Group Policy / Regedit Value & Key |
| A. |
| Action on server disconnect (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files GoOfflineAction (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache Action on server disconnect (User)
User Configuration\Administrative Templates\Network\Offline Files GoOfflineAction (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache |
| Active Desktop Wallpaper
User Configuration\AdministrativeTemplates\Desktop\Active Desktop Wallpaper, WallpaperStyl
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Active Directory Domains and Trusts
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6} |
| Active Directory Sites and Services
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0} |
| Active Directory Users and Computers
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93} |
| Add "Run in Separate Memory Space" check box to Run dialog box
User Configuration\AdministrativeTemplates\Start Menu & Taskbar MemCheckBoxInRunDlg
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Add Logoff to the Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar ForceStartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Add/Delete items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop Add, Delete
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop |
| Administrative Templates (Computer)
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-ins Extensions Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957D-509E-11D1-A7CC-0000F87571E3} |
| Administrative Templates (User)
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-ins Extensions Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3} |
| Administratively assigned offline files (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files AssignedOfflineFolders subkey (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders Administratively assigned offline files (User)
(User Configuration\Administrative Templates\Network\Offline Files) AssignedOfflineFolders subkey (HKCU)
(HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders |
| Allow access to current user's RAS connection properties
(User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_RasMyProperties
(HKCU\Software\Policies\Microsoft\Windows\Network Connections) |
| Allow admin to install from Terminal Services session
(Computer Configuration\Administrative Templates\Windows Components\Windows Installer EnableAdminTSRemote
HKLM\Software\Policies\Microsoft\Windows\Installer |
| Allow configuration of connection sharing (Computer)
Computer Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_ShowSharedAccessUI (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Network Connections Allow configuration of connection sharing (User)
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_ShowSharedAccessUI (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Allow connection components to be enabled or disabled
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_ChangeBindState
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Allow only bitmapped wallpaper
User Configuration\AdministrativeTemplates\Desktop\Active Desktop NoHTMLWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop |
| Allow printers to be published
Computer Configuration\Administrative Templates\Printers PublishPrinters
HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| Allow pruning of published printers
Computer Configuration\Administrative Templates\Printers Immortal
HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| Allow TCP/IP advanced configuration
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_AllowAdvancedTCPIPConfig
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Always install with elevated privileges (Computer)
Computer Configuration\Administrative Templates\Windows Components\Windows Installer AlwaysInstallElevated (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Installer Always install with elevated privileges (User)
User Configuration\Administrative Templates\Windows Components\Windows Installer AlwaysInstallElevated (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Installer |
| AppleTalk Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F83C-C7F5-11D0-A376-00C04FC9DA04} |
| Apply group policy for computers asynchronously during startup
Computer Configuration\Administrative Templates\System\Group Policy SynchronousMachineGroupPolicy
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Apply group policy for users asynchronously during logon
Computer Configuration\Administrative Templates\System\Group Policy SynchronousUserGroupPolicy
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Apply policy to removable media
Computer Configuration\Administrative Templates\System\Disk Quotas ApplyToRemovableMedia
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota |
| At logoff, delete local copy of users offline files
Computer Configuration\Administrative Templates\Network\Offline Files PurgeAtLogoff
HKLM\Software\Policies\Microsoft\Windows\NetCache |
| Automatically publish new printers in Active Directory
Computer Configuration\Administrative Templates\Printers Auto Publishing
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard |
| B. |
| Browse a common web site to find printers
User Configuration\Administrative Templates\Control Panel\Printers Printers Page URL
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard |
| Browse the network to find printers
User Configuration\Administrative Templates\Control Panel\Printers Downlevel Browse
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard |
| C. |
| Cache transforms in secure location on workstation
Computer Configuration\Administrative Templates\Windows Components\Windows Installer TransformsSecure
HKLM\Software\Policies\Microsoft\Windows\Installer |
| Century interpretation for Year 2000
User Configuration\Administrative Templates\System <Calendar-ID>
HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax |
| Certificates
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17} |
| Certification Authority
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3F276EB4-70EE-11D1-8A0F-00C04FB93753} |
| Check published state
Computer Configuration\Administrative Templates\Printers VerifyPublishedState
HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| Clear history of recently opened documents on exit
User Configuration\AdministrativeTemplates\Start Menu & Taskbar ClearRecentDocsOnExit
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Code signing for device drivers
User Configuration\Administrative Templates\System BehaviorOnFailedVerify
HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing |
| Component Services
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B} |
| Computer location
Computer Configuration\Administrative Templates\Printers PhysicalLocation
HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| Computer Management
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{58221C67-EA27-11CF-ADCF-00AA00A80033} |
