Policy Settings

Group Policy Settings Reference
Version 1.3 Windows Server 2003 Service Pack 1
This spreadsheet lists the policy settings for computer and user configurations included in the Administrative Template (.adm) files delivered
Windows Server 2003 Service Pack 1. The policy settings included cover Windows Server 2003, Windows XP Professional,
and Windows 2000. These .adm files are used to expose policy settings when you edit Group Policy objects
(GPOs) in the Group Policy Object Editor (also known as GPEdit).
The Security Settings worksheet includes information about Account Policies (Password Policy, Account Lockout Policy, and Kerberos Policy
Assignment, and Security Options), Event Log, Restricted Groups, System Services, Registry, and File System policy settings. Note: This do
the Security Settings extension (scecli.dll), such as Wireless Network extension, Public Key Policies, or Software Restrction Policies.
Each .adm file is represented by a single worksheet within this spreadsheet. In addition, a worksheet containing all policy settings, called All,
of reference. By using the ADM Parser utility (admx.msi, available from the Microsoft Web site), you can import
custom .adm files into the spreadsheet to reflect your specific environment. For more information, see the ADM Parser utility Help.
You can use the filtering capabilities included in this spreadsheet to view a specific subset of data based on one or a combination of
values available in one or more of the columns. In addition, you can select Custom in the drop-down list of any of the column
headings to add additional filtering criteria within that column. To view a specific subset of data, click the drop-down arrow in the
column heading cells that contain the value, or combination of values, on which you want to filter, and then click the desired value in the
drop-down list. For example, to view a subset of policy settings that are available through the Inetres.adm template and viewed under the
Computer Configuration node, in the All worksheet, click .adm File, click Inetres.adm, and then, in Computer/User Node, click MACHINE.
Legal Notice
The information contained in this document represents the current view of Microsoft Corp. on the issues discussed as of the date of publication.
Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft canno
guarantee the accuracy of any information presented after the date of publication.
The information contained in this document relates to pre-release software product, which may be substantially modified before its first commercial release.
Accordingly, the information may not accurately describe or reflect the software product when first commercially released.
This document is provided for informational purposes only, and Microsoft makes no warranties, express or implied, with respect to this document or the inform
This is a preliminary document and may be changed substantially prior to final commercial release of the software described herein.
This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, AS TO THE INFORMATION IN THIS D
Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be repro
or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording or otherwise), or for
any purpose, without the express written permission of Microsoft Corp.
Microsoft may have patents, patent applications, trademarks, copyrights or other intellectual property rights covering subject matter in this document.
Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these
patents, trademarks, copyrights or other intellectual property
Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and events depicted herei
no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred
© 2005 Microsoft Corp. All rights reserved.
Microsoft, the Windows logo, Windows, Windows Media, Active Directory and Windows NT are either registered trademarks or trademarks of Microsoft Corp.
The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
.adm File Computer/User
Policy
NodePath
system MACHINE Administrative Templates\System
system MACHINE Administrative Templates\System\User Profiles
system MACHINE Administrative Templates\System\Scripts
system MACHINE Administrative Templates\System\Logon
system MACHINE Administrative Templates\System\Disk Quotas
system MACHINE Administrative Templates\System\Net Logon
system MACHINE Administrative Templates\System\Net Logon\DC Locator DNS Records
system MACHINE Administrative Templates\System\Group Policy
system MACHINE Administrative Templates\System\Remote Assistance
system MACHINE Administrative Templates\System\Remote Assistance
system MACHINE Administrative Templates\System\System Restore
system MACHINE Administrative Templates\System\System Restore
system MACHINE Administrative Templates\System\Error Reporting
system MACHINE Administrative Templates\System\Error Reporting
system MACHINE Administrative Templates\System\Error Reporting\Advanced Error Reporting settings
system MACHINE Administrative Templates\System\Windows File Protection
system MACHINE Administrative Templates\System\Remote Procedure Call
system MACHINE Administrative Templates\System\Windows Time Service
system MACHINE Administrative Templates\System\Windows Time Service\Time Providers
system MACHINE Administrative Templates\System\Internet Communication Management
system MACHINE Administrative Templates\System\Internet Communication Management\Internet Communication settings
system MACHINE Administrative Templates\System\Distributed COM\Application Compatibility Settings
system MACHINE Administrative Templates\System\Distributed COM\Application Compatibility Settings
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
system MACHINE Administrative Templates\Network\DNS Client
system MACHINE Administrative Templates\Network\Offline Files
system MACHINE Administrative Templates\Network\Network Connections
system MACHINE Administrative Templates\Network\Network Connections\Windows Firewall\Domain Profile
system MACHINE Administrative Templates\Network\Network Connections\Windows Firewall\Standard Profile
system MACHINE Administrative Templates\Network\Network Connections\Windows Firewall
system MACHINE Administrative Templates\Network\QoS Packet Scheduler
system MACHINE Administrative Templates\Network\QoS Packet Scheduler\DSCP value of conforming packets
system MACHINE Administrative Templates\Network\QoS Packet Scheduler\DSCP value of non-conforming packets
system MACHINE Administrative Templates\Network\QoS Packet Scheduler\Layer-2 priority value
system MACHINE Administrative Templates\Network\SNMP
system MACHINE Administrative Templates\Network\Background Intelligent Transfer Service
system MACHINE Administrative Templates\Network\Background Intelligent Transfer Service
system MACHINE Administrative Templates\Network
system MACHINE Administrative Templates\Printers
system MACHINE Administrative Templates\Windows Components\Application Compatibility
system MACHINE Administrative Templates\Windows Components\Event Viewer
system MACHINE Administrative Templates\Windows Components\Internet Information Services
system MACHINE Administrative Templates\Windows Components\Security Center
system MACHINE Administrative Templates\Windows Components\Task Scheduler
system MACHINE Administrative Templates\Windows Components\Terminal Services
system MACHINE Administrative Templates\Windows Components\Terminal Services\Client/Server data redirection
system MACHINE Administrative Templates\Windows Components\Terminal Services\Encryption and Security
system MACHINE Administrative Templates\Windows Components\Terminal Services\Encryption and Security
