วันอังคารที่ 27 สิงหาคม พ.ศ. 2556

Comparison table. gpedit and regedit setting: ตารางเปรียบเทียบการตั้งค่า Group Policy กับ Key และ Value ใน Registry (Basic Group Policy Page 6.)

 

 

 

Basic Local Group Policy Contents

1. 2.
3. 4. 
5. 6. Comparison table. gpedit and regedit setting
7. Use Process Monitor (Procmon). Find the Registry key used in setting a Group Policy Object.  

 

Basic Group Policy Page 6

 

Comparison table. gpedit and regedit setting

ตารางเปรียบเทียบการตั้งค่า Group Policy กับ Key และ Value ใน Registry

 

Comparison table. gpedit and regedit setting

 

 

 

ถ้าคุณมีพื้นฐานในเรื่องของ Group policy และ Registry ดีอยู่แล้ว คุณก็สามารถข้ามไปดูตารางเปรียบเทียบจากข้อ C. แล้วนำไปใช้งานได้เลยครับ

 

 

 

 

 

 

 

A. ตัวอย่างวิธีการเปรียบเทียบการตั้งค่าใน Group Policy / Regedit (ดูภาพประกอบตามหมายเลข)

ในตัวอย่างของผมจะเป็นการตั้งค่า Policy หัวข้อ Hide all icons on Desktop (ใน Windows 8 จะใช้คำว่า Hide and disable all items on the desktop

1. เปิด gpedit.msc > จากนั้นคลิกไปตาม Path ที่ระบุไว้ ในตารางข้อ C. > Double click ที่ Policy ตามหัวข้อที่คุณต้องการ ซึ่งค่า Default ของ Policy จะเป็น Not configured

2. เปิด regedit > จากนั้นคลิกไปตาม Key ที่ระบุไว้ในตารางข้อ C.

Comparison gpedit and regedit setting

 

3. ทดลองเปลี่ยนการตั้งค่าใน gpedit.msc จากตัวอย่างของผม เลือกเป็น Enabled

4. คลิกที่โปรแกรม regedit จากนั้นกดปุ่ม F5 ทีแป้น Keyboard ก็จะเห็นว่าโปรแกรมจะสร้างข้อมูลให้คุณเอง (หรือคุณจะคลิกที่ View Tab เลือก Refresh)

Comparison gpedit and regedit setting

Note: ในการทดสอบการเปรียบเทียบ หรือ ถ้าคุณต้องการจะปรับแต่งระบบ Windows โดยใช้ Group Policy ก็ไม่ควรปรับแต่ง Registry ใน Key หรือ Value ที่ทำหน้าที่เดียวกัน สำหรับรายละเอียดเพิ่มเติมให้คุณอ่านได้จากบทความ Basic GP page 3. ที่หัวข้อ ข้อแตกต่างระหว่างการใช้ตัวเลือก Not Configured กับ Disabled ใน gpedit.msc

 

 

 

 

B. อ่านก่อน

1. ตารางเปรียบเทียบการตั้งค่า Group policy กับ Regedit ที่คุณเห็นในข้อ C. ผมได้มาจาก Microsoft.com ซึ่งเป็นการการอ้างอิงจาก Group Policy ของ Windows 2000

2. ทุกครั้งที่มีการเปลี่ยนรุ่นของวินโดว์, Group Policy และ Registry ก็จะมีการอัพเดทตามไปด้วยบางครั้งการตั้งค่าที่เหมือนกันก็อาจจะมีการเปลี่ยนชื่อไปบ้าง แต่รวมๆแล้วก็ยังสื่อความหมายเหมือนเดิม

3. Policy ที่อยู่ในตารางพื้นหลังสีเขียว หมายถึง... คุณจะเลือกตั้งค่าจากในกลุ่มของ Computer หรือ User ก็ได้ ซึ่งก็ให้ผลลัพธ์เหมือนกัน แต่มันก็มีเรื่องที่แตกต่างกันอยู่บ้างซึ่งคุณสามารถอ่านรายละเอียดได้จาก Basic GP Page 2. ข้อ A.

4. อักษรย่อในวงเล็บหมายถึง

Computer = Policy ที่อยู่ในกลุ่ม Computer Configuration 
User = Policy ที่อยู่ในกลุ่ม User Configuration
HKLM = HKEY_LOCAL_MACHINE
HKCU = HKEY_CURRENT_USER

5. อักษรสีเหลือง หมายถึง ชื่อของ Policy หรือ Path ที่มีการเปลี่ยนแปลงซึ่งผมตรวจสอบเป็นบางส่วนใน Windows 8 Pro 64bit เพียงรุ่นเดียว และจะหาเวลามา Update ให้ในภายหลังครับ

Note: ชื่อ และ Pathที่เปลี่ยนไปใน Windows 8 นั้นก็ไม่ได้หมายความว่ามันจะใช้ได้กับ Widows 8ทุก Policy นะครับ เพราะมันอาจจะเปลี่ยนไปตั้งแต่ Windows รุ่นก่อนหน้านั้นก็ได้

6. ** ถ้าคุณใช้ Windows 8 ไม่ว่าคุณจะดูการตั้งค่าจากตารางข้อ C. ข้างล่างนี้ หรือ ดูจากที่ไหนก็ตาม

6.1 ถ้าการ Policy ที่ระบุไว้อยู่ที่ 
User Configuration\AdministrativeTemplates\Desktop\
Active Desktop 
แล้วคุณหาไม่เจอ ให้คุณเข้าไปหาใน Root ที่ชื่อ Desktop แทน 
6.2 ถ้าการ Policy ที่ระบุไว้อยู่ที่ 