| Connect home directory to root of the share
User Configuration\Administrative Templates\System\Logon/Logoff ConnectHomeDirToRoot
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Connection Sharing (NAT)
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE450B-D6C2-11D0-A37B-00C04FC9DA04} |
| Create new Group Policy Object links disabled by default
User Configuration\Administrative Templates\System\Group Policy NewGPOLinksDisabled
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor |
| Custom support URL in the Printers folder's left pane
Computer Configuration\Administrative Templates\Printers SupportLink, SupportLinkName
HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| Custom user interface
User Configuration\Administrative Templates\System Shell
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| D. |
| DCOM Configuration Extension
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{9EC88934-C774-11d1-87F4-00C04FC2C17B} |
| Default Active Directory path when searching for printers
(User Configuration\Administrative Templates\Control Panel\Printers Default Search Scope
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard |
| Default cache size
Computer Configuration\Administrative Templates\Network\Offline Files DefCacheSize
HKLM\Software\Policies\Microsoft\Windows\NetCache |
| Default quota limit and warning level
Computer Configuration\Administrative Templates\System\Disk Quotas Limit, LimitUnits, Threshold, ThresholdUnits
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota |
| Delete cached copies of roaming profiles
(Computer Configuration\Administrative Templates\System\Logon DeleteRoamingCache
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Device Manager
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf} |
| Device Manager
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
(HKCU\Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a} |
| DHCP Relay Management
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4502-D6C2-11D0-A37B-00C04FC9DA04} |
| Directory pruning interval
Computer Configuration\Administrative Templates\Printers PruningInterval
HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| Directory pruning priority
Computer Configuration\Administrative Templates\Printers PruningPriority HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| Directory pruning retry Computer Configuration\Administrative Templates\Printers PruningRetries
HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| Disable "Make Available Offline" (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files NoMakeAvailableOffline (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache Disable "Make Available Offline" (User)
User Configuration\Administrative Templates\Network\Offline Files NoMakeAvailableOffline (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache |
| Disable Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop NoActiveDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable Add/Remove Programs, Remove Add or Remove Programs
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs NoAddRemovePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall |
| Disable adding, dragging, dropping and closing the Taskbar's toolbars
User Configuration\AdministrativeTemplates\Desktop NoCloseDragDropBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable addition of printers
User Configuration\Administrative Templates\Control Panel\Printers NoAddPrinter
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable adjusting desktop toolbars
User Configuration\AdministrativeTemplates\Desktop NoMovingBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable Advanced Menu (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler Disable Advanced (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0 Disable Advanced Menu (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler Disable Advanced (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0 |
| Disable all items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop NoComponents
Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop |
| Disable and remove links to Windows Update
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoWindowsUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable and remove the Shut Down command
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoClose
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable automatic update of ADM files
User Configuration\Administrative Templates\System\Group Policy DisableAutoADMUpdate
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor |
| Disable Autoplay (User)
User Configuration\Administrative Templates\System NoDriveTypeAutoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Disable Autoplay (Computer)
Computer Configuration\Administrative Templates\System NoDriveTypeAutoRun (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable background refresh of group policy
Computer Configuration\Administrative Templates\System\Group Policy DisableBkGndGroupPolicy
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Disable Boot / Shutdown / Logon / Logoff status messages, Remove Boot / Shutdown / Logon / Logoff status messages
Computer Configuration\Administrative Templates\System DisableStatusMessages
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Disable browse dialog box for new source
(Computer Configuration\Administrative Templates\Windows Components\Windows Installer DisableBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer |
| Disable Change Password
User Configuration\Administrative Templates\System\Logon/Logoff Disable Change Password
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Disable changes to Taskbar and Start Menu Settings
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoSetTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable changing wallpaper
User Configuration\Administrative Templates\Control Panel\Display NoChangingWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop |
| Disable context menu for taskbar
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoTrayContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable Control Panel
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable deletion of printers
(User Configuration\Administrative Templates\Control Panel\Printers NoDeletePrinter
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable DFS tab
User Configuration\Administrative Templates\Windows Components\Windows Explorer NoDFSTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable Display in control panel
User Configuration\Administrative Templates\Control Panel\Display NoDispCPL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Disable Drag-and-Drop,Prohibit Drag-and-Drop (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler DragAndDrop (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0 Disable Drag-and-Drop,Prohibit Drag-and-Drop (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler DragAndDrop (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0 |
