("ExtensionProcessingTime");
        }
        if (slowLinkThresholdValue == null) {
            slowLinkThresholdValue = dataNotFoundWarningLabelNodeText;
        }
        if (linkSpeedValue == null) {
            linkSpeedValue = dataNotFoundWarningLabelNodeText;
        }
        if (domainControllerIpValue == null) {
            domainControllerIpValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerIpValue = domainControllerIpValue.replace(/^\\\\/, "");
        }
        if (domainControllerNameValue == null) {
            domainControllerNameValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerNameValue = domainControllerNameValue.replace(/^\\\\/, "");
        }
        if (processingTypeValue == null) {
            processingTypeValue = dataNotFoundWarningLabelNodeText;
        }
        if (loopbackModeValue == null) {
            loopbackModeValue = dataNotFoundWarningLabelNodeText;
        }
        if (processingTriggerValue == null) {
            processingTriggerValue = dataNotFoundWarningLabelNodeText;
        }

        if (extensionProcessingTimeArray != null && extensionProcessingTimeArray.length > 0) {
            var cseName;
            var cseElapsedTime;
            var cseProcessedTime;
            var cseId;
            var i;
            var index = 0;
            for (i = 0; i < extensionProcessingTimeArray.length; i++) {
                var cseNameElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionName");
                var cseElapsedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ElapsedTime");
                var cseProcessedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ProcessedTime");
                var cseIdElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionGuid");
                if ((cseNameElements.length > 0) && (cseElapsedTimeElements.length > 0) && (cseProcessedTimeElements.length > 0) && (cseIdElements.length > 0)) {
                    if ((cseNameElements[0].firstChild != null) && (cseElapsedTimeElements[0].firstChild != null) && (cseProcessedTimeElements[0].firstChild != null) && (cseIdElements[0].firstChild != null)) {
                        cseName = cseNameElements[0].firstChild.nodeValue;
                        cseElapsedTime = cseElapsedTimeElements[0].firstChild.nodeValue;
                        cseProcessedTime = cseProcessedTimeElements[0].firstChild.nodeValue;
                        cseId = cseIdElements[0].firstChild.nodeValue;
                        if ((cseName != null) && (cseElapsedTime != null) && (cseProcessedTime != null) && (cseId != null)) {
                            cseNameArray[index] = cseName;
                            cseElapsedTimeArray[index] = cseElapsedTime;
                            index = index + 1;
                            if (cseId === '{00000000-0000-0000-0000-000000000000}') {
                                policyApplicationFinishedTime = cseProcessedTime;
                            }
                        }
                    }
                }
            }
        }
          
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        if(isComputerProcessing != null)
        {
            if(isComputerProcessing === true)
            {
                htmlText = htmlText + "<title>" + processingDetailsComputerTitleNodeText + "</title>";
            }
            else
            {
                htmlText = htmlText + "<title>" + processingDetailsUserTitleNodeText + "</title>";
            }
        }
        

        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he0    { background-color:#FEF7D6; border:1px solid #BBBBBB; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }";
        htmlText = htmlText + ".he1    { color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2em;margin-left: 5 px; margin-top: 5 px; position:relative; width:100%; }";
        htmlText = htmlText + ".tblspecialfmt { border:1px solid black;border-collapse:collapse; }";
        htmlText = htmlText + ".tblfirstcolfmt { border-left-width: 1px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 0px;border-style: solid; border-color: black; }";
        htmlText = htmlText + ".tblsecondcolfmt { border-left-width: 0px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 1px;border-style: solid; border-color: black; }";
        htmlText = htmlText + "</style>";
        htmlText = htmlText + "<body>";
        htmlText = htmlText + "<span class=\"he1\">" + refreshMessageLabelNodeText + " " + policyApplicationFinishedTime + "</span>" ;
        htmlText = htmlText + "<div class=\"he0\">" + detailsLabelNodeText + "</div>"
        htmltext = htmlText + "<table><tr>";

        htmlText = htmlText + "<td>";
        htmlText = htmlText + "<table>";
        htmlText = htmlText + "<tr><td colspan=\"2\">&nbsp;</td></tr>";


        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTypeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTypeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + loopbackModeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + loopbackModeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + linkSpeedLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + linkSpeedValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + slowLinkThresholdLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + slowLinkThresholdValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerNameValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerIpLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerIpValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTriggerLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTriggerValue + "</td></tr>";

        htmlText = htmlText + "</table></td></tr>";
        htmlText = htmlText + "<tr ><td ><table>";


        htmlText = htmlText + "<tr><td><span class=\"he1\" >" + extensionsProcessedLabelNodeText +"</span></td></tr>";
        htmlText = htmlText + "<tr><td><table class=\"tblspecialfmt\" >";
        htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%;background-color:#FEF7D6;\"><strong>" + extensionNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td class=\"tblsecondcolfmt\" style=\"background-color:#FEF7D6;\" ><strong>" + timeTakenLabelNodeText + "</strong></td></tr>";

        for (var idx in cseNameArray)
        {
            htmlText = htmlText + "<tr><td style=\"width: 50%\">" + cseNameArray[idx] + "</td>";                   
            htmlText = htmlText + "<td>" + cseElapsedTimeArray[idx] + "</td></tr>";
        }

        if (totalPolicyProcessingTime != null)
        {
            htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%\" >" + totalProcessingTimeLabelNodeText +":</td>";
            htmlText = htmlText + "<td class=\"tblsecondcolfmt\">" + totalPolicyProcessingTime + "</td></tr>";
        }
        htmlText = htmlText + "</table></td></tr></table></td></tr></table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
         
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;                      
        }
        else
        {
            strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "" , strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        }
    }

    xmlDocumentRoot = null;
}
</script>
</head>

<body onload="window_onload();" onclick="document_onclick();" onkeypress="document_onkeypress(event);" onunload="cleanUp();">

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

        </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" >
<tr><td colspan="2" class="gponame">TNSOA-PO-WIN-SEC-User Configuration Agent</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 2-9-2025 09:12:30</td>
    <td><div id="objshowhide" tabindex="0" onclick="objshowhide_onClick();return false;"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td scope="row">Domain</td><td>emea.tpg.ads</td></tr>
<tr><td scope="row">Owner</td><td>S-1-5-21-513466819-3096973226-347852806-27238</td></tr>
<tr><td scope="row">Created</td><td>13-4-2018 17:32:02</td></tr>
<tr><td scope="row">Modified</td><td>19-10-2023 15:08:10</td></tr>
<tr><td scope="row">User Revisions</td><td>49 (AD), 49 (SYSVOL)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>2 (AD), 2 (SYSVOL)</td></tr>
<tr><td scope="row">Unique ID</td><td>{c86d9a21-f1b6-4dc2-901d-12c19a35ed2d}</td></tr>
<tr><td scope="row">GPO Status</td><td>Enabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" ><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
    <tr><td>TN</td><td>No</td><td>Enabled</td><td>emea.tpg.ads/TN</td></tr>
    </table>
    <br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" ><tr><th scope="col">Name</th></tr><tr><td>EMEA\TNSOA-L-SEC-User Configuration Agent</td></tr></table>
</div>
</div>
<div class="filler"></div>