User Configuration\Administrative Templates\Windows Components\Windows Explorer หรือ
Computer Configuration\Administrative Templates\Windows Components\
Windows Explorer
แล้วคุณหาไม่เจอ ให้คุณรู้ไว้ว่าใน Windows 8 ได้เปลี่ยนชื่อ Root นี้เป็น File Explorer ครับ

7. ถ้าคุณอยากรู้ว่าหัวข้อ Policy ที่คุณกำลังเลือกอยู่นั้นมีวิธีการใช้งานอย่างไร หรือ Support กับ Windows Versions ใดบ้างก็สามารถทำได้ 2วิธีคือ

7.1 อ่านคำอธิบายจากข้างในโปรแกรม Gpedit.msc ในส่วนของ Dialog box เมื่อคุณดับเบิลคลิก เพื่อตั้งค่า Policy นั้นๆ ในการใช้งานจริงคุณก็ควรจะใช้วิธีนี้ เพราะมีรายละเอียดการตั้งค่าที่ครบถ้วนกว่า ผมเขียนรายละเอียดไว้ทีหัวข้อนี้ครับ Options ต่างๆของการตั้งค่าใน Policy หรือคุณจะดูคร่าวๆจากภาพประกอบข้องล่างก็ได้

7.2 คลิกที่หัวข้อของ Policy นั้นๆจากในตารางข้อ C. ก็จะเป็นการ Link ไปที่เว็บไซท์ของ Microsoft เพื่ออ่านคำอธิบายแบบสั้นๆ

 

 

 

 

C. ตารางเปรียบเทียบการตั้งค่า Group Policy / Regedit

 

Group Policy / Regedit Value & Key

 

A.

 

Action on server disconnect (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files

GoOfflineAction (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache

Action on server disconnect (User)
User Configuration\Administrative Templates\Network\Offline Files

GoOfflineAction (HKCU) 
HKCU\Software\Policies\Microsoft\Windows\NetCache

Active Desktop Wallpaper
User Configuration\AdministrativeTemplates\Desktop\Active Desktop

Wallpaper, WallpaperStyl
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Active Directory Domains and Trusts
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}

Active Directory Sites and Services
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}

Active Directory Users and Computers
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}

Add "Run in Separate Memory Space" check box to Run dialog box
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

MemCheckBoxInRunDlg
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Add Logoff to the Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

ForceStartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Add/Delete items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop

Add, Delete
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

Administrative Templates (Computer)
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy

User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-ins Extensions

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B95
7D-509E-11D1-A7CC-0000F87571E3}

Administrative Templates (User)
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy

User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-ins Extensions

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B95
7E-509E-11D1-A7CC-0000F87571E3}

Administratively assigned offline files (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files

AssignedOfflineFolders subkey (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders

Administratively assigned offline files (User)
(User Configuration\Administrative Templates\Network\Offline Files)

AssignedOfflineFolders subkey (HKCU)
(HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders

Allow access to current user's RAS connection properties
(User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_RasMyProperties
(HKCU\Software\Policies\Microsoft\Windows\Network Connections)

Allow admin to install from Terminal Services session
(Computer Configuration\Administrative Templates\Windows Components\Windows Installer

EnableAdminTSRemote
HKLM\Software\Policies\Microsoft\Windows\Installer

Allow configuration of connection sharing (Computer)
Computer Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_ShowSharedAccessUI (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Network Connections

Allow configuration of connection sharing (User)
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_ShowSharedAccessUI (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Allow connection components to be enabled or disabled
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_ChangeBindState
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Allow only bitmapped wallpaper
User Configuration\AdministrativeTemplates\Desktop\Active Desktop

NoHTMLWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

Allow printers to be published
Computer Configuration\Administrative Templates\Printers

PublishPrinters
HKLM\Software\Policies\Microsoft\Windows NT\Printers

Allow pruning of published printers
Computer Configuration\Administrative Templates\Printers

Immortal
HKLM\Software\Policies\Microsoft\Windows NT\Printers

Allow TCP/IP advanced configuration
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_AllowAdvancedTCPIPConfig
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Always install with elevated privileges (Computer)
Computer Configuration\Administrative Templates\Windows Components\Windows Installer

AlwaysInstallElevated (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Installer

Always install with elevated privileges (User)
User Configuration\Administrative Templates\Windows Components\Windows Installer

AlwaysInstallElevated (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Installer

AppleTalk Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F83C-C7F5-11D0-A376-00C04FC9DA04}

Apply group policy for computers asynchronously during startup
Computer Configuration\Administrative Templates\System\Group Policy

SynchronousMachineGroupPolicy
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Apply group policy for users asynchronously during logon 
Computer Configuration\Administrative Templates\System\Group Policy

SynchronousUserGroupPolicy
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Apply policy to removable media
Computer Configuration\Administrative Templates\System\Disk Quotas

ApplyToRemovableMedia
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota

At logoff, delete local copy of users offline files
Computer Configuration\Administrative Templates\Network\Offline Files

PurgeAtLogoff
HKLM\Software\Policies\Microsoft\Windows\NetCache

Automatically publish new printers in Active Directory
Computer Configuration\Administrative Templates\Printers

Auto Publishing
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard

 

B.

 

Browse a common web site to find printers
User Configuration\Administrative Templates\Control Panel\Printers

Printers Page URL
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard

Browse the network to find printers
User Configuration\Administrative Templates\Control Panel\Printers

Downlevel Browse
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard

 

C.