| Disable drag-and-drop context menus on the Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoChangeStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable IE security prompt for Windows Installer scripts
Computer Configuration\Administrative Templates\Windows Components\Windows Installer SafeForScripting
HKLM\Software\Policies\Microsoft\Windows\Installer |
| Disable legacy run list (Computer)
Computer Configuration\Administrative Templates\System DisableLocalMachineRun (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Disable legacy run list (User)
User Configuration\Administrative Templates\System\Logon/Logoff DisableLocalMachineRun (HKCU)
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable Lock Computer
User Configuration\Administrative Templates\System\Logon/Logoff DisableLockWorkstation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Disable Logoff
(User Configuration\Administrative Templates\System\Logon/Logoff NoLogoff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable Logoff on the Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar StartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable media source for any install
User Configuration\Administrative Templates\Windows Components\Windows Installer DisableMedia
HKCU\Software\Policies\Microsoft\Windows\Installer |
| Disable New Task Creation (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler Task Creation (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0 Disable New Task Creation (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler Task Creation (HKCU)
(HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0 |
| Disable patching
Computer Configuration\Administrative Templates\Windows Components\Windows Installer DisablePatch
HKLM\Software\Policies\Microsoft\Windows\Installer |
| Disable personalized menus
User Configuration\AdministrativeTemplates\Start Menu & Taskbar Intellimenus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable programs on Settings menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoSetFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable registry editing tools, Prevent access to registry editing tools
User Configuration\Administrative Templates\System DisableRegistryTools
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Disable reminder balloons (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files NoReminders (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache Disable reminder balloons (User)
User Configuration\Administrative Templates\Network\Offline Files NoReminders (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders |
| Disable rollback (Computer)
(Computer Configuration\Administrative Templates\Windows Components\Windows Installer DisableRollback (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Installer Disable rollback (User)
User Configuration\Administrative Templates\Windows Components\Windows Installer DisableRollback (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Installer |
| Disable Support Information
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs NoSupportInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall |
| Disable Task Deletion (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler Task Deletion (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0 Disable Task Deletion (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler Task Deletion (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0 |
| Disable Task Manager
User Configuration\Administrative Templates\System\Logon/Logoff
Remove Task Manager > User Configuration\Administrative Templates\System\Ctrl+Alt+Del Options DisableTaskMgr
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Disable the command prompt, Prevent access to the command prompt
User Configuration\Administrative Templates\System DisableCMD
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System |
| Disable the run once list (Computer)
Computer Configuration\Administrative Templates\System DisableLocalMachineRunOnce (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Disable the run once list (User)
User Configuration\Administrative Templates\System\Logon/Logoff DisableLocalMachineRunOnce (HKCU)
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable UI to change keyboard navigation indicator setting
User Configuration\Administrative Templates\Windows Components\Windows Explorer NoChangeKeyboardNavigationIndicators
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable UI to change menu animation setting
User Configuration\Administrative Templates\Windows Components\Windows Explorer NoChangeAnimation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable user configuration of Offline Files (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files NoConfigCache (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache Disable user configuration of Offline Files (Prohibit user configuration of Offline Files)
User Configuration\Administrative Templates\Network\Offline Files NoConfigCache (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache |
| Disable user tracking
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoInstrumentation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable Windows Explorer's default context menu
User Configuration\Administrative Templates\Windows Components\Windows Explorer NoViewContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Disable Windows Installer
Computer Configuration\Administrative Templates\Windows Components\Windows Installer DisableMSI
HKLM\Software\Policies\Microsoft\Windows\Installer |
| Disk Defragmenter
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{43668E21-2636-11D1-A1CE-0080C88593A5}
|
| Disk Management
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}
HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3} Note: หมายเลข CLSID ที่อยู่ใน{วงเล็บปีกกา} ในวินโดว์แต่ละรุ่นอาจจะไม่เหมือนกัน |
| Disk Quota policy processing
Computer Configuration\Administrative Templates\System\Group Policy NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66} |
| Display and enable the Network Connection wizard User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_NewConnectionWizard
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Distributed File System
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1} |
| Do not add shares from recently opened documents to the My Network Places folder
User Configuration\AdministrativeTemplates\Desktop NoRecentDocsNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Do not automatically encrypt files moved to encrypted folders
Computer Configuration\Administrative Templates\System) NoEncryptOnMove
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Do not detect slow network connections
Computer Configuration\Administrative Templates\System\Logon SlowLinkDetectEnabled
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Do not keep history of recently opened documents
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoRecentDocsHistory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Do not request alternate credentials
