Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
TNSOA-PO-WIN-SEC-User Configuration Supervisor
Data collected on: 2-9-2025 09:12:31
General
Details
Domainemea.tpg.ads
OwnerS-1-5-21-513466819-3096973226-347852806-27238
Created13-4-2018 17:32:10
Modified19-10-2023 15:08:30
User Revisions42 (AD), 42 (SYSVOL)
Computer Revisions2 (AD), 2 (SYSVOL)
Unique ID{5a4dab34-0677-4769-834c-371d190c66a3}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
TNNoEnabledemea.tpg.ads/TN

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
EMEA\TNSOA-L-SEC-User Configuration Supervisor
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\Domain AdminsEdit settings, delete, modify securityNo
EMEA\TN-G-ORG-OU AdminsEdit settings, delete, modify securityNo
EMEA\TN-L-SEC-Delegation Modify Group Policy Settings AccessEdit settings, delete, modify securityNo
EMEA\TNSOA-L-SEC-User Configuration SupervisorRead (from Security Filtering)No
NT AUTHORITY\Authenticated UsersReadNo
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
Computer Configuration (Enabled)
No settings defined.
User Configuration (Enabled)
Policies
Windows Settings
Folder Redirection
Desktop
Setting: Not configured
Start Menu
Setting: Not configured
Internet Explorer Maintenance
Connection/Connection Settings
This GPO contains connection settings.
Connection/Proxy Settings
Enable proxy settings
ProtocolServerPort
HTTP10.217.130.93128
Secure10.217.130.93128
FTP10.217.130.93128
Gopher10.217.130.93128
Socks10.217.130.93128
Exceptions:Do not use proxy server for addresses beginning with*.bagnolet.francetelecom.fr, *.bd-francetelecom.fr, *.bss.wanadoo.com, *.francetelecom.fr, *.ftt.fr, *.intranet-paris.francetelecom.fr, *.lyon.francetelecom.fr, *.me.wanadoo.com, *.nancy.francetelecom.fr, *.rennes.francetelecom.fr, *.reseau.francetelecom.fr, *.si.francetelecom.fr, 10.173.46.53, *.sso.francetelecom.fr, 10.168.136.159, 10.173.46.251, 10.173.46.2, 10.173.7.140, *.itn.ftgroup, 172.16.89.47, 10.169.72.108, 172.16.54.29, 172.16.88.196, 10.168.72.231, *.com.ftgroup, 10.98.92.92, tpinside, deffmwebmail02.emea.tpg.ads, *.ftgroup, *.globalone.net, deffmtpdtn01,tntukweb02, 10.217.3.1, *.emea.tpg.ads, arsipe.itn.ftgroup, app-intranet.teleperformance.fr, frpartpclprod01.emea.tpg.ads, 10.114.55.35, 10.114.51.67,
Do not use proxy server for local (intranet) addressesEnabled
URLs/Important URLs
NameURL
Home page URLhttp://www.orange.fr/
Search bar URLNot configured
Online support page URLNot configured
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Control Panel
PolicySettingComment
Always open All Control Panel Items when opening Control PanelDisabled
Prohibit access to Control Panel and PC settingsEnabled
Control Panel/Add or Remove Programs
PolicySettingComment
Go directly to Components WizardEnabled
Hide Add New Programs pageEnabled
Hide Add/Remove Windows Components pageEnabled
Hide Change or Remove Programs pageEnabled
Hide the "Add a program from CD-ROM or floppy disk" optionEnabled
Hide the "Add programs from Microsoft" optionEnabled
Hide the "Add programs from your network" optionEnabled
Hide the Set Program Access and Defaults pageEnabled
Remove Add or Remove ProgramsEnabled
Remove Support InformationEnabled
Control Panel/Display
PolicySettingComment
Disable the Display Control PanelEnabled
Hide Settings tabEnabled
Control Panel/Personalization
PolicySettingComment
Enable screen saverEnabled
Force a specific visual style file or force Windows ClassicEnabled
Path to Visual Style:
To select Aero type:
%windir%\resources\Themes\Aero\aero.msstyles
To select a different visual style, type:
ie: \\<server>\share\Corp.msstyles
To select Windows Classic, leave the box
above blank and enable this setting
PolicySettingComment
Password protect the screen saverEnabled
Prevent changing color and appearanceEnabled
Prevent changing color schemeDisabled
Prevent changing desktop backgroundDisabled
Prevent changing screen saverEnabled
Prevent changing themeDisabled
Prevent changing visual style for windows and buttonsDisabled
Prohibit selection of visual style font sizeEnabled
Screen saver timeoutEnabled
Number of seconds to wait to enable the screen saver