 

Cache transforms in secure location on workstation
Computer Configuration\Administrative Templates\Windows Components\Windows Installer

TransformsSecure
HKLM\Software\Policies\Microsoft\Windows\Installer

Century interpretation for Year 2000
User Configuration\Administrative Templates\System

<Calendar-ID>
HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax

Certificates
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}

Certification Authority
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3F276EB4-70EE-11D1-8A0F-00C04FB93753}

Check published state
Computer Configuration\Administrative Templates\Printers

VerifyPublishedState
HKLM\Software\Policies\Microsoft\Windows NT\Printers

Clear history of recently opened documents on exit
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

ClearRecentDocsOnExit
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Code signing for device drivers
User Configuration\Administrative Templates\System

BehaviorOnFailedVerify
HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing

Component Services
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}

Computer location
Computer Configuration\Administrative Templates\Printers

PhysicalLocation
HKLM\Software\Policies\Microsoft\Windows NT\Printers

Computer Management
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{58221C67-EA27-11CF-ADCF-00AA00A80033}

Connect home directory to root of the share
User Configuration\Administrative Templates\System\Logon/Logoff

ConnectHomeDirToRoot
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Connection Sharing (NAT)
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE450B-D6C2-11D0-A37B-00C04FC9DA04}

Create new Group Policy Object links disabled by default
User Configuration\Administrative Templates\System\Group Policy

NewGPOLinksDisabled
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor

Custom support URL in the Printers folder's left pane
Computer Configuration\Administrative Templates\Printers

SupportLink, SupportLinkName
HKLM\Software\Policies\Microsoft\Windows NT\Printers

Custom user interface
User Configuration\Administrative Templates\System

Shell
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

 

D.

 

DCOM Configuration Extension
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{9EC88934-C774-11d1-87F4-00C04FC2C17B}

Default Active Directory path when searching for printers
(User Configuration\Administrative Templates\Control Panel\Printers

Default Search Scope
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard

Default cache size
Computer Configuration\Administrative Templates\Network\Offline Files

DefCacheSize
HKLM\Software\Policies\Microsoft\Windows\NetCache

Default quota limit and warning level
Computer Configuration\Administrative Templates\System\Disk Quotas

Limit, LimitUnits, Threshold, ThresholdUnits
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota

Delete cached copies of roaming profiles
(Computer Configuration\Administrative Templates\System\Logon

DeleteRoamingCache
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Device Manager
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}

Device Manager
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
(HKCU\Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}

DHCP Relay Management
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4502-D6C2-11D0-A37B-00C04FC9DA04}

Directory pruning interval
Computer Configuration\Administrative Templates\Printers

PruningInterval
HKLM\Software\Policies\Microsoft\Windows NT\Printers

Directory pruning priority
Computer Configuration\Administrative Templates\Printers

PruningPriority

HKLM\Software\Policies\Microsoft\Windows NT\Printers

Directory pruning retry

Computer Configuration\Administrative Templates\Printers

PruningRetries
HKLM\Software\Policies\Microsoft\Windows NT\Printers

Disable "Make Available Offline" (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files

NoMakeAvailableOffline (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache

Disable "Make Available Offline" (User)
User Configuration\Administrative Templates\Network\Offline Files

NoMakeAvailableOffline (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache

Disable Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop

NoActiveDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable Add/Remove Programs, Remove Add or Remove Programs
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs

NoAddRemovePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

Disable adding, dragging, dropping and closing the Taskbar's toolbars
User Configuration\AdministrativeTemplates\Desktop

NoCloseDragDropBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable addition of printers
User Configuration\Administrative Templates\Control Panel\Printers

NoAddPrinter
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable adjusting desktop toolbars
User Configuration\AdministrativeTemplates\Desktop

NoMovingBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable Advanced Menu (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler

Disable Advanced  (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Disable Advanced Menu (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler

Disable Advanced (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Disable all items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop

NoComponents
Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

Disable and remove links to Windows Update
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoWindowsUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable and remove the Shut Down command
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoClose
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable automatic update of ADM files
User Configuration\Administrative Templates\System\Group Policy

DisableAutoADMUpdate
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor

Disable Autoplay (User)
User Configuration\Administrative Templates\System

NoDriveTypeAutoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable Autoplay (Computer)
Computer Configuration\Administrative Templates\System

NoDriveTypeAutoRun (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable background refresh of group policy
Computer Configuration\Administrative Templates\System\Group Policy

DisableBkGndGroupPolicy
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Disable Boot / Shutdown / Logon / Logoff status messages, Remove Boot / Shutdown / Logon / Logoff status messages
Computer Configuration\Administrative Templates\System

DisableStatusMessages
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Disable browse dialog box for new source
(Computer Configuration\Administrative Templates\Windows Components\Windows Installer

DisableBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer

Disable Change Password
User Configuration\Administrative Templates\System\Logon/Logoff

Disable Change Password
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Disable changes to Taskbar and Start Menu Settings
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoSetTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable changing wallpaper
User Configuration\Administrative Templates\Control Panel\Display

NoChangingWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

Disable context menu for taskbar
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoTrayContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable Control Panel
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable deletion of printers
(User Configuration\Administrative Templates\Control Panel\Printers

NoDeletePrinter
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable DFS tab
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoDFSTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable Display in control panel
User Configuration\Administrative Templates\Control Panel\Display

NoDispCPL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Disable Drag-and-Drop,Prohibit Drag-and-Drop (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler

DragAndDrop (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Disable Drag-and-Drop,Prohibit Drag-and-Drop (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler

DragAndDrop (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Disable drag-and-drop context menus on the Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoChangeStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable IE security prompt for Windows Installer scripts
Computer Configuration\Administrative Templates\Windows Components\Windows Installer