system MACHINE Administrative Templates\Windows Components\Terminal Services\Encryption and Security\RPC Security Policy
system MACHINE Administrative Templates\Windows Components\Terminal Services\Licensing
system MACHINE Administrative Templates\Windows Components\Terminal Services\Licensing
system MACHINE Administrative Templates\Windows Components\Terminal Services\Temporary folders
system MACHINE Administrative Templates\Windows Components\Terminal Services\Temporary folders
system MACHINE Administrative Templates\Windows Components\Terminal Services\Client
system MACHINE Administrative Templates\Windows Components\Terminal Services\Session Directory
system MACHINE Administrative Templates\Windows Components\Terminal Services\Sessions
system MACHINE Administrative Templates\Windows Components\Windows Explorer
system MACHINE Administrative Templates\Windows Components\Windows Installer
system MACHINE Administrative Templates\Windows Components\Windows Messenger
system MACHINE Administrative Templates\Windows Components\Windows Messenger
system MACHINE Administrative Templates\Windows Components\Windows Media Digital Rights Management
system MACHINE Administrative Templates\Windows Components\Windows Movie Maker
system MACHINE Administrative Templates\Windows Components\Windows Update
system MACHINE Administrative Templates\Windows Components\Windows Update
system USER Administrative Templates\Start Menu and Taskbar
system USER Administrative Templates\Desktop
system USER Administrative Templates\Desktop\Active Desktop
system USER Administrative Templates\Desktop\Active Directory
system USER Administrative Templates\Control Panel
system USER Administrative Templates\Control Panel\Add or Remove Programs
system USER Administrative Templates\Control Panel\Display
system USER Administrative Templates\Control Panel\Display\Desktop Themes
system USER Administrative Templates\Control Panel\Printers
system USER Administrative Templates\Control Panel\Regional and Language Options
system USER Administrative Templates\Shared Folders
system USER Administrative Templates\Shared Folders
system USER Administrative Templates\Network\Offline Files
system USER Administrative Templates\Network\Network Connections
system USER Administrative Templates\System
system USER Administrative Templates\System\User Profiles
system USER Administrative Templates\System\Scripts
system USER Administrative Templates\System\Ctrl+Alt+Del Options
system USER Administrative Templates\System\Logon
system USER Administrative Templates\System\Group Policy
system USER Administrative Templates\System\Power Management
system USER Administrative Templates\System\Internet Communication Management
system USER Administrative Templates\System\Internet Communication Management\Internet Communication settings
system USER Administrative Templates\Windows Components\Application Compatibility
system USER Administrative Templates\Windows Components\Attachment Manager
system USER Administrative Templates\Windows Components\Windows Explorer
system USER Administrative Templates\Windows Components\Windows Explorer\Common Open File Dialog
system USER Administrative Templates\Windows Components\Microsoft Management Console
system USER Administrative Templates\Windows Components\Microsoft Management Console
system USER Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins
system USER Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-in
system USER Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy
system USER Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Grou
system USER Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Resu
system USER Administrative Templates\Windows Components\Task Scheduler
system USER Administrative Templates\Windows Components\Terminal Services
system USER Administrative Templates\Windows Components\Terminal Services\Client
system USER Administrative Templates\Windows Components\Terminal Services\Sessions
system USER Administrative Templates\Windows Components\Terminal Services
system USER Administrative Templates\Windows Components\Windows Installer
system USER Administrative Templates\Windows Components\Windows Messenger
system USER Administrative Templates\Windows Components\Windows Messenger
system USER Administrative Templates\Windows Components\Windows Update
system USER Administrative Templates\Windows Components\Windows Movie Maker
inetres USER Administrative Templates\Windows Components\Internet Explorer
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zon
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zon
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Site
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted S
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Mach
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
inetres USER Administrative Templates\Windows Components\Internet Explorer\Offline Pages
inetres USER Administrative Templates\Windows Components\Internet Explorer\Browser menus
inetres USER Administrative Templates\Windows Components\Internet Explorer\Toolbars
inetres USER Administrative Templates\Windows Components\Internet Explorer\Persistence Behavior
inetres USER Administrative Templates\Windows Components\Internet Explorer\Administrator Approved Controls
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Object Caching Protection
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Information Bar
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protoc
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zon
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zon
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Site
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted S
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Mach
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Object Caching Protection
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Information Bar
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protoc
conf USER Administrative Templates\Windows Components\NetMeeting\Application Sharing
conf USER Administrative Templates\Windows Components\NetMeeting\Audio & Video
conf USER Administrative Templates\Windows Components\NetMeeting\Options Page
conf USER Administrative Templates\Windows Components\NetMeeting
conf MACHINE Administrative Templates\Windows Components\NetMeeting
wuau MACHINE Administrative Templates\Windows Components\Windows Update
wmplayer USER Administrative Templates\Windows Components\Windows Media Player\User Interface
wmplayer USER Administrative Templates\Windows Components\Windows Media Player\Playback
wmplayer USER Administrative Templates\Windows Components\Windows Media Player\Networking
wmplayer MACHINE Administrative Templates\Windows Components\Windows Media Player
wmplayer USER Administrative Templates\Windows Components\Windows Media Player
wmplayer USER Administrative Templates\Windows Components\Windows Media Player\Playback
Full Policy Name
Restrict potentially unsafe HTML Help functions to specified folders
Do not display Manage Your Server page at logon
Display Shutdown Event Tracker
Activate Shutdown Event Tracker System State Data feature
Enable Persistent Time Stamp
Specify Windows installation file location
Specify Windows Service Pack installation file location
Remove Boot / Shutdown / Logon / Logoff status messages
Verbose vs normal status messages
Restrict these programs from being launched from Help
Turn off Autoplay
Do not automatically encrypt files moved to encrypted folders
Download missing COM components
Allow Distributed Link Tracking clients to use domain resources
Do not turn off system power after a Windows system shutdown has occurred.