Seconds:300
Control Panel/Printers
PolicySettingComment
Browse a common web site to find printersDisabled
Browse the network to find printersEnabled
Default Active Directory path when searching for printersDisabled
Point and Print RestrictionsDisabled
Prevent deletion of printersEnabled
Control Panel/Regional and Language Options
PolicySettingComment
Restrict selection of Windows menus and dialogs languageEnabled
Restrict users to the following language:French
Desktop
PolicySettingComment
Hide and disable all items on the desktopDisabled
Hide Network Locations icon on desktopEnabled
Prevent adding, dragging, dropping and closing the Taskbar's toolbarsDisabled
Prohibit adjusting desktop toolbarsDisabled
Prohibit User from manually redirecting Profile FoldersEnabled
Remove My Documents icon on the desktopEnabled
Remove Properties from the Computer icon context menuEnabled
Remove Properties from the Documents icon context menuEnabled
Remove Properties from the Recycle Bin context menuEnabled
Remove Recycle Bin icon from desktopEnabled
Remove the Desktop Cleanup WizardEnabled
Desktop/Active Directory
PolicySettingComment
Enable filter in Find dialog boxDisabled
Hide Active Directory folderEnabled
Desktop/Desktop
PolicySettingComment
Allow only bitmapped wallpaperDisabled
Disable Active DesktopDisabled
Disable all itemsEnabled
Enable Active DesktopEnabled
Allows HTML and JPEG Wallpaper
PolicySettingComment
Prohibit adding itemsDisabled
Prohibit changesDisabled
Prohibit closing itemsDisabled
Prohibit deleting itemsEnabled
Prohibit editing itemsDisabled
Google/Google Chrome - Default Settings (users can override)/Password manager
PolicySettingComment
Enable saving passwords to the password managerDisabled
Google/Google Chrome/Deprecated policies
PolicySettingComment
Disable Developer ToolsEnabled
Google/Google Chrome/Password manager
PolicySettingComment
Enable saving passwords to the password managerDisabled
Google/Google Chrome/Removed policies
PolicySettingComment
Allow users to show passwords in Password Manager (deprecated)Disabled
Network/Network Connections
PolicySettingComment
Ability to change properties of an all user remote access connectionEnabled
Ability to delete all user remote access connectionsEnabled
Ability to Enable/Disable a LAN connectionDisabled
Ability to rename all user remote access connectionsDisabled
Ability to rename LAN connectionsDisabled
Ability to rename LAN connections or remote access connections available to all usersDisabled
Enable Windows 2000 Network Connections settings for AdministratorsDisabled
Prohibit access to properties of a LAN connectionEnabled
Prohibit access to properties of components of a LAN connectionEnabled
Prohibit access to properties of components of a remote access connectionEnabled
Prohibit access to the Advanced Settings item on the Advanced menuEnabled
Prohibit access to the New Connection WizardEnabled
Prohibit access to the Remote Access Preferences item on the Advanced menuEnabled
Prohibit adding and removing components for a LAN or remote access connectionEnabled
Prohibit changing properties of a private remote access connectionEnabled
Prohibit connecting and disconnecting a remote access connectionEnabled
Prohibit deletion of remote access connectionsEnabled
Prohibit Enabling/Disabling components of a LAN connectionEnabled
Prohibit renaming private remote access connectionsEnabled
Prohibit TCP/IP advanced configurationEnabled
Prohibit viewing of status for an active connectionEnabled
Turn off notifications when a connection has only limited or no connectivityEnabled
Network/Offline Files
PolicySettingComment
Action on server disconnectEnabled
Specify how the system is to respond when a network server
becomes unavailable.
Action: Work offline
Never go offline = Server's files are unavailable to local computer
Work offline = Server's files are available to local computer
PolicySettingComment
Initial reminder balloon lifetimeDisabled
Prevent use of Offline Files folderEnabled
Prohibit user configuration of Offline FilesEnabled
Prevents users from changing any cache configuration settings.