SafeForScripting
HKLM\Software\Policies\Microsoft\Windows\Installer

Disable legacy run list (Computer)
Computer Configuration\Administrative Templates\System

DisableLocalMachineRun (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable legacy run list (User)
User Configuration\Administrative Templates\System\Logon/Logoff

DisableLocalMachineRun (HKCU)
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable Lock Computer
User Configuration\Administrative Templates\System\Logon/Logoff

DisableLockWorkstation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Disable Logoff
(User Configuration\Administrative Templates\System\Logon/Logoff

NoLogoff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable Logoff on the Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

StartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable media source for any install
User Configuration\Administrative Templates\Windows Components\Windows Installer

DisableMedia
HKCU\Software\Policies\Microsoft\Windows\Installer

Disable New Task Creation (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler

Task Creation (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Disable New Task Creation (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler

Task Creation (HKCU)
(HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Disable patching
Computer Configuration\Administrative Templates\Windows Components\Windows Installer

DisablePatch
HKLM\Software\Policies\Microsoft\Windows\Installer

Disable personalized menus
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

Intellimenus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable programs on Settings menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoSetFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable registry editing tools, Prevent access to registry editing tools
User Configuration\Administrative Templates\System

DisableRegistryTools
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Disable reminder balloons (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files

NoReminders (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache

Disable reminder balloons (User)
User Configuration\Administrative Templates\Network\Offline Files

NoReminders (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders

Disable rollback (Computer)
(Computer Configuration\Administrative Templates\Windows Components\Windows Installer

DisableRollback (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Installer

Disable rollback (User)
User Configuration\Administrative Templates\Windows Components\Windows Installer

DisableRollback (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Installer

Disable Support Information
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs

NoSupportInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

Disable Task Deletion (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler

Task Deletion (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Disable Task Deletion (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler

Task Deletion (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Disable Task Manager
User Configuration\Administrative Templates\System\Logon/Logoff
Remove Task Manager 
> User Configuration\Administrative Templates\System\Ctrl+Alt+Del Options

DisableTaskMgr
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Disable the command prompt, Prevent access to the command prompt 
User Configuration\Administrative Templates\System

DisableCMD
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System

Disable the run once list (Computer)
Computer Configuration\Administrative Templates\System

DisableLocalMachineRunOnce (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable the run once list (User)
User Configuration\Administrative Templates\System\Logon/Logoff

DisableLocalMachineRunOnce (HKCU)
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable UI to change keyboard navigation indicator setting
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoChangeKeyboardNavigationIndicators
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable UI to change menu animation setting
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoChangeAnimation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable user configuration of Offline Files (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files

NoConfigCache (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache

Disable user configuration of Offline Files (Prohibit user configuration of Offline Files)
User Configuration\Administrative Templates\Network\Offline Files

NoConfigCache (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache

Disable user tracking
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoInstrumentation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable Windows Explorer's default context menu 
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoViewContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Disable Windows Installer
Computer Configuration\Administrative Templates\Windows Components\Windows Installer

DisableMSI
HKLM\Software\Policies\Microsoft\Windows\Installer

Disk Defragmenter
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{43668E21-2636-11D1-A1CE-0080C88593A5}


Disk Management
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}

HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}

Note: หมายเลข CLSID ที่อยู่ใน{วงเล็บปีกกา} ในวินโดว์แต่ละรุ่นอาจจะไม่เหมือนกัน

Disk Quota policy processing 
Computer Configuration\Administrative Templates\System\Group Policy

NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}

Display and enable the Network Connection wizard

User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_NewConnectionWizard
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Distributed File System
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}

Do not add shares from recently opened documents to the My Network Places folder
User Configuration\AdministrativeTemplates\Desktop

NoRecentDocsNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Do not automatically encrypt files moved to encrypted folders 
Computer Configuration\Administrative Templates\System)

NoEncryptOnMove
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Do not detect slow network connections
Computer Configuration\Administrative Templates\System\Logon

SlowLinkDetectEnabled
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Do not keep history of recently opened documents
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoRecentDocsHistory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Do not request alternate credentials
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoRunasInstallPrompt
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Do not track Shell shortcuts during roaming
User Configuration\Administrative Templates\Windows Components\Windows Explorer

LinkResolveIgnoreLinkInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Do not use the search-based method when resolving shell shortcuts
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoResolveSearch
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Do not use the tracking-based method when resolving shell shortcuts
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoResolveTrack
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Don't display welcome screen at logon (Computer)
Computer Configuration\Administrative Templates\System

NoWelcomeScreen (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Don't display welcome screen at logon, Do not display the Getting Started welcome screen at logon(User) 
User Configuration\Administrative Templates\System

NoWelcomeScreen (HKCU)
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Don't run specified Windows applications
User Configuration\Administrative Templates\System

DisallowRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Don't save settings at exit
User Configuration\AdministrativeTemplates\Desktop

NoSaveSettings
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Download missing COM components (Computer)
Computer Configuration\Administrative Templates\System

COMClassStore (HKLM)
HKLM\Software\Policies\Microsoft\Windows\App Management

Download missing COM components (User)
User Configuration\Administrative Templates\System\Group Policy

COMClassStore (HKCU)
HKCU\Software\Policies\Microsoft\Windows\App Management

 

E.