Do not check for user ownership of Roaming Profile Folders
Delete cached copies of roaming profiles
Do not detect slow network connections
Slow network connection timeout for user profiles
Wait for remote user profile
Prompt user when slow link is detected
Timeout for dialog boxes
Log users off when roaming profile fails
Maximum retries to unload and update user profile
Add the Administrators security group to roaming user profiles
Prevent Roaming Profile changes from propagating to the server
Only allow local user profiles
Leave Windows Installer and Group Policy Software Installation Data
Run logon scripts synchronously
Run startup scripts asynchronously
Run startup scripts visible
Run shutdown scripts visible
Maximum wait time for Group Policy scripts
Don't display the Getting Started welcome screen at logon
Always use classic logon
Run these programs at user logon
Do not process the run once list
Do not process the legacy run list
Always wait for the network at computer startup and logon
Enable disk quotas
Enforce disk quota limit
Default quota limit and warning level
Log event when quota limit exceeded
Log event when quota warning level exceeded
Apply policy to removable media
Expected dial-up delay on logon
Site Name
Negative DC Discovery Cache Setting
Initial DC Discovery Retry Setting for Background Callers
Maximum DC Discovery Retry Interval Setting for Background Callers
Final DC Discovery Retry Setting for Background Callers
Positive Periodic DC Cache Refresh for Background Callers
Positive Periodic DC Cache Refresh for Non-Background Callers
Scavenge Interval
Contact PDC on logon failure
Log File Debug Output Level
Maximum Log File Size
Sysvol share compatibility
Netlogon share compatibility
Dynamic Registration of the DC Locator DNS Records
DC Locator DNS records not registered by the DCs
Refresh Interval of the DC Locator DNS Records
Weight Set in the DC Locator DNS SRV Records
Priority Set in the DC Locator DNS SRV Records
TTL Set in the DC Locator DNS Records
Automated Site Coverage by the DC Locator DNS SRV Records
Sites Covered by the DC Locator DNS SRV Records
Sites Covered by the GC Locator DNS SRV Records
Sites Covered by the Application Directory Partition Locator DNS SRV Records
Location of the DCs hosting a domain with single label DNS name
Turn off background refresh of Group Policy
Group Policy refresh interval for computers
Group Policy refresh interval for domain controllers
User Group Policy loopback processing mode
Allow Cross-Forest User Policy and Roaming User Profiles
Group Policy slow link detection
Turn off Resultant Set of Policy logging
Remove users ability to invoke machine policy refresh
Disallow Interactive Users from generating Resultant Set of Policy data
Registry policy processing
Internet Explorer Maintenance policy processing
Software Installation policy processing
Folder Redirection policy processing
Scripts policy processing
Security policy processing
IP Security policy processing
Wireless policy processing
EFS recovery policy processing
Disk Quota policy processing
Always use local ADM files for Group Policy Object Editor
Solicited Remote Assistance
Offer Remote Assistance
Turn off System Restore
Turn off Configuration
Display Error Notification
Configure Error Reporting
Default application reporting settings
List of applications to always report errors for
List of applications to never report errors for
Report operating system errors
Report unplanned shutdown events
Set Windows File Protection scanning
Hide the file scan progress window
Limit Windows File Protection cache size
Specify Windows File Protection cache location
RPC Troubleshooting State Information
Propagation of extended error information
Ignore Delegation Failure
Minimum Idle Connection Timeout for RPC/HTTP connections
Restrictions for Unauthenticated RPC clients
RPC Endpoint Mapper Client Authentication
Global Configuration Settings
Enable Windows NTP Client
Configure Windows NTP Client
Enable Windows NTP Server
Restrict Internet communication
Turn off the Publish to Web task for files and folders
Turn off Internet download for Web publishing and online ordering wizards
Turn off the Order Prints picture task
Turn off the Windows Messenger Customer Experience Improvement Program
Turn off Help and Support Center Did you know? content
Turn off Help and Support Center Microsoft Knowledge Base search
Turn off Windows Error Reporting
Turn off Internet File Association service
Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com
Turn off Event Viewer Events.asp links
Turn off Automatic Root Certificates Update
Turn off Registration if URL connection is referring to Microsoft.com
Turn off Search Companion content file updates
Turn off printing over HTTP
Turn off downloading of print drivers over HTTP
Turn off Windows Update device driver searching
Turn off access to all Windows Update features
Turn off Windows Movie Maker automatic codec downloads
Turn off Windows Movie Maker online Web links
Turn off Windows Movie Maker saving to online video hosting provider
Turn off Windows Update device driver search prompt
Allow local activation security check exemptions
Define Activation Security Check exemptions
Turn off Microsoft Peer-to-Peer Networking Services
Set the Seed Server
Turn off Multicast Bootstrap
Set the Seed Server
Set the Seed Server
Primary DNS Suffix
Dynamic Update
DNS Suffix Search List
Primary DNS Suffix Devolution
Register PTR Records
Registration Refresh Interval
Replace Addresses In Conflicts
DNS Servers
Connection-Specific DNS Suffix
Register DNS records with connection-specific DNS suffix
TTL Set in the A and PTR records
Update Security Level
Update Top Level Domain Zones
Allow or Disallow use of the Offline Files feature

Prohibit user configuration of Offline Files
Synchronize all offline files when logging on
Synchronize all offline files before logging off
Synchronize offline files before suspend
Default cache size
Action on server disconnect
Non-default server disconnect actions
Remove 'Make Available Offline'
Prevent use of Offline Files folder
Files not cached
Administratively assigned offline files
Turn off reminder balloons
Reminder balloon frequency
Initial reminder balloon lifetime
Reminder balloon lifetime
At logoff, delete local copy of user’s offline files
Event logging level
Subfolders always available offline
Encrypt the Offline Files cache
Prohibit 'Make Available Offline' for these file and folders
Configure Slow link speed