PolicySettingComment
Reminder balloon frequencyDisabled
Remove "Make Available Offline" commandEnabled
Synchronize all offline files before logging offDisabled
Synchronize all offline files when logging onDisabled
Synchronize offline files before suspendDisabled
Turn off reminder balloonsEnabled
Shared Folders
PolicySettingComment
Allow DFS roots to be publishedDisabled
Allow shared folders to be publishedDisabled
Start Menu and Taskbar
PolicySettingComment
Add Logoff to the Start MenuEnabled
Do not display any custom toolbars in the taskbarEnabled
Do not keep history of recently opened documentsEnabled
Do not use the search-based method when resolving shell shortcutsEnabled
Do not use the tracking-based method when resolving shell shortcutsEnabled
Force classic Start MenuEnabled
Gray unavailable Windows Installer programs Start Menu shortcutsEnabled
Hide the notification areaDisabled
Lock the TaskbarEnabled
Prevent changes to Taskbar and Start Menu SettingsEnabled
Prevent grouping of taskbar itemsDisabled
Prevent users from customizing their Start ScreenEnabled
Remove access to the context menus for the taskbarEnabled
Remove All Programs list from the Start menuEnabled
Choose one of the following actionsRemove and disable setting
PolicySettingComment
Remove Balloon Tips on Start Menu itemsEnabled
Remove Clock from the system notification areaDisabled
Remove common program groups from Start MenuEnabled
Remove Default Programs link from the Start menu.Enabled
Remove Documents icon from Start MenuEnabled
Remove Favorites menu from Start MenuEnabled
Remove frequent programs list from the Start MenuEnabled
Remove Help menu from Start MenuEnabled
Remove links and access to Windows UpdateEnabled
Remove Music icon from Start MenuEnabled
Remove Network Connections from Start MenuEnabled
Remove Network icon from Start MenuEnabled
Remove Pictures icon from Start MenuEnabled
Remove pinned programs list from the Start MenuEnabled
Remove programs on Settings menuEnabled
Remove Recent Items menu from Start MenuEnabled
Remove Run menu from Start MenuEnabled
Remove Search link from Start MenuDisabled
Remove the "Undock PC" button from the Start MenuEnabled
Remove user name from Start MenuEnabled
Remove user's folders from the Start MenuEnabled
Turn off notification area cleanupEnabled
Turn off personalized menusEnabled
Turn off user trackingEnabled
System
PolicySettingComment
Do not display the Getting Started welcome screen at logonEnabled
Don't run specified Windows applicationsEnabled
List of disallowed applications
cmd.exe
netscan.exe
notepad.exe
wordpad.exe
PolicySettingComment
Download missing COM componentsDisabled
Prevent access to registry editing toolsEnabled
Disable regedit from running silently?No
PolicySettingComment
Prevent access to the command promptEnabled
Disable the command prompt script processing also?No
System/Ctrl+Alt+Del Options
PolicySettingComment
Remove Task ManagerEnabled
System/Driver Installation
PolicySettingComment
Configure driver search locationsDisabled
Turn off Windows Update device driver search promptEnabled
System/Folder Redirection
PolicySettingComment
Do not automatically make all redirected folders available offlineEnabled
System/Group Policy
PolicySettingComment
Determine if interactive users can generate Resultant Set of Policy dataEnabled
System/Internet Communication Management
PolicySettingComment
Restrict Internet communicationEnabled
System/Internet Communication Management/Internet Communication settings
PolicySettingComment
Turn off downloading of print drivers over HTTPEnabled
Turn off Internet download for Web publishing and online ordering wizardsEnabled
Turn off Internet File Association serviceEnabled
Turn off printing over HTTPEnabled
Turn off the "Order Prints" picture taskEnabled
Turn off the "Publish to Web" task for files and foldersEnabled
Turn off the Windows Messenger Customer Experience Improvement ProgramEnabled
System/Logon
PolicySettingComment
Do not process the legacy run listEnabled
Do not process the run once listEnabled
System/Scripts
PolicySettingComment
Display instructions in logoff scripts as they runDisabled
Display instructions in logon scripts as they runEnabled
Run legacy logon scripts hiddenDisabled
Run logon scripts synchronouslyEnabled
System/User Profiles
PolicySettingComment
Connect home directory to root of the shareDisabled
Exclude directories in roaming profileDisabled
Limit profile sizeDisabled
Windows Components/AutoPlay Policies