<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" >
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>EMEA\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\TN-G-ORG-OU Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\TN-L-SEC-Delegation Modify Group Policy Settings Access</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\TNSOA-L-SEC-User Configuration Agent</td><td>Read (from Security Filtering)</td><td>No</td></tr>
<tr><td>NT AUTHORITY\Authenticated Users</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>ROOT\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">No settings defined.</div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Scripts</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Logoff</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><b>For this GPO, Script order:</b> Not configured</div><div class="he4i"><table class="info" >
<tr><th scope="col">Name</th><th scope="col">Parameters</th></tr>
<tr><td>log_off.bat</td><td></td></tr>
</table>
</div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Folder Redirection</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Desktop</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i">Setting: Not configured</div></div><div class="he4"><span class="sectionTitle" tabindex="0">Start Menu</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i">Setting: Not configured</div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Internet Explorer Maintenance</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Connection/Connection Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">This GPO contains connection settings.</div></div><div class="he3"><span class="sectionTitle" tabindex="0">URLs/Important URLs</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td colspan="2">
    <table class="subtable" >
    <tr><th scope="col">Name</th><th scope="col">URL</th></tr>
    <tr><td scope="row">Home page URL</td><td>https://tntukweb02/orange/at/dotclear/</td></tr>
    <tr><td scope="row">Search bar URL</td><td>Not configured</td></tr>
    <tr><td scope="row">Online support page URL</td><td>Not configured</td></tr>
    </table>
</td></tr>
</table></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Programs/Programs</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Import the current program settings</td><td>Enabled</td></tr>
<tr><td colspan="2">
    <table class="subtable" >
    <tr><td>HTML Editor</td><td>Microsoft Office Word</td></tr>
    <tr><td>E-mail</td><td>Microsoft Outlook</td></tr>
    <tr><td>Newsgroups</td><td>Outlook Express</td></tr>
    <tr><td>Internet Call</td><td>Microsoft NetMeeting</td></tr>
    <tr><td>Calendar</td><td>Microsoft Outlook</td></tr>
    <tr><td>Contact List</td><td>Microsoft Outlook</td></tr>
    </table>
</td></tr>
<tr><td>Internet Explorer should check to see whether it is the default browser</td><td>Disabled</td></tr>
</table></div></div></div></div><div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Policy definitions (ADMX files) retrieved from the central store.</div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Always open All Control Panel Items when opening Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="This policy setting controls the default Control Panel view, whether by category or icons.&lt;br/&gt;&lt;br/&gt;If this policy setting is enabled, the Control Panel opens to the icon view.&lt;br/&gt;&lt;br/&gt;If this policy setting is disabled, the Control Panel opens to the category view.&lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the Control Panel opens to the view used in the last Control Panel session.&lt;br/&gt;Note: Icon size is dependent upon what the user has set it to in the previous session." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Always open All Control Panel Items when opening Control Panel</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to Control Panel and PC settings" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Disables all Control Panel programs and the PC settings app.&lt;br/&gt;&lt;br/&gt;This setting prevents Control.exe and SystemSettings.exe, the program files for Control Panel and PC settings, from starting. As a result, users cannot start Control Panel or PC settings, or run any of their items.&lt;br/&gt;&lt;br/&gt;This setting removes Control Panel from:&lt;br/&gt;The Start screen&lt;br/&gt;File Explorer&lt;br/&gt;&lt;br/&gt;This setting removes PC settings from:&lt;br/&gt;The Start screen&lt;br/&gt;Settings charm&lt;br/&gt;Account picture&lt;br/&gt;Search results&lt;br/&gt;&lt;br/&gt;If users try to select a Control Panel item from the Properties item on a context menu, a message appears explaining that a setting prevents the action." gpmc_supported="At least Windows 2000">Prohibit access to Control Panel and PC settings</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Add or Remove Programs</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Go directly to Components Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Prevents users from using Add or Remove Programs to configure installed services.&lt;br/&gt;&lt;br/&gt;This setting removes the &amp;quot;Set up services&amp;quot; section of the Add/Remove Windows Components page. The &amp;quot;Set up services&amp;quot; section lists system services that have not been configured and offers users easy access to the configuration tools.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, &amp;quot;Set up services&amp;quot; appears only when there are unconfigured system services. If you enable this setting, &amp;quot;Set up services&amp;quot; never appears.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other methods to configure services.&lt;br/&gt;&lt;br/&gt;Note: When &amp;quot;Set up services&amp;quot; does not appear, clicking the Add/Remove Windows Components button starts the Windows Component Wizard immediately. Because the only remaining option on the Add/Remove Windows Components page starts the wizard, that option is selected automatically, and the page is bypassed.&lt;br/&gt;&lt;br/&gt;To remove &amp;quot;Set up services&amp;quot; and prevent the Windows Component Wizard from starting, enable the &amp;quot;Hide Add/Remove Windows Components page&amp;quot; setting. If the &amp;quot;Hide Add/Remove Windows Components page&amp;quot; setting is enabled, this setting is ignored." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Go directly to Components Wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Add New Programs page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page.&lt;br/&gt;&lt;br/&gt;The Add New Programs button lets users install programs published or assigned by a system administrator.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Add New Programs button is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to install programs." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Add New Programs page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Add/Remove Windows Components page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page.&lt;br/&gt;&lt;br/&gt;The Add/Remove Windows Components button lets users configure installed services and use the Windows Component Wizard to add, remove, and configure components of Windows from the installation files.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Add/Remove Windows Components button is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to configure services or add or remove program components. However, this setting blocks user access to the Windows Component Wizard." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Add/Remove Windows Components page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Change or Remove Programs page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page.&lt;br/&gt;&lt;br/&gt;The Change or Remove Programs button lets users uninstall, repair, add, or remove features of installed programs.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Change or Remove Programs page is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to delete or uninstall programs." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Change or Remove Programs page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the &amp;quot;Add a program from CD-ROM or floppy disk&amp;quot; option" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the &amp;quot;Add a program from CD-ROM or floppy disk&amp;quot; section from the Add New Programs page. This prevents users from using Add or Remove Programs to install programs from removable media.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Add a program from CD-ROM or floppy disk&amp;quot; option is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to add or remove program components.&lt;br/&gt;&lt;br/&gt;Note: If the &amp;quot;Hide Add New Programs page&amp;quot; setting is enabled, this setting is ignored. Also, if the &amp;quot;Prevent removable media source for any install&amp;quot; setting (located in User Configuration\Administrative Templates\Windows Components\Windows Installer) is enabled, users cannot add programs from removable media, regardless of this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide the &quot;Add a program from CD-ROM or floppy disk&quot; option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the &amp;quot;Add programs from Microsoft&amp;quot; option" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the &amp;quot;Add programs from Microsoft&amp;quot; section from the Add New Programs page. This setting prevents users from using Add or Remove Programs to connect to Windows Update.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, &amp;quot;Add programs from Microsoft&amp;quot; is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to connect to Windows Update.&lt;br/&gt;&lt;br/&gt;Note: If the &amp;quot;Hide Add New Programs page&amp;quot; setting is enabled, this setting is ignored." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide the &quot;Add programs from Microsoft&quot; option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the &amp;quot;Add programs from your network&amp;quot; option" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Prevents users from viewing or installing published programs.&lt;br/&gt;&lt;br/&gt;This setting removes the &amp;quot;Add programs from your network&amp;quot; section from the Add New Programs page. The &amp;quot;Add programs from your network&amp;quot; section lists published programs and provides an easy way to install them.&lt;br/&gt;&lt;br/&gt;Published programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically, system administrators publish programs to notify users that the programs are available, to recommend their use, or to enable users to install them without having to search for installation files.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot tell which programs have been published by the system administrator, and they cannot use Add or Remove Programs to install published programs. However, they can still install programs by using other methods, and they can view and install assigned (partially installed) programs that are offered on the desktop or on the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, &amp;quot;Add programs from your network&amp;quot; is available to all users.&lt;br/&gt;&lt;br/&gt;Note: If the &amp;quot;Hide Add New Programs page&amp;quot; setting is enabled, this setting is ignored." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide the &quot;Add programs from your network&quot; option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the Set Program Access and Defaults page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Set Program Access and Defaults button from the Add or Remove Programs bar.  As a result, users cannot view or change the associated page.&lt;br/&gt;&lt;br/&gt;The Set Program Access and Defaults button lets administrators specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Set Program Access and Defaults button is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to change program access or defaults.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the Set Program Access and Defaults icon from appearing on the Start menu.  See the &amp;quot;Remove Set Program Access and Defaults from Start menu&amp;quot; setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide the Set Program Access and Defaults page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Add or Remove Programs" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Prevents users from using Add or Remove Programs.&lt;br/&gt;&lt;br/&gt;This setting removes Add or Remove Programs from Control Panel and removes the Add or Remove Programs item from menus.&lt;br/&gt;&lt;br/&gt;Add or Remove Programs lets users install, uninstall, repair, add, and remove features and components of Windows 2000 Professional and a wide variety of Windows programs. Programs published or assigned to the user appear in Add or Remove Programs.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, Add or Remove Programs is available to all users.&lt;br/&gt;&lt;br/&gt;When enabled, this setting takes precedence over the other settings in this folder.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to install or uninstall programs." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove Add or Remove Programs</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Support Information" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes links to the Support Info dialog box from programs on the Change or Remove Programs page.&lt;br/&gt;&lt;br/&gt;Programs listed on the Change or Remove Programs page can include a &amp;quot;Click here for support information&amp;quot; hyperlink. When clicked, the hyperlink opens a dialog box that displays troubleshooting information, including a link to the installation files and data that users need to obtain product support, such as the Product ID and version number of the program. The dialog box also includes a hyperlink to support information on the Internet, such as the Microsoft Product Support Services Web page.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Support Info hyperlink appears.&lt;br/&gt;&lt;br/&gt;Note: Not all programs provide a support information hyperlink." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove Support Information</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Display</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Display Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Disables the Display Control Panel.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Display Control Panel does not run. When users try to start Display, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit access to the Control Panel&amp;quot; (User Configuration\Administrative Templates\Control Panel) and &amp;quot;Remove programs on Settings menu&amp;quot; (User Configuration\Administrative Templates\Start Menu &amp;amp; Taskbar) settings." gpmc_supported="At least Windows 2000">Disable the Display Control Panel</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Settings tab" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Removes the Settings tab from Display in Control Panel.&lt;br/&gt;&lt;br/&gt;This setting prevents users from using Control Panel to add, configure, or change the display settings on the computer." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Settings tab</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Personalization</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable screen saver" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Enables desktop screen savers.&lt;br/&gt;&lt;br/&gt;If you disable this setting, screen savers do not run. Also, this setting disables the Screen Saver section of the Screen Saver dialog in the Personalization or Display Control Panel. As a result, users cannot change the screen saver options.&lt;br/&gt;&lt;br/&gt;If you do not configure it, this setting has no effect on the system.&lt;br/&gt;&lt;br/&gt;If you enable it, a screen saver runs, provided the following two conditions hold: First, a valid screen saver on the client is specified through the &amp;quot;Screen Saver executable name&amp;quot; setting or through Control Panel on the client computer. Second, the screen saver timeout is set to a nonzero value through the setting or Control Panel.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent changing Screen Saver&amp;quot; setting." gpmc_supported="At least Windows 2000 Service Pack 1">Enable screen saver</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Password protect the screen saver" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Determines whether screen savers used on the computer are password protected.&lt;br/&gt;&lt;br/&gt;If you enable this setting, all screen savers are password protected. If you disable this setting, password protection cannot be set on any screen saver.&lt;br/&gt;&lt;br/&gt;This setting also disables the &amp;quot;Password protected&amp;quot; checkbox on the Screen Saver dialog in the Personalization or Display Control Panel, preventing users from changing the password protection setting.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, users can choose whether or not to set password protection on each screen saver.&lt;br/&gt;&lt;br/&gt;To ensure that a computer will be password protected, enable the &amp;quot;Enable Screen Saver&amp;quot; setting and specify a timeout via the &amp;quot;Screen Saver timeout&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: To remove the Screen Saver dialog, use the &amp;quot;Prevent changing Screen Saver&amp;quot; setting." gpmc_supported="At least Windows 2000 Service Pack 1">Password protect the screen saver</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing color and appearance" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Disables the Color (or Window Color) page in the Personalization Control Panel, or the Color Scheme dialog in the Display Control Panel on systems where the Personalization feature is not available.&lt;br/&gt;&lt;br/&gt;This setting prevents users from using Control Panel to change the window border and taskbar color (on Windows 8), glass color (on Windows Vista and Windows 7), system colors, or color scheme of the desktop and windows.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or not configured, the Color (or Window Color) page or Color Scheme dialog is available in the Personalization or Display Control Panel.&lt;br/&gt;&lt;br/&gt;For systems prior to Windows Vista, this setting hides the Appearance and Themes tabs in the in Display in Control Panel." gpmc_supported="At least Windows 2000">Prevent changing color and appearance</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing color scheme" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="This setting forces the theme color scheme to be the default color scheme.&lt;br/&gt;&lt;br/&gt;If you enable this setting, a user cannot change the color scheme of the current desktop theme.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, a user may change the color scheme of the current desktop theme.&lt;br/&gt;&lt;br/&gt;For Windows 7 and later, use the &amp;quot;Prevent changing color and appearance&amp;quot; setting." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, and Windows XP">Prevent changing color scheme</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing desktop background" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from adding or changing the background design of the desktop.&lt;br/&gt;&lt;br/&gt;By default, users can use the Desktop Background page in the Personalization or Display Control Panel to add a background design (wallpaper) to their desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, none of the Desktop Background settings can be changed by the user.&lt;br/&gt;&lt;br/&gt;To specify wallpaper for a group, use the &amp;quot;Desktop Wallpaper&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: You must also enable the &amp;quot;Desktop Wallpaper&amp;quot; setting to prevent users from changing the desktop wallpaper. Refer to KB article: Q327998 for more information.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Allow only bitmapped wallpaper&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent changing desktop background</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing screen saver" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents the Screen Saver dialog from opening in the Personalization or Display Control Panel.&lt;br/&gt;      &lt;br/&gt;This setting prevents users from using Control Panel to add, configure, or change the screen saver on the computer. It does not prevent a screen saver from running.&lt;br/&gt;      " gpmc_supported="At least Windows 2000">Prevent changing screen saver</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing theme" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="This setting disables the theme gallery in the Personalization Control Panel.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot change or save a theme.  Elements of a theme such as the desktop background, color, sounds, and screen saver can still be changed (unless policies are set to turn them off).&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, there is no effect.&lt;br/&gt;&lt;br/&gt;Note: If you enable this setting but do not specify a theme using the &amp;quot;load a specific theme&amp;quot; setting, the theme defaults to whatever the user previously set or the system default." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Prevent changing theme</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing visual style for windows and buttons" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users or applications from changing the visual style of the windows and buttons displayed on their screens.&lt;br/&gt;&lt;br/&gt;When enabled on Windows XP, this setting disables the &amp;quot;Windows and buttons&amp;quot; drop-down list on the Appearance tab in Display Properties.&lt;br/&gt;&lt;br/&gt;When enabled on Windows XP and later systems, this setting prevents users and applications from changing the visual style through the command line.  Also, a user may not apply a different visual style when changing themes." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Prevent changing visual style for windows and buttons</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit selection of visual style font size" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from changing the size of the font in the windows and buttons displayed on their screens.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the &amp;quot;Font size&amp;quot; drop-down list on the Appearance tab in Display Properties is disabled. &lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, a user may change the font size using the &amp;quot;Font size&amp;quot; drop-down list on the Appearance tab." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit selection of visual style font size</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Screen saver timeout" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Specifies how much user idle time must elapse before the screen saver is launched.&lt;br/&gt;&lt;br/&gt;When configured, this idle time can be set from a minimum of 1 second to a maximum of 86,400 seconds, or 24 hours. If set to zero, the screen saver will not be started.&lt;br/&gt;&lt;br/&gt;This setting has no effect under any of the following circumstances:&lt;br/&gt;&lt;br/&gt;    - The setting is disabled or not configured.&lt;br/&gt;&lt;br/&gt;    - The wait time is set to zero.&lt;br/&gt;&lt;br/&gt;    - The &amp;quot;Enable Screen Saver&amp;quot; setting is disabled.&lt;br/&gt;&lt;br/&gt;    - Neither the &amp;quot;Screen saver executable name&amp;quot; setting nor the Screen Saver dialog of the client computer&amp;#39;s Personalization or Display Control Panel specifies a valid existing screen saver program on the client.&lt;br/&gt;&lt;br/&gt;When not configured, whatever wait time is set on the client through the Screen Saver dialog in the Personalization or Display Control Panel is used. The default is 15 minutes." gpmc_supported="At least Windows 2000 Service Pack 1">Screen saver timeout</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2">Number of seconds to wait to enable the screen saver</td></tr><tr><td colspan="2"> </td></tr><tr><td>Seconds:</td><td>300</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Printers</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browse a common web site to find printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Adds a link to an Internet or intranet Web page to the Add Printer Wizard.&lt;br/&gt;&lt;br/&gt;          You can use this setting to direct users to a Web page from which they can install printers.&lt;br/&gt;&lt;br/&gt;          If you enable this setting and type an Internet or intranet address in the text box, the system adds a Browse button to the &amp;quot;Specify a Printer&amp;quot; page in the Add Printer Wizard. The Browse button appears beside the &amp;quot;Connect to a printer on the Internet or on a home or office network&amp;quot; option. When users click Browse, the system opens an Internet browser and navigates to the specified URL address to display the available printers.&lt;br/&gt;&lt;br/&gt;          This setting makes it easy for users to find the printers you want them to add.&lt;br/&gt;&lt;br/&gt;          Also, see the &amp;quot;Custom support URL in the Printers folder&amp;#39;s left pane&amp;quot; and &amp;quot;Activate Internet printing&amp;quot; settings in &amp;quot;Computer Configuration\Administrative Templates\Printers.&amp;quot;" gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Browse a common web site to find printers</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browse the network to find printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Allows users to use the Add Printer Wizard to search the network for shared printers.&lt;br/&gt;&lt;br/&gt;If you enable this setting or do not configure it, when users choose to add a network printer by selecting the &amp;quot;A network printer, or a printer attached to another computer&amp;quot; radio button on Add Printer Wizard&amp;#39;s page 2, and also check the &amp;quot;Connect to this printer (or to browse for a printer, select this option and click Next)&amp;quot; radio button on Add Printer Wizard&amp;#39;s page 3, and do not specify a printer name in the adjacent &amp;quot;Name&amp;quot; edit box, then Add Printer Wizard displays the list of shared printers on the network and invites to choose a printer from the shown list.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the network printer browse page is removed from within the Add Printer Wizard, and users cannot search the network but must type a printer name.&lt;br/&gt;&lt;br/&gt;Note: This setting affects the Add Printer Wizard only. It does not prevent users from using other programs to search for shared printers or to connect to network printers." gpmc_supported="At least Windows 2000">Browse the network to find printers</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Default Active Directory path when searching for printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Specifies the Active Directory location where searches for printers begin.&lt;br/&gt;&lt;br/&gt;          The Add Printer Wizard gives users the option of searching Active Directory for a shared printer.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting, these searches begin at the location you specify in the &amp;quot;Default Active Directory path&amp;quot; box. Otherwise, searches begin at the root of Active Directory.&lt;br/&gt;&lt;br/&gt;          This setting only provides a starting point for Active Directory searches for printers. It does not restrict user searches through Active Directory." gpmc_supported="At least Windows 2000">Default Active Directory path when searching for printers</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Point and Print Restrictions" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="This policy setting controls the client Point and Print behavior, including the security prompts for Windows Vista computers. The policy setting applies only to non-Print Administrator clients, and only to computers that are members of a domain.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting:&lt;br/&gt;          -Windows XP and later clients will only download print driver components from a list of explicitly named servers. If a compatible print driver is available on the client, a printer connection will be made. If a compatible print driver is not available on the client, no connection will be made.&lt;br/&gt;          -You can configure Windows Vista clients so that security warnings and elevated command prompts do not appear when users Point and Print, or when printer connection drivers need to be updated.&lt;br/&gt;&lt;br/&gt;          If you do not configure this policy setting:&lt;br/&gt;          -Windows Vista client computers can point and print to any server.&lt;br/&gt;          -Windows Vista computers will show a warning and an elevated command prompt when users create a printer connection to any server using Point and Print.&lt;br/&gt;          -Windows Vista computers will show a warning and an elevated command prompt when an existing printer connection driver needs to be updated.&lt;br/&gt;          -Windows Server 2003 and Windows XP client computers can create a printer connection to any server in their forest using Point and Print.&lt;br/&gt;&lt;br/&gt;          If you disable this policy setting:&lt;br/&gt;          -Windows Vista client computers can create a printer connection to any server using Point and Print.&lt;br/&gt;          -Windows Vista computers will not show a warning or an elevated command prompt when users create a printer connection to any server using Point and Print.&lt;br/&gt;          -Windows Vista computers will not show a warning or an elevated command prompt when an existing printer connection driver needs to be updated.&lt;br/&gt;          -Windows Server 2003 and Windows XP client computers can create a printer connection to any server using Point and Print.&lt;br/&gt;          -The &amp;quot;Users can only point and print to computers in their forest&amp;quot; setting applies only to Windows Server 2003 and Windows XP SP1 (and later service packs)." gpmc_supported="Supported Windows XP SP1 through Windows Server 2008 RTM">Point and Print Restrictions</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent addition of printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Prevents users from using familiar methods to add local and network printers.&lt;br/&gt;&lt;br/&gt;          If this policy setting is enabled, it removes the Add Printer option from the Start menu. (To find the Add Printer option, click Start, click Printers, and then click Add Printer.) This setting also removes Add Printer from the Printers folder in Control Panel.&lt;br/&gt;&lt;br/&gt;          Also, users cannot add printers by dragging a printer icon into the Printers folder. If they try, a message appears explaining that the setting prevents the action.&lt;br/&gt;&lt;br/&gt;          However, this setting does not prevent users from using the Add Hardware Wizard to add a printer. Nor does it prevent users from running other programs to add printers.&lt;br/&gt;&lt;br/&gt;          This setting does not delete printers that users have already added. However, if users have not added a printer when this setting is applied, they cannot print.&lt;br/&gt;&lt;br/&gt;          Note: You can use printer permissions to restrict the use of printers without specifying a setting. In the Printers folder, right-click a printer, click Properties, and then click the Security tab.&lt;br/&gt;&lt;br/&gt;          If this policy is disabled, or not configured, users can add printers using the methods described above." gpmc_supported="At least Windows 2000">Prevent addition of printers</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent deletion of printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="If this policy setting is enabled, it prevents users from deleting local and network printers.&lt;br/&gt;&lt;br/&gt;          If a user tries to delete a printer, such as by using the Delete option in Printers in Control Panel, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;          This setting does not prevent users from running other programs to delete a printer.&lt;br/&gt;&lt;br/&gt;          If this policy is disabled, or not configured, users can delete printers using the methods described above." gpmc_supported="At least Windows 2000">Prevent deletion of printers</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Regional and Language Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict selection of Windows menus and dialogs language" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Regional and Language Options" gpmc_settingDescription="This policy setting restricts users to the specified language by disabling the menus and dialog box controls in the Region settings control panel. If the specified language is not installed on the target computer, the language selection defaults to English.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the dialog box controls in the Regional and Language Options control panel are not accessible to the logged on user. This prevents users from specifying a language different than the one used.&lt;br/&gt;&lt;br/&gt;To enable this policy setting in Windows Vista, use the &amp;quot;Restricts the UI languages Windows should use for the selected user&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the logged-on user can access the dialog box controls in the Regional and Language Options control panel to select any available UI language." gpmc_supported="At least Windows 2000">Restrict selection of Windows menus and dialogs language</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Restrict users to the following language:</td><td>French</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Internet Explorer icon on desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from starting Internet Explorer by using other methods." gpmc_supported="At least Windows 2000">Hide Internet Explorer icon on desktop</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Network Locations icon on desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Network Locations icon from the desktop.&lt;br/&gt;&lt;br/&gt;This setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Network Places icon." gpmc_supported="At least Windows 2000">Hide Network Locations icon on desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent adding, dragging, dropping and closing the Taskbar&amp;#39;s toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from manipulating desktop toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag toolbars on to or off of docked toolbars.&lt;br/&gt;&lt;br/&gt;Note: If users have added or removed toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Tip: To view the toolbars that can be added to the desktop, right-click a docked toolbar (such as the taskbar beside the Start button), and point to &amp;quot;Toolbars.&amp;quot;&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit adjusting desktop toolbars&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent adding, dragging, dropping and closing the Taskbar&#39;s toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit adjusting desktop toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from adding or removing toolbars on the desktop.&lt;br/&gt;&lt;br/&gt;Note: If users have adjusted their toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent adding, dragging, dropping and closing the Taskbar&amp;#39;s toolbars&amp;quot; setting." gpmc_supported="At least Windows 2000">Prohibit adjusting desktop toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit User from manually redirecting Profile Folders" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from changing the path to their profile folders.&lt;br/&gt;&lt;br/&gt;By default, a user can change the location of their individual profile folders like Documents, Music etc. by typing a new path in the Locations tab of the folder&amp;#39;s Properties dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users are unable to type a new location in the Target box." gpmc_supported="At least Windows 2000">Prohibit User from manually redirecting Profile Folders</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Documents icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the My Documents icon.&lt;br/&gt;&lt;br/&gt;This setting removes the My Documents icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the My Documents folder.&lt;br/&gt;&lt;br/&gt;This setting does not remove the My Documents icon from the Start menu. To do so, use the &amp;quot;Remove My Documents icon from Start Menu&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off from and log back on to Windows 2000 Professional." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove My Documents icon on the desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Computer icon context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Properties on the context menu for Computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks My Computer or clicks Computer and then goes to the File menu.  Likewise, Alt-Enter does nothing when Computer is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows 2000 Service Pack 3">Remove Properties from the Computer icon context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Documents icon context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This policy setting hides the Properties menu command on the shortcut menu for the My Documents icon.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Properties menu command will not be displayed when the user does any of the following:&lt;br/&gt;&lt;br/&gt;Right-clicks the My Documents icon.&lt;br/&gt;Clicks the My Documents icon, and then opens the File menu.&lt;br/&gt;Clicks the My Documents icon, and then presses ALT+ENTER.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Properties menu command is displayed." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove Properties from the Documents icon context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Recycle Bin context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Properties option from the Recycle Bin context menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks on Recycle Bin or opens Recycle Bin and then clicks File. Likewise, Alt-Enter does nothing when Recycle Bin is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Properties from the Recycle Bin context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recycle Bin icon from desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the Recycle Bin icon.&lt;br/&gt;&lt;br/&gt;This setting removes the Recycle Bin icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the Recycle Bin folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off and then log back on." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Recycle Bin icon from desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Desktop Cleanup Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from using the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Desktop Cleanup wizard does not automatically run on a users workstation every 60 days. The user will also not be able to access the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the default behavior of the Desktop Clean Wizard running every 60 days occurs.&lt;br/&gt;&lt;br/&gt;Note: When this setting is not enabled, users can run the Desktop Cleanup Wizard, or have it run automatically every 60 days from Display, by clicking the Desktop tab and then clicking the Customize Desktop button." gpmc_supported="Windows Server 2003 and Windows XP only">Remove the Desktop Cleanup Wizard</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop/Active Directory</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable filter in Find dialog box" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Active Directory" gpmc_settingDescription="Displays the filter bar above the results of an Active Directory search. The filter bar consists of buttons for applying additional filters to search results.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the filter bar appears when the Active Directory Find dialog box opens, but users can hide it.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the filter bar does not appear, but users can display it by selecting &amp;quot;Filter&amp;quot; on the &amp;quot;View&amp;quot; menu.&lt;br/&gt;&lt;br/&gt;To see the filter bar, open Network Locations, click Entire Network, and then click Directory. Right-click the name of a Windows domain, and click Find. Type the name of an object in the directory, such as  &amp;quot;Administrator.&amp;quot; If the filter bar does not appear above the resulting display, on the View menu, click Filter." gpmc_supported="At least Windows 2000">Enable filter in Find dialog box</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Active Directory folder" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Active Directory" gpmc_settingDescription="Hides the Active Directory folder in Network Locations.&lt;br/&gt;&lt;br/&gt;The Active Directory folder displays Active Directory objects in a browse window.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Active Directory folder does not appear in the Network Locations folder.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Active Directory folder appears in the Network Locations folder.&lt;br/&gt;&lt;br/&gt;This setting is designed to let users search Active Directory but not tempt them to casually browse Active Directory.&lt;br/&gt;" gpmc_supported="Windows 2000 only">Hide Active Directory folder</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop/Desktop</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable all items" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Removes Active Desktop content and prevents users from adding Active Desktop content. &lt;br/&gt;&lt;br/&gt;This setting removes all Active Desktop items from the desktop. It also removes the Web tab from Display in Control Panel. As a result, users cannot add Web pages or  pictures from the Internet or an intranet to the desktop.&lt;br/&gt;&lt;br/&gt;Note: This setting does not disable Active Desktop. Users can  still use image formats, such as JPEG and GIF, for their desktop wallpaper." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Disable all items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable Active Desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Enables Active Desktop and prevents users from disabling it.&lt;br/&gt;&lt;br/&gt;This setting prevents users from trying to enable or disable Active Desktop while a policy controls it.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, Active Desktop is disabled by default, but users can enable it.&lt;br/&gt;&lt;br/&gt;Note: If both the &amp;quot;Enable Active Desktop&amp;quot; setting and the &amp;quot;Disable Active Desktop&amp;quot; setting are enabled, the &amp;quot;Disable Active Desktop&amp;quot; setting is ignored.  If the &amp;quot;Turn on Classic Shell&amp;quot; setting ( in User Configuration\Administrative Templates\Windows Components\Windows Explorer) is enabled, Active Desktop is disabled, and both of these policies are ignored." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Enable Active Desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2">Allows HTML and JPEG Wallpaper</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit adding items" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Prevents users from adding Web content to their Active Desktop.&lt;br/&gt;&lt;br/&gt;This setting removes the &amp;quot;New&amp;quot; button from Web tab in Display in Control Panel. As a result, users cannot add Web pages or pictures from the Internet or an intranet to the desktop. This setting does not remove existing Web content from their Active Desktop, or prevent users from removing existing Web content.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable all items&amp;quot; setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit adding items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit changes" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration.&lt;br/&gt;&lt;br/&gt;This is a comprehensive setting that locks down the configuration you establish by using other policies in this folder. This setting removes the Web tab from Display in Control Panel. As a result, users cannot enable or disable Active Desktop. If Active Desktop is already enabled, users cannot add, remove, or edit Web content or disable, lock, or synchronize Active Desktop components." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit changes</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit closing items" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Prevents users from removing Web content from their Active Desktop.&lt;br/&gt;&lt;br/&gt;In Active Desktop, you can add items to the desktop but close them so they are not displayed.&lt;br/&gt;&lt;br/&gt;If you enable this setting, items added to the desktop cannot be closed; they always appear on the desktop. This setting removes the check boxes from items on the Web tab in Display in Control Panel.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from deleting items from their Active Desktop." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit closing items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit deleting items" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Prevents users from deleting Web content from their Active Desktop.&lt;br/&gt;&lt;br/&gt;This setting removes the Delete button from the Web tab in Display in Control Panel. As a result, users can temporarily remove, but not delete, Web content from their Active Desktop.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from adding Web content to their Active Desktop.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit closing items&amp;quot; and &amp;quot;Disable all items&amp;quot; settings." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit deleting items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit editing items" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Prevents users from changing the properties of Web content items on their Active Desktop.&lt;br/&gt;&lt;br/&gt;This setting disables the Properties button on the Web tab in Display in Control Panel. Also, it removes the Properties item from the menu for each item on the Active Desktop. As a result, users cannot change the properties of an item, such as its synchronization schedule, password, or display characteristics." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit editing items</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome - Default Settings (users can override)/Password manager</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable saving passwords to the password manager" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome - Default Settings (users can override)/Password manager" gpmc_settingDescription="This policy controls the browser&amp;#39;s ability to automatically remember passwords on websites and save them in the built-in password manager. It does not limit access or change the contents of passwords saved in the password manager and possibly synchronized to the Google account profile and Android.&lt;br/&gt;&lt;br/&gt;Setting the policy to Enabled means users have Google Chrome remember passwords and provide them the next time they sign in to a site.&lt;br/&gt;&lt;br/&gt;Setting the policy to Disabled means users can&amp;#39;t save new passwords, but previously saved passwords will still work.&lt;br/&gt;&lt;br/&gt;If the policy is set, users can&amp;#39;t change it in Google Chrome. If not set, the user can turn off password saving." gpmc_supported="Microsoft Windows 7 or later">Enable saving passwords to the password manager</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome/Deprecated policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Developer Tools" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome/Deprecated policies" gpmc_settingDescription="This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500" gpmc_supported="Microsoft Windows 7 or later">Disable Developer Tools</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome/Password manager</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable saving passwords to the password manager" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome/Password manager" gpmc_settingDescription="This policy controls the browser&amp;#39;s ability to automatically remember passwords on websites and save them in the built-in password manager. It does not limit access or change the contents of passwords saved in the password manager and possibly synchronized to the Google account profile and Android.&lt;br/&gt;&lt;br/&gt;Setting the policy to Enabled means users have Google Chrome remember passwords and provide them the next time they sign in to a site.&lt;br/&gt;&lt;br/&gt;Setting the policy to Disabled means users can&amp;#39;t save new passwords, but previously saved passwords will still work.