Prohibit use of Internet Connection Sharing on your DNS domain network
Prohibit use of Internet Connection Firewall on your DNS domain network
Prohibit installation and configuration of Network Bridge on your DNS domain network
IEEE 802.1x Certificate Authority for Machine Authentication
Windows Firewall: Protect all network connections
Windows Firewall: Do not allow exceptions
Windows Firewall: Define program exceptions
Windows Firewall: Allow local program exceptions
Windows Firewall: Allow remote administration exception
Windows Firewall: Allow file and printer sharing exception
Windows Firewall: Allow ICMP exceptions
Windows Firewall: Allow Remote Desktop exception
Windows Firewall: Allow UPnP framework exception
Windows Firewall: Prohibit notifications
Windows Firewall: Allow logging
Windows Firewall: Prohibit unicast response to multicast or broadcast requests
Windows Firewall: Define port exceptions
Windows Firewall: Allow local port exceptions
Windows Firewall: Protect all network connections
Windows Firewall: Do not allow exceptions
Windows Firewall: Define program exceptions
Windows Firewall: Allow local program exceptions
Windows Firewall: Allow remote administration exception
Windows Firewall: Allow file and printer sharing exception
Windows Firewall: Allow ICMP exceptions
Windows Firewall: Allow Remote Desktop exception
Windows Firewall: Allow UPnP framework exception
Windows Firewall: Prohibit notifications
Windows Firewall: Allow logging
Windows Firewall: Prohibit unicast response to multicast or broadcast requests
Windows Firewall: Define port exceptions
Windows Firewall: Allow local port exceptions
Windows Firewall: Allow authenticated IPSec bypass
Limit reservable bandwidth
Limit outstanding packets
Set timer resolution
Best effort service type
Controlled load service type
Guaranteed service type
Network control service type
Qualitative service type
Non-conforming packets
Communities
Permitted Managers
Traps for public community
Maximum network bandwidth that BITS uses
Timeout (days) for inactive jobs
Sets how often a DFS Client discovers DC's
Allow printers to be published
Allow pruning of published printers
Automatically publish new printers in Active Directory
Check published state
Computer location
Custom support URL in the Printers folder's left pane
Directory pruning interval
Directory pruning priority
Directory pruning retry
Disallow installation of printers using kernel-mode drivers
Log directory pruning retry events
Pre-populate printer search location text
Printer browsing
Prune printers that are not automatically republished
Allow Print Spooler to accept client connections
Web-based printing
Turn Off Application Compatibility Engine
Turn Off Program Compatibility Wizard
Remove Program Compatibility Property Page
Turn On Application Help Log Events
Prevent access to 16-bit applications
Events.asp URL
Events.asp program
Events.asp program command line parameters
Prevent IIS installation
Turn on Security Center (Domain PCs only)
Hide Property Pages
Prevent Task Run or End
Prohibit Drag-and-Drop
Prohibit New Task Creation
Prohibit Task Deletion
Hide Advanced Properties Checkbox in Add Scheduled Task Wizard
Prohibit Browse
Keep-Alive Connections
Automatic reconnection
Restrict Terminal Services users to a single remote session
Enforce Removal of Remote Desktop Wallpaper
Deny log off of an administrator logged in to the console session
Allow Time Zone Redirection
Do not allow clipboard redirection
Do not allow smart card device redirection
Allow audio redirection
Do not allow COM port redirection
Do not allow client printer redirection
Do not allow LPT port redirection
Do not allow drive redirection
Do not set default client printer to be default printer in a session
Terminal Server Fallback Printer Driver Behavior
Always prompt client for password upon connection
Set client connection encryption level
Secure Server (Require Security)
Limit number of connections
Limit maximum color depth
Allow users to connect remotely using Terminal Services
Do not allow local administrators to customize permissions
Remove Windows Security item from Start menu
Remove Disconnect option from Shut Down dialog
Always show desktop on connection
License Server Security Group
Prevent License Upgrade
Do not use temp folders per session
Do not delete temp folder upon exit
Do not allow passwords to be saved
Terminal Server IP Address Redirection
Join Session Directory
Session Directory Server
Session Directory Cluster Name
Set time limit for disconnected sessions
Sets a time limit for active Terminal Services sessions
Sets a time limit for active but idle Terminal Services sessions
Allow reconnection from original client only
Terminate session when time limits are reached
Set path for TS Roaming Profiles
Use the specified Terminal Server license servers
Set the Terminal Server licensing mode
Show Tooltips for Licensing problems on Terminal Server
TS User Home Directory
Sets rules for remote control of Terminal Services user sessions
Start a program on connection
Turn off shell protocol protected mode
Disable Windows Installer
Always install with elevated privileges
Prohibit rollback
Remove browse dialog box for new source
Prohibit patching
Disable IE security prompt for Windows Installer scripts
Enable user control over installs
Enable user to browse for source while elevated
Enable user to use media source while elevated
Enable user to patch elevated products
Allow admin to install from Terminal Services session
Cache transforms in secure location on workstation
Logging
Prohibit User Installs
Turn off creation of System Restore Checkpoints
Prohibit removal of updates
Enforce upgrade component rules
Prohibit non-administrators from applying vendor signed updates
Baseline file cache maximum size
Do not allow Windows Messenger to be run
Do not automatically start Windows Messenger initially
Prevent Windows Media DRM Internet Access
Do not allow Windows Movie Maker to run
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box
Remove user's folders from the Start Menu
Remove links and access to Windows Update
Remove common program groups from Start Menu
Remove My Documents icon from Start Menu
Remove Documents menu from Start Menu
Remove programs on Settings menu
Remove Network Connections from Start Menu
Remove Favorites menu from Start Menu
Remove Search menu from Start Menu
Remove Help menu from Start Menu
Remove Run menu from Start Menu
Remove My Pictures icon from Start Menu
Remove My Music icon from Start Menu
Remove My Network Places icon from Start Menu