 

EFS recovery policy processing 
Computer Configuration\Administrative Templates\System\Group Policy

NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
(HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}

Enable access to properties of a LAN connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_LanProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable access to properties of components of a LAN connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_LanChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable access to properties of components of a RAS connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_RasChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable access to properties of RAS connections available to all users
(User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_RasAllUserProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable Active Desktop
(User Configuration\AdministrativeTemplates\Desktop\Active Desktop

ForceActiveDesktopOn
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

Enable adding or removing components of a RAS or LAN connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_AddRemoveComponents
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable Classic Shell
User Configuration\Administrative Templates\Windows Components\Windows Explorer

ClassicShell
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Enable connecting and disconnecting a LAN connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_LanConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable connecting and disconnecting a RAS connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_RasConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable deletion of RAS connections
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_DeleteConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable deletion of RAS connections available to all users
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_DeleteAllUserConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable disk quotas
Computer Configuration\Administrative Templates\System\Disk Quotas

Enable
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota

Enable filter in Find dialog box
(User Configuration\AdministrativeTemplates\Desktop\Active Directory

EnableFilter
HKCU\Software\Policies\Microsoft\Windows\Directory UI

Enable renaming of connections, if supported
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_RenameConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable renaming of RAS connections belonging to the current user
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_RenameMyRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable status statistics for an active connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_Statistics
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable the Advanced Settings item on the Advanced menu
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_AdvancedSettings
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable the Dial-up Preferences item on the Advanced menu
User Configuration\Administrative Templates\Network\Network and Dial-up Connections

NC_DialupPrefs
HKCU\Software\Policies\Microsoft\Windows\Network Connections

Enable user control over installs
Computer Configuration\Administrative Templates\Windows Components\Windows Installer

EnableUserControl
HKLM\Software\Policies\Microsoft\Windows\Installer

Enable user to browse for source while elevated
Computer Configuration\Administrative Templates\Windows Components\Windows Installer

AllowLockdownBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer

Enable user to patch elevated products
Computer Configuration\Administrative Templates\Windows Components\Windows Installer

AllowLockdownPatch
HKLM\Software\Policies\Microsoft\Windows\Installer

Enable user to use media source while elevated
Computer Configuration\Administrative Templates\Windows Components\Windows Installer

AllowLockdownMedia
HKLM\Software\Policies\Microsoft\Windows\Installer

Enabled
Computer Configuration\Administrative Templates\Network\Offline Files

Enabled
HKLM\Software\Policies\Microsoft\Windows\NetCache

Enforce disk quota limit
Computer Configuration\Administrative Templates\System\Disk Quotas

Enforce
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota

Enforce Show Policies Only
User Configuration\Administrative Templates\System\Group Policy

ShowPoliciesOnly
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor

Event logging level (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files

EventLoggingLevel (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache

Event logging level (User)
User Configuration\Administrative Templates\Network\Offline Files

EventLoggingLevel(HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache

Event Viewer
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins)

Restrict_Run 
(HKCU\Software\Policies\Microsoft\MMC\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}

Event Viewer
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{394C052E-B830-11D0-9A86-00C04FD8DBF7}

Exclude directories in roaming profile
Exclude directories in roaming profile

ExcludeProfileDirs
HKCU\Software\Policies\Microsoft\Windows\System

 

F.

 

FAX Service
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}

Files not cached
Computer Configuration\Administrative Templates\Network\Offline Files

ExcludeExtensions
(HKLM\Software\Policies\Microsoft\Windows\NetCache

Folder Redirection
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}

Folder Redirection policy processing 
Computer Configuration\Administrative Templates\System\Group Policy

NoSlowLink, NoGPOListChange
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}

 

G.

 

Go directly to Components wizard
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs

NoService
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

Gray unavailable Windows Installer programs Start Menu shortcuts
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

GreyMSIAds
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Group Policy domain controller selection
User Configuration\Administrative Templates\System\Group Policy

DCOption
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor

Group Policy refresh interval for computers
Computer Configuration\Administrative Templates\System\Group Policy

GroupPolicyRefreshTime (HKLM),
GroupPolicyRefreshTimeOffset (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Group Policy refresh interval for domain controllers, Set Group Policy refresh interval for domain controllers
Computer Configuration\Administrative Templates\System\Group Policy

GroupPolicyRefreshTimeDC, GroupPolicyRefreshTimeOffsetDC
HKLM\Software\Policies\Microsoft\Windows\System

Group Policy refresh interval for users, Set Group Policy refresh interval for users
(User Configuration\Administrative Templates\System\Group Policy

GroupPolicyRefreshTime, GroupPolicyRefreshTimeOffset
HKCU\Software\Policies\Microsoft\Windows\System

Group Policy slow link detection (Computer)
Computer Configuration\Administrative Templates\System\Group Policy

GroupPolicyMinTransferRate (HKLM)
(HKLM\Software\Policies\Microsoft\Windows\System

Group Policy slow link detection (User)
User Configuration\Administrative Templates\System\Group Policy

GroupPolicyMinTransferRate (HKCU)
(HKCU\Software\Policies\Microsoft\Windows\System

Group Policy snap-in
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}

Group Policy Tab for Active Directory Tools
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D70A2BEA-A63E-11D1-A7D4-0000F87571E3}

 

H.