PolicySettingComment
Turn off AutoplayEnabled
Turn off Autoplay on:All drives
Windows Components/File Explorer
PolicySettingComment
Allow only per user or approved shell extensionsEnabled
Display confirmation dialog when deleting filesDisabled
Do not allow Folder Options to be opened from the Options button on the View tab of the ribbonEnabled
Do not move deleted files to the Recycle BinDisabled
Do not request alternate credentialsEnabled
Do not track Shell shortcuts during roamingDisabled
Hide these specified drives in My ComputerEnabled
Pick one of the following combinationsRestrict A, B, C and D drives only
PolicySettingComment
Hides the Manage item on the File Explorer context menuEnabled
Maximum number of recent documentsEnabled
Maximum number of recent documents10
PolicySettingComment
No Computers Near Me in Network LocationsEnabled
No Entire Network in Network LocationsEnabled
Prevent access to drives from My ComputerEnabled
Pick one of the following combinationsRestrict A, B, C and D drives only
PolicySettingComment
Remove "Map Network Drive" and "Disconnect Network Drive"Enabled
Remove CD Burning featuresEnabled
Remove DFS tabEnabled
Remove File Explorer's default context menuEnabled
Remove File menu from File ExplorerDisabled
Remove Hardware tabEnabled
Remove Search button from File ExplorerDisabled
Remove Security tabEnabled
Remove Shared Documents from My ComputerEnabled
Remove UI to change keyboard navigation indicator settingEnabled
Remove UI to change menu animation settingEnabled
Request credentials for network installationsEnabled
Turn off caching of thumbnail picturesEnabled
Turn off shell protocol protected modeEnabled
Turn off Windows Key hotkeysDisabled
Turn on Classic ShellDisabled
Windows Components/File Explorer/Common Open File Dialog
PolicySettingComment
Hide the common dialog back buttonEnabled
Hide the common dialog places barEnabled
Hide the dropdown list of recent filesEnabled
Windows Components/Internet Explorer
PolicySettingComment
Disable AutoComplete for formsDisabled
Disable caching of Auto-Proxy scriptsEnabled
Disable changing accessibility settingsEnabled
Disable changing Advanced page settingsEnabled
Disable changing Automatic Configuration settingsEnabled
Disable changing Calendar and Contact settingsEnabled
Disable changing certificate settingsEnabled
Disable changing color settingsEnabled
Disable changing connection settingsEnabled
Disable changing default browser checkEnabled
Disable changing font settingsEnabled
Disable changing home page settingsEnabled
Home Pagehttps://tpinside/tpinside/
PolicySettingComment
Disable changing language settingsEnabled
Disable changing link color settingsEnabled
Disable changing Messaging settingsEnabled
Disable changing Profile Assistant settingsEnabled
Disable changing ratings settingsEnabled
Disable changing Temporary Internet files settingsEnabled
Disable external branding of Internet ExplorerEnabled
Disable Import/Export Settings wizardEnabled
Disable Internet Connection wizardDisabled
Disable the Reset Web Settings featureEnabled
Display error message on proxy script download failureEnabled
Do not allow users to enable or disable add-onsEnabled
Identity Manager: Prevent users from using IdentitiesEnabled
Pop-up allow listEnabled
Enter the list of sites here.
*.crossknowledge.com
http://vega/
https://tntukweb02
PolicySettingComment
Prevent access to Internet Explorer HelpEnabled
Prevent changing proxy settingsEnabled
Prevent changing the default search providerEnabled
Prevent Internet Explorer Search box from appearingEnabled
Prevent managing the phishing filterEnabled
Select phishing filter modeOff
PolicySettingComment
Prevent running First Run wizardEnabled
Select your choiceGo directly to "Welcome To IE" page
PolicySettingComment
Search: Disable Find Files via F3 within the browserEnabled
Search: Disable Search CustomizationEnabled
Turn off configuration of pop-up windows in tabbed browsingEnabled
Select tabbed browsing pop-up behaviorForce pop-ups to open in a new window
PolicySettingComment
Turn off page-zooming functionalityEnabled
Turn off pop-up managementEnabled
Turn off the quick pick menuEnabled
Turn on the auto-complete feature for user names and passwords on formsDisabled
Use Automatic Detection for dial-up connectionsEnabled
Windows Components/Internet Explorer/Administrator Approved Controls
PolicySettingComment
Audio/Video PlayerDisabled
CarpointDisabled
DHTML Edit ControlDisabled