User Configuration\Administrative Templates\Windows Components\Windows Explorer NoRunasInstallPrompt
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Do not track Shell shortcuts during roaming
User Configuration\Administrative Templates\Windows Components\Windows Explorer LinkResolveIgnoreLinkInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Do not use the search-based method when resolving shell shortcuts
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoResolveSearch
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Do not use the tracking-based method when resolving shell shortcuts
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoResolveTrack
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Don't display welcome screen at logon (Computer)
Computer Configuration\Administrative Templates\System NoWelcomeScreen (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Don't display welcome screen at logon, Do not display the Getting Started welcome screen at logon(User)
User Configuration\Administrative Templates\System NoWelcomeScreen (HKCU)
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Don't run specified Windows applications
User Configuration\Administrative Templates\System DisallowRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Don't save settings at exit
User Configuration\AdministrativeTemplates\Desktop NoSaveSettings
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Download missing COM components (Computer)
Computer Configuration\Administrative Templates\System COMClassStore (HKLM)
HKLM\Software\Policies\Microsoft\Windows\App Management Download missing COM components (User)
User Configuration\Administrative Templates\System\Group Policy COMClassStore (HKCU)
HKCU\Software\Policies\Microsoft\Windows\App Management |
| E. |
| EFS recovery policy processing
Computer Configuration\Administrative Templates\System\Group Policy NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
(HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A} |
| Enable access to properties of a LAN connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_LanProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable access to properties of components of a LAN connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_LanChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable access to properties of components of a RAS connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_RasChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable access to properties of RAS connections available to all users
(User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_RasAllUserProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable Active Desktop
(User Configuration\AdministrativeTemplates\Desktop\Active Desktop ForceActiveDesktopOn
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop |
| Enable adding or removing components of a RAS or LAN connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_AddRemoveComponents
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable Classic Shell
User Configuration\Administrative Templates\Windows Components\Windows Explorer ClassicShell
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Enable connecting and disconnecting a LAN connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_LanConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable connecting and disconnecting a RAS connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_RasConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable deletion of RAS connections
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_DeleteConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable deletion of RAS connections available to all users
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_DeleteAllUserConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable disk quotas
Computer Configuration\Administrative Templates\System\Disk Quotas Enable
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota |
| Enable filter in Find dialog box
(User Configuration\AdministrativeTemplates\Desktop\Active Directory EnableFilter
HKCU\Software\Policies\Microsoft\Windows\Directory UI |
| Enable renaming of connections, if supported
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_RenameConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable renaming of RAS connections belonging to the current user
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_RenameMyRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable status statistics for an active connection
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_Statistics
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable the Advanced Settings item on the Advanced menu
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_AdvancedSettings
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable the Dial-up Preferences item on the Advanced menu
User Configuration\Administrative Templates\Network\Network and Dial-up Connections NC_DialupPrefs
HKCU\Software\Policies\Microsoft\Windows\Network Connections |
| Enable user control over installs
Computer Configuration\Administrative Templates\Windows Components\Windows Installer EnableUserControl
HKLM\Software\Policies\Microsoft\Windows\Installer |
| Enable user to browse for source while elevated
Computer Configuration\Administrative Templates\Windows Components\Windows Installer AllowLockdownBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer |
| Enable user to patch elevated products
Computer Configuration\Administrative Templates\Windows Components\Windows Installer AllowLockdownPatch
HKLM\Software\Policies\Microsoft\Windows\Installer |
| Enable user to use media source while elevated
Computer Configuration\Administrative Templates\Windows Components\Windows Installer AllowLockdownMedia
HKLM\Software\Policies\Microsoft\Windows\Installer |
| Enabled
Computer Configuration\Administrative Templates\Network\Offline Files Enabled
HKLM\Software\Policies\Microsoft\Windows\NetCache |
| Enforce disk quota limit
Computer Configuration\Administrative Templates\System\Disk Quotas Enforce
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota |
| Enforce Show Policies Only
User Configuration\Administrative Templates\System\Group Policy ShowPoliciesOnly
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor |
| Event logging level (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files EventLoggingLevel (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache Event logging level (User)
User Configuration\Administrative Templates\Network\Offline Files EventLoggingLevel(HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache |
| Event Viewer
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins) Restrict_Run
(HKCU\Software\Policies\Microsoft\MMC\{975797FC-4E2A-11D0-B702-00C04FD8DBF7} |
| Event Viewer
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{394C052E-B830-11D0-9A86-00C04FD8DBF7} |
| Exclude directories in roaming profile