&lt;br/&gt;&lt;br/&gt;If the policy is set, users can&amp;#39;t change it in Google Chrome. If not set, the user can turn off password saving." gpmc_supported="Microsoft Windows 7 or later">Enable saving passwords to the password manager</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome/Removed policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow users to show passwords in Password Manager (deprecated)" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome/Removed policies" gpmc_settingDescription="This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500" gpmc_supported="Microsoft Windows 7 or later">Allow users to show passwords in Password Manager (deprecated)</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Internet Optimisation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="MaxConnectionsPer1_0Server" gpmc_settingPath="User Configuration/Administrative Templates/Internet Optimisation" gpmc_settingDescription="" gpmc_supported="">MaxConnectionsPer1_0Server</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>MaxConnectionsPer1_0Server</td><td>6</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="MaxConnectionsPerServer" gpmc_settingPath="User Configuration/Administrative Templates/Internet Optimisation" gpmc_settingDescription="" gpmc_supported="">MaxConnectionsPerServer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>MaxConnectionsPerServer</td><td>6</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Network Connections</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to change properties of an all user remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether a user can view and change the properties of remote access connections that are available to all users of the computer.&lt;br/&gt;&lt;br/&gt;To create an all-user remote access connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;For all users&amp;quot; option.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties menu item is enabled, and thus, whether the Remote Access Connection Properties dialog box is available to users.&lt;br/&gt;&lt;br/&gt;If you enable this setting, a Properties menu item appears when any user right-clicks the icon for a remote access connection. Also, when any user selects the connection, Properties appears on the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties menu items are disabled, and users (including administrators) cannot open the remote access connection properties dialog box.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, only Administrators and Network Configuration Operators can change properties of all-user remote access connections.&lt;br/&gt;&lt;br/&gt;Note: This setting takes precedence over settings that manipulate the availability of features inside the Remote Access Connection Properties dialog box. If this setting is disabled, nothing within the properties dialog box for a remote access connection will be available to users.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Ability to change properties of an all user remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to delete all user remote access connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can delete all user remote access connections.&lt;br/&gt;&lt;br/&gt;To create an all-user remote access connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;For all users&amp;quot; option.&lt;br/&gt;&lt;br/&gt;If you enable this setting, all users can delete shared remote access connections. In addition, if your file system is NTFS, users need to have Write access to Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Pbk to delete a shared remote access connection.&lt;br/&gt;&lt;br/&gt;If you disable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), users (including administrators) cannot delete all-user remote access connections. (By default, users can still delete their private connections, but you can change the default by using the &amp;quot;Prohibit deletion of remote access connections&amp;quot; setting.)&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, only Administrators and Network Configuration Operators can delete all user remote access connections.&lt;br/&gt;&lt;br/&gt;Important: When enabled, the &amp;quot;Prohibit deletion of remote access connections&amp;quot; setting takes precedence over this setting. Users (including administrators) cannot delete any remote access connections, and this setting is ignored.&lt;br/&gt;&lt;br/&gt;Note: LAN connections are created and deleted automatically by the system when a LAN adapter is installed or removed. You cannot use the Network Connections folder to create or delete a LAN connection.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Ability to delete all user remote access connections</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to Enable/Disable a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can enable/disable LAN connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Enable and Disable options for LAN connections are available to users (including nonadministrators). Users can enable/disable a LAN connection by double-clicking the icon representing the connection, by right-clicking it, or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), double-clicking the icon has no effect, and the Enable and Disable menu items are disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, only Administrators and Network Configuration Operators can enable/disable LAN connections.&lt;br/&gt;&lt;br/&gt;Note: Administrators can still enable/disable LAN connections from Device Manager when this setting is disabled." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Ability to Enable/Disable a LAN connection</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to rename all user remote access connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether nonadministrators can rename all-user remote access connections.&lt;br/&gt;&lt;br/&gt;To create an all-user connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;For all users&amp;quot; option.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Rename option is enabled for all-user remote access connections. Any user can rename all-user connections by clicking an icon representing the connection or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Rename option is disabled for nonadministrators only.&lt;br/&gt;&lt;br/&gt;If you do not configure the setting, only Administrators and Network Configuration Operators can rename all-user remote access connections.&lt;br/&gt;&lt;br/&gt;Note: This setting does not apply to Administrators&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Ability to rename LAN connections or remote access connections available to all users&amp;quot; setting is configured (set to either Enabled or Disabled), this setting does not apply.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Ability to rename all user remote access connections</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to rename LAN connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether nonadministrators can rename a LAN connection.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Rename option is enabled for LAN connections. Nonadministrators can rename LAN connections by clicking an icon representing the connection or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Rename option is disabled for nonadministrators only.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, only Administrators and Network Configuration Operators can rename LAN connections&lt;br/&gt;&lt;br/&gt;Note: This setting does not apply to Administrators.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Ability to rename LAN connections or remote access connections available to all users&amp;quot; setting is configured (set to either enabled or disabled), this setting does not apply." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Ability to rename LAN connections</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to rename LAN connections or remote access connections available to all users" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can rename LAN or all user remote access connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Rename option is enabled for all users. Users can rename connections by clicking the icon representing a connection or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Rename option for LAN and all user remote access connections is disabled for all users (including Administrators and Network Configuration Operators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If this setting is not configured, only Administrators and Network Configuration Operators have the right to rename LAN or all user remote access connections.&lt;br/&gt;&lt;br/&gt;Note: When configured, this setting always takes precedence over the &amp;quot;Ability to rename LAN connections&amp;quot; and &amp;quot;Ability to rename all user remote access connections&amp;quot; settings.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to rename remote access connections." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Ability to rename LAN connections or remote access connections available to all users</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable Windows 2000 Network Connections settings for Administrators" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether settings that existed in Windows 2000 Server family will apply to Administrators.&lt;br/&gt;&lt;br/&gt;The set of Network Connections group settings that existed in Windows 2000 Professional also exists in Windows XP Professional. In Windows 2000 Professional, all of these settings had the ability to prohibit the use of certain features from Administrators.&lt;br/&gt;&lt;br/&gt;By default, Network Connections group settings in Windows XP Professional do not have the ability to prohibit the use of features from Administrators.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Windows XP settings that existed in Windows 2000 Professional will have the ability to prohibit Administrators from using certain features. These settings are &amp;quot;Ability to rename LAN connections or remote access connections available to all users&amp;quot;, &amp;quot;Prohibit access to properties of components of a LAN connection&amp;quot;, &amp;quot;Prohibit access to properties of components of a remote access connection&amp;quot;, &amp;quot;Ability to access TCP/IP advanced configuration&amp;quot;, &amp;quot;Prohibit access to the Advanced Settings Item on the Advanced Menu&amp;quot;, &amp;quot;Prohibit adding and removing components for a LAN or remote access connection&amp;quot;, &amp;quot;Prohibit access to properties of a LAN connection&amp;quot;, &amp;quot;Prohibit Enabling/Disabling components of a LAN connection&amp;quot;, &amp;quot;Ability to change properties of an all user remote access connection&amp;quot;, &amp;quot;Prohibit changing properties of a private remote access connection&amp;quot;, &amp;quot;Prohibit deletion of remote access connections&amp;quot;, &amp;quot;Ability to delete all user remote access connections&amp;quot;, &amp;quot;Prohibit connecting and disconnecting a remote access connection&amp;quot;, &amp;quot;Ability to Enable/Disable a LAN connection&amp;quot;, &amp;quot;Prohibit access to the New Connection Wizard&amp;quot;, &amp;quot;Prohibit renaming private remote access connections&amp;quot;, &amp;quot;Prohibit access to the Remote Access Preferences item on the Advanced menu&amp;quot;, &amp;quot;Prohibit viewing of status for an active connection&amp;quot;. When this setting is enabled, settings that exist in both Windows 2000 Professional and Windows XP Professional behave the same for administrators.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, Windows XP settings that existed in Windows 2000 will not apply to administrators.&lt;br/&gt;&lt;br/&gt;Note: This setting is intended to be used in a situation in which the Group Policy object that these settings are being applied to contains both Windows 2000 Professional and Windows XP Professional computers, and identical Network Connections policy behavior is required between all Windows 2000 Professional and Windows XP Professional computers." gpmc_supported="Windows Server 2003 and Windows XP only">Enable Windows 2000 Network Connections settings for Administrators</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to properties of a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can change the properties of a LAN connection.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties menu item is enabled, and thus, whether the Local Area Connection Properties dialog box is available to users.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties menu items are disabled for all users, and users cannot open the Local Area Connection Properties dialog box.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, a Properties menu item appears when users right-click the icon representing a LAN connection. Also, when users select the connection, Properties is enabled on the File menu.&lt;br/&gt;&lt;br/&gt;Note: This setting takes precedence over settings that manipulate the availability of features inside the Local Area Connection Properties dialog box. If this setting is enabled, nothing within the properties dialog box for a LAN connection is available to users.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators have the right to view the properties dialog box for a connection but not to make changes, regardless of this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit access to properties of a LAN connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to properties of components of a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN connection.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties button for components of a LAN connection is enabled.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties button is disabled for Administrators. Network Configuration Operators are prohibited from accessing connection components, regardless of the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting does not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Properties button is enabled for administrators and Network Configuration Operators.&lt;br/&gt;&lt;br/&gt;The Local Area Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component, click the name of the component, and then click the Properties button beneath the component list.&lt;br/&gt;&lt;br/&gt;Note: Not all network components have configurable properties. For components that are not configurable, the Properties button is always disabled.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Prohibit access to properties of a LAN connection&amp;quot; setting is enabled, users are blocked from accessing the Properties button for LAN connection components.&lt;br/&gt;&lt;br/&gt;Note: Network Configuration Operators only have permission to change TCP/IP properties. Properties for all other components are unavailable to these users.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from accessing properties of components for a LAN connection, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to properties of components of a LAN connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to properties of components of a remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can view and change the properties of components used by a private or all-user remote access connection.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties button for components used by a private or all-user remote access connection is enabled.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties button is disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting does not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Properties button is enabled for all users.&lt;br/&gt;&lt;br/&gt;The Networking tab of the Remote Access Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component, click the name of the component, and then click the Properties button beneath the component list.&lt;br/&gt;&lt;br/&gt;Note: Not all network components have configurable properties. For components that are not configurable, the Properties button is always disabled.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Ability to change properties of an all user remote access connection&amp;quot; or &amp;quot;Prohibit changing properties of a private remote access connection&amp;quot; settings are set to deny access to the Remote Access Connection Properties dialog box, the Properties button for remote access connection components is blocked.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to properties of components of a remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to the Advanced Settings item on the Advanced menu" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators.&lt;br/&gt;&lt;br/&gt;The Advanced Settings item lets users view and change bindings and view and change the order in which the computer accesses connections, network providers, and print providers.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Advanced Settings item is disabled for administrators.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Advanced Settings item is enabled for administrators.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from accessing the Advanced Settings dialog box, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to the Advanced Settings item on the Advanced menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to the New Connection Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can use the New Connection Wizard, which creates new network connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Make New Connection icon does not appear in the Start Menu on in the Network Connections folder. As a result, users (including administrators) cannot start the New Connection Wizard.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Make New Connection icon appears in the Start menu and in the Network Connections folder for all users. Clicking the Make New Connection icon starts the New Connection Wizard.&lt;br/&gt;&lt;br/&gt;Note: Changing this setting from Enabled to Not Configured does not restore the Make New Connection icon until the user logs off or on. When other changes to this setting are applied, the icon does not appear or disappear in the Network Connections folder until the folder is refreshed.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to the New Connection Wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to the Remote Access Preferences item on the Advanced menu" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled.&lt;br/&gt;&lt;br/&gt;The Remote Access Preferences item lets users create and change connections before logon and configure automatic dialing and callback features.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Remote Access Preferences item is disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Remote Access Preferences item is enabled for all users." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit access to the Remote Access Preferences item on the Advanced menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit adding and removing components for a LAN or remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has no effect on nonadministrators.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Install and Uninstall buttons for components of connections are disabled, and administrators are not permitted to access network components in the Windows Components Wizard.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Install and Uninstall buttons for components of connections in the Network Connections folder are enabled. Also, administrators can gain access to network components in the Windows Components Wizard.&lt;br/&gt;&lt;br/&gt;The Install button opens the dialog boxes used to add network components. Clicking the Uninstall button removes the selected component in the components list (above the button).&lt;br/&gt;&lt;br/&gt;The Install and Uninstall buttons appear in the properties dialog box for connections. These buttons are on the General tab for LAN connections and on the Networking tab for remote access connections.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Prohibit access to properties of a LAN connection&amp;quot;, &amp;quot;Ability to change properties of an all user remote access connection&amp;quot;, or &amp;quot;Prohibit changing properties of a private remote access connection&amp;quot; settings are set to deny access to the connection properties dialog box, the Install and Uninstall buttons for connections are blocked.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from adding and removing connection components, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit adding and removing components for a LAN or remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit changing properties of a private remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can view and change the properties of their private remote access connections.&lt;br/&gt;&lt;br/&gt;Private connections are those that are available only to one user. To create a private connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;Only for myself&amp;quot; option.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties menu item is enabled, and thus, whether the Remote Access Connection Properties dialog box for a private connection is available to users.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties menu items are disabled, and no users (including administrators) can open the Remote Access Connection Properties dialog box for a private connection.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, a Properties menu item appears when any user right-clicks the icon representing a private remote access connection. Also, when any user selects the connection, Properties appears on the File menu.&lt;br/&gt;&lt;br/&gt;Note: This setting takes precedence over settings that manipulate the availability of features in the Remote Access Connection Properties dialog box. If this setting is enabled, nothing within the properties dialog box for a remote access connection will be available to users.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit changing properties of a private remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit connecting and disconnecting a remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can connect and disconnect remote access connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), double-clicking the icon has no effect, and the Connect and Disconnect menu items are disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Connect and Disconnect options for remote access connections are available to all users. Users can connect or disconnect a remote access connection by double-clicking the icon representing the connection, by right-clicking it, or by using the File menu." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit connecting and disconnecting a remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit deletion of remote access connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can delete remote access connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), users (including administrators) cannot delete any remote access connections. This setting also disables the Delete option on the context menu for a remote access connection and on the File menu in the Network Connections folder.&lt;br/&gt;&lt;br/&gt;Important:  If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, all users can delete their private remote access connections. Private connections are those that are available only to one user. (By default, only Administrators and Network Configuration Operators can delete connections available to all users, but you can change the default by using the &amp;quot;Ability to delete all user remote access connections&amp;quot; setting.)&lt;br/&gt;&lt;br/&gt;Important: When enabled, this setting takes precedence over the &amp;quot;Ability to delete all user remote access connections&amp;quot; setting. Users cannot delete any remote access connections, and the &amp;quot;Ability to delete all user remote access connections&amp;quot; setting is ignored.&lt;br/&gt;&lt;br/&gt;Note: LAN connections are created and deleted automatically when a LAN adapter is installed or removed. You cannot use the Network Connections folder to create or delete a LAN connection.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit deletion of remote access connections</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Enabling/Disabling components of a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether administrators can enable and disable the components used by LAN connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the check boxes for enabling and disabling components are disabled. As a result, administrators cannot enable or disable the components that a connection uses.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Properties dialog box for a connection includes a check box beside the name of each component that the connection uses. Selecting the check box enables the component, and clearing the check box disables the component.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Prohibit access to properties of a LAN connection&amp;quot; setting is enabled, users are blocked from accessing the check boxes for enabling and disabling the components of a LAN connection.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from enabling or disabling components for a LAN connection, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit Enabling/Disabling components of a LAN connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit renaming private remote access connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can rename their private remote access connections.&lt;br/&gt;&lt;br/&gt;Private connections are those that are available only to one user. To create a private connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;Only for myself&amp;quot; option.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Rename option is disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Rename option is enabled for all users&amp;#39; private remote access connections. Users can rename their private connection by clicking an icon representing the connection or by using the File menu.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit renaming private remote access connections</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit TCP/IP advanced configuration" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can configure advanced TCP/IP settings.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Advanced button on the Internet Protocol (TCP/IP) Properties dialog box is disabled for all users (including administrators). As a result, users cannot open the Advanced TCP/IP Settings Properties page and modify IP settings, such as DNS and WINS server information.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Advanced button is enabled, and all users can open the Advanced TCP/IP Setting dialog box.&lt;br/&gt;&lt;br/&gt;Note: This setting is superseded by settings that prohibit access to properties of connections or connection components. When these policies are set to deny access to the connection properties dialog box or Properties button for connection components, users cannot gain access to the Advanced button for TCP/IP configuration.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators (excluding Network Configuration Operators) do not have permission to access TCP/IP advanced configuration for a LAN connection, regardless of this setting.&lt;br/&gt;&lt;br/&gt;Tip: To open the Advanced TCP/IP Setting dialog box, in the Network Connections folder, right-click a connection icon, and click Properties. For remote access connections, click the Networking tab.  In the &amp;quot;Components checked are used by this connection&amp;quot; box, click Internet Protocol (TCP/IP), click the Properties button, and then click the Advanced button.&lt;br/&gt;&lt;br/&gt;Note: Changing this setting from Enabled to Not Configured does not enable the Advanced button until the user logs off." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit TCP/IP advanced configuration</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit viewing of status for an active connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can view the status for an active connection.&lt;br/&gt;&lt;br/&gt;Connection status is available from the connection status taskbar icon or from the Status dialog box. The Status dialog box displays information about the connection and its activity. It also provides buttons to disconnect and to configure the properties of the connection.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the connection status taskbar icon and Status dialog box are not available to users (including administrators). The Status option is disabled in the context menu for the connection and on the File menu in the Network Connections folder. Users cannot choose to show the connection icon in the taskbar from the Connection Properties dialog box.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the connection status taskbar icon and  Status dialog box are available to all users." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit viewing of status for an active connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off notifications when a connection has only limited or no connectivity" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="This policy setting allows you to manage whether notifications are shown to the user when a DHCP-configured connection is unable to retrieve an IP address from a DHCP server. This is often signified by the assignment of an automatic private IP address&amp;quot;(i.e. an IP address in the range 169.254.*.*). This indicates that a DHCP server could not be reached or the DHCP server was reached but unable to respond to the request with a valid IP address. By default, a notification is displayed providing the user with information on how the problem can be resolved.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, this condition will not be reported as an error to the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, a DHCP-configured connection that has not been assigned an IP address will be reported via a notification, providing the user with information as to how the problem can be resolved." gpmc_supported="Microsoft Windows XP Professional with SP2 and Windows Server 2003 family only">Turn off notifications when a connection has only limited or no connectivity</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Offline Files</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Action on server disconnect" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files.&lt;br/&gt;&lt;br/&gt;This setting also disables the &amp;quot;When a network connection is lost&amp;quot; option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you can use the &amp;quot;Action&amp;quot; box to specify how computers in the group respond.&lt;br/&gt;&lt;br/&gt;--  &amp;quot;Work offline&amp;quot; indicates that the computer can use local copies of network files while the server is inaccessible.&lt;br/&gt;&lt;br/&gt;--  &amp;quot;Never go offline&amp;quot; indicates that network files are not available while the server is inaccessible.&lt;br/&gt;&lt;br/&gt;If you disable this setting or select the &amp;quot;Work offline&amp;quot; option, users can work offline if disconnected.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, users can work offline by default, but they can change this option.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer  Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To configure this setting without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, click Advanced, and then select an option in the &amp;quot;When a network connection is lost&amp;quot; section.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Non-default server disconnect actions&amp;quot; setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Action on server disconnect</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2">Specify how the system is to respond when a network server</td></tr><tr><td colspan="2">becomes unavailable.</td></tr><tr><td colspan="2"> </td></tr><tr><td>Action: </td><td>Work offline</td></tr>
<tr><td colspan="2"> </td></tr><tr><td colspan="2">Never go offline = Server&#39;s files are unavailable to local computer</td></tr><tr><td colspan="2">Work offline = Server&#39;s files are available to local computer</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Initial reminder balloon lifetime" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Determines how long the first reminder balloon for a network status change is displayed.&lt;br/&gt;&lt;br/&gt;Reminder balloons appear when the user&amp;#39;s connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the duration of the first reminder.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Initial reminder balloon lifetime</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent use of Offline Files folder" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Disables the Offline Files folder.&lt;br/&gt;&lt;br/&gt;This setting disables the &amp;quot;View Files&amp;quot; button on the Offline Files tab. As a result, users cannot use the Offline Files folder to view or open copies of network files stored on their computer. Also, they cannot use the folder to view characteristics of offline files, such as their server status, type, or location.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from working offline or from saving local copies of files available offline. Also, it does not prevent them from using other programs, such as Windows Explorer, to view their offline files.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To view the Offline Files Folder, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then click &amp;quot;View Files.&amp;quot;" gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prevent use of Offline Files folder</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit user configuration of Offline Files" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Prevents users from enabling, disabling, or changing the configuration of Offline Files.&lt;br/&gt;&lt;br/&gt;This setting removes the Offline Files tab from the Folder Options dialog box. It also removes the Settings item from the Offline Files context menu and disables the Settings button on the Offline Files Status dialog box. As a result, users cannot view or change the options on the Offline Files tab or Offline Files dialog box.&lt;br/&gt;&lt;br/&gt;This is a comprehensive setting that locks down the configuration you establish by using other settings in this folder.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: This setting provides a quick method for locking down the default settings for Offline Files. To accept the defaults, just enable this setting. You do not have to disable any other settings in this folder." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit user configuration of Offline Files</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2">Prevents users from changing any cache configuration settings.</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Reminder balloon frequency" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Determines how often reminder balloon updates appear.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you can select how often reminder balloons updates appear and also prevent users from changing this setting.&lt;br/&gt;&lt;br/&gt;Reminder balloons appear when the user&amp;#39;s connection to a network file is lost or reconnected, and they are updated periodically. By default, the first reminder for an event is displayed for 30 seconds. Then, updates appear every 60 minutes and are displayed for 15 seconds. You can use this setting to change the update interval.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To set reminder balloon frequency without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, and then click the Offline Files tab. This setting corresponds to the &amp;quot;Display reminder balloons every ... minutes&amp;quot; option." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Reminder balloon frequency</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove &amp;quot;Make Available Offline&amp;quot; command" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="This policy setting prevents users from making network files and folders available offline.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot designate files to be saved on their computer for offline use. However, Windows will still cache local copies of files that reside on network shares designated for automatic caching.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can manually specify files and folders that they want to make available offline.&lt;br/&gt;&lt;br/&gt;Notes:&lt;br/&gt;&lt;br/&gt;This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Make Available Offline&amp;quot; command is called &amp;quot;Always available offline&amp;quot; on computers running Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, Windows 8, Windows 7, or Windows Vista.&lt;br/&gt;      " gpmc_supported="At least Windows 2000">Remove &quot;Make Available Offline&quot; command</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Synchronize all offline files before logging off" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Determines whether offline files are fully synchronized when users log off.&lt;br/&gt;&lt;br/&gt;This setting also disables the &amp;quot;Synchronize all offline files before logging off&amp;quot; option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, offline files are fully synchronized. Full synchronization ensures that offline files are complete and current.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the system only performs a quick synchronization. Quick synchronization ensures that files are complete, but does not ensure that they are current.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the system performs a quick synchronization by default, but users can change this option.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To change the synchronization method without changing a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then select the &amp;quot;Synchronize all offline files before logging off&amp;quot; option." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Synchronize all offline files before logging off</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Synchronize all offline files when logging on" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Determines whether offline files are fully synchronized when users log on.&lt;br/&gt;&lt;br/&gt;This setting also disables the &amp;quot;Synchronize all offline files before logging on&amp;quot; option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, offline files are fully synchronized at logon. Full synchronization ensures that offline files are complete and current. Enabling this setting automatically enables logon synchronization in Synchronization Manager.&lt;br/&gt;&lt;br/&gt;If this setting is disabled and Synchronization Manager is configured for logon synchronization, the system performs only a quick synchronization. Quick synchronization ensures that files are complete but does not ensure that they are current.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting and Synchronization Manager is configured for logon synchronization, the system performs a quick synchronization by default, but users can change this option.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To change the synchronization method without setting a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then select the &amp;quot;Synchronize all offline files before logging on&amp;quot; option." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Synchronize all offline files when logging on</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Synchronize offline files before suspend" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Determines whether offline files are synchonized before a computer is suspended.&lt;br/&gt;&lt;br/&gt;If you enable this setting, offline files are synchronized whenever the computer is suspended. Setting the synchronization action to &amp;quot;Quick&amp;quot; ensures only that all files in the cache are complete. Setting the synchronization action to &amp;quot;Full&amp;quot; ensures that all cached files and folders are up-to-date with the most current version.&lt;br/&gt;&lt;br/&gt;If you disable or do not configuring this setting, files are not synchronized when the computer is suspended.&lt;br/&gt;&lt;br/&gt;Note: If the computer is suspended by closing the display on a portable computer, files are not synchronized. If multiple users are logged on to the computer at the time the computer is suspended, a synchronization is not performed." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Synchronize offline files before suspend</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off reminder balloons" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Hides or displays reminder balloons, and prevents users from changing the setting.&lt;br/&gt;&lt;br/&gt;Reminder balloons appear above the Offline Files icon in the notification area to notify users when they have lost the connection to a networked file and are working on a local copy of the file. Users can then decide how to proceed.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system hides the reminder balloons, and prevents users from displaying them.&lt;br/&gt;&lt;br/&gt;If you disable the setting, the system displays the reminder balloons and prevents users from hiding them.&lt;br/&gt;&lt;br/&gt;If this setting is not configured, reminder balloons are displayed by default when you enable offline files, but users can change the setting.&lt;br/&gt;&lt;br/&gt;To prevent users from changing the setting while a setting is in effect, the system disables the &amp;quot;Enable reminders&amp;quot; option on the Offline Files tab&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To display or hide reminder balloons without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, and then click the Offline Files tab. This setting corresponds to the &amp;quot;Enable reminders&amp;quot; check box." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Turn off reminder balloons</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Shared Folders</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow DFS roots to be published" gpmc_settingPath="User Configuration/Administrative Templates/Shared Folders" gpmc_settingDescription="This policy setting determines whether the user can publish DFS roots in Active Directory Domain Services (AD DS).&lt;br/&gt;&lt;br/&gt;If you enable or do not configure this policy setting, users can use the &amp;quot;Publish in Active Directory&amp;quot; option to publish DFS roots as shared folders in AD DS .&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot publish DFS roots in AD DS and the &amp;quot;Publish in Active Directory&amp;quot; option is disabled. Note: The default is to allow shared folders to be published when this setting is not configured." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Allow DFS roots to be published</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow shared folders to be published" gpmc_settingPath="User Configuration/Administrative Templates/Shared Folders" gpmc_settingDescription="This policy setting determines whether the user can publish shared folders in Active Directory Domain Services (AD DS).&lt;br/&gt;&lt;br/&gt;If you enable or do not configure this policy setting, users can use the &amp;quot;Publish in Active Directory&amp;quot; option in the Shared Folders snap-in to publish shared folders in AD DS.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot publish shared folders in AD DS, and the &amp;quot;Publish in Active Directory&amp;quot; option is disabled. Note: The default is to allow shared folders to be published when this setting is not configured." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Allow shared folders to be published</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Start Menu and Taskbar</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add Logoff to the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy only applies to the classic version of the start menu and does not affect the new style start menu.&lt;br/&gt;&lt;br/&gt;Adds the &amp;quot;Log Off &amp;lt;username&amp;gt;&amp;quot; item to the Start menu and prevents users from removing it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Log Off &amp;lt;username&amp;gt; item appears in the Start menu. This setting also removes the Display Logoff item from Start Menu Options. As a result, users cannot remove the Log Off &amp;lt;username&amp;gt; item from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can use the Display Logoff item to add and remove the Log Off item.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu only. It does not affect the Log Off item on the Windows Security dialog box that appears when you press Ctrl+Alt+Del.&lt;br/&gt;&lt;br/&gt;Note: To add or remove the Log Off item on a computer, click Start, click Settings, click Taskbar and Start Menu, click the Start Menu Options tab, and then, in the Start Menu Settings box, click Display Logoff.&lt;br/&gt;&lt;br/&gt;Also, see &amp;quot;Remove Logoff&amp;quot; in User Configuration\Administrative Templates\System\Logon/Logoff." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Add Logoff to the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display any custom toolbars in the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar.&lt;br/&gt;&lt;br/&gt;The taskbar includes the Start button, buttons for currently running tasks, custom toolbars, the notification area, and the system clock. Toolbars include Quick Launch, Address, Links, Desktop, and other custom toolbars created by the user or by an application.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the taskbar does not display any custom toolbars, and the user cannot add any custom toolbars to the taskbar. Moreover, the &amp;quot;Toolbars&amp;quot; menu command and submenu are removed from the context menu. The taskbar displays only the Start button, taskbar buttons, the notification area, and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or is not configured, the taskbar displays all toolbars. Users can add or remove custom toolbars, and the &amp;quot;Toolbars&amp;quot; command appears in the context menu." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not display any custom toolbars in the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not keep history of recently opened documents" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system and Windows programs do not create shortcuts to documents opened while the setting is in effect. Also, they retain but do not display existing document shortcuts. The system empties the Recent Items menu on the Start menu, and Windows programs do not display shortcuts at the bottom of the File menu. In addition, the Jump Lists off of programs in the Start Menu and Taskbar do not show lists of recently or frequently used files, folders, or websites.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system will store and display shortcuts to recently and frequently used files, folders, and websites.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Users\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; and &amp;quot;Clear history of recently opened documents on exit&amp;quot; policies in this folder.&lt;br/&gt;&lt;br/&gt;If you enable this setting but do not enable the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; setting, the Recent Items menu appears on the Start menu, but it is empty.&lt;br/&gt;&lt;br/&gt;If you enable this setting, but then later disable it or set it to Not Configured, the document shortcuts saved before the setting was enabled reappear in the Recent Items menu and program File menus, and Jump Lists.&lt;br/&gt;&lt;br/&gt;This setting does not hide or prevent the user from pinning files, folders, or websites to the Jump Lists. See the &amp;quot;Do not allow pinning items in Jump Lists&amp;quot; setting. This policy also does not hide Tasks that the application has provided for their Jump List. This setting does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Do not keep history of recently opened documents</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not use the search-based method when resolving shell shortcuts" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system does not conduct the final drive search. It just displays a message explaining that the file is not found.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, by default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target&amp;#39;s file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.&lt;br/&gt;&lt;br/&gt;Note: This policy setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not track Shell shortcuts during roaming&amp;quot; and the &amp;quot;Do not use the tracking-based method when resolving shell shortcuts&amp;quot; policy settings." gpmc_supported="At least Windows 2000">Do not use the search-based method when resolving shell shortcuts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not use the tracking-based method when resolving shell shortcuts" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting prevents the system from using NTFS tracking features to resolve a shortcut.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system does not try to locate the file by using its file ID. It skips this step and begins a comprehensive search of the drive specified in the target path.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, by default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target&amp;#39;s file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.