Add Logoff to the Start Menu
Remove Logoff on the Start Menu
Remove and prevent access to the Shut Down command
Remove Drag-and-drop context menus on the Start Menu
Prevent changes to Taskbar and Start Menu Settings
Remove access to the context menus for the taskbar
Do not keep history of recently opened documents
Clear history of recently opened documents on exit
Turn off personalized menus
Turn off user tracking
Add Run in Separate Memory Space check box to Run dialog box
Do not use the search-based method when resolving shell shortcuts
Do not use the tracking-based method when resolving shell shortcuts
Gray unavailable Windows Installer programs Start Menu shortcuts
Prevent grouping of taskbar items
Turn off notification area cleanup
Lock the Taskbar
Force classic Start Menu
Remove Balloon Tips on Start Menu items
Remove pinned programs list from the Start Menu
Remove frequent programs list from the Start Menu
Remove All Programs list from the Start menu
Remove the Undock PC button from the Start Menu
Remove user name from Start Menu
Remove Clock from the system notification area
Hide the notification area
Do not display any custom toolbars in the taskbar
Remove Set Program Access and Defaults from Start menu
Hide and disable all items on the desktop
Remove My Documents icon on the desktop
Remove My Computer icon on the desktop
Remove Recycle Bin icon from desktop
Remove Properties from the My Documents context menu
Remove Properties from the My Computer context menu
Remove Properties from the Recycle Bin context menu
Hide My Network Places icon on desktop
Hide Internet Explorer icon on desktop
Do not add shares of recently opened documents to My Network Places
Prohibit user from changing My Documents path
Prevent adding, dragging, dropping and closing the Taskbar's toolbars
Prohibit adjusting desktop toolbars
Don't save settings at exit
Remove the Desktop Cleanup Wizard
Enable Active Desktop
Disable Active Desktop
Disable all items
Prohibit changes
Prohibit adding items
Prohibit deleting items
Prohibit editing items
Prohibit closing items
Add/Delete items
Active Desktop Wallpaper
Allow only bitmapped wallpaper
Maximum size of Active Directory searches
Enable filter in Find dialog box
Hide Active Directory folder
Prohibit access to the Control Panel
Hide specified Control Panel applets
Show only specified Control Panel applets
Force classic Control Panel Style
Remove Add or Remove Programs
Hide Change or Remove Programs page
Hide Add New Programs page
Hide Add/Remove Windows Components page
Hide the Set Program Access and Defaults page
Hide the Add a program from CD-ROM or floppy disk option
Hide the Add programs from Microsoft option
Hide the Add programs from your network option
Go directly to Components Wizard
Remove Support Information
Specify default category for Add New Programs
Remove Display in Control Panel
Hide Desktop tab
Prevent changing wallpaper
Hide Appearance and Themes tab
Hide Settings tab
Hide Screen Saver tab
Screen Saver
Screen Saver executable name
Password protect the screen saver
Screen Saver timeout
Remove Theme option
Prevent selection of windows and buttons styles
Prohibit selection of font size
Prohibit Theme color selection
Load a specific visual style file or force Windows Classic
Browse a common web site to find printers
Browse the network to find printers
Default Active Directory path when searching for printers
Point and Print Restrictions
Prevent addition of printers
Prevent deletion of printers
Restrict selection of Windows menus and dialogs language
Allow shared folders to be published
Allow DFS roots to be published
Prohibit user configuration of Offline Files
Synchronize all offline files when logging on
Synchronize all offline files before logging off
Synchronize offline files before suspend
Action on server disconnect
Non-default server disconnect actions
Remove 'Make Available Offline'
Prevent use of Offline Files folder
Administratively assigned offline files
Turn off reminder balloons
Reminder balloon frequency
Initial reminder balloon lifetime
Reminder balloon lifetime
Event logging level
Prohibit 'Make Available Offline' for these file and folders
Do not automatically make redirected folders available offline
Ability to rename LAN connections or remote access connections available to all users
Prohibit access to properties of components of a LAN connection
Prohibit access to properties of components of a remote access connection
Prohibit TCP/IP advanced configuration
Prohibit access to the Advanced Settings item on the Advanced menu
Prohibit adding and removing components for a LAN or remote access connection
Prohibit access to properties of a LAN connection
Prohibit Enabling/Disabling components of a LAN connection
Ability to change properties of an all user remote access connection
Prohibit changing properties of a private remote access connection
Prohibit deletion of remote access connections
Ability to delete all user remote access connections
Prohibit connecting and disconnecting a remote access connection
Ability to Enable/Disable a LAN connection
Prohibit access to the New Connection Wizard
Ability to rename LAN connections
Ability to rename all user remote access connections
Prohibit renaming private remote access connections
Prohibit access to the Remote Access Preferences item on the Advanced menu
Prohibit viewing of status for an active connection
Enable Windows 2000 Network Connections settings for Administrators
Turn off notifications when a connection has only limited or no connectivity
Century interpretation for Year 2000
Configure driver search locations
Code signing for device drivers
Custom user interface
Prevent access to the command prompt
Prevent access to registry editing tools
Run only allowed Windows applications
Don't run specified Windows applications
Turn off Autoplay
Restrict these programs from being launched from Help
Download missing COM components
Windows Automatic Updates
Connect home directory to root of the share
Limit profile size
Exclude directories in roaming profile
Run legacy logon scripts hidden
Run logon scripts visible
Run logoff scripts visible
Remove Task Manager
Remove Lock Computer
Remove Change Password
Remove Logoff
Group Policy refresh interval for users
Group Policy slow link detection
Group Policy domain controller selection
Create new Group Policy object links disabled by default
Default name for new Group Policy objects
Enforce Show Policies Only
Turn off automatic update of ADM files