InvestorDisabled
Menu ControlsDisabled
Microsoft ChatDisabled
Microsoft Scriptlet ComponentDisabled
Microsoft Survey ControlDisabled
MSNBCDisabled
NetShow File Transfer ControlDisabled
Shockwave FlashEnabled
Shockwave FlashEnabled
Windows Components/Internet Explorer/Browser menus
PolicySettingComment
File menu: Disable New menu optionEnabled
File menu: Disable Open menu optionEnabled
File menu: Disable Save As Web Page CompleteEnabled
File menu: Disable Save As... menu optionEnabled
Help menu: Remove 'For Netscape Users' menu optionEnabled
Help menu: Remove 'Send Feedback' menu optionEnabled
Help menu: Remove 'Tip of the Day' menu optionEnabled
Help menu: Remove 'Tour' menu optionEnabled
Tools menu: Disable Internet Options... menu optionEnabled
View menu: Disable Source menu optionEnabled
Windows Components/Internet Explorer/Compatibility View
PolicySettingComment
Turn on Internet Explorer 7 Standards ModeEnabled
Windows Components/Internet Explorer/Delete Browsing History
PolicySettingComment
Disable "Configuring History"Enabled
Days to keep pages in History 
Windows Components/Internet Explorer/Internet Control Panel
PolicySettingComment
Disable the Advanced pageEnabled
Disable the Connections pageEnabled
Disable the Content pageEnabled
Disable the General pageEnabled
Disable the Privacy pageEnabled
Disable the Programs pageEnabled
Disable the Security pageEnabled
Windows Components/Internet Explorer/Internet Control Panel/Advanced Page
PolicySettingComment
Allow active content from CDs to run on user machinesDisabled
Allow Install On Demand (except Internet Explorer)Disabled
Allow software to run or install even if the signature is invalidDisabled
Automatically check for Internet Explorer updatesDisabled
Empty Temporary Internet Files folder when browser is closedEnabled
Play sounds in web pagesDisabled
Play videos in web pagesDisabled
Windows Components/Internet Explorer/Internet Control Panel/Security Page
PolicySettingComment
Intranet Sites: Include all local (intranet) sites not listed in other zonesEnabled
Site to Zone Assignment ListEnabled
Enter the zone assignments here. 
http://altair2
http://config.crossknowledge.com2
http://cours.crossknowledge.com2
http://sigal.crossknowledge.com2
http://tntuktest012
http://vega2
https://acr.si.francetelecom.fr/3
https://helpdesk.teleperformance.com2
https://helpdesk-fr.teleperformance.com2
https://tntuktest012
https://tntukweb022
https://tntukweb02/cuid/front/cuid.export.global.xls.php2
https://www.sebra.ccms.teleperformance.com2
https://broker.gotoassist.com/manager/cachedReportPage.tmpl?_sf=52
PolicySettingComment
Trusted Sites Zone TemplateEnabled
Trusted SitesHigh
Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone
PolicySettingComment
Download signed ActiveX controlsEnabled
Download signed ActiveX controlsEnable
PolicySettingComment
Initialize and script ActiveX controls not marked as safeEnabled
Initialize and script ActiveX controls not marked as safePrompt
PolicySettingComment
Script ActiveX controls marked safe for scriptingEnabled
Script ActiveX controls marked safe for scriptingEnable
PolicySettingComment
Turn on SmartScreen Filter scanDisabled
Web sites in less privileged Web content zones can navigate into this zoneEnabled
Web sites in less privileged Web content zones can navigate into this zoneEnable
Windows Components/Internet Explorer/Internet Control Panel/Security Page/Locked-Down Intranet Zone
PolicySettingComment
Initialize and script ActiveX controls not marked as safeEnabled
Initialize and script ActiveX controls not marked as safeEnable
PolicySettingComment
Turn on SmartScreen Filter scanDisabled
Windows Components/Internet Explorer/Internet Control Panel/Security Page/Restricted Sites Zone
PolicySettingComment
Run ActiveX controls and pluginsDisabled
Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone
PolicySettingComment
Access data sources across domainsEnabled
Access data sources across domainsEnable
PolicySettingComment
Allow active content over restricted protocols to access my computerEnabled
Allow active content over restricted protocols to access my computerPrompt
PolicySettingComment
Allow active scriptingEnabled
Allow active scriptingEnable
PolicySettingComment
Allow binary and script behaviorsEnabled
Allow Binary and Script BehaviorsEnable
PolicySettingComment
Allow cut, copy or paste operations from the clipboard via scriptEnabled
Allow paste operations via scriptEnable
PolicySettingComment