&lt;br/&gt;&lt;br/&gt;Note: This policy setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not track Shell shortcuts during roaming&amp;quot; and the &amp;quot;Do not use the search-based method when resolving shell shortcuts&amp;quot; policy settings." gpmc_supported="At least Windows 2000">Do not use the tracking-based method when resolving shell shortcuts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Force classic Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the presentation of the Start menu.&lt;br/&gt;&lt;br/&gt;The classic Start menu in Windows 2000 Professional allows users to begin common tasks, while the new Start menu consolidates common items onto one menu. When the classic Start menu is used, the following icons are placed on the desktop: Documents, Pictures, Music, Computer, and Network. The new Start menu starts them directly.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Start menu displays the classic Start menu in the Windows 2000 style and displays the standard desktop icons.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Start menu only displays in the new style, meaning the desktop icons are now on the Start page.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the default is the new style, and the user can change the view." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, and Windows XP">Force classic Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Gray unavailable Windows Installer programs Start Menu shortcuts" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Displays Start menu shortcuts to partially installed programs in gray text.&lt;br/&gt;&lt;br/&gt;This setting makes it easier for users to distinguish between programs that are fully installed and those that are only partially installed.&lt;br/&gt;&lt;br/&gt;Partially installed programs include those that a system administrator assigns using Windows Installer and those that users have configured for full installation upon first use.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, all Start menu shortcuts appear as black text.&lt;br/&gt;&lt;br/&gt;Note: Enabling this setting can make the Start menu slow to open." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Gray unavailable Windows Installer programs Start Menu shortcuts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the notification area" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the notification area (previously called the &amp;quot;system tray&amp;quot;) on the taskbar.&lt;br/&gt;&lt;br/&gt;Description: The notification area is located at the far right end of the task bar and includes the icons for current notifications and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the user’s entire notification area, including the notification icons, is hidden. The taskbar displays only the Start button, taskbar buttons, custom toolbars (if any), and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or is not configured, the notification area is shown in the user&amp;#39;s taskbar.&lt;br/&gt;&lt;br/&gt;Note: Enabling this setting overrides the &amp;quot;Turn off notification area cleanup&amp;quot; setting, because if the notification area is hidden, there is no need to clean up the icons." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Hide the notification area</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar, which is used to switch between running applications.&lt;br/&gt;&lt;br/&gt;The taskbar includes the Start button, list of currently running tasks, and the notification area. By default, the taskbar is located at the bottom of the screen, but it can be dragged to any side of the screen. When it is locked, it cannot be moved or resized.&lt;br/&gt;&lt;br/&gt;If you enable this setting, it prevents the user from moving or resizing the taskbar. While the taskbar is locked, auto-hide and other taskbar options are still available in Taskbar properties.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the user can configure the taskbar position.&lt;br/&gt;&lt;br/&gt;Note: Enabling this setting also locks the QuickLaunch bar and any other toolbars that the user has on their taskbar. The toolbar&amp;#39;s position is locked, and the user cannot show and hide various toolbars using the taskbar context menu." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Lock the Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changes to Taskbar and Start Menu Settings" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent changes to Taskbar and Start Menu Settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, The user will be prevented from opening the Taskbar Properties dialog box.&lt;br/&gt;&lt;br/&gt;If the user right-clicks the taskbar and then clicks Properties, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Taskbar and Start Menu items are available from Settings on the Start menu." gpmc_supported="At least Windows 2000">Prevent changes to Taskbar and Start Menu Settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent grouping of taskbar items" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar buttons used to switch between running programs.&lt;br/&gt;&lt;br/&gt;Taskbar grouping consolidates similar applications when there is no room on the taskbar. It kicks in when the user&amp;#39;s taskbar is full.&lt;br/&gt;&lt;br/&gt;If you enable this setting, it prevents the taskbar from grouping items that share the same program name. By default, this setting is always enabled.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure it, items on the taskbar that share the same program are grouped together. The users have the option to disable grouping if they choose." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Prevent grouping of taskbar items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from customizing their Start Screen" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from changing their Start screen layout.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you will prevent a user from selecting an app, resizing a tile, pinning/unpinning a tile or a secondary tile, entering the customize mode and rearranging tiles within Start and Apps.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, you will allow a user to select an app, resize a tile, pin/unpin a tile or a secondary tile, enter the customize mode and rearrange tiles within Start and Apps." gpmc_supported="At least Windows 2000">Prevent users from customizing their Start Screen</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove access to the context menus for the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove access to the context menus for the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the menus that appear when you right-click the taskbar and items on the taskbar are hidden, such as the Start button, the clock, and the taskbar buttons.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the context menus for the taskbar are available.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from using other methods to issue the commands that appear on these menus." gpmc_supported="At least Windows 2000">Remove access to the context menus for the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove All Programs list from the Start menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the Start Menu will either collapse or remove the all apps list from the Start menu.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Collapse&amp;quot; will not display the app list next to the pinned tiles in Start. An &amp;quot;All apps&amp;quot; button will be displayed on Start to open the all apps list. This is equivalent to setting the &amp;quot;Show app list in Start&amp;quot; in Settings to Off.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Collapse and disable setting&amp;quot; will do the same as the collapse option and disable the &amp;quot;Show app list in Start menu&amp;quot; in Settings, so users cannot turn it to On.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Remove and disable setting&amp;quot; will remove the all apps list from Start and disable the &amp;quot;Show app list in Start menu&amp;quot; in Settings, so users cannot turn it to On. Select this option for compatibility with earlier versions of Windows.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the all apps list will be visible by default, and the user can change &amp;quot;Show app list in Start&amp;quot; in Settings." gpmc_supported="At least Windows Server 2016, Windows 10">Remove All Programs list from the Start menu</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Choose one of the following actions</td><td>Remove and disable setting</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Balloon Tips on Start Menu items" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Hides pop-up text on the Start menu and in the notification area.&lt;br/&gt;&lt;br/&gt;When you hold the cursor over an item on the Start menu or in the notification area, the system displays pop-up text providing additional information about the object.&lt;br/&gt;&lt;br/&gt;If you enable this setting, some of this pop-up text is not displayed. The pop-up text affected by this setting includes &amp;quot;Click here to begin&amp;quot; on the Start button, &amp;quot;Where have all my programs gone&amp;quot; on the Start menu, and &amp;quot;Where have my icons gone&amp;quot; in the notification area.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, all pop-up text is displayed on the Start menu and in the notification area." gpmc_supported="Windows Server 2003 and Windows XP only">Remove Balloon Tips on Start Menu items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove common program groups from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes items in the All Users profile from the Programs menu on the Start menu.&lt;br/&gt;&lt;br/&gt;By default, the Programs menu contains items from the All Users profile and items from the user&amp;#39;s profile. If you enable this setting, only items in the user&amp;#39;s profile appear in the Programs menu.&lt;br/&gt;&lt;br/&gt;Tip: To see the Program menu items in the All Users profile, on the system drive, go to ProgramData\Microsoft\Windows\Start Menu\Programs." gpmc_supported="At least Windows 2000">Remove common program groups from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Default Programs link from the Start menu." gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Default Programs link from the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Default Programs link is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;Clicking the Default Programs link from the Start menu opens the Default Programs control panel and provides administrators the ability to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Default Programs link is available from the Start menu.&lt;br/&gt;&lt;br/&gt;Note: This policy setting does not prevent the Set Default Programs for This Computer option from appearing in the Default Programs control panel." gpmc_supported="Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP Professional Service Pack 1 and Windows 2000 Service Pack 3">Remove Default Programs link from the Start menu.</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Documents icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Documents icon from the Start menu and its submenus.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Documents icon is removed from the Start menu and its submenus. Enabling this policy setting only removes the icon. It does not prevent the user from using other methods to gain access to the contents of the Documents folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this policy setting effective, you must log off and then log on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, he Documents icon is available from the Start menu.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Documents icon on the desktop&amp;quot; policy setting." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Documents icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Favorites menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from adding the Favorites menu to the Start menu or classic Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Display Favorites item does not appear in the Advanced Start menu options box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Display Favorite item is available.&lt;br/&gt;&lt;br/&gt;Note:The Favorities menu does not appear on the Start menu by default. To display the Favorites menu, right-click Start, click Properties, and then click Customize.  If you are using Start menu, click the Advanced tab, and then, under Start menu items, click the Favorites menu. If you are using the classic Start menu, click Display Favorites under Advanced Start menu options.&lt;br/&gt;&lt;br/&gt;Note:The items that appear in the Favorites menu when you install Windows are preconfigured by the system to appeal to most users. However, users can add and remove items from this menu, and system administrators can create a customized Favorites menu for a user group.&lt;br/&gt;&lt;br/&gt;Note:This setting only affects the Start menu. The Favorites item still appears in File Explorer and in Internet Explorer." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Favorites menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove frequent programs list from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the frequently used programs list is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the frequently used programs list remains on the simple Start menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 10">Remove frequent programs list from the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Help menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Help command from the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Help command is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Help command is available from the Start menu.&lt;br/&gt;&lt;br/&gt;This policy setting only affects the Start menu. It does not remove the Help menu from File Explorer and does not prevent users from running Help." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Help menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove links and access to Windows Update" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove links and access to Windows Update.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are prevented from connecting to the Windows Update Web site.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting blocks user access to the Windows Update Web site at http://windowsupdate.microsoft.com. Also, the policy setting removes the Windows Update hyperlink from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Windows Update, the online extension of Windows, offers software updates to keep a user’s system up-to-date. The Windows Update Product Catalog determines any system files, security fixes, and Microsoft updates that users need and shows the newest versions available for download.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Windows Update hyperlink is available from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide the &amp;quot;Add programs from Microsoft&amp;quot; option&amp;quot; policy setting." gpmc_supported="At least Windows 2000 through Windows 8.1 or Windows Server 2012 R2">Remove links and access to Windows Update</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Music icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Music icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Music icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Music icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Music icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network Connections from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove Network Connections from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are prevented from running Network Connections.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting prevents the Network Connections folder from opening. This policy setting also removes Network Connections from Settings on the Start menu.&lt;br/&gt;&lt;br/&gt;Network Connections still appears in Control Panel and in File Explorer, but if users try to start it, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Network Connections is available from the Start Menu.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable programs on Settings menu&amp;quot; and &amp;quot;Disable Control Panel&amp;quot; policy settings and the policy settings in the Network Connections folder (Computer Configuration and User Configuration\Administrative Templates\Network\Network Connections)." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Remove Network Connections from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Network icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Network icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Network icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Network icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Pictures icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Pictures icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Pictures icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Pictures icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Pictures icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove pinned programs list from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the &amp;quot;Pinned Programs&amp;quot; list is removed from the Start menu. Users cannot pin programs to the Start menu.&lt;br/&gt;&lt;br/&gt;In Windows XP and Windows Vista, the Internet and email checkboxes are removed from the &amp;#39;Customize Start Menu&amp;#39; dialog.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Pinned Programs&amp;quot; list remains on the Start menu. Users can pin and unpin programs in the Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove pinned programs list from the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove programs on Settings menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove programs on Settings menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Control Panel, Printers, and Network and Connection folders are removed from Settings on the Start menu, and from Computer and File Explorer. It also prevents the programs represented by these folders (such as Control.exe) from running.&lt;br/&gt;&lt;br/&gt;However, users can still start Control Panel items by using other methods, such as right-clicking the desktop to start Display or right-clicking Computer to start System.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Control Panel, Printers, and Network and Connection folders from Settings are available on the Start menu, and from Computer and File Explorer.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable Control Panel,&amp;quot; &amp;quot;Disable Display in Control Panel,&amp;quot; and &amp;quot;Remove Network Connections from Start Menu&amp;quot; policy settings." gpmc_supported="Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove programs on Settings menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recent Items menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Recent Items menu from the Start menu.  Removes the Documents menu from the classic Start menu.&lt;br/&gt;&lt;br/&gt;The Recent Items menu contains links to the non-program files that users have most recently opened. It appears so that users can easily reopen their documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system saves document shortcuts but does not display the Recent Items menu in the Start Menu, and users cannot turn the menu on.&lt;br/&gt;&lt;br/&gt;If you later disable the setting, so that the Recent Items menu appears in the Start Menu, the document shortcuts saved before the setting was enabled and while it was in effect appear in the Recent Items menu.&lt;br/&gt;&lt;br/&gt;When the setting is disabled, the Recent Items menu appears in the Start Menu, and users cannot remove it.&lt;br/&gt;&lt;br/&gt;If the setting is not configured, users can turn the Recent Items menu on and off.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent Windows programs from displaying shortcuts to recently opened documents. See the &amp;quot;Do not keep history of recently opened documents&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This setting also does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Recent Items menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Run menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the following changes occur:&lt;br/&gt;&lt;br/&gt;(1) The Run command is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;(2) The New Task (Run) command is removed from Task Manager.&lt;br/&gt;&lt;br/&gt;(3) The user will be blocked from entering the following into the Internet Explorer Address Bar:&lt;br/&gt;&lt;br/&gt;--- A UNC path: \\&amp;lt;server&amp;gt;\&amp;lt;share&amp;gt;&lt;br/&gt;&lt;br/&gt;---Accessing local drives:  e.g., C:&lt;br/&gt;&lt;br/&gt;--- Accessing local folders: e.g., \temp&amp;gt;&lt;br/&gt;&lt;br/&gt;Also, users with extended keyboards will no longer be able to display the Run dialog box by pressing the Application key (the key with the Windows logo) + R.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the Run command in the Start menu and in Task Manager and use the Internet Explorer Address Bar.&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;Note:This setting affects the specified interface only. It does not prevent users from using other methods to run programs.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Run menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Search link from the Start menu, and disables some File Explorer search elements.  Note that this does not remove the search box from the new style Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Search item is removed from the Start menu and from the context menu that appears when you right-click the Start menu. Also, the system does not respond when users press the Application key (the key with the Windows logo)+ F.&lt;br/&gt;&lt;br/&gt;Note: Enabling this policy setting also prevents the user from using the F3 key.&lt;br/&gt;&lt;br/&gt;In File Explorer, the Search item still appears on the Standard buttons toolbar, but the system does not respond when the user presses Ctrl+F. Also, Search does not appear in the context menu when you right-click an icon representing a drive or a folder.&lt;br/&gt;&lt;br/&gt;This policy setting affects the specified user interface elements only. It does not affect Internet Explorer and does not prevent the user from using other methods to search.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Search link is available from the Start menu." gpmc_supported="Windows Server 2003 and Windows XP only">Remove Search link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the &amp;quot;Undock PC&amp;quot; button from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the &amp;quot;Undock PC&amp;quot; button is removed from the simple Start Menu, and your PC cannot be undocked.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Undock PC&amp;quot; button remains on the simple Start menu, and your PC can be undocked." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove the &quot;Undock PC&quot; button from the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove user name from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the user name label from the Start Menu in Windows XP and Windows Server 2003.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user name label is removed from the Start Menu in Windows XP and Windows Server 2003.&lt;br/&gt;&lt;br/&gt;To remove the user name folder on Windows Vista, set the &amp;quot;Remove user folder link from Start Menu&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user name label appears on the Start Menu in Windows XP and Windows Server 2003." gpmc_supported="Windows Server 2003 and Windows XP only">Remove user name from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove user&amp;#39;s folders from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden.&lt;br/&gt;&lt;br/&gt;This setting is designed for use with redirected folders. Redirected folders appear on the main (bottom) section of the Start menu. However, the original, user-specific version of the folder still appears on the top section of the Start menu. Because the appearance of two folders with the same name might confuse users, you can use this setting to hide user-specific folders.&lt;br/&gt;&lt;br/&gt;Note that this setting hides all user-specific folders, not just those associated with redirected folders.&lt;br/&gt;&lt;br/&gt;If you enable this setting, no folders appear on the top section of the Start menu. If users add folders to the Start Menu directory in their user profiles, the folders appear in the directory but not on the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configured it, Windows 2000 Professional and Windows XP Professional display folders on both sections of the Start menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, Windows 2000, and Windows 10">Remove user&#39;s folders from the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off notification area cleanup" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the notification area, also called the &amp;quot;system tray.&amp;quot;&lt;br/&gt;&lt;br/&gt;The notification area is located in the task bar, generally at the bottom of the screen, and it includes the clock and current notifications. This setting determines whether the items are always expanded or always collapsed. By default, notifications are collapsed. The notification cleanup &amp;lt;&amp;lt; icon can be referred to as the &amp;quot;notification chevron.&amp;quot;&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system notification area expands to show all of the notifications that use this area.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the system notification area will always collapse notifications.&lt;br/&gt;&lt;br/&gt;If you do not configure it, the user can choose if they want notifications collapsed." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Turn off notification area cleanup</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off personalized menus" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Disables personalized menus.&lt;br/&gt;&lt;br/&gt;Windows personalizes long menus by moving recently used items to the top of the menu and hiding items that have not been used recently. Users can display the hidden items by clicking an arrow to extend the menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system does not personalize menus. All menu items appear and remain in standard order. Also, this setting removes the &amp;quot;Use Personalized Menus&amp;quot; option so users do not try to change the setting while a setting is in effect.&lt;br/&gt;&lt;br/&gt;Note: Personalized menus require user tracking. If you enable the &amp;quot;Turn off user tracking&amp;quot; setting, the system disables user tracking and personalized menus and ignores this setting.&lt;br/&gt;&lt;br/&gt;Tip: To Turn off personalized menus without specifying a setting, click Start, click Settings, click Taskbar and Start Menu, and then, on the General tab, clear the &amp;quot;Use Personalized Menus&amp;quot; option." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Turn off personalized menus</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off user tracking" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off user tracking.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system does not track the programs that the user runs, and does not display frequently used programs in the Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the system tracks the programs that the user runs. The system uses this information to customize Windows features, such as showing frequently used programs in the Start Menu.&lt;br/&gt;&lt;br/&gt;Also, see these related policy settings: &amp;quot;Remove frequent programs liist from the Start Menu&amp;quot; and &amp;quot;Turn off personalized menus&amp;quot;.&lt;br/&gt;&lt;br/&gt;This policy  setting does not prevent users from pinning programs to the Start Menu or Taskbar. See the &amp;quot;Remove pinned programs list from the Start Menu&amp;quot; and &amp;quot;Do not allow pinning programs to the Taskbar&amp;quot; policy settings." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Turn off user tracking</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display the Getting Started welcome screen at logon" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied.&lt;br/&gt;&lt;br/&gt;Users can still display the welcome screen by selecting it on the Start menu or by typing &amp;quot;&amp;quot;Welcome&amp;quot;&amp;quot; in the Run dialog box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer.&lt;br/&gt;&lt;br/&gt;This setting applies only to Windows 2000 Professional. It does not affect the &amp;quot;&amp;quot;Configure Your Server on a Windows 2000 Server&amp;quot;&amp;quot; screen on Windows 2000 Server.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click &amp;quot;&amp;quot;Getting Started.&amp;quot;&amp;quot; To suppress the welcome screen without specifying a setting, clear the &amp;quot;&amp;quot;Show this screen at startup&amp;quot;&amp;quot; check box on the welcome screen." gpmc_supported="Windows 2000 only">Do not display the Getting Started welcome screen at logon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Don&amp;#39;t run specified Windows applications" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Prevents Windows from running the programs you specify in this policy setting.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot run programs that you add to the list of disallowed applications.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run any programs.&lt;br/&gt;&lt;br/&gt;This policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs, such as Task Manager, which are started by the system process or by other processes.  Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer.&lt;br/&gt;&lt;br/&gt;Note: Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting.&lt;br/&gt;Note: To create a list of allowed applications, click Show.  In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe)." gpmc_supported="At least Windows 2000">Don&#39;t run specified Windows applications</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">List of disallowed applications</th></tr>
<tr><td>audacity.exe</td></tr>
<tr><td>cmd.exe</td></tr>
<tr><td>command.com</td></tr>
<tr><td>msimn.exe</td></tr>
<tr><td>netscan.exe</td></tr>
<tr><td>notepad.exe</td></tr>
<tr><td>QuickZip.exe</td></tr>
<tr><td>wordpad.exe</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Download missing COM components" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This policy setting directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires.&lt;br/&gt;&lt;br/&gt;Many Windows programs, such as the MMC snap-ins, use the interfaces provided by the COM components. These programs cannot perform all their functions unless Windows has internally registered the required components.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and a component registration is missing, the system searches for it in Active Directory and, if it is found, downloads it. The resulting searches might make some programs start or run slowly.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the program continues without the registration. As a result, the program might not perform all its functions, or it might stop.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in  User Configuration." gpmc_supported="At least Windows 2000">Download missing COM components</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to registry editing tools" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Disables the Windows registry editor Regedit.exe.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run Regedit.exe normally.&lt;br/&gt;&lt;br/&gt;To prevent users from using other administrative tools, use the &amp;quot;Run only specified Windows applications&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Prevent access to registry editing tools</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Disable regedit from running silently?</td><td>No</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to the command prompt" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This policy setting prevents users from running the interactive command prompt, Cmd.exe.  This policy setting also determines whether batch files (.cmd and .bat) can run on the computer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run Cmd.exe and batch files normally.&lt;br/&gt;&lt;br/&gt;Note: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Remote Desktop Services." gpmc_supported="At least Windows 2000">Prevent access to the command prompt</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Disable the command prompt script processing also?</td><td>No</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Ctrl+Alt+Del Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Task Manager" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="This policy setting prevents users from starting Task Manager.&lt;br/&gt;&lt;br/&gt;Task Manager (taskmgr.exe) lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers, including system services; find the executable names of programs; and change the priority of the process in which programs run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will not be able to access Task Manager. If users try to start Task Manager, a message appears explaining that a policy prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can access Task Manager to  start and stop programs, monitor the performance of their computers, view and monitor all programs running on their computers, including system services, find the executable names of programs, and change the priority of the process in which programs run." gpmc_supported="At least Windows 2000">Remove Task Manager</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Driver Installation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure driver search locations" gpmc_settingPath="User Configuration/Administrative Templates/System/Driver Installation" gpmc_settingDescription="This setting configures the location that Windows searches for drivers when a new piece of hardware is found.&lt;br/&gt;&lt;br/&gt;By default, Windows searches the following places for drivers: local installation, floppy drives, CD-ROM drives, Windows Update.&lt;br/&gt;&lt;br/&gt;Using this setting, you may remove the floppy and CD-ROM drives from the search algorithm.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you can remove the locations by selecting the associated check box beside the location name.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, Windows searches the installation location, floppy drives, and CD-ROM drives.&lt;br/&gt;&lt;br/&gt;Note: To prevent searching Windows Update for drivers also see &amp;quot;Turn off Windows Update device driver searching&amp;quot; in Administrative Templates/System/Internet Communication Management/Internet Communication settings." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, and Windows XP">Configure driver search locations</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Update device driver search prompt" gpmc_settingPath="User Configuration/Administrative Templates/System/Driver Installation" gpmc_settingDescription="Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet.&lt;br/&gt;&lt;br/&gt;Note: This setting only has effect if &amp;quot;Turn off Windows Update device driver searching&amp;quot; in &amp;quot;Administrative Templates/System/Internet Communication Management/Internet Communication settings&amp;quot; is disabled or not configured.&lt;br/&gt;&lt;br/&gt;If you enable this setting, administrators will not be prompted to search Windows Update.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, and &amp;quot;Turn off Windows Update device driver searching&amp;quot; is disabled or not configured, the administrator will be prompted for consent before going to Windows Update to search for device drivers." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, and Windows XP SP2">Turn off Windows Update device driver search prompt</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Folder Redirection</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not automatically make all redirected folders available offline" gpmc_settingPath="User Configuration/Administrative Templates/System/Folder Redirection" gpmc_settingDescription="This policy setting allows you to control whether all redirected shell folders, such as Contacts, Documents, Desktop, Favorites, Music, Pictures, Videos, Start Menu, and AppData\Roaming, are available offline by default.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users must manually select the files they wish to make available offline.  &lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, redirected shell folders are automatically made available offline. All subfolders within the redirected folders are also made available offline.  &lt;br/&gt;&lt;br/&gt;Note: This policy setting does not prevent files from being automatically cached if the network share is configured for &amp;quot;Automatic Caching&amp;quot;, nor does it affect the availability of the &amp;quot;Always available offline&amp;quot; menu option in the user interface.  &lt;br/&gt;&lt;br/&gt;Note: Do not enable this policy setting if users will need access to their redirected files if the network or server holding the redirected files becomes unavailable.&lt;br/&gt;&lt;br/&gt;Note: If one or more valid folder GUIDs are specified in the policy setting &amp;quot;Do not automatically make specific redirected folders available offline&amp;quot;, that setting will override the configured value of &amp;quot;Do not automatically make all redirected folders available offline&amp;quot;.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not automatically make all redirected folders available offline</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Group Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Determine if interactive users can generate Resultant Set of Policy data" gpmc_settingPath="User Configuration/Administrative Templates/System/Group Policy" gpmc_settingDescription="This policy setting controls the ability of users to view their Resultant Set of Policy (RSoP) data.&lt;br/&gt;&lt;br/&gt;By default, interactively logged on users can view their own Resultant Set of Policy (RSoP) data.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, interactive users cannot generate RSoP data.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, interactive users can generate RSoP.&lt;br/&gt;&lt;br/&gt;Note: This policy setting does not affect administrators. If you enable or disable this policy setting, by default administrators can view RSoP data.&lt;br/&gt;&lt;br/&gt;Note: To view RSoP data on a client computer, use the RSoP snap-in for the Microsoft Management Console. You can launch the RSoP snap-in from the command line by typing RSOP.msc&lt;br/&gt;&lt;br/&gt;Note: This policy setting exists as both a User Configuration and Computer Configuration setting.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Turn off Resultant set of Policy logging&amp;quot; policy setting in Computer Configuration\Administrative Templates\System\GroupPolicy." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Determine if interactive users can generate Resultant Set of Policy data</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Internet Communication Management/Internet Communication settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off downloading of print drivers over HTTP" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether to allow this client to download print driver packages over HTTP.&lt;br/&gt;&lt;br/&gt;To set up HTTP printing, non-inbox drivers need to be downloaded over HTTP.&lt;br/&gt;&lt;br/&gt;Note: This policy setting does not prevent the client from printing to printers on the Intranet or the Internet over HTTP.  It only prohibits downloading drivers that are not already installed locally.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, print drivers cannot be downloaded over HTTP.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can download print drivers over HTTP." gpmc_supported="At least Windows XP Professional with SP2">Turn off downloading of print drivers over HTTP</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Internet download for Web publishing and online ordering wizards" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether Windows should download a list of providers for the web publishing and online ordering wizards.&lt;br/&gt;&lt;br/&gt;These wizards allow users to select from a list of companies that provide services such as online storage and photographic printing. By default, Windows displays providers downloaded from a Windows website in addition to providers specified in the registry.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows does not download providers, and only the service providers that are cached in the local registry are displayed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, a list of providers are downloaded when the user uses the web publishing or online ordering wizards.&lt;br/&gt;&lt;br/&gt;See the documentation for the web publishing and online ordering wizards for more information, including details on specifying service providers in the registry." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional with SP2">Turn off Internet download for Web publishing and online ordering wizards</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Internet File Association service" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.&lt;br/&gt;&lt;br/&gt;When a user opens a file that has an extension that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Web service to find an application.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the link and the dialog for using the Web service to open an unhandled file association are removed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user is allowed to use the Web service." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Turn off Internet File Association service</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off printing over HTTP" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether to allow printing over HTTP from this client.&lt;br/&gt;&lt;br/&gt;Printing over HTTP allows a client to print to printers on the intranet as well as the Internet.&lt;br/&gt;&lt;br/&gt;Note: This policy setting affects the client side of Internet printing only. It does not prevent this computer from acting as an Internet Printing server and making its shared printers available via HTTP.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, it prevents this client from printing to Internet printers over HTTP.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can choose to print to Internet printers over HTTP.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Web-based printing&amp;quot; policy setting in Computer Configuration/Administrative Templates/Printers." gpmc_supported="At least Windows XP Professional with SP2">Turn off printing over HTTP</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the &amp;quot;Order Prints&amp;quot; picture task" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether the &amp;quot;Order Prints Online&amp;quot; task is available from Picture Tasks in Windows folders.&lt;br/&gt;&lt;br/&gt;The Order Prints Online Wizard is used to download a list of providers and allow users to order prints online.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the task &amp;quot;Order Prints Online&amp;quot; is removed from Picture Tasks in File Explorer folders.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the task is displayed." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional with SP2">Turn off the &quot;Order Prints&quot; picture task</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the &amp;quot;Publish to Web&amp;quot; task for files and folders" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether the tasks &amp;quot;Publish this file to the Web,&amp;quot; &amp;quot;Publish this folder to the Web,&amp;quot; and &amp;quot;Publish the selected items to the Web&amp;quot; are available from File and Folder Tasks in Windows folders.&lt;br/&gt;&lt;br/&gt;The Web Publishing Wizard is used to download a list of providers and allow users to publish content to the web.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, these tasks are removed from the File and Folder tasks in Windows folders.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the tasks are shown." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional with SP2">Turn off the &quot;Publish to Web&quot; task for files and folders</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the Windows Messenger Customer Experience Improvement Program" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.&lt;br/&gt;&lt;br/&gt;With the Customer Experience Improvement program, users can allow Microsoft to collect anonymous information about how the product is used.  This information is used to improve the product in future releases.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Messenger does not collect usage information, and the user settings to enable the collection of usage information are not shown.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Messenger collects anonymous usage information, and the setting is not shown.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users have the choice to opt in and allow information to be collected." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional with SP2">Turn off the Windows Messenger Customer Experience Improvement Program</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Logon</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not process the legacy run list" gpmc_settingPath="User Configuration/Administrative Templates/System/Logon" gpmc_settingDescription="This policy setting ignores the customized run list.&lt;br/&gt;&lt;br/&gt;You can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows Vista, Windows XP Professional, and Windows 2000 Professional. These programs are added to the standard run list of programs and services that the system starts.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system ignores the run list for Windows Vista, Windows XP Professional, and Windows 2000 Professional.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Vista adds any customized run list configured to its run list.&lt;br/&gt;&lt;br/&gt;This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Note: To create a customized run list by using a policy setting, use the &amp;quot;&amp;quot;Run these applications at startup&amp;quot;&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;&amp;quot;Do not process the run once list&amp;quot;&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Do not process the legacy run list</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not process the run once list" gpmc_settingPath="User Configuration/Administrative Templates/System/Logon" gpmc_settingDescription="This policy setting ignores customized run-once lists.&lt;br/&gt;&lt;br/&gt;You can create a customized list of additional programs and documents that are started automatically the next time the system starts (but not thereafter). These programs are added to the standard list of programs and services that the system starts.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system ignores the run-once list.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the system runs the programs in the run-once list.&lt;br/&gt;&lt;br/&gt;This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Note: Customized run-once lists are stored in the registry in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;&amp;quot;Do not process the legacy run list&amp;quot;&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Do not process the run once list</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run these programs at user logon" gpmc_settingPath="User Configuration/Administrative Templates/System/Logon" gpmc_settingDescription="This policy setting specifies additional programs or documents that Windows starts automatically when a user logs on to the system.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can specify which programs can run at the time the user logs on to this computer that has this policy applied.&lt;br/&gt;&lt;br/&gt;To specify values for this policy setting, click Show. In the Show Contents dialog box in the Value column, type the name of the executable program (.exe) file or document file. To specify another name, press ENTER, and type the name. Unless the file is located in the %Systemroot% directory, you must specify the fully qualified path to the file.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user will have to start the appropriate programs after logon.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the system starts the programs specified in the Computer Configuration setting just before it starts the programs specified in the User Configuration setting.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;&amp;quot;Do not process the legacy run list&amp;quot;&amp;quot; and the &amp;quot;&amp;quot;Do not process the run once list&amp;quot;&amp;quot; settings." gpmc_supported="At least Windows 2000">Run these programs at user logon</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Scripts</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display instructions in logoff scripts as they run" gpmc_settingPath="User Configuration/Administrative Templates/System/Scripts" gpmc_settingDescription="This policy setting displays the instructions in logoff scripts as they run.