Exclude directories in roaming profile ExcludeProfileDirs
HKCU\Software\Policies\Microsoft\Windows\System |
| F. |
| FAX Service
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504} |
| Files not cached
Computer Configuration\Administrative Templates\Network\Offline Files ExcludeExtensions
(HKLM\Software\Policies\Microsoft\Windows\NetCache |
| Folder Redirection
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F} |
| Folder Redirection policy processing
Computer Configuration\Administrative Templates\System\Group Policy NoSlowLink, NoGPOListChange
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861} |
| G. |
| Go directly to Components wizard
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs NoService
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall |
| Gray unavailable Windows Installer programs Start Menu shortcuts
User Configuration\AdministrativeTemplates\Start Menu & Taskbar GreyMSIAds
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Group Policy domain controller selection
User Configuration\Administrative Templates\System\Group Policy DCOption
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor |
| Group Policy refresh interval for computers
Computer Configuration\Administrative Templates\System\Group Policy GroupPolicyRefreshTime (HKLM),
GroupPolicyRefreshTimeOffset (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Group Policy refresh interval for domain controllers, Set Group Policy refresh interval for domain controllers
Computer Configuration\Administrative Templates\System\Group Policy GroupPolicyRefreshTimeDC, GroupPolicyRefreshTimeOffsetDC
HKLM\Software\Policies\Microsoft\Windows\System |
| Group Policy refresh interval for users, Set Group Policy refresh interval for users
(User Configuration\Administrative Templates\System\Group Policy GroupPolicyRefreshTime, GroupPolicyRefreshTimeOffset
HKCU\Software\Policies\Microsoft\Windows\System |
| Group Policy slow link detection (Computer)
Computer Configuration\Administrative Templates\System\Group Policy GroupPolicyMinTransferRate (HKLM)
(HKLM\Software\Policies\Microsoft\Windows\System Group Policy slow link detection (User)
User Configuration\Administrative Templates\System\Group Policy GroupPolicyMinTransferRate (HKCU)
(HKCU\Software\Policies\Microsoft\Windows\System |
| Group Policy snap-in
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3} |
| Group Policy Tab for Active Directory Tools
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D70A2BEA-A63E-11D1-A7D4-0000F87571E3} |
| H. |
| Hide Active Directory folder
User Configuration\AdministrativeTemplates\Desktop\Active Directory HideDirectoryFolder
HKCU\Software\Policies\Microsoft\Windows\Directory UI |
| Hide Add New Programs page
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs NoAddPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall |
| Hide Add/Remove Windows Components page
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs NoWindowsSetupPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall |
| Hide all icons on Desktop, Hide and disable all items on the desktop
User Configuration\AdministrativeTemplates\Desktop NoDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Hide Appearance tab
User Configuration\Administrative Templates\Control Panel\Display NoDispAppearancePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Hide Background tab
User Configuration\Administrative Templates\Control Panel\Display NoDispBackgroundPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Hide Change or Remove Programs page
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs NoRemovePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall) |
| Hide Hardware tab
(User Configuration\Administrative Templates\Windows Components\Windows Explorer NoHardwareTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Hide Internet Explorer icon on desktop
(User Configuration\AdministrativeTemplates\Desktop NoInternetIcon
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Hide My Network Places icon on desktop
User Configuration\AdministrativeTemplates\Desktop NoNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Hide Property Pages (Computer)
(Computer Configuration\Administrative Templates\Windows Components\Task Scheduler Property Pages (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0 Hide Property Pages (User)
(User Configuration\Administrative Templates\Windows Components\Task Scheduler Property Pages (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0 |
| Hide Screen Saver tab
(User Configuration\Administrative Templates\Control Panel\Display NoDispScrSavPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Hide Settings tab
User Configuration\Administrative Templates\Control Panel\Display NoDispSettingsPage
(HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Hide specified control panel applets
User Configuration\Administrative Templates\Control Panel) DisallowCpl, href="mk:@MSITStore:regentry.chm::/93227.htm">DisallowCpl subkey
(HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Hide the "Add a program from CD-ROM or floppy disk" option
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs NoAddFromCDorFloppy
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall |
| Hide the "Add programs from Microsoft" option
(User Configuration\Administrative Templates\Control Panel\Add/Remove Programs NoAddFromInternet
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall |
| Hide the "Add programs from your network" option
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs NoAddFromNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall |
| Hide the common dialog back button
User Configuration\Administrative Templates\Windows Components\Windows Explorer\Common Open File Dialog NoBackButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32 |
| Hide the common dialog places bar
User Configuration\Administrative Templates\Windows Components\Windows Explorer\Common Open File Dialog NoPlacesBar
(HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32 |
| Hide the dropdown list of recent files
User Configuration\Administrative Templates\Windows Components\Windows Explorer\Common Open File Dialog NoFileMru
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32 |
| Hide the file scan progress window
(Computer Configuration\Administrative Templates\System\Windows File Protection SfcShowProgress
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection |
| Hide these specified drives in My Computer
User Configuration\Administrative Templates\Windows Components\Windows Explorer NoDrives
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Hides the Manage item on the Windows Explorer context menu
User Configuration\Administrative Templates\Windows Components\Windows Explorer NoManageMyComputerVerb
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| I. |
| IAS Logging
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2E19B602-48EB-11d2-83CA-00104BCA42CF} |
| IGMP Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4508-D6C2-11D0-A37B-00C04FC9DA04} |