 

Hide Active Directory folder
User Configuration\AdministrativeTemplates\Desktop\Active Directory

HideDirectoryFolder
HKCU\Software\Policies\Microsoft\Windows\Directory UI

Hide Add New Programs page
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs

NoAddPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

Hide Add/Remove Windows Components page
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs

NoWindowsSetupPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

Hide all icons on Desktop, Hide and disable all items on the desktop
User Configuration\AdministrativeTemplates\Desktop

NoDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Hide Appearance tab
User Configuration\Administrative Templates\Control Panel\Display

NoDispAppearancePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Hide Background tab
User Configuration\Administrative Templates\Control Panel\Display

NoDispBackgroundPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Hide Change or Remove Programs page
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs

NoRemovePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall)

Hide Hardware tab
(User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoHardwareTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Hide Internet Explorer icon on desktop
(User Configuration\AdministrativeTemplates\Desktop

NoInternetIcon
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Hide My Network Places icon on desktop
User Configuration\AdministrativeTemplates\Desktop

NoNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Hide Property Pages (Computer)
(Computer Configuration\Administrative Templates\Windows Components\Task Scheduler

Property Pages (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Hide Property Pages (User)
(User Configuration\Administrative Templates\Windows Components\Task Scheduler

Property Pages (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Hide Screen Saver tab
(User Configuration\Administrative Templates\Control Panel\Display

NoDispScrSavPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Hide Settings tab
User Configuration\Administrative Templates\Control Panel\Display

NoDispSettingsPage
(HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Hide specified control panel applets
User Configuration\Administrative Templates\Control Panel)

DisallowCpl, href="mk:@MSITStore:regentry.chm::/93227.htm">DisallowCpl subkey
(HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Hide the "Add a program from CD-ROM or floppy disk" option
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs

NoAddFromCDorFloppy
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

Hide the "Add programs from Microsoft" option
(User Configuration\Administrative Templates\Control Panel\Add/Remove Programs

NoAddFromInternet
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

Hide the "Add programs from your network" option
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs

NoAddFromNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

Hide the common dialog back button
User Configuration\Administrative Templates\Windows Components\Windows Explorer\Common Open File Dialog

NoBackButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

Hide the common dialog places bar
User Configuration\Administrative Templates\Windows Components\Windows Explorer\Common Open File Dialog

NoPlacesBar
(HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

Hide the dropdown list of recent files
User Configuration\Administrative Templates\Windows Components\Windows Explorer\Common Open File Dialog

NoFileMru 
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

Hide the file scan progress window 
(Computer Configuration\Administrative Templates\System\Windows File Protection

SfcShowProgress
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection

Hide these specified drives in My Computer
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoDrives
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Hides the Manage item on the Windows Explorer context menu
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoManageMyComputerVerb
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

 

I.

 

IAS Logging
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2E19B602-48EB-11d2-83CA-00104BCA42CF}

IGMP Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4508-D6C2-11D0-A37B-00C04FC9DA04}

Indexing Service
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}

Initial reminder balloon lifetime(Computer) 
Computer Configuration\Administrative Templates\Network\Offline Files

InitialBalloonTimeoutSeconds (HKLM)
(HKLM\Software\Policies\Microsoft\Windows\NetCache

Initial reminder balloon lifetime (User)
User Configuration\Administrative Templates\Network\Offline Files

InitialBalloonTimeoutSeconds (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders

Internet Authentication Service (IAS)
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}

Internet Explorer Maintenance
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FC715823-C5FB-11D1-9EEF-00A0C90347FF}

Internet Explorer Maintenance policy processing
Computer Configuration\Administrative Templates\System\Group Policy

NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}

Internet Information Services
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}

IP Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4500-D6C2-11D0-A37B-00C04FC9DA04}

IP Security
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}

IP Security policy processing
Computer Configuration\Administrative Templates\System\Group Policy

NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}

IPX RIP Routing
(User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90810502-38F1-11D1-9345-00C04FC9DA04}

IPX Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90810500-38F1-11D1-9345-00C04FC9DA04}

IPX SAP Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90810504-38F1-11D1-9345-00C04FC9DA04}

 

L.

 

Limit profile size
User Configuration\Administrative Templates\System\Logon/Logoff

EnableProfileQuota, IncludeRegInProQuota, MaxProfileSize, ProfileQuotaMessage, WarnUser,WarnUserTimeout
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Limit Windows File Protection cache size 
Computer Configuration\Administrative Templates\System\Windows File Protection)

SfcQuota
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection

Local Users and Groups
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}

Log event when quota limit exceeded
Computer Configuration\Administrative Templates\System\Disk Quotas

LogEventOverLimit
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota

Log event when quota warning level exceeded
Computer Configuration\Administrative Templates\System\Disk Quotas

LogEventOverThreshold
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota

Log users off when roaming profile fails
Computer Configuration\Administrative Templates\System\Logon

ProfileErrorAction
HKLM\Software\Policies\Microsoft\Windows\System

Logging
Computer Configuration\Administrative Templates\Windows Components\Windows Installer

Logging
HKLM\Software\Policies\Microsoft\Windows\Installer

Logical and Mapped Drives
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6E8E0081-19CD-11D1-AD91-00AA00B8E05A}

 

M.

 

Maximum number of Recent documents 
User Configuration\Administrative Templates\Windows Components\Windows Explorer

MaxRecentDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Maximum retries to unload and update user profile
Computer Configuration\Administrative Templates\System\Logon

ProfileUnloadTimeout
HKLM\SOFTWARE\Policies\Microsoft\Windows\System

Maximum size of Active Directory searches
User Configuration\AdministrativeTemplates\Desktop\Active Directory

QueryLimit
HKCU\Software\Policies\Microsoft\Windows\Directory UI

 

N.

 

Maximum wait time for Group Policy scripts
Computer Configuration\Administrative Templates\System\Logon

MaxGPOScriptWait
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

No "Computers Near Me" in My Network Places
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoComputersNearMe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

No "Entire Network" in My Network Places
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoEntireNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network

No screen saver
User Configuration\Administrative Templates\Control Panel\Display

ScreenSaveActive
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop

Non-default server disconnect actions (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files

CustomGoOfflineActions subkey (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions

Non-default server disconnect actions (User)
User Configuration\Administrative Templates\Network\Offline Files

CustomGoOfflineActions subkey (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions

 

O.