Disallow Interactive Users from generating Resultant Set of Policy data
Prompt for password on resume from hibernate / suspend
Restrict Internet communication
Turn off the Publish to Web task for files and folders
Turn off Internet download for Web publishing and online ordering wizards
Turn off the Order Prints picture task
Turn off the Windows Messenger Customer Experience Improvement Program
Turn off Internet File Association service
Turn off printing over HTTP
Turn off downloading of print drivers over HTTP
Turn off Windows Movie Maker automatic codec downloads
Turn off Windows Movie Maker online Web links
Turn off Windows Movie Maker saving to online video hosting provider
Turn off Windows Update device driver search prompt
Prevent access to 16-bit applications
Default risk level for file attachments
Inclusion list for high risk file types
Inclusion list for moderate risk file types
Inclusion list for low file types
Trust logic for file attachments
Do not preserve zone information in file attachments
Hide mechanisms to remove zone information
Notify antivirus programs when opening attachments
Turn on Classic Shell
Removes the Folder Options menu item from the Tools menu
Remove File menu from Windows Explorer
Remove Map Network Drive and Disconnect Network Drive
Remove Search button from Windows Explorer
Remove Windows Explorer's default context menu
Hides the Manage item on the Windows Explorer context menu
Allow only per user or approved shell extensions
Do not track Shell shortcuts during roaming
Hide these specified drives in My Computer
Prevent access to drives from My Computer
Remove Hardware tab
Remove DFS tab
Remove Security tab
Remove UI to change menu animation setting
Remove UI to change keyboard navigation indicator setting
No Computers Near Me in My Network Places
No Entire Network in My Network Places
Maximum number of recent documents
Do not request alternate credentials
Request credentials for network installations
Remove CD Burning features
Do not move deleted files to the Recycle Bin
Display confirmation dialog when deleting files
Maximum allowed Recycle Bin size
Remove Shared Documents from My Computer
Turn off caching of thumbnail pictures
Turn off Windows+X hotkeys
Turn off shell protocol protected mode
Items displayed in Places Bar
Hide the common dialog places bar
Hide the common dialog back button
Hide the dropdown list of recent files
Restrict the user from entering author mode
Restrict users to the explicitly permitted list of snap-ins
Active Directory Users and Computers
Active Directory Domains and Trusts
Active Directory Sites and Services
ADSI Edit
ActiveX Control
Certificates
Certification Authority
Certificate Templates
Wireless Monitor
Component Services
Computer Management
Device Manager
Disk Management
Disk Defragmenter
Distributed File System
Event Viewer
FAX Service
FrontPage Server Extensions
Indexing Service
.Net Framework Configuration
Internet Authentication Service (IAS)
Internet Information Services
IP Security Policy Management
IP Security Monitor
Link to Web Address
Local Users and Groups
Performance Logs and Alerts
QoS Admission Control
Remote Desktops
Removable Storage Management
Routing and Remote Access
Security Configuration and Analysis
Security Templates
Services
Shared Folders
System Information
Telephony
Terminal Services Configuration
WMI Control
AppleTalk Routing
Authorization Manager
Certification Authority Policy Settings
Connection Sharing (NAT)
DCOM Configuration Extension
Device Manager
DHCP Relay Management
Event Viewer
Extended View (Web View)
IAS Logging
IGMP Routing
IP Routing
IPX RIP Routing
IPX Routing
IPX SAP Routing
Logical and Mapped Drives
OSPF Routing
Public Key Policies
RAS Dialin - User Node
Remote Access
Removable Storage
RIP Routing
Routing
Shared Folders Ext
Send Console Message
Service Dependencies
SMTP Protocol
SNMP
System Properties
Group Policy Management
Group Policy Object Editor
Group Policy tab for Active Directory Tools
Resultant Set of Policy snap-in
Administrative Templates (Computers)
Administrative Templates (Users)
Folder Redirection
Internet Explorer Maintenance
Remote Installation Services
Scripts (Logon/Logoff)
Scripts (Startup/Shutdown)
Security Settings
Software Installation (Computers)
Software Installation (Users)
Wireless Network (IEEE 802.11) Policies
Administrative Templates (Computers)
Administrative Templates (Users)
Folder Redirection
Scripts (Logon/Logoff)
Security Settings
Hide Property Pages
Prevent Task Run or End
Prohibit New Task Creation
Hide Advanced Properties Checkbox in Add Scheduled Task Wizard
Prohibit Browse
Do not allow passwords to be saved
Set time limit for disconnected sessions
Sets a time limit for active Terminal Services sessions
Sets a time limit for active but idle Terminal Services sessions
Allow reconnection from original client only
Terminate session when time limits are reached
Sets rules for remote control of Terminal Services user sessions
Always install with elevated privileges
Search order
Prohibit rollback
Prevent removable media source for any install
Do not allow Windows Messenger to be run
Do not automatically start Windows Messenger initially
Remove access to use all Windows Update features
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box
Do not allow Windows Movie Maker to run
Search: Disable Search Customization
Search: Disable Find Files via F3 within the browser
Disable external branding of Internet Explorer
Disable importing and exporting of favorites
Disable the General page
Disable the Security page
Disable the Content page
Disable the Connections page
Disable the Programs page
Disable the Privacy page
Disable the Advanced page
Run .NET Framework-reliant components signed with Authenticode
Run .NET Framework-reliant components not signed with Authenticode
Download signed ActiveX controls
Download unsigned ActiveX controls
Initialize and script ActiveX controls not marked as safe
Run ActiveX controls and plugins
Script ActiveX controls marked safe for scripting
Allow file downloads
Allow font downloads
Java permissions
Access data sources across domains
Allow active content over restricted protocols to access my computer
Automatic prompting for file downloads
Automatic prompting for ActiveX controls
Allow META REFRESH
Allow script-initiated windows without size or position constraints
Allow binary and script behaviors
Display mixed content
Do not prompt for client certificate selection when no certificates or only one certificate exists.