Allow drag and drop or copy and paste filesEnabled
Allow drag and drop or copy and paste filesEnable
PolicySettingComment
Allow file downloadsEnabled
Allow file downloadsEnable
PolicySettingComment
Allow font downloadsEnabled
Allow font downloadsEnable
PolicySettingComment
Allow installation of desktop itemsEnabled
Allow installation of desktop itemsEnable
PolicySettingComment
Allow loading of XAML Browser ApplicationsEnabled
XAML browser applicationsEnable
PolicySettingComment
Allow loading of XAML filesEnabled
XAML FilesEnable
PolicySettingComment
Allow loading of XPS filesEnabled
XPS documentsEnable
PolicySettingComment
Allow META REFRESHEnabled
Allow META REFRESHEnable
PolicySettingComment
Allow only approved domains to use ActiveX controls without promptEnabled
Only allow approved domains to use ActiveX controls without promptDisable
PolicySettingComment
Allow scripting of Internet Explorer WebBrowser controlsEnabled
Internet Explorer web browser controlEnable
PolicySettingComment
Allow script-initiated windows without size or position constraintsEnabled
Allow script-initiated windows without size or position constraintsEnable
PolicySettingComment
Allow scriptletsEnabled
ScriptletsEnable
PolicySettingComment
Allow updates to status bar via scriptEnabled
Status bar updates via scriptEnable
PolicySettingComment
Allow video and animation on a webpage that uses an older media playerEnabled
Allow video and animation on a Web page that uses a legacy media playerDisable
PolicySettingComment
Allow websites to open windows without status bar or Address barEnabled
Open windows without address or status barsEnable
PolicySettingComment
Allow websites to prompt for information by using scripted windowsEnabled
Prompt for information using scripted windowsEnable
PolicySettingComment
Automatic prompting for ActiveX controlsEnabled
Automatic prompting for ActiveX controlsEnable
PolicySettingComment
Automatic prompting for file downloadsEnabled
Automatic prompting for file downloadsEnable
PolicySettingComment
Display mixed contentEnabled
Display mixed contentPrompt
PolicySettingComment
Do not prompt for client certificate selection when no certificates or only one certificate exists.Enabled
Do not prompt for client certificate selection when no certificates or only one certificate exists.Enable
PolicySettingComment
Download signed ActiveX controlsEnabled
Download signed ActiveX controlsEnable
PolicySettingComment
Download unsigned ActiveX controlsEnabled
Download unsigned ActiveX controlsPrompt
PolicySettingComment
Enable MIME SniffingEnabled
Enable MIME SniffingEnable
PolicySettingComment
Include local path when user is uploading files to a serverEnabled
Include local directory path when uploading files to a serverEnable
PolicySettingComment
Initialize and script ActiveX controls not marked as safeEnabled
Initialize and script ActiveX controls not marked as safePrompt
PolicySettingComment
Java permissionsEnabled
Java permissionsLow safety
PolicySettingComment
Launching applications and files in an IFRAMEEnabled
Launching applications and files in an IFRAMEEnable
PolicySettingComment
Logon optionsEnabled
Logon optionsAutomatic logon with current username and password
PolicySettingComment
Navigate windows and frames across different domainsEnabled
Navigate windows and frames across different domainsEnable
PolicySettingComment
Run .NET Framework-reliant components not signed with AuthenticodeEnabled
Run .NET Framework-reliant components not signed with AuthenticodeEnable
PolicySettingComment
Run .NET Framework-reliant components signed with AuthenticodeEnabled
Run .NET Framework-reliant components signed with AuthenticodeEnable
PolicySettingComment
Run ActiveX controls and pluginsEnabled
Run ActiveX controls and pluginsEnable
PolicySettingComment
Script ActiveX controls marked safe for scriptingEnabled
Script ActiveX controls marked safe for scriptingEnable
PolicySettingComment
Scripting of Java appletsEnabled
Scripting of Java appletsEnable
PolicySettingComment
Software channel permissionsEnabled
Software channel permissionsLow safety
PolicySettingComment
Submit non-encrypted form dataEnabled
Submit non-encrypted form dataEnable
PolicySettingComment
Turn off .NET Framework SetupEnabled
.NET Framework SetupDisable
PolicySettingComment
Turn off first-run promptEnabled
First-Run Opt-InEnable
PolicySettingComment
Turn on Cross-Site Scripting FilterEnabled
Turn on Cross-Site Scripting (XSS) FilterDisable
PolicySettingComment