 

Only allow approved Shell extensions
User Configuration\Administrative Templates\Windows Components\Windows Explorer

EnforceShellExtensionSecurity
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

OSPF Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4506-D6C2-11D0-A37B-00C04FC9DA04}

 

P.

 

Password protect the screen saver
User Configuration\Administrative Templates\Control Panel\Display

ScreenSaverIsSecure
(HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop

Performance Logs and Alerts
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}

Pre-populate printer search location text
Computer Configuration\Administrative Templates\Printers

PhysicalLocationSupport
HKLM\Software\Policies\Microsoft\Windows NT\Printers

Prevent access to drives from My Computer, Hide these specified drives in My Computer
User Configuration\Administrative Templates\Windows Components\Windows Explorer
User Configuration\Administrative Templates\Windows Components\File Explorer 

NoViewOnDrive, NoDrives
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Prevent Task Run or End (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler

Execution (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Prevent Task Run or End (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler

Execution (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Prevent use of Offline Files folder (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files

NoCacheViewer (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache

Prevent use of Offline Files Folder (User)
User Configuration\Administrative Templates\Network\Offline Files

NoCacheViewer (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache

Primary DNS Suffix
Computer Configuration\Administrative Templates\System\DNS Client

NV PrimaryDnsSuffix, PrimaryDnsSuffix
HKLM\Software\Policies\Microsoft\System\DNSclient

Printer browsing
Computer Configuration\Administrative Templates\Printers

ServerThread
HKLM\Software\Policies\Microsoft\Windows NT\Printers

Prohibit adding items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop

NoAddingComponents
Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

Prohibit Browse (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler

Allow Browse (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Prohibit Browse (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler

Allow Browse (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0

Prohibit changes
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop

NoActiveDesktopChanges
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Prohibit closing items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop

NoClosingComponents
Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

Prohibit deleting items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop

NoDeletingComponents
Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

Prohibit editing items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop

NoEditingComponents
Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop

Prohibit user from changing My Documents path, Prohibit User from manually redirecting Profile Folders
User Configuration\AdministrativeTemplates\Desktop

DisablePersonalDirChange
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Prompt user when slow link is detected
Computer Configuration\Administrative Templates\System\Logon

SlowLinkUIEnabled
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Prune printers that are not automatically republished
Computer Configuration\Administrative Templates\Printers

PruneDownlevel
HKLM\Software\Policies\Microsoft\Windows NT\Printers

Public Key Policies
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}

 

Q.

 

QoS Admission Control
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}

 

R.

 

RAS Dialin - User Node
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}

Registry policy processing 
Computer Configuration\Administrative Templates\System\Group Policy

NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}

Reminder balloon frequency (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files

ReminderFreqMinutes (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache

Reminder balloon frequency (User)
User Configuration\Administrative Templates\Network\Offline Files

ReminderFreqMinutes (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders

Reminder balloon lifetime (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files

ReminderBalloonTimeoutSeconds (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache

Reminder balloon lifetime (User)
User Configuration\Administrative Templates\Network\Offline Files

ReminderBalloonTimeoutSeconds (HKCU)
ReminderBalloonTimeoutSeconds

Remote Access
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5880CD5C-8EC0-11d1-9570-0060B0576642}

Remote Installation Services
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3060E8CE-7020-11D2-842D-00C04FA372D4}

Removable Storage
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{243E20B0-48ED-11D2-97DA-00A024D77700}

Removable Storage Management
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}

Remove "Map Network Drive" and "Disconnect Network Drive"
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoNetConnectDisconnect
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove common program groups from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoCommonGroups
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove Disconnect item from Start menu (Terminal Services only) 
Computer Configuration\Administrative Templates\System

NoDisconnect
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove Documents menu from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoRecentDocsMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove Favorites menu from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoFavoritesMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove File menu from Windows Explorer
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoFileMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove Help menu from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoSMHelp
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove My Documents icon from desktop
User Configuration\AdministrativeTemplates\Desktop

{450D8FBA-AD25-11D0-98A8-0800361B1103}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum

Remove My Documents icon from Start Menu
User Configuration\AdministrativeTemplates\Desktop

NoSMMyDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove Network & Dial-up Connections from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoNetworkConnections
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove Run menu from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove Search button from Windows Explorer
User Configuration\Administrative Templates\Windows Components\Windows Explorer
User Configuration\Administrative Templates\Windows Components\File Explorer

NoShellSearchButton(HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove Search menu from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoFind
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove security option from Start menu (Terminal Services only)
Computer Configuration\Administrative Templates\System

NoNTSecurity
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove the Folder Options menu item from the Tools menu 
User Configuration\Administrative Templates\Windows Components\Windows Explorer

NoFolderOptions
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer


Windows 8

Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon 
User Configuration\Administrative Templates\Windows Components\File Explorer

NoFolderOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{7C35BA3C-6C0F-428C-89D6-33DD5E026F4C}User\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Remove user's folders from the Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

NoStartMenuSubFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Request credentials for network installations
User Configuration\Administrative Templates\Windows Components\Windows Explorer

PromptRunasInstallNetPath
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Restrict selection of Windows 2000 menus and dialogs language
User Configuration\Administrative Templates\Control Panel\Regional Options

MultiUILanguageID
HKCU\Software\Policies\Microsoft\Control Panel\Desktop

Restrict the user from entering author mode
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console