&lt;br/&gt;&lt;br/&gt;Logoff scripts are batch files of instructions that run when the user logs off. By default, the system does not display the instructions in the logoff script.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system displays each instruction in the logoff script as it runs. The instructions appear in a command window. This policy setting is designed for advanced users.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the instructions are suppressed." gpmc_supported="At least Windows 2000">Display instructions in logoff scripts as they run</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display instructions in logon scripts as they run" gpmc_settingPath="User Configuration/Administrative Templates/System/Scripts" gpmc_settingDescription="This policy setting displays the instructions in logon scripts as they run.&lt;br/&gt;&lt;br/&gt;Logon scripts are batch files of instructions that run when the user logs on. By default, the system does not display the instructions in logon scripts.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system displays each instruction in the logon script as it runs. The instructions appear in a command window. This policy setting is designed for advanced users.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the instructions are suppressed." gpmc_supported="At least Windows 2000">Display instructions in logon scripts as they run</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run legacy logon scripts hidden" gpmc_settingPath="User Configuration/Administrative Templates/System/Scripts" gpmc_settingDescription="This policy setting hides the instructions in logon scripts written for Windows NT 4.0 and earlier. &lt;br/&gt;&lt;br/&gt;Logon scripts are batch files of instructions that run when the user logs on. By default, Windows 2000 displays the instructions in logon scripts written for Windows NT 4.0 and earlier in a command window as they run, although it does not display logon scripts written for Windows 2000.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Windows 2000 does not display logon scripts written for Windows NT 4.0 and earlier.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows 2000 displays login scripts written for Windows NT 4.0 and earlier.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Run Logon Scripts Visible&amp;quot; setting." gpmc_supported="At least Windows 2000">Run legacy logon scripts hidden</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run logon scripts synchronously" gpmc_settingPath="User Configuration/Administrative Templates/System/Scripts" gpmc_settingDescription="This policy setting directs the system to wait for logon scripts to finish running before it starts the File Explorer interface program and creates the desktop.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, File Explorer does not start until the logon scripts have finished running. This policy setting ensures that logon script processing is complete before the user starts working, but it can delay the appearance of the desktop.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the logon scripts and File Explorer are not synchronized and can run simultaneously.&lt;br/&gt;&lt;br/&gt;This policy setting appears in the Computer Configuration and User Configuration folders. The policy setting set in Computer Configuration takes precedence over the policy setting set in User Configuration." gpmc_supported="At least Windows 2000">Run logon scripts synchronously</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/User Profiles</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Connect home directory to root of the share" gpmc_settingPath="User Configuration/Administrative Templates/System/User Profiles" gpmc_settingDescription="This policy setting restores the definitions of the %HOMESHARE% and %HOMEPATH% environment variables to those used in Windows NT 4.0 and earlier. Along with %HOMEDRIVE%, these variables define the home directory of a user profile. The home directory is a persistent mapping of a drive letter on the local computer to a local or remote directory.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system uses the Windows NT 4.0 definitions. %HOMESHARE% stores only the network share (such as \\server\share). %HOMEPATH% stores the remainder of the fully qualified path to the home directory (such as \dir1\dir2\homedir). As a result, users can access any directory on the home share by using the home directory drive letter.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the system uses the definitions introduced with Windows 2000. %HOMESHARE% stores the fully qualified path to the home directory (such as \\server\share\dir1\dir2\homedir). Users can access the home directory and any of its subdirectories from the home drive letter, but they cannot see or access its parent directories. %HOMEPATH% stores a final backslash and is included for compatibility with earlier systems." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Connect home directory to root of the share</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Exclude directories in roaming profile" gpmc_settingPath="User Configuration/Administrative Templates/System/User Profiles" gpmc_settingDescription="This policy setting lets you exclude folders that are normally included in the user&amp;#39;s profile. As a result, these folders do not need to be stored by the network server on which the profile resides and do not follow users to other computers.&lt;br/&gt;&lt;br/&gt;Note: When excluding content from the profile you should try to exclude the narrowest set of data that will address your needs. For example, if there is one application with data that should not be roamed then add only that application&amp;#39;s specific folder under the AppData\Roaming folder rather than all of the AppData\Roaming folder to the exclusion list.&lt;br/&gt;&lt;br/&gt;By default, the Appdata\Local and Appdata\LocalLow folders and all their subfolders such as the History, Temp, and Temporary Internet Files folders are excluded from the user&amp;#39;s roaming profile.&lt;br/&gt;&lt;br/&gt;In operating systems earlier than Microsoft Windows Vista, only the History, Local Settings, Temp, and Temporary Internet Files folders are excluded from the user&amp;#39;s roaming profile by default.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can exclude additional folders.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, only the default folders are excluded.&lt;br/&gt;&lt;br/&gt;Note: You cannot use this policy setting to include the default folders in a roaming user profile." gpmc_supported="At least Windows 2000">Exclude directories in roaming profile</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Limit profile size" gpmc_settingPath="User Configuration/Administrative Templates/System/User Profiles" gpmc_settingDescription="This policy setting sets the maximum size of each user profile and determines the system&amp;#39;s response when a user profile reaches the maximum size. This policy setting affects both local and roaming profiles.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, the system does not limit the size of user profiles.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can:&lt;br/&gt;&lt;br/&gt;-- Set a maximum permitted user profile size.&lt;br/&gt;-- Determine whether the registry files are included in the calculation of the profile size.&lt;br/&gt;-- Determine whether users are notified when the profile exceeds the permitted maximum size.&lt;br/&gt;-- Specify a customized message notifying users of the oversized profile.&lt;br/&gt;-- Determine how often the customized message is displayed.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Microsoft Windows Vista, Windows will not allow users to log off until the profile size has been reduced to within the allowable limit. In Microsoft Windows Vista, Windows will not block users from logging off. Instead, if the user has a roaming user profile, Windows will not synchronize the user&amp;#39;s profile with the roaming profile server if the maximum profile size limit specified here is exceeded." gpmc_supported="At least Windows 2000">Limit profile size</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/AutoPlay Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Autoplay" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/AutoPlay Policies" gpmc_settingDescription="This policy setting allows you to turn off the Autoplay feature.&lt;br/&gt;&lt;br/&gt;          Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately.&lt;br/&gt;&lt;br/&gt;          Prior to Windows XP SP2, Autoplay is disabled by default on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives.&lt;br/&gt;&lt;br/&gt;          Starting with Windows XP SP2, Autoplay is enabled for removable drives as well, including Zip drives and some USB mass storage devices.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting, Autoplay is disabled on CD-ROM and removable media drives, or disabled on all drives.&lt;br/&gt;&lt;br/&gt;          This policy setting disables Autoplay on additional types of drives. You cannot use this setting to enable Autoplay on drives on which it is disabled by default.&lt;br/&gt;&lt;br/&gt;          If you disable or do not configure this policy setting, AutoPlay is enabled.&lt;br/&gt;&lt;br/&gt;          Note: This policy setting appears in both the Computer Configuration and User Configuration folders. If the policy settings conflict, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration." gpmc_supported="At least Windows 2000">Turn off Autoplay</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Turn off Autoplay on:</td><td>All drives</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow only per user or approved shell extensions" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This setting is designed to ensure that shell extensions can operate on a per-user basis. If you enable this setting, Windows is directed to only run those shell extensions that have either been approved by an administrator or that will not impact other users of the machine.&lt;br/&gt;&lt;br/&gt;A shell extension only runs if there is an entry in at least one of the following locations in registry.&lt;br/&gt;&lt;br/&gt;For shell extensions that have been approved by the administrator and are available to all users of the computer, there must be an entry at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved.&lt;br/&gt;&lt;br/&gt;For shell extensions to run on a per-user basis, there must be an entry at HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved." gpmc_supported="At least Windows 2000">Allow only per user or approved shell extensions</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display confirmation dialog when deleting files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Allows you to have File Explorer display a confirmation dialog  whenever a file is deleted or moved to the Recycle Bin.&lt;br/&gt;&lt;br/&gt;If you enable this setting, a confirmation dialog is displayed when a file is deleted or moved to the Recycle Bin by the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the default behavior of not displaying a confirmation dialog occurs." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Display confirmation dialog when deleting files</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to prevent users from accessing Folder Options through the View tab on the ribbon in File Explorer.&lt;br/&gt;&lt;br/&gt;Folder Options allows users to change the way files and folders open, what appears in the navigation pane, and other advanced view settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will receive an error message if they tap or click the Options button or choose the Change folder and search options command, and they will not be able to open Folder Options.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can open Folder Options from the View tab on the ribbon." gpmc_supported="At least Windows 2000">Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not move deleted files to the Recycle Bin" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="When a file or folder is deleted in File Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setting, you can change this behavior.&lt;br/&gt;&lt;br/&gt;If you enable this setting, files and folders that are deleted using File Explorer will not be placed in the Recycle Bin and will therefore be permanently deleted.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, files and folders deleted using File Explorer will be placed in the Recycle Bin." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not move deleted files to the Recycle Bin</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not request alternate credentials" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prevents users from submitting alternate logon credentials to install a program.&lt;br/&gt;&lt;br/&gt;This setting suppresses the &amp;quot;Install Program As Other User&amp;quot; dialog box for local and network installations. This dialog box, which prompts the current user for the user name and password of an administrator, appears when users who are not administrators try to install programs locally on their computers. This setting allows administrators who have logged on as regular users to install programs without logging off and logging on again using their administrator credentials.&lt;br/&gt;&lt;br/&gt;Many programs can be installed only by an administrator. If you enable this setting and a user does not have sufficient permissions to install a program, the installation continues with the current user&amp;#39;s logon credentials. As a result, the installation might fail, or it might complete but not include all features. Or, it might appear to complete successfully, but the installed program might not operate correctly.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Install Program As Other User&amp;quot; dialog box appears whenever users install programs locally on the computer.&lt;br/&gt;&lt;br/&gt;By default, users are not prompted for alternate logon credentials when installing programs from a network share. If enabled, this setting overrides the &amp;quot;Request credentials for network installations&amp;quot; setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Do not request alternate credentials</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not track Shell shortcuts during roaming" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting determines whether Windows traces shortcuts back to their sources when it cannot find the target on the user&amp;#39;s system.&lt;br/&gt;&lt;br/&gt;Shortcut files typically include an absolute path to the original target file as well as the relative path to the current target file. When the system cannot find the file in the current target path, then, by default, it searches for the target in the original path. If the shortcut has been copied to a different computer, the original path might lead to a network computer, including external resources, such as an Internet server.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows only searches the current target path. It does not search for the original path even when it cannot find the target file in the current target path.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows searches for the original path when it cannot find the target file in the current target path." gpmc_supported="At least Windows 2000">Do not track Shell shortcuts during roaming</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide these specified drives in My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to hide these specified drives in My Computer.&lt;br/&gt;&lt;br/&gt;This policy setting allows you to remove the icons representing selected hard drives from My Computer and File Explorer. Also, the drive letters representing the selected drives do not appear in the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, select a drive or combination of drives in the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: This policy setting removes the drive icons. Users can still gain access to drive contents by using other methods, such as by typing the path to a directory on the drive in the Map Network Drive dialog box, in the Run dialog box, or in a command window.&lt;br/&gt;&lt;br/&gt;Also, this policy setting does not prevent users from using programs to access these drives or their contents. And, it does not prevent users from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, all drives are displayed, or select the &amp;quot;Do not restrict drives&amp;quot; option in the drop-down list.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent access to drives from My Computer&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Hide these specified drives in My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Pick one of the following combinations</td><td>Restrict A, B, C and D drives only</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hides the Manage item on the File Explorer context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Manage item from the File Explorer context menu. This context menu appears when you right-click File Explorer or My Computer.&lt;br/&gt;&lt;br/&gt;The Manage item opens Computer Management (Compmgmt.msc), a console tool that includes many of the primary Windows 2000 administrative tools, such as Event Viewer, Device Manager, and Disk Management. You must be an administrator to use many of the features of these tools.&lt;br/&gt;&lt;br/&gt;This setting does not remove the Computer Management item from the Start menu (Start, Programs, Administrative Tools, Computer Management), nor does it prevent users from using other methods to start Computer Management.&lt;br/&gt;&lt;br/&gt;Tip: To hide all context menus, use the &amp;quot;Remove File Explorer&amp;#39;s default context menu&amp;quot; setting." gpmc_supported="At least Windows 2000">Hides the Manage item on the File Explorer context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Maximum number of recent documents" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="&amp;quot;This policy setting allows you to set the maximum number of shortcuts the system can display in the Recent Items menu on the Start menu.&lt;br/&gt;&lt;br/&gt;The Recent Items menu contains shortcuts to the nonprogram files the user has most recently opened.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system displays the number of shortcuts specified by the policy setting.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, by default, the system displays shortcuts to the 10 most recently opened documents.&amp;quot;" gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Maximum number of recent documents</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Maximum number of recent documents</td><td>10</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="No Computers Near Me in Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove computers in the user&amp;#39;s workgroup and domain from lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system removes the &amp;quot;Computers Near Me&amp;quot; option and the icons representing nearby computers from Network Locations. This policy setting also removes these icons from the Map Network Drive browser.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, computers in the user&amp;#39;s workgroup and domain appear in lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from connecting to computers in their workgroup or domain by other commonly used methods, such as typing the share name in the Run dialog box or the Map Network Drive dialog box.&lt;br/&gt;&lt;br/&gt;To remove network computers from lists of network resources, use the &amp;quot;No Entire Network in Network Locations&amp;quot; policy setting.&lt;br/&gt;" gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">No Computers Near Me in Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="No Entire Network in Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes all computers outside of the user&amp;#39;s workgroup or local domain from lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system removes the Entire Network option and the icons representing networked computers from Network Locations and from the browser associated with the Map Network Drive option.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from viewing or connecting to computers in their workgroup or domain. It also does not prevent users from connecting to remote computers by other commonly used methods, such as by typing the share name in the Run dialog box or the Map Network Drive dialog box.&lt;br/&gt;&lt;br/&gt;To remove computers in the user&amp;#39;s workgroup or domain from lists of network resources, use the &amp;quot;No Computers Near Me in Network Locations&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">No Entire Network in Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to drives from My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prevents users from using My Computer to gain access to the content of selected drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users can browse the directory structure of the selected drives in My Computer or File Explorer, but they cannot open folders and access the contents. Also, they cannot use the Run dialog box or the Map Network Drive dialog box to view the directories on these drives.&lt;br/&gt;&lt;br/&gt;To use this setting, select a drive or combination of drives from the drop-down list. To allow access to all drive directories, disable this setting or select the &amp;quot;Do not restrict drives&amp;quot; option from the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: The icons representing the specified drives still appear in My Computer, but if users double-click the icons, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt; Also, this setting does not prevent users from using programs to access local and network drives. And, it does not prevent them from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide these specified drives in My Computer&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent access to drives from My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Pick one of the following combinations</td><td>Restrict A, B, C and D drives only</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove &amp;quot;Map Network Drive&amp;quot; and &amp;quot;Disconnect Network Drive&amp;quot;" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prevents users from using File Explorer or Network Locations to map or disconnect network drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system removes the Map Network Drive and Disconnect Network Drive commands from the toolbar and Tools menus in File Explorer and Network Locations and from menus that appear when you right-click the File Explorer or Network Locations icons.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from connecting to another computer by typing the name of a shared folder in the Run dialog box.&lt;br/&gt;&lt;br/&gt;Note:&lt;br/&gt;&lt;br/&gt;This setting was documented incorrectly on the Explain tab in Group Policy for Windows 2000. The Explain tab states incorrectly that this setting prevents users from connecting and disconnecting drives.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Remove &quot;Map Network Drive&quot; and &quot;Disconnect Network Drive&quot;</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove CD Burning features" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove CD Burning features. File Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, all features in the File Explorer that allow you to use your CD writer are removed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are able to use the File Explorer CD burning features.&lt;br/&gt;&lt;br/&gt;Note: This policy setting does not prevent users from using third-party applications to create or modify CDs using a CD writer." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove CD Burning features</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove DFS tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the DFS tab from File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the DFS (Distributed File System) tab is removed from File Explorer and from other programs that use the File Explorer browser, such as My Computer. As a result, users cannot use this tab to view or change the properties of the DFS shares available from their computer.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from using other methods to configure DFS.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the DFS tab is available." gpmc_supported="At least Windows 2000">Remove DFS tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove File Explorer&amp;#39;s default context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes shortcut menus from the desktop and File Explorer. Shortcut menus appear when you right-click an item.&lt;br/&gt;&lt;br/&gt;If you enable this setting, menus do not appear when you right-click the desktop or when you right-click the items in File Explorer. This setting does not prevent users from using other methods to issue commands available on the shortcut menus." gpmc_supported="At least Windows 2000">Remove File Explorer&#39;s default context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove File menu from File Explorer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the File menu from My Computer and File Explorer.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other methods to perform tasks available on the File menu." gpmc_supported="At least Windows 2000">Remove File menu from File Explorer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Hardware tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Hardware tab.&lt;br/&gt;&lt;br/&gt;This setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. It also removes the Hardware tab from the Properties dialog box for all local drives, including hard drives, floppy disk drives, and CD-ROM drives. As a result, users cannot use the Hardware tab to view or change the device list or device properties, or use the Troubleshoot button to resolve problems with the device." gpmc_supported="At least Windows 2000">Remove Hardware tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search button from File Explorer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the Search button from the File Explorer toolbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Search button is removed from the Standard Buttons toolbar that appears in File Explorer and other programs that use the File Explorer window, such as My Computer and Network Locations.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting does not remove the Search button or affect any search features of Internet browser windows, such as the Internet Explorer window.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Search button is available from the File Explorer toolbar.&lt;br/&gt;&lt;br/&gt;This policy setting does not affect the Search items on the File Explorer context menu or on the Start menu. To remove Search from the Start menu, use the &amp;quot;Remove Search menu from Start menu&amp;quot; policy setting (in User Configuration\Administrative Templates\Start Menu and Taskbar). To hide all context menus, use the &amp;quot;Remove File Explorer&amp;#39;s default context menu&amp;quot; policy setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove Search button from File Explorer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Security tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Security tab from File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users opening the Properties dialog box for all file system objects, including folders, files, shortcuts, and drives, will not be able to access the Security tab. As a result, users will be able to neither change the security settings nor view a list of all users that have access to the resource in question.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the security tab." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Security tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Shared Documents from My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the Shared Documents folder from My Computer.&lt;br/&gt;&lt;br/&gt;When a Windows client is in a workgroup, a Shared Documents icon appears in the File Explorer Web view under &amp;quot;Other Places&amp;quot; and also under &amp;quot;Files Stored on This Computer&amp;quot; in My Computer. Using this policy setting, you can choose not to have these items displayed.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Shared Documents folder is not displayed in the Web view or in My Computer.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Shared Documents folder is displayed in Web view and also in My Computer when the client is part of a workgroup.&lt;br/&gt;&lt;br/&gt;Note:  The ability to remove the Shared Documents folder via Group Policy is only available on Windows XP Professional." gpmc_supported="Windows XP Professional only">Remove Shared Documents from My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove UI to change keyboard navigation indicator setting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Disables the &amp;quot;Hide keyboard navigation indicators until I use the ALT key&amp;quot; option in Display in Control Panel.&lt;br/&gt;&lt;br/&gt;When this Display Properties option is selected, the underlining that indicates a keyboard shortcut character (hot key) does not appear on menus until you press ALT.&lt;br/&gt;&lt;br/&gt;Effects, such as transitory underlines, are designed to enhance the user&amp;#39;s experience but might be confusing or distracting to some users." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove UI to change keyboard navigation indicator setting</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove UI to change menu animation setting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to prevent users from enabling or disabling minor animations in the operating system for the movement of windows, menus, and lists.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the &amp;quot;Use transition effects for menus and tooltips&amp;quot; option in Display in Control Panel is disabled, and cannot be toggled by users.&lt;br/&gt;&lt;br/&gt;Effects, such as animation, are designed to enhance the user&amp;#39;s experience but might be confusing or distracting to some users.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are allowed to turn on or off these minor system animations using the &amp;quot;Use transition effects for menus and tooltips&amp;quot; option in Display in Control Panel." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove UI to change menu animation setting</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Request credentials for network installations" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prompts users for alternate logon credentials during network-based installations.&lt;br/&gt;&lt;br/&gt;This setting displays the &amp;quot;Install Program As Other User&amp;quot; dialog box even when a program is being installed from files on a network computer across a local area network connection.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, this dialog box appears only when users are installing programs from local media.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Install Program as Other User&amp;quot; dialog box prompts the current user for the user name and password of an administrator. This setting allows administrators who have logged on as regular users to install programs without logging off and logging on again using their administrator credentials.&lt;br/&gt;&lt;br/&gt;If the dialog box does not appear, the installation proceeds with the current user&amp;#39;s permissions. If these permissions are not sufficient, the installation might fail, or it might complete but not include all features. Or, it might appear to complete successfully, but the installed program might not operate correctly.&lt;br/&gt;&lt;br/&gt;Note: If it is enabled, the &amp;quot;Do not request alternate credentials&amp;quot; setting takes precedence over this setting. When that setting is enabled, users are not prompted for alternate logon credentials on any installation." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Request credentials for network installations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off caching of thumbnail pictures" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to turn off caching of thumbnail pictures.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, thumbnail views are not cached.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, thumbnail views are cached.&lt;br/&gt;&lt;br/&gt;Note: For shared corporate workstations or computers where security is a top concern, you should enable this policy setting to turn off the thumbnail view cache, because the thumbnail cache can be read by everyone." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Turn off caching of thumbnail pictures</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off shell protocol protected mode" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applications can open folders and launch files. The protected mode reduces the functionality of this protocol allowing applications to only open a limited set of folders. Applications are not able to open files with this protocol when it is in the protected mode. It is recommended to leave this protocol in the protected mode to increase the security of Windows.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting the protocol is fully enabled, allowing the opening of folders and files.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting the protocol is in the protected mode, allowing applications to only open a limited set of folders.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting the protocol is in the protected mode, allowing applications to only open a limited set of folders." gpmc_supported="At least Windows XP Professional with SP2">Turn off shell protocol protected mode</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Key hotkeys" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Turn off Windows Key hotkeys.&lt;br/&gt;&lt;br/&gt;Keyboards with a Windows key provide users with shortcuts to common shell features. For example, pressing the keyboard sequence Windows+R opens the Run dialog box; pressing Windows+E starts File Explorer. By using this setting, you can disable these Windows Key hotkeys.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Windows Key hotkeys are unavailable.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Windows Key hotkeys are available." gpmc_supported="At least Windows Server 2003">Turn off Windows Key hotkeys</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on Classic Shell" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This setting allows an administrator to revert specific Windows Shell behavior to classic Shell behavior.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot configure their system to open items by single-clicking (such as in Mouse in Control Panel). As a result, the user interface looks and operates like the interface for Windows NT 4.0, and users cannot restore the new features.&lt;br/&gt;Enabling this policy will also turn off the preview pane and set the folder options for File Explorer to Use classic folders view and disable the users ability to change these options.&lt;br/&gt;&lt;br/&gt;If you disable or not configure this policy, the default File Explorer behavior is applied to the user.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Windows Vista, enabling this policy will also disable the Active Desktop and Web view. This setting will also take precedence over the &amp;quot;Enable Active Desktop&amp;quot; setting. If both policies are enabled, Active Desktop is disabled.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable Active Desktop&amp;quot; setting in User Configuration\Administrative Templates\Desktop\Active Desktop and the &amp;quot;Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon&amp;quot; setting in User Configuration\Administrative Templates\Windows Components\File Explorer." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Turn on Classic Shell</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer/Common Open File Dialog</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the common dialog back button" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Common Open File Dialog" gpmc_settingDescription="Hide the Back button in the Open dialog box.&lt;br/&gt;&lt;br/&gt;This policy setting lets you remove new features added in Microsoft Windows 2000 Professional, so the Open dialog box appears as it did in Windows NT 4.0 and earlier. This policy setting affects only programs that use the standard Open dialog box provided to developers of Windows programs.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Back button is removed from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Back button is displayed for any standard Open dialog box.&lt;br/&gt;&lt;br/&gt;To see an example of the standard Open dialog box, start Notepad  and, on the File menu, click Open.&lt;br/&gt;&lt;br/&gt;Note: In Windows Vista, this policy  setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. Also, third-party applications with Windows 2000 or later certification to are required to adhere to this policy setting." gpmc_supported="At least Windows 2000">Hide the common dialog back button</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the common dialog places bar" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Common Open File Dialog" gpmc_settingDescription="Removes the shortcut bar from the Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting, and others in this folder, lets you remove new features added in Windows 2000 Professional, so that the Open dialog box looks like it did in Windows NT 4.0 and earlier. These policies only affect programs that use the standard Open dialog box provided to developers of Windows programs.&lt;br/&gt;&lt;br/&gt;To see an example of the standard Open dialog box, start Wordpad and, on the File menu, click Open.&lt;br/&gt;&lt;br/&gt;Note: In Windows Vista, this policy  setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Hide the common dialog places bar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the dropdown list of recent files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Common Open File Dialog" gpmc_settingDescription="Removes the list of most recently used files from the Open dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;File name&amp;quot; field includes a drop-down list of recently used files. If you enable this setting, the &amp;quot;File name&amp;quot; field is a simple text box. Users must browse directories to find a file or type a file name in the text box.&lt;br/&gt;&lt;br/&gt;This setting, and others in this folder, lets you remove new features added in Windows 2000 Professional, so that the Open dialog box looks like it did in Windows NT 4.0 and earlier. These policies only affect programs that use the standard Open dialog box provided to developers of Windows programs.&lt;br/&gt;&lt;br/&gt;To see an example of the standard Open dialog box, start Wordpad and, on the File menu, click Open.&lt;br/&gt;&lt;br/&gt;Note: In Windows Vista, this policy  setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Hide the dropdown list of recent files</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Outlook Express" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Allows Administrators to enable and disable the ability for Outlook Express users to save or open attachments that can potentially contain a virus.&lt;br/&gt;&lt;br/&gt;If you check the block attachments setting, users will be unable to open or save attachments that could potentially contain a virus.  Users will not be able to disable the blocking of attachments in options.&lt;br/&gt;&lt;br/&gt;If the block attachments setting is not checked, the user can specify to enable or disable the blocking of attachments in options." gpmc_supported="Only Internet Explorer 6.0">Configure Outlook Express</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable caching of Auto-Proxy scripts" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents automatic proxy scripts, which interact with a server to automatically configure users&amp;#39; proxy settings, from being stored in the users&amp;#39; cache.&lt;br/&gt;&lt;br/&gt;If you enable this policy, automatic proxy scripts will not be stored temporarily on the users&amp;#39; computer.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, automatic proxy scripts can be stored in the users&amp;#39; cache." gpmc_supported="At least Internet Explorer 5.0">Disable caching of Auto-Proxy scripts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing accessibility settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="If you enable this policy, the user cannot modify the Accessibility options. All options in the &amp;quot;Accessibility&amp;quot; window on the General Tab in the Internet Options dialog box appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change accessibility settings, such as overriding fonts and colors on Web pages.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing accessibility settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Advanced page settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing settings on the Advanced tab in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from changing advanced Internet settings, such as security, multimedia, and printing. Users cannot select or clear the check boxes on the Advanced tab.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can select or clear settings on the Advanced tab.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the Advanced page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the Advanced page&amp;quot; policy removes the Advanced tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing Advanced page settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Automatic Configuration settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Explorer. This setting specifies that Internet explorer use the configuration settings provided in a file by the system administrator.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user will not be able to do automatic configuration. You can import your current connection settings from your machine using Internet Explorer Maintenance under Admin Templates using group policy editor.&lt;br/&gt;&lt;br/&gt;If you disable or do no configure this policy setting, the user will have the freedom to automatically configure these settings." gpmc_supported="At least Internet Explorer 5.0">Disable changing Automatic Configuration settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Calendar and Contact settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing the default programs for managing schedules and contacts.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Calendar and Contact combo boxes appear dimmed in the Internet Programs area. To display these options, users open the Internet Options dialog box, and then click the Programs tab.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can determine which programs to use for managing schedules and contacts, if programs that perform these tasks are installed.&lt;br/&gt;&lt;br/&gt;This &amp;quot;Disable the Programs Page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel) takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="At least Internet Explorer 5.0. Not supported on Windows Vista">Disable changing Calendar and Contact settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing certificate settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing certificate settings in Internet Explorer. Certificates are used to verify the identity of software publishers.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the settings in the Certificates area on the Content tab in the Internet Options dialog box appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can import new certificates, remove approved publishers, and change settings for certificates that have already been accepted.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable the Content page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Content tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored.&lt;br/&gt;&lt;br/&gt;Caution: If you enable this policy, users can still run the Certificate Manager Import Wizard by double-clicking a software publishing certificate (.spc) file. This wizard enables users to import and configure settings for certificates from software publishers that haven&amp;#39;t already been configured for Internet Explorer." gpmc_supported="At least Internet Explorer 5.0">Disable changing certificate settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing color settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing the default Web page colors.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the color settings for Web pages appear dimmed. The settings are located in the Colors area in the dialog box that appears when the user clicks the General tab and then clicks the Colors button in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change the default background and text color of Web pages.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface.&lt;br/&gt;&lt;br/&gt;Note: The default Web page colors are ignored on Web pages in which the author has specified the background and text colors." gpmc_supported="At least Internet Explorer 5.0">Disable changing color settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing connection settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing dial-up settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Settings button on the Connections tab in the Internet Options dialog box appears dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their settings for dial-up connections.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the Connections page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the Connections page&amp;quot; policy removes the Connections tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing connection settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing default browser check" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents Microsoft Internet Explorer from checking to see whether it is the default browser.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Internet Explorer Should Check to See Whether It Is the Default Browser check box on the Programs tab in the Internet Options dialog box appears dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can determine whether Internet Explorer will check to see if it is the default browser. When Internet Explorer performs this check, it prompts the user to specify which browser to use as the default.&lt;br/&gt;&lt;br/&gt;This policy is intended for organizations that do not want users to determine which browser should be their default.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable the Programs page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Programs tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 through Internet Explorer 9.0">Disable changing default browser check</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing font settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing font settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users will not be able to change font settings for viewing Web pages. All font settings visible after pressing the &amp;quot;Fonts&amp;quot; button on the General Tab in the Internet Options dialog box will be disabled.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change the default fonts for viewing Web pages.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface.&lt;br/&gt;&lt;br/&gt;Note: The default font settings colors are ignored in cases in which the Web page author has specified the font attributes." gpmc_supported="At least Internet Explorer 5.0">Disable changing font settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing home page settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="The Home page specified on the General tab of the Internet Options dialog box is the default Web page that Internet Explorer loads whenever it is run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a user cannot set a custom default home page. You must specify which default home page should load on the user machine. For machines with at least Internet Explorer 7, the home page can be set within this policy to override other home page policies.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Home page box is enabled and users can choose their own home page." gpmc_supported="At least Internet Explorer 5.0">Disable changing home page settings</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Home Page</td><td>&nbsp;</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing language settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing language preference settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users will not be able to set language preferences to read websites. Language preference settings visible after pressing the &amp;quot;Languages&amp;quot; button on the General Tab in the Internet Options dialog box will be disabled.