Turn on Protected ModeEnabled
Protected ModeDisable
PolicySettingComment
Turn on SmartScreen Filter scanEnabled
Use SmartScreen FilterDisable
PolicySettingComment
Use Pop-up BlockerEnabled
Use Pop-up BlockerDisable
PolicySettingComment
Userdata persistenceEnabled
Userdata persistenceEnable
PolicySettingComment
Web sites in less privileged Web content zones can navigate into this zoneEnabled
Web sites in less privileged Web content zones can navigate into this zonePrompt
Windows Components/Internet Explorer/Offline Pages
PolicySettingComment
Disable adding channelsEnabled
Disable adding schedules for offline pagesEnabled
Disable all scheduled offline pagesEnabled
Disable channel user interface completelyEnabled
Disable downloading of site subscription contentEnabled
Disable editing and creating of schedule groupsEnabled
Disable editing schedules for offline pagesEnabled
Disable offline page hit loggingEnabled
Disable removing channelsEnabled
Disable removing schedules for offline pagesEnabled
Windows Components/Internet Explorer/Persistence Behavior
PolicySettingComment
File size limits for Internet zoneEnabled
Per domain (in kilobytes)1024
Per document (in kilobytes)128
PolicySettingComment
File size limits for Intranet zoneEnabled
Per domain (in kilobytes)10240
Per document (in kilobytes)512
PolicySettingComment
File size limits for Local Machine zoneEnabled
Per domain(in kilobytes)1024
Per document (in kilobytes)128
PolicySettingComment
File size limits for Restricted Sites zoneEnabled
Per domain (in kilobytes)640
Per document (in kilobytes)64
PolicySettingComment
File size limits for Trusted Sites zoneEnabled
Per domain (in kilobytes)1024
Per document (in kilobytes)128
Windows Components/Internet Explorer/Toolbars
PolicySettingComment
Configure Toolbar ButtonsEnabled
Show Back buttonEnabled
Show Forward buttonEnabled
Show Stop buttonEnabled
Show Refresh buttonEnabled
Show Home buttonEnabled
Show Search buttonDisabled
Show Favorites buttonDisabled
Show History buttonDisabled
Show Folders buttonDisabled
Show Fullscreen buttonDisabled
Show Tools buttonDisabled
Show Mail buttonDisabled
Show Font size buttonDisabled
Show Print buttonDisabled
Show Edit buttonDisabled
Show Discussions buttonDisabled
Show Cut buttonDisabled
Show Copy buttonDisabled
Show Paste buttonDisabled
Show Encoding buttonDisabled
PolicySettingComment
Disable customizing browser toolbar buttonsEnabled
Disable customizing browser toolbarsEnabled
Turn off Developer ToolsEnabled
Windows Components/Microsoft Edge
PolicySettingComment
Allow Adobe FlashEnabled
Allow clearing browsing data on exitEnabled
Allow Developer ToolsDisabled
Configure Password ManagerDisabled
Configure the Adobe Flash Click-to-Run settingDisabled
Windows Components/Microsoft Management Console
PolicySettingComment
Restrict the user from entering author modeEnabled
Restrict users to the explicitly permitted list of snap-insEnabled
Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins
PolicySettingComment
.Net Framework ConfigurationDisabled
Active Directory Domains and TrustsEnabled
Active Directory Sites and ServicesEnabled
Active Directory Users and ComputersEnabled
ADSI EditEnabled
Certificate TemplatesDisabled
CertificatesEnabled
Computer ManagementDisabled
Device ManagerDisabled
Disk DefragmenterDisabled
Disk ManagementDisabled
Distributed File SystemDisabled
Event ViewerDisabled
FAX ServiceDisabled
FrontPage Server ExtensionsDisabled
Indexing ServiceDisabled
Internet Authentication Service (IAS)Disabled
Internet Information ServicesDisabled
IP Security MonitorDisabled
Link to Web AddressDisabled
Local Users and GroupsDisabled
Performance Logs and AlertsDisabled
QoS Admission ControlDisabled
Remote Desktop Services ConfigurationDisabled
Remote DesktopsDisabled
Removable Storage ManagementDisabled
Routing and Remote AccessDisabled
Security Configuration and AnalysisDisabled
Security TemplatesDisabled
ServicesDisabled
Shared FoldersDisabled
System InformationDisabled
TelephonyDisabled
Wireless MonitorDisabled
WMI ControlDisabled
Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Extension snap-ins
PolicySettingComment
AppleTalk RoutingDisabled
Authorization ManagerDisabled
Certification Authority Policy SettingsDisabled
Connection Sharing (NAT)Disabled
DCOM Configuration ExtensionDisabled
Device ManagerDisabled
DHCP Relay ManagementDisabled
Event ViewerDisabled
Extended View (Web View)Disabled
IAS LoggingDisabled
IGMP RoutingDisabled
IPX RIP RoutingDisabled