| Indexing Service
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986} |
| Initial reminder balloon lifetime(Computer)
Computer Configuration\Administrative Templates\Network\Offline Files InitialBalloonTimeoutSeconds (HKLM)
(HKLM\Software\Policies\Microsoft\Windows\NetCache Initial reminder balloon lifetime (User)
User Configuration\Administrative Templates\Network\Offline Files InitialBalloonTimeoutSeconds (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders |
| Internet Authentication Service (IAS)
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642} |
| Internet Explorer Maintenance
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FC715823-C5FB-11D1-9EEF-00A0C90347FF} |
| Internet Explorer Maintenance policy processing
Computer Configuration\Administrative Templates\System\Group Policy NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B} |
| Internet Information Services
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C} |
| IP Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4500-D6C2-11D0-A37B-00C04FC9DA04} |
| IP Security
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD} |
| IP Security policy processing
Computer Configuration\Administrative Templates\System\Group Policy NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27} |
| IPX RIP Routing
(User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90810502-38F1-11D1-9345-00C04FC9DA04} |
| IPX Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90810500-38F1-11D1-9345-00C04FC9DA04} |
| IPX SAP Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90810504-38F1-11D1-9345-00C04FC9DA04} |
| L. |
| Limit profile size
User Configuration\Administrative Templates\System\Logon/Logoff EnableProfileQuota, IncludeRegInProQuota, MaxProfileSize, ProfileQuotaMessage, WarnUser,WarnUserTimeout
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Limit Windows File Protection cache size
Computer Configuration\Administrative Templates\System\Windows File Protection) SfcQuota
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection |
| Local Users and Groups
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93} |
| Log event when quota limit exceeded
Computer Configuration\Administrative Templates\System\Disk Quotas LogEventOverLimit
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota |
| Log event when quota warning level exceeded
Computer Configuration\Administrative Templates\System\Disk Quotas LogEventOverThreshold
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota |
| Log users off when roaming profile fails
Computer Configuration\Administrative Templates\System\Logon ProfileErrorAction
HKLM\Software\Policies\Microsoft\Windows\System |
| Logging
Computer Configuration\Administrative Templates\Windows Components\Windows Installer Logging
HKLM\Software\Policies\Microsoft\Windows\Installer |
| Logical and Mapped Drives
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6E8E0081-19CD-11D1-AD91-00AA00B8E05A} |
| M. |
| Maximum number of Recent documents
User Configuration\Administrative Templates\Windows Components\Windows Explorer MaxRecentDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Maximum retries to unload and update user profile
Computer Configuration\Administrative Templates\System\Logon ProfileUnloadTimeout
HKLM\SOFTWARE\Policies\Microsoft\Windows\System |
| Maximum size of Active Directory searches
User Configuration\AdministrativeTemplates\Desktop\Active Directory QueryLimit
HKCU\Software\Policies\Microsoft\Windows\Directory UI |
| N. |
| Maximum wait time for Group Policy scripts
Computer Configuration\Administrative Templates\System\Logon MaxGPOScriptWait
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| No "Computers Near Me" in My Network Places
User Configuration\Administrative Templates\Windows Components\Windows Explorer NoComputersNearMe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| No "Entire Network" in My Network Places
User Configuration\Administrative Templates\Windows Components\Windows Explorer NoEntireNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network |
| No screen saver
User Configuration\Administrative Templates\Control Panel\Display ScreenSaveActive
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop |
| Non-default server disconnect actions (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files CustomGoOfflineActions subkey (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions Non-default server disconnect actions (User)
User Configuration\Administrative Templates\Network\Offline Files CustomGoOfflineActions subkey (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions |
| O. |
| Only allow approved Shell extensions
User Configuration\Administrative Templates\Windows Components\Windows Explorer EnforceShellExtensionSecurity
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| OSPF Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4506-D6C2-11D0-A37B-00C04FC9DA04} |
| P. |
| Password protect the screen saver
User Configuration\Administrative Templates\Control Panel\Display ScreenSaverIsSecure
(HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop |
| Performance Logs and Alerts
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4} |
| Pre-populate printer search location text
Computer Configuration\Administrative Templates\Printers PhysicalLocationSupport
HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| Prevent access to drives from My Computer, Hide these specified drives in My Computer
User Configuration\Administrative Templates\Windows Components\Windows Explorer
User Configuration\Administrative Templates\Windows Components\File Explorer
NoViewOnDrive, NoDrives
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Prevent Task Run or End (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler Execution (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0 Prevent Task Run or End (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler Execution (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0 |
| Prevent use of Offline Files folder (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files NoCacheViewer (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache Prevent use of Offline Files Folder (User)
User Configuration\Administrative Templates\Network\Offline Files NoCacheViewer (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache |
| Primary DNS Suffix
Computer Configuration\Administrative Templates\System\DNS Client NV PrimaryDnsSuffix, PrimaryDnsSuffix
HKLM\Software\Policies\Microsoft\System\DNSclient |
| Printer browsing
Computer Configuration\Administrative Templates\Printers ServerThread
HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| Prohibit adding items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop NoAddingComponents
Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop |
| Prohibit Browse (Computer)
Computer Configuration\Administrative Templates\Windows Components\Task Scheduler Allow Browse (HKLM)
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0 Prohibit Browse (User)