Allow drag and drop or copy and paste files
Allow installation of desktop items
Launching applications and files in an IFRAME
Navigate sub-frames across different domains
Open files based on content, not file extension
Software channel permissions
Submit non-encrypted form data
Use Pop-up Blocker
Userdata persistence
Web sites in less privileged Web content zones can navigate into this zone
Allow active scripting
Allow paste operations via script
Scripting of Java applets
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Site to Zone Assignment List
Intranet Sites: Include all local (intranet) sites not listed in other zones
Intranet Sites: Include all sites that bypass the proxy server
Intranet Sites: Include all network paths (UNCs)
Internet Zone Template
Intranet Zone Template
Trusted Sites Zone Template
Restricted Sites Zone Template
Local Machine Zone Template
omponents\Internet Explorer\Internet Control Panel\Security Page
Automatically check for Internet Explorer updates
Allow Install On Demand (Internet Explorer)
Allow Install On Demand (except Internet Explorer)
Allow third-party browser extensions
Play animations in web pages
Play sounds in web pages
Play videos in web pages
Allow active content from CDs to run on user machines
Allow software to run or install even if the signature is invalid
Check for server certificate revocation
Check for signatures on downloaded programs
Do not save encrypted pages to disk
Empty Temporary Internet Files folder when browser is closed
Disable changing Advanced page settings
Disable changing home page settings
Use Automatic Detection for dial-up connections
Disable caching of Auto-Proxy scripts
Display error message on proxy script download failure
Disable changing Temporary Internet files settings
Disable changing history settings
Disable changing color settings
Disable changing link color settings
Disable changing font settings
Disable changing language settings
Disable changing accessibility settings
Disable Internet Connection wizard
Disable changing connection settings
Disable changing proxy settings
Disable changing Automatic Configuration settings
Turn off pop-up management
Pop-up allow list
Disable changing ratings settings
Disable changing certificate settings
Disable changing Profile Assistant settings
Disable AutoComplete for forms
Do not allow AutoComplete to save passwords
Disable changing Messaging settings
Disable changing Calendar and Contact settings
Disable the Reset Web Settings feature
Disable changing default browser check
Turn off Crash Detection
Do not allow users to enable or disable add-ons
Identity Manager: Prevent users from using Identities
Configure Outlook Express
Disable adding channels
Disable removing channels
Disable adding schedules for offline pages
Disable editing schedules for offline pages
Disable removing schedules for offline pages
Disable offline page hit logging
Disable all scheduled offline pages
Disable channel user interface completely
Disable downloading of site subscription content
Disable editing and creating of schedule groups
Subscription Limits
File menu: Disable Save As... menu option
File menu: Disable New menu option
File menu: Disable Open menu option
File menu: Disable Save As Web Page Complete
File menu: Disable closing the browser and Explorer windows
View menu: Disable Source menu option
View menu: Disable Full Screen menu option
Hide Favorites menu
Tools menu: Disable Internet Options... menu option
Help menu: Remove 'Tip of the Day' menu option
Help menu: Remove 'For Netscape Users' menu option
Help menu: Remove 'Tour' menu option
Help menu: Remove 'Send Feedback' menu option
Disable Context menu
Disable Open in New Window menu option
Disable Save this program to disk option
Disable customizing browser toolbar buttons
Disable customizing browser toolbars
Configure Toolbar Buttons
File size limits for Local Machine zone
File size limits for Intranet zone
File size limits for Trusted Sites zone
File size limits for Internet zone
File size limits for Restricted Sites zone
Media Player
Menu Controls
Microsoft Agent
Microsoft Chat
Microsoft Survey Control
Shockwave Flash
NetShow File Transfer Control
DHTML Edit Control
Microsoft Scriptlet Component
Carpoint
Investor
MSNBC
Internet Explorer Processes
Process List
All Processes
Admin-approved behaviors
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Deny all add-ons unless specifically allowed in the Add-on List
Add-on List
Process List
All Processes
Process List
All Processes
Internet Zone Restricted Protocols
Intranet Zone Restricted Protocols
Trusted Sites Zone Restricted Protocols
Restricted Sites Zone Restricted Protocols
Local Machine Zone Restricted Protocols
Security Zones: Use only machine settings
Security Zones: Do not allow users to change policies
Security Zones: Do not allow users to add/delete sites
Make proxy settings per-machine (rather than per-user)
Disable Automatic Install of Internet Explorer components
Disable Periodic Check for Internet Explorer software updates
Disable software update shell notifications on program launch
Disable showing the splash screen
Pop-up allow list
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Add-on List
Process List
All Processes
Process List
All Processes
Disable application Sharing
Prevent Sharing
Prevent Desktop Sharing
Prevent Sharing Command Prompts
Prevent Sharing Explorer windows
Prevent Control
Prevent Application Sharing in true color
Limit the bandwidth of Audio and Video
Disable Audio
Disable full duplex Audio
Prevent changing DirectSound Audio setting
Prevent sending Video
Prevent receiving Video
Hide the General page
Disable the Advanced Calling button