Logical and Mapped DrivesDisabled
OSPF RoutingDisabled
Public Key PoliciesDisabled
RAS Dialin - User NodeDisabled
Remote AccessDisabled
Removable StorageDisabled
RIP RoutingDisabled
RoutingDisabled
Send Console MessageDisabled
Service DependenciesDisabled
Shared Folders ExtDisabled
SMTP ProtocolDisabled
SNMPDisabled
System PropertiesDisabled
Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy
PolicySettingComment
Group Policy ManagementDisabled
Group Policy Object EditorDisabled
Group Policy tab for Active Directory ToolsDisabled
Resultant Set of Policy snap-inDisabled
Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Group Policy snap-in extensions
PolicySettingComment
Folder RedirectionDisabled
Internet Explorer MaintenanceDisabled
IP Security Policy ManagementDisabled
Remote Installation ServicesDisabled
Scripts (Logon/Logoff)Disabled
Security SettingsDisabled
Software Installation (Computers)Disabled
Software Installation (Users)Disabled
Wireless Network (IEEE 802.11) PoliciesDisabled
Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins/Group Policy/Resultant Set of Policy snap-in extensions
PolicySettingComment
Administrative Templates (Computers)Disabled
Administrative Templates (Users)Disabled
Folder RedirectionDisabled
Internet Explorer MaintenanceDisabled
Security SettingsDisabled
Software Installation (Computers)Disabled
Software Installation (Users)Disabled
Windows Components/NetMeeting
PolicySettingComment
Allow persisting automatic acceptance of CallsEnabled
Disable ChatEnabled
Disable Directory servicesEnabled
Disable NetMeeting 2.x WhiteboardEnabled
Disable WhiteboardEnabled
Prevent adding Directory serversEnabled
Prevent automatic acceptance of CallsEnabled
Prevent changing Call placement methodDisabled
Prevent receiving filesEnabled
Prevent sending filesEnabled
Prevent viewing Web directoryEnabled
Windows Components/NetMeeting/Application Sharing
PolicySettingComment
Prevent ControlEnabled
Prevent Sharing Command PromptsEnabled
Windows Components/NetMeeting/Audio & Video
PolicySettingComment
Disable AudioEnabled
Disable full duplex AudioEnabled
Prevent changing DirectSound Audio settingEnabled
Prevent receiving VideoEnabled
Prevent sending VideoEnabled
Windows Components/NetMeeting/Options Page
PolicySettingComment
Disable the Advanced Calling buttonEnabled
Hide the General pageEnabled
Hide the Security pageEnabled
Hide the Video pageEnabled
Windows Components/Task Scheduler
PolicySettingComment
Hide Advanced Properties Checkbox in Add Scheduled Task WizardEnabled
Hide Property PagesEnabled
Prevent Task Run or EndEnabled
Prohibit BrowseEnabled
Prohibit Drag-and-DropEnabled
Prohibit New Task CreationEnabled
Prohibit Task DeletionEnabled
Windows Components/Windows Installer
PolicySettingComment
Always install with elevated privilegesEnabled
This policy setting must be set for the machine and the user to be enforced.
PolicySettingComment
Prevent removable media source for any installationEnabled
Windows Components/Windows Media Player
PolicySettingComment
Prevent CD and DVD Media Information RetrievalEnabled
Prevent Music File Media Information RetrievalEnabled
Prevent Radio Station Preset RetrievalEnabled
Windows Components/Windows Media Player/Networking
PolicySettingComment
Configure HTTP ProxyDisabled
Configure MMS ProxyDisabled
Configure Network BufferingDisabled
Configure RTSP ProxyDisabled
Hide Network TabEnabled
Streaming Media ProtocolsDisabled
Windows Components/Windows Media Player/Playback
PolicySettingComment
Prevent Codec DownloadEnabled
Windows Components/Windows Media Player/User Interface
PolicySettingComment
Do Not Show AnchorEnabled
Hide Privacy TabEnabled
Hide Security TabEnabled
Windows Components/Windows Messenger
PolicySettingComment
Do not allow Windows Messenger to be runEnabled
Do not automatically start Windows Messenger initiallyEnabled
Windows Components/Windows Update/Legacy Policies
PolicySettingComment
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog boxEnabled
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog boxEnabled
Windows Components/Windows Update/Manage updates offered from Windows Server Update Service
PolicySettingComment
Remove access to use all Windows Update featuresEnabled
Configure notifications: 
Extra Registry Settings
Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.

SettingState
Software\Microsoft\Outlook Express\BlockExeAttachments0
Software\Policies\Microsoft\WindowsMovieMaker\MovieMaker1