RestrictAuthorMode
HKCU\Software\Policies\Microsoft\MMC

Restrict users to the explicitly permitted list of snap-ins
(User Configuration\Administrative Templates\Windows Components\Microsoft Management Console

RestrictToPermittedSnapins
HKCU\Software\Policies\Microsoft\MMC

RIP Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4504-D6C2-11D0-A37B-00C04FC9DA04}

Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DAB1A262-4FD7-11D1-842C-00C04FB6C218}

Routing and Remote Access
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}

Run legacy logon scripts hidden
Run legacy logon scripts hidden

HideLegacyLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Run logoff scripts visible
User Configuration\Administrative Templates\System\Logon/Logoff

HideLogoffScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Run logon scripts synchronously (Computer)
Computer Configuration\Administrative Templates\System\Logon

RunLogonScriptSync (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Run logon scripts synchronously (User)
User Configuration\Administrative Templates\System\Logon/Logoff

RunLogonScriptSync (HKCU)
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Run logon scripts visible
User Configuration\Administrative Templates\System\Logon/Logoff

HideLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Run only allowed Windows applications
User Configuration\Administrative Templates\System

RestrictRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Run shutdown scripts visible
Computer Configuration\Administrative Templates\System\Logon

HideShutdownScripts

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Run startup scripts asynchronously
Computer Configuration\Administrative Templates\System\Logon

RunStartupScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Run startup scripts visible
Computer Configuration\Administrative Templates\System\Logon

HideStartupScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

Run these programs at user logon (Computer)
Computer Configuration\Administrative Templates\System

Run subkey (HKLM)
(HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

Run these programs at user logon (User)
User Configuration\Administrative Templates\System\Logon/Logoff

Run subkey(HKCU)
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

 

S.

 

Screen saver executable name
User Configuration\Administrative Templates\Control Panel\Display

SCRNSAVE.EXE
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop

Scripts (Logon/Logoff)
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66650-4972-11D1-A7CA-0000F87571E3})

Scripts (Startup/Shutdown)
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B6664F-4972-11D1-A7CA-0000F87571E3}

Scripts policy processing 
Computer Configuration\Administrative Templates\System\Group Policy

NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}

Search order
User Configuration\Administrative Templates\Windows Components\Windows Installer

SearchOrder
HKCU\Software\Policies\Microsoft\Windows\Installer

Security Configuration and Analysis
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}

Security policy processing 
Computer Configuration\Administrative Templates\System\Group Policy

NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}

Security Settings
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}

Security Templates
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}

Send Console Message
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3}

Service Dependencies
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}

Services
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{58221C66-EA27-11CF-ADCF-00AA00A80033}

Set Windows File Protection scanning 
Computer Configuration\Administrative Templates\System\Windows File Protection

SfcScan
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection

Shared Folders
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{58221C65-EA27-11CF-ADCF-00AA00A80033}

Show only specified control panel applets
User Configuration\Administrative Templates\Control Panel

RestrictCpl, href="mk:@MSITStore:regentry.chm::/93230.htm">RestrictCpl subkey
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Slow network connection timeout for user profiles
Computer Configuration\Administrative Templates\System\Logon

SlowLinkTimeOut, UserProfileMinTransferRate
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

SMTP Protocol
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-11d0-bb77-00aa00a1eab7}

SNMP
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7AF60DD3-4979-11D1-8A6C-00C04FC33566}

Software Installation
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy)

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{942A8E4F-A261-11D1-A760-00C04FB9603F}

Software Installation
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}

Software Installation policy processing 
Computer Configuration\Administrative Templates\System\Group Policy

NoGPOListChanges, NoSlowLink
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}

Specify default category for Add New Programs
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs

DefaultCategory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall

Specify Windows File Protection cache location 
Computer Configuration\Administrative Templates\System\Windows File Protection

SFCDllCacheDir
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection

Subfolders always available offline
Computer Configuration\Administrative Templates\Network\Offline Files

AlwaysPinSubFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache

Synchronize all offline files before logging off (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files

SyncAtLogoff (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache

Synchronize all offline files before logging off (User)
User Configuration\Administrative Templates\Network\Offline Files)

SyncAtLogoff (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache

System Information
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{45ac8c63-23e2-11d1-a696-00c04fd58bc3}

System Properties
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F3621F1-23C6-11D1-AD97-00AA00B88E5A}

 

T.

 

Telephony
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
(HKCU\Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}

Terminal Services Configuration
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}

Timeout for dialog boxes
Computer Configuration\Administrative Templates\System\Logon

ProfileDlgTimeOut
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

 

U.

 

User Group Policy loopback processing mode \
Computer Configuration\Administrative Templates\System\Group Policy

UserPolicyMode
HKLM\Software\Policies\Microsoft\Windows\System

 

V.

 

Verbose vs normal status messages
Computer Configuration\Administrative Templates\System

VerboseStatus
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

 

W.

 

Wait for remote user profile
Computer Configuration\Administrative Templates\System\Logon

SlowLinkProfileDefault
HKLM\Software\Policies\Microsoft\Windows\System

Web-based printing
Computer Configuration\Administrative Templates\Printers

DisableWebPrinting
HKLM\Software\Policies\Microsoft\Windows NT\Printers

WMI Control
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}

 

 

ผมมีวิธีการค้นหาข้อมูล Registry ที่ใช้ในการตั้งค่าต่างๆใน Group Policy อีกวิธีหนึ่งครับ ซึ่งก็ให้ความสะดวกกันอีกแบบนั่นก็คือ

การใช้ Procmon ค้นหา Registry ที่ใช้ในการตั้งค่า Group Policy

 

 

 

 

ไม่มีความคิดเห็น :