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change the language preference settings for viewing Web sites for languages in which the character set has been installed.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing language settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing link color settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing the colors of links on Web pages.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the color settings for links appear dimmed. The settings are located in the Links area of the dialog box that appears when users click the General tab and then click the Colors button in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change the default color of links on Web pages.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface.&lt;br/&gt;&lt;br/&gt;Note: The default link colors are ignored on Web pages on which the author has specified link colors." gpmc_supported="At least Internet Explorer 5.0">Disable changing link color settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Messaging settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing the default programs for messaging tasks.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the E-mail, Newsgroups, and Internet Call options in the Internet Programs area appear dimmed. To display these options, users open the Internet Options dialog box, and then click the Programs tab.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can determine which programs to use for sending mail, viewing newsgroups, and placing Internet calls, if programs that perform these tasks are installed.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable the Programs page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Programs tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="At least Internet Explorer 5.0. Not supported on Windows Vista">Disable changing Messaging settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Profile Assistant settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing Profile Assistant settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the My Profile button appears dimmed in the Personal Information area on the Content tab in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their profile information, such as their street and e-mail addresses.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable the Content page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Content tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable changing Profile Assistant settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing ratings settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing ratings that help control the type of Internet content that can be viewed.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the settings in the Content Advisor area on the Content tab in the Internet Options dialog box appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their ratings settings.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable the Ratings page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Ratings tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="At least Internet Explorer 5.0">Disable changing ratings settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Temporary Internet files settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing the browser cache settings, such as the location and amount of disk space to use for the Temporary Internet Files folder.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the browser cache settings appear dimmed. These settings are found in the dialog box that appears when users click the General tab and then click the Settings button in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their cache settings.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing Temporary Internet files settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable external branding of Internet Explorer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents branding of Internet programs, such as customization of Internet Explorer and Outlook Express logos and title bars, by another party.&lt;br/&gt;&lt;br/&gt;If you enable this policy, it prevents customization of the browser by another party, such as an Internet service provider or Internet content provider.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users could install customizations from another party-for example, when signing up for Internet services.&lt;br/&gt;&lt;br/&gt;This policy is intended for administrators who want to maintain a consistent browser across an organization." gpmc_supported="At least Internet Explorer 5.0">Disable external branding of Internet Explorer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Import/Export Settings wizard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy settings disables the Import/Export Settings wizard. This wizard allows you to import settings from another browser, import settings from a file, or export settings to a file. Importing settings from another browser allows the user to import favorites and feeds from other browsers. Importing settings from a file allows the user to import favorites, feeds and cookies from a file. Exporting settings to a file allows the user to export favorites, feeds and cookies to a file.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user will not be able to use the Import/Export Settings wizard.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user will be able to use the Import/Export Settings wizard." gpmc_supported="At least Internet Explorer 5.0">Disable Import/Export Settings wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Internet Connection wizard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from running the Internet Connection Wizard.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Setup button on the Connections tab in the Internet Options dialog box appears dimmed.&lt;br/&gt;&lt;br/&gt;Users will also be prevented from running the wizard by clicking the Connect to the Internet icon on the desktop or by clicking Start, pointing to Programs, pointing to Accessories, pointing to Communications, and then clicking Internet Connection Wizard.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their connection settings by running the Internet Connection Wizard.&lt;br/&gt;&lt;br/&gt;Note: This policy overlaps with the &amp;quot;Disable the Connections page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Connections tab from the interface. Removing the Connections tab from the interface, however, does not prevent users from running the Internet Connection Wizard from the desktop or the Start menu." gpmc_supported="At least Internet Explorer 5.0">Disable Internet Connection wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Reset Web Settings feature" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from restoring default settings for home and search pages.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Reset Web Settings button on the Programs tab in the Internet Options dialog box appears dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can restore the default settings for home and search pages.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable the Programs page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Programs tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable the Reset Web Settings feature</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display error message on proxy script download failure" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Specifies that error messages will be displayed to users if problems occur with proxy scripts.&lt;br/&gt;&lt;br/&gt;If you enable this policy, error messages will be displayed when the browser does not download or run a script to set proxy settings.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, error messages will not be displayed when problems occur with proxy scripts." gpmc_supported="At least Internet Explorer 5.0">Display error message on proxy script download failure</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow users to enable or disable add-ons" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot enable or disable add-ons through Add-On Manager.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the appropriate controls in the Add-On Manager will be available to the user." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Do not allow users to enable or disable add-ons</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Identity Manager: Prevent users from using Identities" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from configuring unique identities by using Identity Manager.&lt;br/&gt;&lt;br/&gt;Identity Manager enables users to create multiple accounts, such as e-mail accounts, on the same computer. Each user has a unique identity, with a different password and different program preferences.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users will not be able to create new identities, manage existing identities, or switch identities. The Switch Identity option will be removed from the File menu in Address Book.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can set up and change identities." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Identity Manager: Prevent users from using Identities</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Pop-up allow list" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to specify a list of web sites that will be allowed to open pop-up windows regardless of the Internet Explorer process&amp;#39;s Pop-Up Blocker settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can enter a list of sites which will be allowed to open pop-up windows regardless of user settings. Only the domain name is allowed, so www.contoso.com is valid, but not http://www.contoso.com. Wildcards are allowed, so *.contoso.com is also valid.&lt;br/&gt;&lt;br/&gt;If you disable this or do not configure this policy setting, you will not be able to provide a default Pop-up Blocker exception list.&lt;br/&gt;&lt;br/&gt;Note: You can disable users from adding or removing websites to the exception list by enabling &amp;quot;Turn off Managing Pop-up Allow list&amp;quot; policy." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Pop-up allow list</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Enter the list of sites here.</th></tr>
<tr><td>*.crossknowledge.com</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to Internet Explorer Help" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from accessing Help in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the following occur:&lt;br/&gt;    • The Help menu on the menu bar is not functional.&lt;br/&gt;    • Help is removed from the Command bar.&lt;br/&gt;    • The shortcut key F1 does not make Help appear.&lt;br/&gt;    • Help cannot be accessed from the Settings charm (starting with Internet Explorer 10 on Windows 8).&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Internet Explorer Help menu is available to the user. The user can also use the Command bar and F1 to access Help." gpmc_supported="At least Internet Explorer 7.0">Prevent access to Internet Explorer Help</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing proxy settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting specifies if a user can change proxy settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user will not be able to configure proxy settings.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can configure proxy settings." gpmc_supported="At least Internet Explorer 5.0">Prevent changing proxy settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing the default search provider" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from changing the default search provider for the Address bar and the toolbar Search box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot change the default search provider.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can change the default search provider." gpmc_supported="At least Internet Explorer 7.0">Prevent changing the default search provider</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Internet Explorer Search box from appearing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the Search box from appearing in Internet Explorer. When the Search box is available, it includes all installed search providers and a link to search settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Search box does not appear in the Internet Explorer frame.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Search box appears by default in the Internet Explorer frame.&lt;br/&gt;&lt;br/&gt;Note: If you enable this policy setting, Internet Explorer does not enumerate search providers for the Accelerators infrastructure. If Accelerators are turned on, users can install search providers as Accelerators to include them on the Accelerator menu." gpmc_supported="Only Internet Explorer 7.0 and Internet Explorer 8.0">Prevent Internet Explorer Search box from appearing</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent managing the phishing filter" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from managing a filter that warns the user if the website being visited is known for fraudulent attempts to gather personal information through &amp;quot;phishing.&amp;quot;&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user is not prompted to enable the phishing filter. You must specify which mode the phishing filter uses: manual, automatic, or off.&lt;br/&gt;&lt;br/&gt;If you select manual mode, the phishing filter performs only local analysis, and the user is prompted to permit any data to be sent to Microsoft. If the feature is fully enabled, all website addresses that are not on the filter&amp;#39;s allow list are sent automatically to Microsoft without prompting the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user is prompted to decide the mode of operation for the phishing filter." gpmc_supported="Only Internet Explorer 7.0">Prevent managing the phishing filter</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Select phishing filter mode</td><td>Off</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent running First Run wizard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents Internet Explorer from running the First Run wizard the first time a user starts the browser after installing Internet Explorer or Windows.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you must make one of the following choices:&lt;br/&gt;    • Skip the First Run wizard, and go directly to the user&amp;#39;s home page.&lt;br/&gt;    • Skip the First Run wizard, and go directly to the &amp;quot;Welcome to Internet Explorer&amp;quot; webpage.&lt;br/&gt;&lt;br/&gt;Starting with Windows 8, the &amp;quot;Welcome to Internet Explorer&amp;quot; webpage is not available. The user&amp;#39;s home page will display regardless of which option is chosen.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Internet Explorer may run the First Run wizard the first time the browser is started after installation." gpmc_supported="At least Internet Explorer 7.0">Prevent running First Run wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Select your choice</td><td>Go directly to &quot;Welcome To IE&quot; page</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Search: Disable Find Files via F3 within the browser" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Disables using the F3 key to search in Internet Explorer and File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the search functionality of the F3 key is disabled. Users cannot press F3 to search the Internet (from Internet Explorer) or to search the hard disk (from File Explorer). If the user presses F3, a prompt appears that informs the user that this feature has been disabled.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can press F3 to search the Internet (from Internet Explorer) or the hard disk (from File Explorer).&lt;br/&gt;&lt;br/&gt;This policy is intended for situations in which administrators do not want users to explore the Internet or the hard disk.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;File Menu: Disable Open menu option&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Browser Menus), which prevents users from opening files by using the browser." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Search: Disable Find Files via F3 within the browser</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Search: Disable Search Customization" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Makes the Customize button in the Search Assistant appear dimmed.&lt;br/&gt;&lt;br/&gt;The Search Assistant is a tool that appears in the Search bar to help users search the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot change their Search Assistant settings, such as setting default search engines for specific tasks.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their settings for the Search Assistant.&lt;br/&gt;&lt;br/&gt;This policy is designed to help administrators maintain consistent settings for searching across an organization." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Search: Disable Search Customization</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off ActiveX Opt-In prompt" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to turn off the ActiveX Opt-In prompt. ActiveX Opt-In prevents websites from loading any ActiveX control without prior approval. If a website attempts to load an ActiveX control that Internet Explorer has not used before, a Notification bar will appear, asking the user for approval.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the ActiveX Opt-In prompt does not appear. Internet Explorer does not ask the user for permission to load an ActiveX control, and Internet Explorer loads the control if it passes all other internal security checks.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the ActiveX Opt-In prompt appears." gpmc_supported="At least Internet Explorer 8.0">Turn off ActiveX Opt-In prompt</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off page-zooming functionality" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from zooming in to or out of a page to better see the content.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, applications that host MSHTML do not respond to user input that causes the content to be re-rendered at a scaled size.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, applications that host MSHTML respond to user input that causes the content to be re-rendered at a scaled size." gpmc_supported="At least Internet Explorer 7.0">Turn off page-zooming functionality</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off pop-up management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to manage pop-up management functionality in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Control Panel information relating to pop-up management will be unavailable (grayed out) and all other pop-up manager controls, notifications, and dialog boxes will not appear. Pop-up windows will continue to function as they did in Windows XP Service Pack 1 or earlier, although windows launched off screen will continue to be re-positioned onscreen.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the popup management feature will be functional." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Turn off pop-up management</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the quick pick menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to prevent the quick pick menu from appearing when a user clicks in the Search box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, when a user clicks in the Search box, the quick pick menu does not appear until the user starts typing.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, when a user clicks in the Search box, the quick pick menu appears." gpmc_supported="Only Internet Explorer 8.0">Turn off the quick pick menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on the auto-complete feature for user names and passwords on forms" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This AutoComplete feature can remember and suggest User names and passwords on Forms.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the user cannot change &amp;quot;User name and passwords on forms&amp;quot; or &amp;quot;prompt me to save passwords&amp;quot;. The Auto Complete feature for User names and passwords on Forms will be turned on. You have to decide whether to select &amp;quot;prompt me to save passwords&amp;quot;.&lt;br/&gt;&lt;br/&gt;If you disable this setting the user cannot change &amp;quot;User name and passwords on forms&amp;quot; or &amp;quot;prompt me to save passwords&amp;quot;. The Auto Complete feature for User names and passwords on Forms is turned off. The user also cannot opt to be prompted to save passwords.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the user has the freedom of turning on Auto complete for User name and passwords on forms and the option of prompting to save passwords. To display this option, the users open the Internet Options dialog box, click the Contents Tab and click the Settings button." gpmc_supported="At least Internet Explorer 5.0">Turn on the auto-complete feature for user names and passwords on forms</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Use Automatic Detection for dial-up connections" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Specifies that Automatic Detection will be used to configure dial-up settings for users.&lt;br/&gt;&lt;br/&gt;Automatic Detection uses a DHCP (Dynamic Host Configuration Protocol) or DNS server to customize the browser the first time it is started.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users&amp;#39; dial-up settings will be configured by Automatic Detection.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, dial-up settings will not be configured by Automatic Detection, unless specified by the user." gpmc_supported="At least Internet Explorer 5.0">Use Automatic Detection for dial-up connections</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Administrator Approved Controls</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Audio/Video Player" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Administrator Approved Controls" gpmc_settingDescription="Designates the Audio/Video Player ActiveX control as administrator-approved.&lt;br/&gt;&lt;br/&gt;This control is used for playing sounds, videos, and other media.&lt;br/&gt;&lt;br/&gt;If you enable this policy, this control can be run in security zones in which you specify that administrator-approved controls can be run.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, this control will not be designated as administrator-approved.&lt;br/&gt;&lt;br/&gt;To specify how administrator-approved controls are handled for each security zone, carry out the following steps:&lt;br/&gt;&lt;br/&gt;1. In Group Policy, click User Configuration, click Internet Explorer Maintenance, and then click Security.&lt;br/&gt;&lt;br/&gt;2. Double-click Security Zones and Content Ratings, click Import the Current Security Zones Settings, and then click Modify Settings.&lt;br/&gt;&lt;br/&gt;3. Select the content zone in which you want to manage ActiveX controls, and then click Custom Level.&lt;br/&gt;&lt;br/&gt;4. In the Run ActiveX Controls and Plug-ins area, click Administrator Approved." gpmc_supported="At least Internet Explorer 5.0">Audio/Video Player</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Carpoint" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Administrator Approved Controls" gpmc_settingDescription="Designates the Microsoft Network (MSN) Carpoint automatic pricing control as administrator-approved.&lt;br/&gt;&lt;br/&gt;This control enables enhanced pricing functionality on the Carpoint Web site, where users can shop for and obtain information about vehicles.&lt;br/&gt;&lt;br/&gt;If you enable this policy, this control can be run in security zones in which you specify that administrator-approved controls can be run.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, this control will not be designated as administrator-approved.&lt;br/&gt;&lt;br/&gt;To specify how administrator-approved controls are handled for each security zone, carry out the following steps:&lt;br/&gt;&lt;br/&gt;1. In Group Policy, click User Configuration, click Internet Explorer Maintenance, and then click Security.&lt;br/&gt;&lt;br/&gt;2. Double-click Security Zones and Content Ratings, click Import the Current Security Zones Settings, and then click Modify Settings.&lt;br/&gt;&lt;br/&gt;3. Select the content zone in which you want to manage ActiveX controls, and then click Custom Level.&lt;br/&gt;&lt;br/&gt;4. In the Run ActiveX Controls and Plug-ins area, click Administrator Approved." gpmc_supported="At least Internet Explorer 5.0">Carpoint</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="DHTML Edit Control" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Administrator Approved Controls" gpmc_settingDescription="This ActiveX control enables users to edit HTML text and see a faithful rendition of how the text would look in the browser. There are two versions of the control: a more powerful version that cannot be invoked by a web site because it includes file access and other features, and a &amp;quot;safe for scripting&amp;quot; version that has restricted functionality and is intended for use by web sites.&lt;br/&gt;&lt;br/&gt;If you enable this policy, this control will be available as an administrator approved control and can be run if the user specifies to run administrator-approved Active-X controls and plug-ins under security zones.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, this control will not be designated as administrator-approved." gpmc_supported="At least Internet Explorer 5.0">DHTML Edit Control</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Investor" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Administrator Approved Controls" gpmc_settingDescription="Designates a set of Microsoft Network (MSN) Investor controls as administrator-approved.&lt;br/&gt;&lt;br/&gt;These controls enable users to view updated lists of stocks on their Web pages.&lt;br/&gt;&lt;br/&gt;If you enable this policy, these controls can be run in security zones in which you specify that administrator-approved controls can be run.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, these controls will not be designated as administrator-approved.&lt;br/&gt;&lt;br/&gt;Select the check boxes for the controls that you want to designate as administrator-approved.&lt;br/&gt;&lt;br/&gt;To specify how administrator-approved controls are handled for each security zone, carry out the following steps:&lt;br/&gt;&lt;br/&gt;1. In Group Policy, click User Configuration, click Internet Explorer Maintenance, and then click Security.&lt;br/&gt;&lt;br/&gt;2. Double-click Security Zones and Content Ratings, click Import the Current Security Zones Settings, and then click Modify Settings.&lt;br/&gt;&lt;br/&gt;3. Select the content zone in which you want to manage ActiveX controls, and then click Custom Level.&lt;br/&gt;&lt;br/&gt;4. In the Run ActiveX Controls and Plug-ins area, click Administrator Approved." gpmc_supported="At least Internet Explorer 5.0">Investor</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Menu Controls" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Administrator Approved Controls" gpmc_settingDescription="Designates a set of Microsoft ActiveX controls used to manipulate pop-up menus in the browser as administrator-approved.&lt;br/&gt;&lt;br/&gt;If you enable this policy, these controls can be run in security zones in which you specify that administrator-approved controls can be run.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, these controls will not be designated as administrator-approved.&lt;br/&gt;&lt;br/&gt;To specify a control as administrator-approved, click Enabled, and then select the check box for the control:&lt;br/&gt;&lt;br/&gt;-- MCSiMenu - enables Web authors to control the placement and appearance of Windows pop-up menus on Web pages&lt;br/&gt;-- Popup Menu Object - enables Web authors to add pop-up menus to Web pages&lt;br/&gt;&lt;br/&gt;To specify how administrator-approved controls are handled for each security zone, carry out the following steps:&lt;br/&gt;&lt;br/&gt;1. In Group Policy, click User Configuration, click Internet Explorer Maintenance, and then click Security.&lt;br/&gt;&lt;br/&gt;2. Double-click Security Zones and Content Ratings, click Import the Current Security Zones Settings, and then click Modify Settings.&lt;br/&gt;&lt;br/&gt;3. Select the content zone in which you want to manage ActiveX controls, and then click Custom Level.&lt;br/&gt;&lt;br/&gt;4. In the Run ActiveX Controls and Plug-ins area, click Administrator Approved." gpmc_supported="At least Internet Explorer 5.0">Menu Controls</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Microsoft Chat" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Administrator Approved Controls" gpmc_settingDescription="Designates the Microsoft Chat ActiveX control as administrator-approved.&lt;br/&gt;&lt;br/&gt;This control is used by Web authors to build text-based and graphical-based Chat communities for real-time conversations on the Web.&lt;br/&gt;&lt;br/&gt;If you enable this policy, this control can be run in security zones in which you specify that administrator-approved controls can be run.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, this control will not be designated as administrator-approved.&lt;br/&gt;&lt;br/&gt;To specify how administrator-approved controls are handled for each security zone, carry out the following steps:&lt;br/&gt;&lt;br/&gt;1. In Group Policy, click User Configuration, click Internet Explorer Maintenance, and then click Security.&lt;br/&gt;&lt;br/&gt;2. Double-click Security Zones and Content Ratings, click Import the Current Security Zones Settings, and then click Modify Settings.&lt;br/&gt;&lt;br/&gt;3. Select the content zone in which you want to manage ActiveX controls, and then click Custom Level.&lt;br/&gt;&lt;br/&gt;4. In the Run ActiveX Controls and Plug-ins area, click Administrator Approved." gpmc_supported="At least Internet Explorer 5.0">Microsoft Chat</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Microsoft Scriptlet Component" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Administrator Approved Controls" gpmc_settingDescription="Designates Microsoft Scriptlet Component as an administrator approved control. It is an Active X control which is used to render HTML pages.&lt;br/&gt;&lt;br/&gt;If you enable this policy, this control can be run in security zones in which you specify that administrator-approved controls can be run.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, this control will not be designated as administrator-approved.&lt;br/&gt;&lt;br/&gt;To specify how administrator-approved controls are handled for each security zone, carry out the following steps:&lt;br/&gt;1. In Group Policy, click User Configuration, click Internet Explorer Maintenance, and then click Security.&lt;br/&gt;2. Double-click Security Zones and Content Ratings, click Import the Current Security Zones Settings, and then click Modify Settings.&lt;br/&gt;3. Select the content zone in which you want to manage ActiveX controls, and then click Custom Level.&lt;br/&gt;4. In the Run ActiveX Controls and Plug-ins area, click Administrator Approved." gpmc_supported="At least Internet Explorer 5.0">Microsoft Scriptlet Component</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Microsoft Survey Control" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Administrator Approved Controls" gpmc_settingDescription="Designates Microsoft Survey Control as an administrator approved control.&lt;br/&gt;&lt;br/&gt;If you enable this policy, this control can be run in security zones in which you specify that administrator-approved controls can be run.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, this control will not be designated as administrator-approved.&lt;br/&gt;&lt;br/&gt;To specify how administrator-approved controls are handled for each security zone, carry out the following steps:&lt;br/&gt;1. In Group Policy, click User Configuration, click Internet Explorer Maintenance, and then click Security.&lt;br/&gt;2. Double-click Security Zones and Content Ratings, click Import the Current Security Zones Settings, and then click Modify Settings.&lt;br/&gt;3. Select the content zone in which you want to manage ActiveX controls, and then click Custom Level.&lt;br/&gt;4. In the Run ActiveX Controls and Plug-ins area, click Administrator Approved." gpmc_supported="At least Internet Explorer 5.0">Microsoft Survey Control</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="MSNBC" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Administrator Approved Controls" gpmc_settingDescription="Designates a set of MSNBC controls as administrator-approved.&lt;br/&gt;&lt;br/&gt;These controls enable enhanced browsing of news reports on the MSNBC Web site.&lt;br/&gt;&lt;br/&gt;If you enable this policy, these controls can be run in security zones in which you specify that administrator-approved controls can be run.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, these controls will not be designated as administrator-approved.&lt;br/&gt;&lt;br/&gt;Select the check boxes for the controls that you want to designate as administrator-approved.&lt;br/&gt;&lt;br/&gt;To specify how administrator-approved controls are handled for each security zone, carry out the following steps:&lt;br/&gt;&lt;br/&gt;1. In Group Policy, click User Configuration, click Internet Explorer Maintenance, and then click Security.&lt;br/&gt;&lt;br/&gt;2. Double-click Security Zones and Content Ratings, click Import the Current Security Zones Settings, and then click Modify Settings.&lt;br/&gt;&lt;br/&gt;3. Select the content zone in which you want to manage ActiveX controls, and then click Custom Level.&lt;br/&gt;&lt;br/&gt;4. In the Run ActiveX Controls and Plug-ins area, click Administrator Approved." gpmc_supported="At least Internet Explorer 5.0">MSNBC</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="NetShow File Transfer Control" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Administrator Approved Controls" gpmc_settingDescription="Designates NetShow File Transfer Control as an administrator approved control.&lt;br/&gt;&lt;br/&gt;If you enable this policy, this control can be run in security zones in which you specify that administrator-approved controls can be run.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, this control will not be designated as administrator-approved.&lt;br/&gt;&lt;br/&gt;To specify how administrator-approved controls are handled for each security zone, carry out the following steps:&lt;br/&gt;1. In Group Policy, click User Configuration, click Internet Explorer Maintenance, and then click Security.&lt;br/&gt;2. Double-click Security Zones and Content Ratings, click Import the Current Security Zones Settings, and then click Modify Settings.&lt;br/&gt;3. Select the content zone in which you want to manage ActiveX controls, and then click Custom Level.&lt;br/&gt;4. In the Run ActiveX Controls and Plug-ins area, click Administrator Approved." gpmc_supported="At least Internet Explorer 5.0">NetShow File Transfer Control</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Shockwave Flash" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Administrator Approved Controls" gpmc_settingDescription="Designates Shockwave flash as an administrator approved control.&lt;br/&gt;&lt;br/&gt;If you enable this policy, this control can be run in security zones in which you specify that administrator-approved controls can be run.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, this control will not be designated as administrator-approved.&lt;br/&gt;&lt;br/&gt;To specify how administrator-approved controls are handled for each security zone, carry out the following steps:&lt;br/&gt;1. In Group Policy, click User Configuration, click Internet Explorer Maintenance, and then click Security.&lt;br/&gt;2. Double-click Security Zones and Content Ratings, click Import the Current Security Zones Settings, and then click Modify Settings.&lt;br/&gt;3. Select the content zone in which you want to manage ActiveX controls, and then click Custom Level.&lt;br/&gt;4. In the Run ActiveX Controls and Plug-ins area, click Administrator Approved." gpmc_supported="At least Internet Explorer 5.0">Shockwave Flash</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Shockwave Flash</td><td>Enabled</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Browser menus</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Save this program to disk option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from saving a program or file that Microsoft Internet Explorer has downloaded to the hard disk.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot save a program to disk by clicking the Save This Program to Disk command while attempting to download a file. The file will not be downloaded and users will be informed that the command is not available.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can download programs from their browsers." gpmc_supported="At least Internet Explorer 5.0">Disable Save this program to disk option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File menu: Disable New menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from opening a new browser window from the File menu.&lt;br/&gt;&lt;br/&gt;If this policy is enabled, users cannot open a new browser window by clicking the File menu, pointing to the New menu, and then clicking Window. The user interface is not changed, but a new window will not be opened, and users will be informed that the command is not available.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can open a new browser window from the File menu.&lt;br/&gt;&lt;br/&gt;Caution: This policy does not prevent users from opening a new browser window by right-clicking, and then clicking the Open in New Window command. To prevent users from using the shortcut menu to open new browser windows, you should also set the &amp;quot;Disable Open in New Window menu option&amp;quot; policy, which disables this command on the shortcut menu, or the &amp;quot;Turn off Shortcut Menu&amp;quot; policy, which disables the entire shortcut menu.&lt;br/&gt;&lt;br/&gt;Note: the user will still be able to open New Tabs." gpmc_supported="At least Internet Explorer 5.0">File menu: Disable New menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File menu: Disable Open menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from opening a file or Web page from the File menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Open dialog box will not appear when users click the Open command on the File menu. If users click the Open command, they will be notified that the command is not available.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can open a Web page from the browser File menu.&lt;br/&gt;&lt;br/&gt;Caution: This policy does not prevent users from right-clicking a link on a Web page, and then clicking the Open or Open in New Window command. To prevent users from opening Web pages by using the shortcut menu, set the &amp;quot;Disable Open in New Window menu option&amp;quot; policy, which disables this command on the shortcut menu, or the &amp;quot;Turn off Shortcut Menu&amp;quot; policy, which disables the entire shortcut menu." gpmc_supported="At least Internet Explorer 5.0">File menu: Disable Open menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File menu: Disable Save As Web Page Complete" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from saving the complete contents that are displayed on or run from a Web page, including the graphics, scripts, linked files, and other elements. It does not prevent users from saving the text of a Web page.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Web Page, Complete file type option will be removed from the Save as Type box in the Save Web Page dialog box. Users can still save Web pages as hypertext markup language (HTML) files or as text files, but graphics, scripts, and other elements are not saved. To display the Save Web Page dialog box, users click the File menu, and then click the Save As command.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can save all elements on a Web page.&lt;br/&gt;&lt;br/&gt;The &amp;quot;File menu: Disable Save As... menu option&amp;quot; policy, which removes the Save As command, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="At least Internet Explorer 5.0">File menu: Disable Save As Web Page Complete</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File menu: Disable Save As... menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from saving Web pages from the browser File menu to their hard disk or to a network share.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Save As command on the File menu will be removed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can save Web pages for later viewing.&lt;br/&gt;&lt;br/&gt;This policy takes precedence over the &amp;quot;File Menu: Disable Save As Web Page Complete&amp;quot; policy, which prevents users from saving the entire contents that are displayed or run from a Web Page, such as graphics, scripts, and linked files, but does not prevent users from saving the text of a Web page.&lt;br/&gt;&lt;br/&gt;Caution: If you enable this policy, users are not prevented from saving Web content by pointing to a link on a Web page, clicking the right mouse button, and then clicking Save Target As." gpmc_supported="At least Internet Explorer 5.0">File menu: Disable Save As... menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;For Netscape Users&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from displaying tips for users who are switching from Netscape.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the For Netscape Users command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can display content about switching from Netscape by clicking the For Netscape Users command on the Help menu.&lt;br/&gt;&lt;br/&gt;Caution: Enabling this policy does not remove the tips for Netscape users from the Microsoft Internet Explorer Help file." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Help menu: Remove &#39;For Netscape Users&#39; menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;Send Feedback&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from sending feedback to Microsoft by clicking the Send Feedback command on the Help menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Send Feedback command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can fill out an Internet form to provide feedback about Microsoft products." gpmc_supported="At least Internet Explorer 5.0">Help menu: Remove &#39;Send Feedback&#39; menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;Tip of the Day&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Tip of the Day command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can enable or disable the Tip of the Day, which appears at the bottom of the browser." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Help menu: Remove &#39;Tip of the Day&#39; menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;Tour&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from running the Internet Explorer Tour from the Help menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Tour command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can run the tour from the Help menu." gpmc_supported="At least Internet Explorer 7.0">Help menu: Remove &#39;Tour&#39; menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Tools menu: Disable Internet Options... menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot change their Internet options, such as default home page, cache size, and connection and proxy settings, from the browser Tools menu. When users click the Internet Options command on the Tools menu, they are informed that the command is unavailable.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their Internet settings from the browser Tools menu.&lt;br/&gt;&lt;br/&gt;Caution: This policy does not prevent users from viewing and changing Internet settings by clicking the Internet Options icon in Windows Control Panel.&lt;br/&gt;&lt;br/&gt;Also, see policies for Internet options in the \Administrative Templates\Windows Components\Internet Explorer and in \Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel folders." gpmc_supported="At least Internet Explorer 5.0">Tools menu: Disable Internet Options... menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Shortcut Menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="This policy setting prevents the shortcut menu from appearing when a user right-clicks a webpage while using Internet Explorer. Starting with Windows 8, this policy setting only applies to Internet Explorer on the desktop.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the shortcut menu will not appear when a user right-clicks a webpage.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can use the shortcut menu." gpmc_supported="At least Internet Explorer 5.0">Turn off Shortcut Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="View menu: Disable Source menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from viewing the HTML source of Web pages by clicking the Source command on the View menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Source command on the View menu will appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, then users can view the HTML source of Web pages from the browser View menu.&lt;br/&gt;&lt;br/&gt;Caution: This policy does not prevent users from viewing the HTML source of a Web page by right-clicking a Web page to open the shortcut menu, and then clicking View Source. To prevent users from viewing the HTML source of a Web page from the shortcut menu, set the &amp;quot;Turn off Shortcut Menu&amp;quot; policy, which disables the entire shortcut menu." gpmc_supported="At least Internet Explorer 5.0">View menu: Disable Source menu option</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Delete Browsing History</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable &amp;quot;Configuring History&amp;quot;" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This setting specifies the number of days that Internet Explorer tracks views of pages in the History List. To access the Temporary Internet Files and History Settings dialog box, from the Menu bar, on the Tools menu, click Internet Options, click the General tab, and then click Settings under Browsing history.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a user cannot set the number of days that Internet Explorer tracks views of the pages in the History List. You must specify the number of days that Internet Explorer tracks views of pages in the History List. Users can not delete browsing history.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, a user can set the number of days that Internet Explorer tracks views of pages in the History list. Users can delete browsing history." gpmc_supported="At least Internet Explorer 5.0">Disable &quot;Configuring History&quot;</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Days to keep pages in History</td><td>&nbsp;</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Advanced page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Advanced tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing advanced Internet settings, such as security, multimedia, and printing.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the &amp;quot;Disable changing Advanced page settings&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\), because this policy removes the Advanced tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable the Advanced page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Connections page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Connections tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing connection and proxy settings.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following policies for the Content tab, because this policy removes the Connections tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable Internet Connection Wizard&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing connection settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Prevent changing proxy settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Automatic Configuration settings&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Connections page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Content page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and Profile Assistant settings.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings." gpmc_supported="At least Internet Explorer 5.0">Disable the Content page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the General page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the General tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are unable to see and change settings for the home page, the cache, history, Web page appearance, and accessibility.