User Configuration\Administrative Templates\Windows Components\Task Scheduler Allow Browse (HKCU)
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0 |
| Prohibit changes
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop NoActiveDesktopChanges
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Prohibit closing items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop NoClosingComponents
Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop |
| Prohibit deleting items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop NoDeletingComponents
Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop |
| Prohibit editing items
User Configuration\AdministrativeTemplates\Desktop\Active Desktop
User Configuration\AdministrativeTemplates\Desktop\Desktop NoEditingComponents
Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop |
| Prohibit user from changing My Documents path, Prohibit User from manually redirecting Profile Folders
User Configuration\AdministrativeTemplates\Desktop DisablePersonalDirChange
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Prompt user when slow link is detected
Computer Configuration\Administrative Templates\System\Logon SlowLinkUIEnabled
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Prune printers that are not automatically republished
Computer Configuration\Administrative Templates\Printers PruneDownlevel
HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| Public Key Policies
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17} |
| Q. |
| QoS Admission Control
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3} |
| R. |
| RAS Dialin - User Node
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3} |
| Registry policy processing
Computer Configuration\Administrative Templates\System\Group Policy NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2} |
| Reminder balloon frequency (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files ReminderFreqMinutes (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache Reminder balloon frequency (User)
User Configuration\Administrative Templates\Network\Offline Files ReminderFreqMinutes (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders |
| Reminder balloon lifetime (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files ReminderBalloonTimeoutSeconds (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache Reminder balloon lifetime (User)
User Configuration\Administrative Templates\Network\Offline Files ReminderBalloonTimeoutSeconds (HKCU)
ReminderBalloonTimeoutSeconds |
| Remote Access
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5880CD5C-8EC0-11d1-9570-0060B0576642} |
| Remote Installation Services
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3060E8CE-7020-11D2-842D-00C04FA372D4} |
| Removable Storage
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{243E20B0-48ED-11D2-97DA-00A024D77700} |
| Removable Storage Management
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700} |
| Remove "Map Network Drive" and "Disconnect Network Drive"
User Configuration\Administrative Templates\Windows Components\Windows Explorer NoNetConnectDisconnect
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove common program groups from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoCommonGroups
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove Disconnect item from Start menu (Terminal Services only)
Computer Configuration\Administrative Templates\System NoDisconnect
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove Documents menu from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoRecentDocsMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove Favorites menu from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoFavoritesMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove File menu from Windows Explorer
User Configuration\Administrative Templates\Windows Components\Windows Explorer NoFileMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove Help menu from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoSMHelp
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove My Documents icon from desktop
User Configuration\AdministrativeTemplates\Desktop {450D8FBA-AD25-11D0-98A8-0800361B1103}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum |
| Remove My Documents icon from Start Menu
User Configuration\AdministrativeTemplates\Desktop NoSMMyDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove Network & Dial-up Connections from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoNetworkConnections
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove Run menu from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove Search button from Windows Explorer
User Configuration\Administrative Templates\Windows Components\Windows Explorer
User Configuration\Administrative Templates\Windows Components\File Explorer NoShellSearchButton(HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove Search menu from Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoFind
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove security option from Start menu (Terminal Services only)
Computer Configuration\Administrative Templates\System NoNTSecurity
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove the Folder Options menu item from the Tools menu
User Configuration\Administrative Templates\Windows Components\Windows Explorer
NoFolderOptions
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Windows 8 Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon
User Configuration\Administrative Templates\Windows Components\File Explorer NoFolderOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{7C35BA3C-6C0F-428C-89D6-33DD5E026F4C}User\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Remove user's folders from the Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar NoStartMenuSubFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Request credentials for network installations
User Configuration\Administrative Templates\Windows Components\Windows Explorer PromptRunasInstallNetPath
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Restrict selection of Windows 2000 menus and dialogs language
User Configuration\Administrative Templates\Control Panel\Regional Options MultiUILanguageID
HKCU\Software\Policies\Microsoft\Control Panel\Desktop |
| Restrict the user from entering author mode
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console RestrictAuthorMode
HKCU\Software\Policies\Microsoft\MMC |
| Restrict users to the explicitly permitted list of snap-ins
(User Configuration\Administrative Templates\Windows Components\Microsoft Management Console RestrictToPermittedSnapins
HKCU\Software\Policies\Microsoft\MMC |
| RIP Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4504-D6C2-11D0-A37B-00C04FC9DA04} |
| Routing
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DAB1A262-4FD7-11D1-842C-00C04FB6C218} |
| Routing and Remote Access
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04} |