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following Internet Explorer policies (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\), because this policy removes the General tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing home page settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Temporary Internet files settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing history settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing color settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing link color settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing font settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing language settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing accessibility settings&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the General page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Privacy page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Privacy tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing default settings for privacy.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings." gpmc_supported="At least Internet Explorer 5.0">Disable the Privacy page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Programs page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Programs tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing default settings for Internet programs.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following policies for the Programs tab, because this policy removes the Programs tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Messaging settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Calendar and Contact settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable the Reset Web Settings feature&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing default browser check&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Programs page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Security page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Security tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, it prevents users from seeing and changing settings for security zones, such as scripting, downloads, and user authentication.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following Internet Explorer policies, because this policy removes the Security tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Security zones: Do not allow users to change policies&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Security zones: Do not allow users to add/delete sites&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Security page</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Advanced Page</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow active content from CDs to run on user machines" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page" gpmc_settingDescription="This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, active content on a CD will run without a prompt.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, active content on a CD will always prompt before running.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, users can choose whether to be prompted before running active content on a CD." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow active content from CDs to run on user machines</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow Install On Demand (except Internet Explorer)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page" gpmc_settingDescription="This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Explorer components) that are registered with Internet Explorer (such as Macromedia and Java) that are required in order to view web pages as intended.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, non-Internet Explorer components will be automatically installed as necessary.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users will be prompted when non-Internet Explorer components would be installed.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, non-Internet Explorer components will be automatically installed as necessary." gpmc_supported="Only Internet Explorer 6.0 in Windows 2003 Service Pack 1">Allow Install On Demand (except Internet Explorer)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow software to run or install even if the signature is invalid" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page" gpmc_settingDescription="This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the signature is invalid. An invalid signature might indicate that someone has tampered with the file.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will be prompted to install or run files with an invalid signature.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot run or install files with an invalid signature.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, users can choose to run or install files with an invalid signature." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow software to run or install even if the signature is invalid</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Automatically check for Internet Explorer updates" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page" gpmc_settingDescription="This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer is set to do this, the checks occur approximately every 30 days, and users are prompted to install new versions as they become available.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer checks the Internet for a new version approximately every 30 days and prompts the user to download new versions when they are available.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer does not check the Internet for new versions of the browser, so does not prompt users to install them.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Internet Explorer does not check the Internet for new versions of the browser, so does not prompt users to install them." gpmc_supported="At least Internet Explorer 6.0 in Windows 2003 Service Pack 1. Not supported on Windows Vista">Automatically check for Internet Explorer updates</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Empty Temporary Internet Files folder when browser is closed" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page" gpmc_settingDescription="This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder after all browser windows are closed. This protects against storing dangerous files on the computer, or storing sensitive files that other users could see, in addition to managing total disk space usage.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer will delete the contents of the user&amp;#39;s Temporary Internet Files folder when all browser windows are closed.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer will not delete the contents of the user&amp;#39;s Temporary Internet Files folder when browser windows are closed.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, Internet Explorer will not delete the contents of the Temporary Internet Files folder when browser windows are closed." gpmc_supported="At least Internet Explorer 6.0 in Windows 2003 Service Pack 1">Empty Temporary Internet Files folder when browser is closed</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Play sounds in web pages" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page" gpmc_settingDescription="This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound files such as MIDI files are affected by this setting; active Web content such as java applets are not.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer will play sounds found in Web content.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer will not play or download sounds in Web content, helping pages display more quickly.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer will play sounds found in Web content." gpmc_supported="At least Internet Explorer 6.0 in Windows 2003 Service Pack 1">Play sounds in web pages</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Play videos in web pages" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page" gpmc_settingDescription="This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embedded video files are affected by this setting; active Web content such as java applets are not.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer will play videos found in Web content.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer will not play or download videos, helping pages display more quickly.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Internet Explorer will play videos found in Web content." gpmc_supported="Only Internet Explorer 6.0 in Windows 2003 Service Pack 1">Play videos in web pages</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Security Page</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Intranet Sites: Include all local (intranet) sites not listed in other zones" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, local sites which are not explicitly mapped into a zone are considered to be in the Intranet Zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, local sites which are not explicitly mapped into a zone will not be considered to be in the Intranet Zone (so would typically be in the Internet Zone).&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users choose whether to force local sites into the Intranet Zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Intranet Sites: Include all local (intranet) sites not listed in other zones</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Site to Zone Assignment List" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security settings that apply to all of the sites in the zone.&lt;br/&gt;&lt;br/&gt;Internet Explorer has 4 security zones, numbered 1-4, and these are used by this policy setting to associate sites to zones. They are: (1) Intranet zone, (2) Trusted Sites zone, (3) Internet zone, and (4) Restricted Sites zone. Security settings can be set for each of these zones through other policy settings, and their default settings are: Trusted Sites zone (Low template), Intranet zone (Medium-Low template), Internet zone (Medium template), and Restricted Sites zone (High template). (The Local Machine zone and its locked down equivalent have special security settings that protect your local computer.)&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can enter a list of sites and their related zone numbers. The association of a site with a zone will ensure that the security settings for the specified zone are applied to the site.&amp;#160; For each entry that you add to the list, enter the following information:&lt;br/&gt;&lt;br/&gt;Valuename – A host for an intranet site, or a fully qualified domain name for other sites. The valuename may also include&amp;#160;a specific&amp;#160;protocol. For example, if you enter http://www.contoso.com&amp;#160;as the valuename, other protocols are not affected.&amp;#160;If you enter just www.contoso.com,&amp;#160;then all protocols&amp;#160;are affected for that site, including http, https, ftp, and so on. The site may also be expressed as an IP address (e.g., 127.0.0.1) or range (e.g., 127.0.0.1-10). To avoid creating conflicting policies, do not include additional characters after the domain such as trailing slashes or URL path. For example, policy settings for www.contoso.com and www.contoso.com/mail would be treated as the same policy setting by Internet Explorer, and would therefore be in conflict.&lt;br/&gt;&lt;br/&gt;Value - A number indicating the zone with which this site should be associated for security settings. The Internet Explorer zones described above are 1-4.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, users may choose their own site-to-zone assignments." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Site to Zone Assignment List</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Enter the zone assignments here.</th><th scope="col">&nbsp;</th></tr>
<tr><td>http://altair</td><td>2</td></tr>
<tr><td>http://assistance.orange.fr</td><td>2</td></tr>
<tr><td>http://config.crossknowledge.com</td><td>2</td></tr>
<tr><td>http://cours.crossknowledge.com</td><td>2</td></tr>
<tr><td>http://r.orange.fr</td><td>2</td></tr>
<tr><td>http://sigal.crossknowledge.com</td><td>2</td></tr>
<tr><td>http://tntuktest01</td><td>2</td></tr>
<tr><td>http://vega</td><td>2</td></tr>
<tr><td>https://tntuktest01</td><td>2</td></tr>
<tr><td>https://tntukweb02</td><td>2</td></tr>
<tr><td>https://vega</td><td>2</td></tr>
<tr><td>https://www.sebra.ccms.teleperformance.com</td><td>2</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow file downloads" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone" gpmc_settingDescription="This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link causing the download, not the zone from which the file is delivered.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, files can be downloaded from the zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, files are prevented from being downloaded from the zone.&lt;br/&gt;&lt;br/&gt; If you do not configure this policy setting, files can be downloaded from the zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow file downloads</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow file downloads</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run ActiveX controls and plugins" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone" gpmc_settingDescription="This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, controls and plug-ins can run without user intervention.&lt;br/&gt;&lt;br/&gt;If you selected Prompt in the drop-down box, users are asked to choose whether to allow the controls or plug-in to run.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, controls and plug-ins are prevented from running.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, controls and plug-ins can run without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Run ActiveX controls and plugins</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Run ActiveX controls and plugins</td><td>Enable</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow active content over restricted protocols to access my computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Intranet Zone can run active content such as script, ActiveX, Java and Binary Behaviors. The list of restricted protocols may be set in the Intranet Zone Restricted Protocols section under Network Protocol Lockdown policy.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, no Intranet Zone content accessed is affected, even for protocols on the restricted list. If you select Prompt from the drop-down box, the Notification bar will appear to allow control over questionable content accessed over any restricted protocols; content over other protocols is unaffected.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, all attempts to access such content over the restricted protocols is blocked.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the Notification bar will appear to allow control over questionable content accessed over any restricted protocols when the Network Protocol Lockdown security feature is enabled." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow active content over restricted protocols to access my computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow active content over restricted protocols to access my computer</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Download signed ActiveX controls" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren&amp;#39;t trusted. Code signed by trusted publishers is silently downloaded.&lt;br/&gt;&lt;br/&gt;If you disable the policy setting, signed controls cannot be downloaded.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users are queried whether to download controls signed by publishers who aren&amp;#39;t trusted.  Code signed by trusted publishers is silently downloaded." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Download signed ActiveX controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Download signed ActiveX controls</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Initialize and script ActiveX controls not marked as safe" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage ActiveX controls not marked as safe.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Initialize and script ActiveX controls not marked as safe</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Initialize and script ActiveX controls not marked as safe</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Script ActiveX controls marked safe for scripting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, script interaction can occur automatically without user intervention.&lt;br/&gt;&lt;br/&gt;If you select Prompt in the drop-down box, users are queried to choose whether to allow script interaction.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, script interaction is prevented from occurring.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, script interaction can occur automatically without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Script ActiveX controls marked safe for scripting</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Script ActiveX controls marked safe for scripting</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Web sites in less privileged Web content zones can navigate into this zone" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone.  The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Web sites in less privileged Web content zones can navigate into this zone</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Web sites in less privileged Web content zones can navigate into this zone</td><td>Enable</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Security Page/Restricted Sites Zone</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run ActiveX controls and plugins" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Restricted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, controls and plug-ins can run without user intervention.&lt;br/&gt;&lt;br/&gt;If you selected Prompt in the drop-down box, users are asked to choose whether to allow the controls or plug-in to run.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, controls and plug-ins are prevented from running.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, controls and plug-ins are prevented from running." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Run ActiveX controls and plugins</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Download signed ActiveX controls" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren&amp;#39;t trusted. Code signed by trusted publishers is silently downloaded.&lt;br/&gt;&lt;br/&gt;If you disable the policy setting, signed controls cannot be downloaded.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can download signed controls without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Download signed ActiveX controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Download signed ActiveX controls</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Initialize and script ActiveX controls not marked as safe" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage ActiveX controls not marked as safe.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users are queried whether to allow the control to be loaded with parameters or scripted." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Initialize and script ActiveX controls not marked as safe</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Initialize and script ActiveX controls not marked as safe</td><td>Prompt</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Script ActiveX controls marked safe for scripting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, script interaction can occur automatically without user intervention.&lt;br/&gt;&lt;br/&gt;If you select Prompt in the drop-down box, users are queried to choose whether to allow script interaction.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, script interaction is prevented from occurring.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, script interaction can occur automatically without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Script ActiveX controls marked safe for scripting</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Script ActiveX controls marked safe for scripting</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Web sites in less privileged Web content zones can navigate into this zone" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone.  The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, a warning is issued to the user that potentially risky navigation is about to occur." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Web sites in less privileged Web content zones can navigate into this zone</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Web sites in less privileged Web content zones can navigate into this zone</td><td>Enable</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Offline Pages</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable adding channels" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Prevents users from adding channels to Internet Explorer.&lt;br/&gt;&lt;br/&gt;Channels are Web sites that are updated automatically on your computer, according to a schedule specified by the channel provider.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Add Active Channel button, which appears on a channel that users haven&amp;#39;t yet subscribed to, will be disabled. Users also cannot add content that is based on a channel, such as some of the Active Desktop items from Microsoft&amp;#39;s Active Desktop Gallery, to their desktop.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can add channels to the Channel bar or to their desktop.&lt;br/&gt;&lt;br/&gt;Note: Most channel providers use the words Add Active Channel for this option; however, a few use different words, such as Subscribe." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable adding channels</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable adding schedules for offline pages" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Prevents users from specifying that Web pages can be downloaded for viewing offline. When users make Web pages available for offline viewing, they can view the content when their computer is not connected to the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot add new schedules for downloading offline content. The Make Available Offline check box will be dimmed in the Add Favorite dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can add new offline content schedules.&lt;br/&gt;&lt;br/&gt;This policy is intended for organizations that are concerned about server load for downloading content.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Hide Favorites menu&amp;quot; policy (located in User Configuration\Administrative Templates\Windows Components\Internet Explorer) takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable adding schedules for offline pages</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable all scheduled offline pages" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Disables existing schedules for downloading Web pages for offline viewing.&lt;br/&gt;&lt;br/&gt;When users make Web pages available for offline viewing, they can view content when their computer is not connected to the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the check boxes for schedules on the Schedule tab of the Web page properties are cleared and users cannot select them. To display this tab, users click the Tools menu, click Synchronize, select a Web page, click the Properties button, and then click the Schedule tab.&lt;br/&gt;&lt;br/&gt;If you disable this policy, then Web pages can be updated on the schedules specified on the Schedule tab.&lt;br/&gt;&lt;br/&gt;This policy is intended for organizations that are concerned about server load for downloading content.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Hide Favorites menu&amp;quot; policy (located in User Configuration\Administrative Templates\Windows Components\Internet Explorer) takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable all scheduled offline pages</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable channel user interface completely" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Prevents users from viewing the Channel bar interface. Channels are Web sites that are automatically updated on their computer according to a schedule specified by the channel provider.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Channel bar interface will be disabled, and users cannot select the Internet Explorer Channel Bar check box on the Web tab in the Display Properties dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can view and subscribe to channels from the Channel bar interface." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable channel user interface completely</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable downloading of site subscription content" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Prevents content from being downloaded from Web sites that users have subscribed to.&lt;br/&gt;&lt;br/&gt;When users make Web pages available for offline viewing, they can view content when their computer is not connected to the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy, content will not be downloaded from Web sites that users have subscribed to. However, synchronization with the Web pages will still occur to determine if any content has been updated since the last time the user synchronized with or visited the page.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, content will not be prevented from being downloaded.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable downloading of site subscription content&amp;quot; policy and the &amp;quot;Hide Favorites menu&amp;quot; policy (located in User Configuration\Administrative Templates\Windows Components\Internet Explorer) take precedence over this policy. If either policy is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable downloading of site subscription content</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable editing and creating of schedule groups" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Prevents users from adding, editing, or removing schedules for offline viewing of Web pages and groups of Web pages that users have subscribed to.&lt;br/&gt;&lt;br/&gt;A subscription group is a favorite Web page plus the Web pages it links to.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Add, Remove, and Edit buttons on the Schedule tab in the Web page Properties dialog box are dimmed. To display this tab, users click the Tools menu, click Synchronize, select a Web page, click the Properties button, and then click the Schedule tab.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can add, remove, and edit schedules for Web sites and groups of Web sites.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable editing schedules for offline pages&amp;quot; policy and the &amp;quot;Hide Favorites menu&amp;quot; policy (located in User Configuration\Administrative Templates\Windows Components\Internet Explorer) take precedence over this policy. If either policy is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable editing and creating of schedule groups</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable editing schedules for offline pages" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Prevents users from editing an existing schedule for downloading Web pages for offline viewing.&lt;br/&gt;&lt;br/&gt;When users make Web pages available for offline viewing, they can view content when their computer is not connected to the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot display the schedule properties of pages that have been set up for offline viewing. If users click the Tools menu, click Synchronize, select a Web page, and then click the Properties button, no properties are displayed. Users do not receive an alert stating that the command is unavailable.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can edit an existing schedule for downloading Web content for offline viewing.&lt;br/&gt;&lt;br/&gt;This policy is intended for organizations that are concerned about server load for downloading content.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Hide Favorites menu&amp;quot; policy (located in User Configuration\Administrative Templates\Windows Components\Internet Explorer) takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable editing schedules for offline pages</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable offline page hit logging" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Prevents channel providers from recording information about when their channel pages are viewed by users who are working offline.&lt;br/&gt;&lt;br/&gt;If you enable this policy, it disables any channel logging settings set by channel providers in the channel definition format (.cdf) file. The .cdf file determines the schedule and other settings for downloading Web content.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, channel providers can record information about when their channel pages are viewed by users who are working offline." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable offline page hit logging</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable removing channels" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Prevents users from disabling channel synchronization in Microsoft Internet Explorer.&lt;br/&gt;&lt;br/&gt;Channels are Web sites that are automatically updated on your computer according to a schedule specified by the channel provider.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot prevent channels from being synchronized.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can disable the synchronization of channels.&lt;br/&gt;&lt;br/&gt;This policy is intended to help administrators ensure that users&amp;#39; computers are being updated uniformly across their organization.&lt;br/&gt;&lt;br/&gt;Note: This policy does not prevent users from removing active content from the desktop interface." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable removing channels</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable removing schedules for offline pages" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Prevents users from clearing the preconfigured settings for Web pages to be downloaded for offline viewing.&lt;br/&gt;&lt;br/&gt;When users make Web pages available for offline viewing, they can view content when their computer is not connected to the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Make Available Offline check box in the Organize Favorites Favorite dialog box and the Make This Page Available Offline check box will be selected but dimmed. To display the Make This Page Available Offline check box, users click the Tools menu, click Synchronize, and then click the Properties button.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can remove the preconfigured settings for pages to be downloaded for offline viewing.&lt;br/&gt;&lt;br/&gt;This policy is intended for organizations that are concerned about server load for downloading content.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Hide Favorites menu&amp;quot; policy (located in User Configuration\Administrative Templates\Windows Components\Internet Explorer) takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable removing schedules for offline pages</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Persistence Behavior</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File size limits for Internet zone" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Persistence Behavior" gpmc_settingDescription="Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Internet security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy, you can specify the persistence storage amount per domain or per document for this security zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, you cannot set this limit.&lt;br/&gt;&lt;br/&gt;Note: This setting does not appear in the user interface." gpmc_supported="At least Internet Explorer 5.0">File size limits for Internet zone</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Per domain (in kilobytes)</td><td>1024</td></tr>
<tr><td>Per document (in kilobytes)</td><td>128</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File size limits for Intranet zone" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Persistence Behavior" gpmc_settingDescription="Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Intranet security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy, you can specify the persistence storage amount per domain or per document for this security zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, you cannot set this limit.&lt;br/&gt;&lt;br/&gt;Note: This setting does not appear in the user interface." gpmc_supported="At least Internet Explorer 5.0">File size limits for Intranet zone</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Per domain (in kilobytes)</td><td>10240</td></tr>
<tr><td>Per document (in kilobytes)</td><td>512</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File size limits for Local Machine zone" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Persistence Behavior" gpmc_settingDescription="Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Computer security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy, you can specify the persistence storage amount per domain or per document for this security zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, you cannot set this limit.&lt;br/&gt;&lt;br/&gt;Note: This setting does not appear in the user interface." gpmc_supported="At least Internet Explorer 5.0">File size limits for Local Machine zone</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Per domain(in kilobytes)</td><td>1024</td></tr>
<tr><td>Per document (in kilobytes)</td><td>128</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File size limits for Restricted Sites zone" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Persistence Behavior" gpmc_settingDescription="Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Restricted Sites security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy, you can specify the persistence storage amount per domain or per document for this security zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, you cannot set this limit.&lt;br/&gt;&lt;br/&gt;Note: This setting does not appear in the user interface." gpmc_supported="At least Internet Explorer 5.0">File size limits for Restricted Sites zone</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Per domain (in kilobytes)</td><td>640</td></tr>
<tr><td>Per document (in kilobytes)</td><td>64</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File size limits for Trusted Sites zone" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Persistence Behavior" gpmc_settingDescription="Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Trusted Sites security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy, you can specify the persistence storage amount per domain or per document for this security zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, you cannot set this limit.&lt;br/&gt;&lt;br/&gt;Note: This setting does not appear in the user interface." gpmc_supported="At least Internet Explorer 5.0">File size limits for Trusted Sites zone</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Per domain (in kilobytes)</td><td>1024</td></tr>
<tr><td>Per document (in kilobytes)</td><td>128</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Toolbars</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Toolbar Buttons" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="Specifies which buttons will be displayed on the standard toolbar in Microsoft Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, you can specify whether or not each button will be displayed by selecting or clearing the check boxes for each button.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, the standard toolbar will be displayed with its default settings, unless users customize it." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Configure Toolbar Buttons</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Show Back button</td><td>Enabled</td></tr>
<tr><td>Show Forward button</td><td>Enabled</td></tr>
<tr><td>Show Stop button</td><td>Enabled</td></tr>
<tr><td>Show Refresh button</td><td>Enabled</td></tr>
<tr><td>Show Home button</td><td>Enabled</td></tr>
<tr><td>Show Search button</td><td>Disabled</td></tr>
<tr><td>Show Favorites button</td><td>Disabled</td></tr>
<tr><td>Show History button</td><td>Disabled</td></tr>
<tr><td>Show Folders button</td><td>Disabled</td></tr>
<tr><td>Show Fullscreen button</td><td>Disabled</td></tr>
<tr><td>Show Tools button</td><td>Disabled</td></tr>
<tr><td>Show Mail button</td><td>Disabled</td></tr>
<tr><td>Show Font size button</td><td>Disabled</td></tr>
<tr><td>Show Print button</td><td>Disabled</td></tr>
<tr><td>Show Edit button</td><td>Disabled</td></tr>
<tr><td>Show Discussions button</td><td>Disabled</td></tr>
<tr><td>Show Cut button</td><td>Disabled</td></tr>
<tr><td>Show Copy button</td><td>Disabled</td></tr>
<tr><td>Show Paste button</td><td>Disabled</td></tr>
<tr><td>Show Encoding button</td><td>Disabled</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable customizing browser toolbar buttons" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="Prevents users from determining which buttons appear on the Microsoft Internet Explorer and File Explorer standard toolbars. The buttons appearing on the toolbar can be customized by the &amp;quot;Customize&amp;quot; option. This is present under the Toolbars submenu of the View menu in Internet Explorer 6 and under the Toolbars submenu of the Tools menu in the Command bar in subsequent versions of Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Customize option will be removed from the menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can customize which buttons appear on the Internet Explorer and File Explorer toolbars.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;Disable customizing browser toolbars&amp;quot; policy, which prevents users from determining which toolbars are displayed in Internet Explorer and File Explorer." gpmc_supported="At least Internet Explorer 5.0">Disable customizing browser toolbar buttons</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable customizing browser toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="Prevents users from determining which toolbars are displayed in Microsoft Internet Explorer and File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the list of toolbars, which users can display by clicking the View menu and then pointing to the Toolbars command, will appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can determine which toolbars are displayed in File Explorer and Internet Explorer.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;Disable customizing browser toolbar buttons&amp;quot; policy, which prevents users from adding or removing toolbars from Internet Explorer." gpmc_supported="At least Internet Explorer 5.0">Disable customizing browser toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Developer Tools" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to manage whether the user can access Developer Tools in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot access Developer Tools.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can access Developer Tools." gpmc_supported="At least Internet Explorer 8.0">Turn off Developer Tools</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Edge</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow Adobe Flash" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This setting lets you decide whether employees can run Adobe Flash in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this setting, employees can use Adobe Flash.&lt;br/&gt;&lt;br/&gt;If you disable this setting, employees can&amp;#39;t use Adobe Flash.&lt;br/&gt;&lt;br/&gt;      " gpmc_supported="Microsoft Edge on Windows 10 or later">Allow Adobe Flash</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow clearing browsing data on exit" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, clearing browsing history on exit is turned on.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy setting, it can be turned on and configured by the employee in the Clear browsing data options under Settings.&lt;br/&gt;      " gpmc_supported="Microsoft Edge on Windows 10, Version 1703 or later">Allow clearing browsing data on exit</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow Developer Tools" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this setting, the F12 Developer Tools are available in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the F12 Developer Tools aren&amp;#39;t available in Microsoft Edge." gpmc_supported="Microsoft Edge on Windows 10, Version 1511 or later">Allow Developer Tools</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Password Manager" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.&lt;br/&gt;&lt;br/&gt;If you enable this setting, employees can use Password Manager to save their passwords locally.&lt;br/&gt;&lt;br/&gt;If you disable this setting, employees can&amp;#39;t use Password Manager to save their passwords locally.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this setting, employees can choose whether to use Password Manager to save their passwords locally." gpmc_supported="Microsoft Edge on Windows 10 or later">Configure Password Manager</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure the Adobe Flash Click-to-Run setting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="&lt;br/&gt;        If you enable or don’t configure the Adobe Flash Click-to-Run setting, Microsoft Edge will require a user to click the Click-to-Run button, to click the content, or for the site to appear on the auto-allowed list, before loading and running the content.&lt;br/&gt;&lt;br/&gt;Sites get onto the auto-allowed list based on user feedback, specifically by how often the content is allowed to load and run.&lt;br/&gt;      " gpmc_supported="Microsoft Edge on Windows 10, Version 1703 or later">Configure the Adobe Flash Click-to-Run setting</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Management Console</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict the user from entering author mode" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console" gpmc_settingDescription="Prevents users from entering author mode.&lt;br/&gt;&lt;br/&gt;This setting prevents users from opening the Microsoft Management Console (MMC) in author mode, explicitly opening console files in author mode, and opening any console files that open in author mode by default.&lt;br/&gt;&lt;br/&gt;As a result, users cannot create console files or add or remove snap-ins. Also, because they cannot open author-mode console files, they cannot use the tools that the files contain.&lt;br/&gt;&lt;br/&gt;This setting permits users to open MMC user-mode console files, such as those on the Administrative Tools menu in Windows 2000 Server family or Windows Server 2003 family. However, users cannot open a blank MMC console window on the Start menu. (To open the MMC, click Start, click Run, and type mmc.) Users also cannot open a blank MMC console window from a command prompt.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can enter author mode and open author-mode console files." gpmc_supported="At least Windows 2000">Restrict the user from entering author mode</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict users to the explicitly permitted list of snap-ins" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console" gpmc_settingDescription="Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins.&lt;br/&gt;&lt;br/&gt;--  If you enable this setting, all snap-ins are prohibited, except those that you explicitly permit. Use this setting if you plan to prohibit use of most snap-ins.&lt;br/&gt;&lt;br/&gt;    To explicitly permit a snap-in, open the Restricted/Permitted snap-ins setting folder and enable the settings representing the snap-in you want to permit. If a snap-in setting in the folder is disabled or not configured, the snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;--  If you disable this setting or do not configure it, all snap-ins are permitted, except those that you explicitly prohibit. Use this setting if you plan to permit use of most snap-ins.&lt;br/&gt;&lt;br/&gt;    To explicitly prohibit a snap-in, open the Restricted/Permitted snap-ins setting folder and then disable the settings representing the snap-ins you want to prohibit. If a snap-in setting in the folder is enabled or not configured, the snap-in is permitted.&lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.&lt;br/&gt;&lt;br/&gt;Note: If you enable this setting, and you do not enable any settings in the Restricted/Permitted snap-ins folder, users cannot use any MMC snap-ins." gpmc_supported="At least Windows 2000">Restrict users to the explicitly permitted list of snap-ins</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName=".Net Framework Configuration" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">.Net Framework Configuration</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Active Directory Domains and Trusts" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Active Directory Domains and Trusts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Active Directory Sites and Services" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Active Directory Sites and Services</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Active Directory Users and Computers" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Active Directory Users and Computers</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="ADSI Edit" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">ADSI Edit</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Certificate Templates" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003">Certificate Templates</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Certificates" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Certificates</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Computer Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Computer Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Device Manager" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Device Manager</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disk Defragmenter" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Disk Defragmenter</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disk Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Disk Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Distributed File System" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Distributed File System</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Event Viewer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Event Viewer</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="FAX Service" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">FAX Service</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="FrontPage Server Extensions" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">FrontPage Server Extensions</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Indexing Service" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Indexing Service</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Internet Authentication Service (IAS)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="Windows Server 2003 only">Internet Authentication Service (IAS)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Internet Information Services" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Internet Information Services</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="IP Security Monitor" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">IP Security Monitor</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Link to Web Address" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="Permits or prohibits use of this snap-in.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;If this setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited.&lt;br/&gt;&lt;br/&gt;--  If &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted.&lt;br/&gt;&lt;br/&gt;    To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;--  If &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited.&lt;br/&gt;&lt;br/&gt;    To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted.&lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Link to Web Address</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Local Users and Groups" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Local Users and Groups</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Performance Logs and Alerts" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Performance Logs and Alerts</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="QoS Admission Control" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">QoS Admission Control</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remote Desktop Services Configuration" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Remote Desktop Services Configuration</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remote Desktops" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remote Desktops</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Removable Storage Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Removable Storage Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Routing and Remote Access" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Routing and Remote Access</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Security Configuration and Analysis" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Security Configuration and Analysis</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Security Templates" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Security Templates</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Services" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Services</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Shared Folders" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Shared Folders</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="System Information" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">System Information</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Telephony" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Telephony</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Wireless Monitor" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Wireless Monitor</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="WMI Control" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">WMI Control</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="AppleTalk Routing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">AppleTalk Routing</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Authorization Manager" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Authorization Manager</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Certification Authority Policy Settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Certification Authority Policy Settings</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Connection Sharing (NAT)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Connection Sharing (NAT)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="DCOM Configuration Extension" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">DCOM Configuration Extension</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Device Manager" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Device Manager</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="DHCP Relay Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">DHCP Relay Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Event Viewer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Event Viewer</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Extended View (Web View)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="Permits or prohibits use of this snap-in.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;If this setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited.&lt;br/&gt;&lt;br/&gt;--  If &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted.&lt;br/&gt;&lt;br/&gt;    To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;--  If &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited.&lt;br/&gt;&lt;br/&gt;    To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted.&lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Extended View (Web View)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="IAS Logging" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">IAS Logging</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="IGMP Routing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">IGMP Routing</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="IPX RIP Routing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">IPX RIP Routing</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Logical and Mapped Drives" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Logical and Mapped Drives</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="OSPF Routing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">OSPF Routing</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Public Key Policies" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Public Key Policies</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="RAS Dialin - User Node" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">RAS Dialin - User Node</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remote Access" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Remote Access</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Removable Storage" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Removable Storage</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="RIP Routing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">RIP Routing</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Routing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Routing</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Send Console Message" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Send Console Message</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Service Dependencies" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Service Dependencies</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Shared Folders Ext" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Shared Folders Ext</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="SMTP Protocol" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">SMTP Protocol</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="SNMP" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">SNMP</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="System Properties" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">System Properties</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Group Policy Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional with SP1">Group Policy Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Group Policy Object Editor" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Group Policy Object Editor</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Group Policy tab for Active Directory Tools" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy" gpmc_settingDescription="Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory Sites and Services snap-ins.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Group Policy tab is displayed in the property sheet for a site, domain, or organizational unit displayed by the Active Directory Users and Computers and Active Directory Sites and Services snap-ins. If you disable the setting, the Group Policy tab is not displayed in those snap-ins.&lt;br/&gt;&lt;br/&gt;If this setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this tab is displayed.&lt;br/&gt;&lt;br/&gt;--  If &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users will not have access to the Group Policy tab.&lt;br/&gt;&lt;br/&gt;    To explicitly permit use of the Group Policy tab, enable this setting. If this setting is not configured (or disabled), the Group Policy tab is inaccessible.&lt;br/&gt;&lt;br/&gt;--  If &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users will have access to the Group Policy tab.&lt;br/&gt;&lt;br/&gt;    To explicitly prohibit use of the Group Policy tab, disable this setting. If this setting is not configured (or enabled), the Group Policy tab is accessible.&lt;br/&gt;&lt;br/&gt;When the Group Policy tab is inaccessible, it does not appear in the site, domain, or organizational unit property sheets." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Group Policy tab for Active Directory Tools</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Resultant Set of Policy snap-in" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Resultant Set of Policy snap-in</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Group Policy snap-in extensions</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Folder Redirection" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Group Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Folder Redirection</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Internet Explorer Maintenance" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Group Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Internet Explorer Maintenance</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="IP Security Policy Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Group Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">IP Security Policy Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remote Installation Services" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Group Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Remote Installation Services</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Scripts (Logon/Logoff)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Group Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Scripts (Logon/Logoff)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Security Settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Group Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Security Settings</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Software Installation (Computers)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Group Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Software Installation (Computers)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Software Installation (Users)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Group Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Software Installation (Users)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Wireless Network (IEEE 802.11) Policies" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Group Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Wireless Network (IEEE 802.11) Policies</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Resultant Set of Policy snap-in extensions</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Administrative Templates (Computers)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Resultant Set of Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Administrative Templates (Computers)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Administrative Templates (Users)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Resultant Set of Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Administrative Templates (Users)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Folder Redirection" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Resultant Set of Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Folder Redirection</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Internet Explorer Maintenance" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Resultant Set of Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Internet Explorer Maintenance</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Security Settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Resultant Set of Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Security Settings</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Software Installation (Computers)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Resultant Set of Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Software Installation (Computers)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Software Installation (Users)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Resultant Set of Policy snap-in extensions" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Software Installation (Users)</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/NetMeeting</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow persisting automatic acceptance of Calls" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Make the automatic acceptance of incoming calls persistent." gpmc_supported="at least Windows NetMeeting v3.0">Allow persisting automatic acceptance of Calls</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Chat" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Disables the Chat feature of NetMeeting." gpmc_supported="at least Windows NetMeeting v3.0">Disable Chat</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Directory services" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Disables the directory feature of NetMeeting.&lt;br/&gt;&lt;br/&gt;Users will not logon to a directory (ILS) server when NetMeeting starts.  Users will also not be able to view or place calls via a NetMeeting directory.&lt;br/&gt;&lt;br/&gt;This policy is for deployers who have their own location or calling schemes such as a Web site or an address book.&amp;quot; " gpmc_supported="at least Windows NetMeeting v3.0">Disable Directory services</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable NetMeeting 2.x Whiteboard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Disables the 2.x whiteboard feature of NetMeeting.&lt;br/&gt;&lt;br/&gt;The 2.x whiteboard is available for compatibility with older versions of NetMeeting only.&lt;br/&gt;&lt;br/&gt;Deployers who do not need it can save bandwidth by disabling it." gpmc_supported="at least Windows NetMeeting v3.0">Disable NetMeeting 2.x Whiteboard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Whiteboard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Disables the T.126 whiteboard feature of NetMeeting." gpmc_supported="at least Windows NetMeeting v3.0">Disable Whiteboard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent adding Directory servers" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from adding directory (ILS) servers to the list of those they can use for placing calls." gpmc_supported="at least Windows NetMeeting v3.0">Prevent adding Directory servers</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent automatic acceptance of Calls" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from turning on automatic acceptance of incoming calls.&lt;br/&gt;&lt;br/&gt;This ensures that others cannot call and connect to NetMeeting when the user is not present.&lt;br/&gt;&lt;br/&gt;This policy is recommended when deploying NetMeeting to run always." gpmc_supported="at least Windows NetMeeting v3.0">Prevent automatic acceptance of Calls</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing Call placement method" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from changing the way calls are placed, either directly or via a gatekeeper server." gpmc_supported="at least Windows NetMeeting v3.0">Prevent changing Call placement method</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent receiving files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from receiving files from others in a conference." gpmc_supported="at least Windows NetMeeting v3.0">Prevent receiving files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent sending files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from sending files to others in a conference." gpmc_supported="at least Windows NetMeeting v3.0">Prevent sending files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent viewing Web directory" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from viewing directories as Web pages in a browser." gpmc_supported="at least Windows NetMeeting v3.0">Prevent viewing Web directory</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/NetMeeting/Application Sharing</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable application Sharing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Application Sharing" gpmc_settingDescription="Disables the application sharing feature of NetMeeting completely.  Users will not be able to host or view shared applications." gpmc_supported="at least Windows NetMeeting v3.0">Disable application Sharing</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Application Sharing in true color" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Application Sharing" gpmc_settingDescription="Prevents users from sharing applications in true color.  True color sharing uses more bandwidth in a conference." gpmc_supported="at least Windows NetMeeting v3.0">Prevent Application Sharing in true color</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Control" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Application Sharing" gpmc_settingDescription="Prevents users from allowing others in a conference to control what they have shared.  This enforces a read-only mode; the other participants cannot change the data in the shared application." gpmc_supported="at least Windows NetMeeting v3.0">Prevent Control</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Desktop Sharing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Application Sharing" gpmc_settingDescription="Prevents users from sharing the whole desktop.  They will still be able to share individual applications." gpmc_supported="at least Windows NetMeeting v3.0">Prevent Desktop Sharing</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Sharing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Application Sharing" gpmc_settingDescription="Prevents users from sharing anything themselves.  They will still be able to view shared applications/desktops from others." gpmc_supported="at least Windows NetMeeting v3.0">Prevent Sharing</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Sharing Command Prompts" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Application Sharing" gpmc_settingDescription="Prevents users from sharing command prompts.  This prevents users from inadvertently sharing out applications, since command prompts can be used to launch other applications." gpmc_supported="at least Windows NetMeeting v3.0">Prevent Sharing Command Prompts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Sharing Explorer windows" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Application Sharing" gpmc_settingDescription="Prevents users from sharing Explorer windows.  This prevents users from inadvertently sharing out applications, since Explorer windows can be used to launch other applications." gpmc_supported="at least Windows NetMeeting v3.0">Prevent Sharing Explorer windows</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/NetMeeting/Audio &amp; Video</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Audio" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Audio &amp;amp; Video" gpmc_settingDescription="Disables the audio feature of NetMeeting.  Users will not be able to send or receive audio." gpmc_supported="at least Windows NetMeeting v3.0">Disable Audio</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable full duplex Audio" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Audio &amp;amp; Video" gpmc_settingDescription="Disables full duplex mode audio.  Users will not be able to listen to incoming audio while speaking into the microphone.  Older audio hardware does not perform well when in full duplex mode." gpmc_supported="at least Windows NetMeeting v3.0">Disable full duplex Audio</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing DirectSound Audio setting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Audio &amp;amp; Video" gpmc_settingDescription="Prevents user from changing the DirectSound audio setting.  DirectSound provides much better audio quality, but older audio hardware may not support it." gpmc_supported="at least Windows NetMeeting v3.0">Prevent changing DirectSound Audio setting</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent receiving Video" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Audio &amp;amp; Video" gpmc_settingDescription="Prevents users from receiving video.  Users will still be able to send video provided they have the hardware.&amp;quot; " gpmc_supported="at least Windows NetMeeting v3.0">Prevent receiving Video</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent sending Video" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Audio &amp;amp; Video" gpmc_settingDescription="Prevents users from sending video if they have the hardware.  Users will still be able to receive video from others." gpmc_supported="at least Windows NetMeeting v3.0">Prevent sending Video</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/NetMeeting/Options Page</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Advanced Calling button" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Options Page" gpmc_settingDescription="Disables the Advanced Calling button on the General Options page.  Users will not then be able to change the call placement method and the servers used." gpmc_supported="at least Windows NetMeeting v3.0">Disable the Advanced Calling button</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the General page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Options Page" gpmc_settingDescription="Hides the General page of the Tools Options dialog.  Users will not then be able to change personal identification and bandwidth settings." gpmc_supported="at least Windows NetMeeting v3.0">Hide the General page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the Security page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Options Page" gpmc_settingDescription="Hides the Security page of the Tools Options dialog.  Users will not then be able to change call security and authentication settings." gpmc_supported="at least Windows NetMeeting v3.0">Hide the Security page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the Video page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Options Page" gpmc_settingDescription="Hides the Video page of the Tools Options dialog.  Users will not then be able to change video settings." gpmc_supported="at least Windows NetMeeting v3.0">Hide the Video page</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Task Scheduler</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Advanced Properties Checkbox in Add Scheduled Task Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="This setting removes the &amp;quot;Open advanced properties for this task when I click Finish&amp;quot; checkbox from the last page of the Scheduled Task Wizard.  This policy is only designed to simplify task creation for beginning users.&lt;br/&gt;&lt;br/&gt;The checkbox, when checked, instructs Task Scheduler to automatically open the newly created task&amp;#39;s property sheet upon completion of the &amp;quot;Add Scheduled Task&amp;quot; wizard.  The task&amp;#39;s property sheet allows users to change task characteristics such as: the program the task runs, details of its schedule, idle time and power management settings, and its security context.  Beginning users will often not be interested or confused by having the property sheet displayed automatically.  Note that the checkbox is not checked by default even if this setting is Disabled or Not Configured.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Advanced Properties Checkbox in Add Scheduled Task Wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Property Pages" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from viewing and changing the properties of an existing task.&lt;br/&gt;&lt;br/&gt;This setting removes the Properties item from the File menu in Scheduled Tasks and from the context menu that appears when you right-click a task. As a result, users cannot change any properties of a task. They can only see the properties that appear in Detail view and in the task preview.&lt;br/&gt;&lt;br/&gt;This setting prevents users from viewing and changing characteristics such as the program the task runs, its schedule details, idle time and power management settings, and its security context.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: This setting affects existing tasks only. To prevent users from changing the properties of newly created tasks, use the &amp;quot;Remove Advanced Menu&amp;quot; setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Property Pages</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Task Run or End" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from starting and stopping tasks manually.&lt;br/&gt;&lt;br/&gt;This setting removes the Run and End Task items from the context menu that appears when you right-click a task. As a result, users cannot start tasks manually or force tasks to end before they are finished.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prevent Task Run or End</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Browse" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Limits newly scheduled to items on the user&amp;#39;s Start menu, and prevents the user from changing the scheduled program for existing tasks.&lt;br/&gt;&lt;br/&gt;This setting removes the Browse button from the Schedule Task Wizard and from the Task tab of the properties dialog box for a task. Also, users cannot edit the &amp;quot;Run&amp;quot; box or the &amp;quot;Start in&amp;quot; box that determine the program and path for a task.&lt;br/&gt;&lt;br/&gt;As a result, when users create a task, they must select a program from the list in the Scheduled Task Wizard, which displays only the tasks that appear on the Start menu and its submenus. Once a task is created, users cannot change the program a task runs.&lt;br/&gt;&lt;br/&gt;Important: This setting does not prevent users from creating a new task by pasting or dragging any program into the Scheduled Tasks folder. To prevent this action, use the &amp;quot;Prohibit Drag-and-Drop&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit Browse</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Drag-and-Drop" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;This setting disables the Cut, Copy, Paste, and Paste Shortcut items on the context menu and the Edit menu in Scheduled Tasks. It also disables the drag-and-drop features of the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;As a result, users cannot add new scheduled tasks by dragging, moving, or copying a document or program into the Scheduled tasks folder.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other methods to create new tasks, and it does not prevent users from deleting tasks.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit Drag-and-Drop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit New Task Creation" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from creating new tasks.&lt;br/&gt;&lt;br/&gt;This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also, the system does not respond when users try to move, paste, or drag programs or documents into the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Important: This setting does not prevent administrators of a computer from using At.exe to create new tasks or prevent administrators from submitting tasks from remote computers." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit New Task Creation</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Task Deletion" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from deleting tasks from the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;This setting removes the Delete command from the Edit menu in the Scheduled Tasks folder and from the menu that appears when you right-click a task. Also, the system does not respond when users try to cut or drag a task from the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Important: This setting does not prevent administrators of a computer from using At.exe to delete tasks." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit Task Deletion</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Installer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Always install with elevated privileges" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Installer" gpmc_settingDescription="This policy setting directs Windows Installer to use elevated permissions when it installs any program on the system.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, privileges are extended to all programs. These privileges are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made available in Add or Remove Programs in Control Panel. This profile setting lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the system applies the current user&amp;#39;s permissions when it installs programs that a system administrator does not distribute or offer.&lt;br/&gt;&lt;br/&gt;Note: This policy setting appears both in the Computer Configuration and User Configuration folders. To make this policy setting effective, you must enable it in both folders.&lt;br/&gt;&lt;br/&gt;Caution: Skilled users can take advantage of the permissions this policy setting grants to change their privileges and gain permanent access to restricted files and folders. Note that the User Configuration version of this policy setting is not guaranteed to be secure." gpmc_supported="At least Windows 2000">Always install with elevated privileges</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"> </td></tr><tr><td colspan="2">This policy setting must be set for the machine and the user to be enforced.</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent removable media source for any installation" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Installer" gpmc_settingDescription="This policy setting prevents users from installing any programs from removable media.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, if a user tries to install a program from removable media, such as CD-ROMs, floppy disks, and DVDs, a message appears stating that the feature cannot be found.&lt;br/&gt;&lt;br/&gt;This policy setting applies even when the installation is running in the user&amp;#39;s security context.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can install from removable media when the installation is running in their own security context, but only system administrators can use removable media when an installation is running with elevated system privileges, such as installations offered on the desktop or in Add or Remove Programs.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Enable user to use media source while elevated&amp;quot; and &amp;quot;Hide the &amp;#39;Add a program from CD-ROM or floppy disk&amp;#39; option&amp;quot; policy settings." gpmc_supported="At least Windows 2000">Prevent removable media source for any installation</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent CD and DVD Media Information Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent media information for CDs and DVDs from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically obtaining media information from the Internet for CDs and DVDs played by users. In addition, the Retrieve media information for CDs and DVDs from the Internet check box on the Privacy Options tab in the first use dialog box and on the Privacy tab in the Player are not selected and are not available.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the setting of the Retrieve media information for CDs and DVDs from the Internet check box." gpmc_supported="Windows Media Player 9 Series and later.">Prevent CD and DVD Media Information Retrieval</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Music File Media Information Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent media information for music files from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically obtaining media information for music files such as Windows Media Audio (WMA) and MP3 files from the Internet. In addition, the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box in the first use dialog box and on the Privacy and Media Library tabs in the Player are not selected and are not available.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the setting of the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box." gpmc_supported="Windows Media Player 9 Series and later.">Prevent Music File Media Information Retrieval</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Radio Station Preset Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent radio station presets from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically retrieving radio station presets from the Internet and displaying them in Media Library. In addition, presets that exist before the policy is configured are not be updated, and presets a user adds are not be displayed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Player automatically retrieves radio station presets from the Internet." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prevent Radio Station Preset Retrieval</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player/Networking</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure HTTP Proxy" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Networking" gpmc_settingDescription="This policy setting allows you to specify the HTTP proxy settings for Windows Media Player.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, select one of the following proxy types:&lt;br/&gt;&lt;br/&gt;- Autodetect: the proxy settings are automatically detected.&lt;br/&gt;- Custom: unique proxy settings are used.&lt;br/&gt;- Use browser proxy settings: browser&amp;#39;s proxy settings are used.&lt;br/&gt;&lt;br/&gt;If the Custom proxy type is selected, the rest of the options on the Setting tab must be specified because no default settings are used for the proxy. The options are ignored if Autodetect or Browser is selected.&lt;br/&gt;&lt;br/&gt;The Configure button on the Network tab in the Player is not available for the HTTP protocol and the proxy cannot be configured. If the &amp;quot;Hide network tab&amp;quot; policy setting is also enabled, the entire Network tab is hidden.&lt;br/&gt;&lt;br/&gt;This policy is ignored if the &amp;quot;Streaming media protocols&amp;quot; policy setting is enabled and HTTP is not selected.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the HTTP proxy server cannot be used and the user cannot configure the HTTP proxy.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can configure the HTTP proxy settings.&lt;br/&gt;      " gpmc_supported="Windows Media Player for Windows XP and later.">Configure HTTP Proxy</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure MMS Proxy" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Networking" gpmc_settingDescription="This policy setting allows you to specify the MMS proxy settings for Windows Media Player.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, select one of the following proxy types:&lt;br/&gt;&lt;br/&gt;- Autodetect: the proxy settings are automatically detected.&lt;br/&gt;- Custom: unique proxy settings are used.&lt;br/&gt;&lt;br/&gt;If the Custom proxy type is selected, the rest of the options on the Setting tab must be specified; otherwise, the default settings are used. The options are ignored if Autodetect is selected.&lt;br/&gt;&lt;br/&gt;The Configure button on the Network tab in the Player is not available and the protocol cannot be configured. If the &amp;quot;Hide network tab&amp;quot; policy setting is also enabled, the entire Network tab is hidden.&lt;br/&gt;&lt;br/&gt;This policy setting is ignored if the &amp;quot;Streaming media protocols&amp;quot; policy setting is enabled and Multicast is not selected.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the MMS proxy server cannot be used and users cannot configure the MMS proxy settings.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can configure the MMS proxy settings." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Configure MMS Proxy</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Network Buffering" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Networking" gpmc_settingDescription="This policy setting allows you to specify whether network buffering uses the default or a specified number of seconds.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, select one of the following options to specify the number of seconds streaming media is buffered before it is played.&lt;br/&gt;&lt;br/&gt;- Custom: the number of seconds, up to 60, that streaming media is buffered.&lt;br/&gt;- Default: default network buffering is used and the number of seconds that is specified is ignored.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Use default buffering&amp;quot; and &amp;quot;Buffer&amp;quot; options on the Performance tab in the Player are not available.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the buffering options on the Performance tab." gpmc_supported="Windows Media Player for Windows XP and later.">Configure Network Buffering</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure RTSP Proxy" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Networking" gpmc_settingDescription="This policy setting allows you to specify the RTSP proxy settings for Windows Media Player.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, select one of the following proxy types:&lt;br/&gt;&lt;br/&gt;- Autodetect: the proxy settings are automatically detected.&lt;br/&gt;- Custom: unique proxy settings are used.&lt;br/&gt;&lt;br/&gt;If the Custom proxy type is selected, the rest of the options on the Setting tab must be specified; otherwise, the default settings are used. The options are ignored if Autodetect is selected.&lt;br/&gt;&lt;br/&gt;The Configure button on the Network tab in the Player is not available and the protocol cannot be configured. If the &amp;quot;Hide network tab&amp;quot; policy setting is also enabled, the entire Network tab is hidden.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the RTSP proxy server cannot be used and users cannot change the RTSP proxy settings.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can configure the RTSP proxy settings." gpmc_supported="Windows Media Player 9 Series and later.">Configure RTSP Proxy</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Network Tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Networking" gpmc_settingDescription="This policy setting allows you to hide the Network tab.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Network tab in Windows Media Player is hidden. The default network settings are used unless the user has previously defined network settings for the Player.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Network tab appears and users can use it to configure network settings." gpmc_supported="Windows Media Player for Windows XP and later.">Hide Network Tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Streaming Media Protocols" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Networking" gpmc_settingDescription="This policy setting allows you to specify that Windows Media Player can attempt to use selected protocols when receiving streaming media from a server running Windows Media Services.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the protocols that are selected on the Network tab of the Player are used to receive a stream initiated through an MMS or RTSP URL from a Windows Media server. If the RSTP/UDP check box is selected, a user can specify UDP ports in the Use ports check box. If the user does not specify UDP ports, the Player uses default ports when using the UDP protocol. This policy setting also specifies that multicast streams can be received if the &amp;quot;Allow the Player to receive multicast streams&amp;quot; check box on the Network tab is selected.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the administrator must also specify the protocols that are available to users on the Network tab. If the administrator does not specify any protocols, the Player cannot access an MMS or RTSP URL from a Windows Media server. If the &amp;quot;Hide network tab&amp;quot; policy setting is enabled, the entire Network tab is hidden.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can select the protocols to use on the Network tab.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the Protocols for MMS URLs and Multicast streams areas of the Network tab are not available and the Player cannot receive an MMS or RTSP stream from a Windows Media server." gpmc_supported="Windows Media Player for Windows XP and later.">Streaming Media Protocols</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player/Playback</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Codec Download" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Playback" gpmc_settingDescription="This policy setting allows you to prevent Windows Media Player from downloading codecs.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically downloading codecs to your computer. In addition, the Download codecs automatically check box on the Player tab in the Player is not available.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, codecs are automatically downloaded and the Download codecs automatically check box is not available.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can change the setting for the Download codecs automatically check box." gpmc_supported="Windows Media Player for Windows XP and later.">Prevent Codec Download</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player/User Interface</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do Not Show Anchor" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/User Interface" gpmc_settingDescription="Prevents the anchor window from being displayed when Windows Media Player is in skin mode.&lt;br/&gt;&lt;br/&gt;This policy hides the anchor window when the Player is in skin mode. In addition, the option on the Player tab in the Player that enables users to choose whether the anchor window displays is not available.&lt;br/&gt;&lt;br/&gt;When this policy is not configured or disabled, users can show or hide the anchor window when the Player is in skin mode by using the Player tab in the Player.&lt;br/&gt;&lt;br/&gt;When this policy is not configured and the Set and Lock Skin policy is enabled, some options in the anchor window are not available." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Do Not Show Anchor</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Privacy Tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/User Interface" gpmc_settingDescription="This policy setting allows you to hide the Privacy tab in Windows Media Player.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the &amp;quot;Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet&amp;quot; check box on the Media Library tab is available, even though the Privacy tab is hidden, unless the &amp;quot;Prevent music file media information retrieval&amp;quot; policy setting is enabled.&lt;br/&gt;&lt;br/&gt;The default privacy settings are used for the options on the Privacy tab unless the user changed the settings previously.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Privacy tab is not hidden, and users can configure any privacy settings not configured by other polices." gpmc_supported="Windows Media Player 9 Series and later.">Hide Privacy Tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Security Tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/User Interface" gpmc_settingDescription="This policy setting allows you to hide the Security tab in Windows Media Player.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the default security settings for the options on the Security tab are used unless the user changed the settings previously. Users can still change security and zone settings by using Internet Explorer unless these settings have been hidden or disabled by Internet Explorer policies.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can configure the security settings on the Security tab." gpmc_supported="Windows Media Player 9 Series and later.">Hide Security Tab</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Messenger</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Windows Messenger to be run" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Messenger" gpmc_settingDescription="This policy setting allows you to prevent Windows Messenger from running.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Messenger does not run.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Messenger can be used.&lt;br/&gt;&lt;br/&gt;Note: If you enable this policy setting, Remote Assistance also cannot use Windows Messenger.&lt;br/&gt;&lt;br/&gt;Note: This policy setting is available under both Computer Configuration and User Configuration. If both are present, the Computer Configuration version of this policy setting takes precedence." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not allow Windows Messenger to be run</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not automatically start Windows Messenger initially" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Messenger" gpmc_settingDescription="This policy setting prevents Windows Messenger from automatically running at logon. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Messenger is not loaded automatically when a user logs on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Messenger will be loaded automatically at logon.&lt;br/&gt;&lt;br/&gt;Note: This policy setting simply prevents Windows Messenger from running initially. If the user invokes and uses Windows Messenger from that point on, Windows Messenger will be loaded.&lt;br/&gt;&lt;br/&gt;The user can also configure this behavior on the Preferences tab on the Tools menu in the Windows Messenger user interface.&lt;br/&gt;&lt;br/&gt;Note: If you do not want users to use Windows Messenger, enable the &amp;quot;Do not allow Windows Messenger to run&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;Note: This policy setting is available under both Computer Configuration and User Configuration. If both are present, the Computer Configuration version of this policy setting takes precedence." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not automatically start Windows Messenger initially</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Update/Legacy Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not adjust default option to &amp;#39;Install Updates and Shut Down&amp;#39; in Shut Down Windows dialog box" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Update/Legacy Policies" gpmc_settingDescription="This policy setting allows you to manage whether the &amp;#39;Install Updates and Shut Down&amp;#39; option is allowed to be the default choice in the Shut Down Windows dialog.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user&amp;#39;s last shut down choice (Hibernate, Restart, etc.) is the default option in the Shut Down Windows dialog box, regardless of whether the &amp;#39;Install Updates and Shut Down&amp;#39; option is available in the &amp;#39;What do you want the computer to do?&amp;#39; list.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the &amp;#39;Install Updates and Shut Down&amp;#39; option will be the default option in the Shut Down Windows dialog box if updates are available for installation at the time the user selects the Shut Down option in the Start menu.&lt;br/&gt;&lt;br/&gt;Note that this policy setting has no impact if the User Configuration\Administrative Templates\Windows Components\Windows Update\Do not display &amp;#39;Install Updates and Shut Down&amp;#39; option in Shut Down Windows dialog box policy setting is enabled." gpmc_supported="Windows 7, Windows Server 2008 R2, Windows Vista, Windows XP SP2">Do not adjust default option to &#39;Install Updates and Shut Down&#39; in Shut Down Windows dialog box</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display &amp;#39;Install Updates and Shut Down&amp;#39; option in Shut Down Windows dialog box" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Update/Legacy Policies" gpmc_settingDescription="This policy setting allows you to manage whether the &amp;#39;Install Updates and Shut Down&amp;#39; option is displayed in the Shut Down Windows dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, &amp;#39;Install Updates and Shut Down&amp;#39; will not appear as a choice in the Shut Down Windows dialog box, even if updates are available for installation when the user selects the Shut Down option in the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the &amp;#39;Install Updates and Shut Down&amp;#39; option will be available in the Shut Down Windows dialog box if updates are available when the user selects the Shut Down option in the Start menu." gpmc_supported="Windows 7, Windows Server 2008 R2, Windows Vista, Windows XP SP2">Do not display &#39;Install Updates and Shut Down&#39; option in Shut Down Windows dialog box</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Update/Manage updates offered from Windows Server Update Service</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove access to use all Windows Update features" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Update/Manage updates offered from Windows Server Update Service" gpmc_settingDescription="This setting allows you to remove access to Windows Update.&lt;br/&gt;&lt;br/&gt;If you enable this setting, all Windows Update features are removed. This includes blocking access to the Windows Update Web site at http://windowsupdate.microsoft.com, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This setting also prevents Device Manager from automatically installing driver updates from the Windows Update Web site.&lt;br/&gt;&lt;br/&gt;If enabled you can configure one of the following notification options:&lt;br/&gt;&lt;br/&gt;0 = Do not show any notifications&lt;br/&gt;&lt;br/&gt;This setting will remove all access to Windows Update features and no notifications will be shown.&lt;br/&gt;&lt;br/&gt;1 = Show restart required notifications&lt;br/&gt;&lt;br/&gt;This setting will show notifications about restarts that are required to complete an installation.&lt;br/&gt;&lt;br/&gt;On Windows 8 and Windows RT, if this policy is Enabled, then only notifications related to restarts and the inability to detect updates will be shown. The notification options are not supported. Notifications on the login screen will always show up." gpmc_supported="At least Windows XP Professional Service Pack 1 or At least Windows 2000 Service Pack 3 through Windows 8.1 or Windows Server 2012 R2 with most current service pack. Not supported on Windows 10 and above.">Remove access to use all Windows Update features</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Configure notifications:</td><td>&nbsp;</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Extra Registry Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.<br/><br/><table class="info" >
<tr><th scope="col">Setting</th><th scope="col">State</th></tr>
<tr><td>Software\Policies\Microsoft\WindowsMovieMaker\MovieMaker</td><td>1</td></tr>
</table>
</div></div></div></div></div>
</body></html>