| Run legacy logon scripts hidden
Run legacy logon scripts hidden HideLegacyLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Run logoff scripts visible
User Configuration\Administrative Templates\System\Logon/Logoff HideLogoffScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Run logon scripts synchronously (Computer)
Computer Configuration\Administrative Templates\System\Logon RunLogonScriptSync (HKLM)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System Run logon scripts synchronously (User)
User Configuration\Administrative Templates\System\Logon/Logoff RunLogonScriptSync (HKCU)
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Run logon scripts visible
User Configuration\Administrative Templates\System\Logon/Logoff HideLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Run only allowed Windows applications
User Configuration\Administrative Templates\System RestrictRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Run shutdown scripts visible
Computer Configuration\Administrative Templates\System\Logon HideShutdownScripts HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Run startup scripts asynchronously
Computer Configuration\Administrative Templates\System\Logon RunStartupScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Run startup scripts visible
Computer Configuration\Administrative Templates\System\Logon HideStartupScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| Run these programs at user logon (Computer)
Computer Configuration\Administrative Templates\System Run subkey (HKLM)
(HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run Run these programs at user logon (User)
User Configuration\Administrative Templates\System\Logon/Logoff Run subkey(HKCU)
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run |
| S. |
| Screen saver executable name
User Configuration\Administrative Templates\Control Panel\Display SCRNSAVE.EXE
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop |
| Scripts (Logon/Logoff)
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66650-4972-11D1-A7CA-0000F87571E3}) |
| Scripts (Startup/Shutdown)
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B6664F-4972-11D1-A7CA-0000F87571E3} |
| Scripts policy processing
Computer Configuration\Administrative Templates\System\Group Policy NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3} |
| Search order
User Configuration\Administrative Templates\Windows Components\Windows Installer SearchOrder
HKCU\Software\Policies\Microsoft\Windows\Installer |
| Security Configuration and Analysis
User Configuration\Administrative Templates\Windows Components\
Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9} |
| Security policy processing
Computer Configuration\Administrative Templates\System\Group Policy NoBackgroundPolicy, NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A} |
| Security Settings
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B} |
| Security Templates
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9} |
| Send Console Message
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3} |
| Service Dependencies
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A} |
| Services
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{58221C66-EA27-11CF-ADCF-00AA00A80033} |
| Set Windows File Protection scanning
Computer Configuration\Administrative Templates\System\Windows File Protection SfcScan
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection |
| Shared Folders
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{58221C65-EA27-11CF-ADCF-00AA00A80033} |
| Show only specified control panel applets
User Configuration\Administrative Templates\Control Panel RestrictCpl, href="mk:@MSITStore:regentry.chm::/93230.htm">RestrictCpl subkey
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Slow network connection timeout for user profiles
Computer Configuration\Administrative Templates\System\Logon SlowLinkTimeOut, UserProfileMinTransferRate
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| SMTP Protocol
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-11d0-bb77-00aa00a1eab7} |
| SNMP
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7AF60DD3-4979-11D1-8A6C-00C04FC33566} |
| Software Installation
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy) Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{942A8E4F-A261-11D1-A760-00C04FB9603F} |
| Software Installation
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F} |
| Software Installation policy processing
Computer Configuration\Administrative Templates\System\Group Policy NoGPOListChanges, NoSlowLink
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7} |
| Specify default category for Add New Programs
User Configuration\Administrative Templates\Control Panel\Add/Remove Programs DefaultCategory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall |
| Specify Windows File Protection cache location
Computer Configuration\Administrative Templates\System\Windows File Protection SFCDllCacheDir
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection |
| Subfolders always available offline
Computer Configuration\Administrative Templates\Network\Offline Files AlwaysPinSubFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache |
| Synchronize all offline files before logging off (Computer)
Computer Configuration\Administrative Templates\Network\Offline Files SyncAtLogoff (HKLM)
HKLM\Software\Policies\Microsoft\Windows\NetCache Synchronize all offline files before logging off (User)
User Configuration\Administrative Templates\Network\Offline Files) SyncAtLogoff (HKCU)
HKCU\Software\Policies\Microsoft\Windows\NetCache |
| System Information
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{45ac8c63-23e2-11d1-a696-00c04fd58bc3} |
| System Properties
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F3621F1-23C6-11D1-AD97-00AA00B88E5A} |
| T. |
| Telephony
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
(HKCU\Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A} |
| Terminal Services Configuration
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917} |
| Timeout for dialog boxes
Computer Configuration\Administrative Templates\System\Logon ProfileDlgTimeOut
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| U. |
| User Group Policy loopback processing mode \
Computer Configuration\Administrative Templates\System\Group Policy UserPolicyMode
HKLM\Software\Policies\Microsoft\Windows\System |
| V. |
| Verbose vs normal status messages
Computer Configuration\Administrative Templates\System VerboseStatus
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| W. |
| Wait for remote user profile
Computer Configuration\Administrative Templates\System\Logon SlowLinkProfileDefault
HKLM\Software\Policies\Microsoft\Windows\System |
| Web-based printing
Computer Configuration\Administrative Templates\Printers DisableWebPrinting
HKLM\Software\Policies\Microsoft\Windows NT\Printers |
| WMI Control
User Configuration\Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46} |
ไม่มีความคิดเห็น :
แสดงความคิดเห็น