Hide the Security page
Hide the Audio page
Hide the Video page
Enable Automatic Configuration
Disable Directory services
Prevent adding Directory servers
Prevent viewing Web directory
Set the intranet support Web page
Set Call Security options
Prevent changing Call placement method
Prevent automatic acceptance of Calls
Allow persisting automatic acceptance of Calls
Prevent sending files
Prevent receiving files
Limit the size of sent files
Disable Chat
Disable NetMeeting 2.x Whiteboard
Disable Whiteboard
Disable remote Desktop Sharing
Configure Automatic Updates
Specify intranet Microsoft update service location
Enable client-side targeting
Reschedule Automatic Updates scheduled installations
No auto-restart for scheduled Automatic Updates installations
Automatic Updates detection frequency
Allow Automatic Updates immediate installation
Delay Restart for scheduled installations
Re-prompt for restart with scheduled installations
Allow non-administrators to receive update notifications
Set and Lock Skin
Do Not Show Anchor
Prevent Codec Download
Hide Network Tab
Streaming Media Protocols
Configure HTTP Proxy
Configure MMS Proxy
Configure Network Buffering
Do Not Show First Use Dialog Boxes
Prevent Desktop Shortcut Creation
Prevent Quick Launch Toolbar Shortcut Creation
Prevent Automatic Updates
Prevent Video Smoothing
Prevent CD and DVD Media Information Retrieval
Prevent Music File Media Information Retrieval
Prevent Radio Station Preset Retrieval
Hide Privacy Tab
Hide Security Tab
Allow Screen Saver
Configure RTSP Proxy
Supported on Help/Explain Text
At least Internet Explorer 6 Service Pack 1 With this policy, you can restrict certain HTML Help commands to function only in HTML H
At least Microsoft Windows Server 2003 Specifies whether to turn off the automatic display of the Manage Your Server page. If th
At least Microsoft Windows XP Professional or Windows Server 2003The
family
Shutdown Event Tracker can be displayed when you shut down a workstation or serv
At least Microsoft Windows Server 2003 Defines when the Shutdown Event Tracker System State Data feature is activated. The s
At least Microsoft Windows Server 2003 The Persistent System Timestamp allows the system to detect the time of unexpected shu
At least Microsoft Windows XP Professional or Windows Server 2003Specifies
family an alternate location for Windows installation files. To enable this setting, and e
family an alternate location for Windows Service Pack installation files. To enable this
At least Microsoft Windows 2000 Suppresses system status messages. If you enable this setting, the system does not disp
At least Microsoft Windows 2000 Directs the system to display highly detailed status messages. If you enable this setting, t
At least Microsoft Windows XP Professional or Windows Server 2003Allows
familyyou to restrict programs from being run from online Help. If you enable this setting
At least Microsoft Windows 2000 Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you inse
At least Microsoft Windows 2000 Prevents Windows Explorer from encrypting files that are moved to an encrypted folder. I
At least Microsoft Windows 2000 Directs the system to search Active Directory for missing Component Object Model (COM
At least Microsoft Windows Server 2003 Specifies that Distributed Link Tracking clients in this domain may use the Distributed LInk
At least Microsoft Windows XP Professional with SP1 or Windows Server
This setting
2003 family
allows you to configure whether power is automatically turned off when Windo
At least Microsoft Windows 2000 Service Pack 4, Microsoft WindowsThis
XP setting
Professional
disables
Service
the more
Packsecure
1 or Microsoft
default setting
Windowsfor the
Server
user’s
2003roaming
family user profile fo
At least Microsoft Windows 2000 Determines whether the system saves a copy of a user’s roaming profile on the local com
At least Microsoft Windows 2000 Disables the slow link detection feature. Slow link detection measures the speed of the co
At least Microsoft Windows 2000 Defines a slow connection for roaming user profiles. If the server on which the user's roam
At least Microsoft Windows 2000 Directs the system to wait for the remote copy of the roaming user profile to load, even wh
At least Microsoft Windows 2000 Notifies users when their roaming profile is slow to load. The notice lets users decide whe
At least Microsoft Windows 2000 Determines how long the system waits for a user response before it uses a default value.
At least Microsoft Windows 2000 Logs a user off automatically when the system cannot load the user's roaming user profile
At least Microsoft Windows 2000 Determines how many times the system tries to unload and update the registry portion of
At least Microsoft Windows XP Professional or Windows Server 2003This
family
setting adds the Administrator security group to the roaming user profile share. Once
family
setting determines if the changes a user makes to their roaming profile are merged w
family
setting determines if roaming user profiles are available on a particular computer. By
Determines
2003 family
whetherwith
the
SP1
system retains a roaming user’s Windows Installer and Group Po
At least Microsoft Windows 2000 Directs the system to wait for the logon scripts to finish running before it starts the Window
At least Microsoft Windows 2000 Lets the system run startup scripts simultaneously. Startup scripts are batch files that run
At least Microsoft Windows 2000 Displays the instructions in startup scripts as they run. Startup scripts are batch files of in
At least Microsoft Windows 2000 Displays the instructions in shutdown scripts as they run. Shutdown scripts are batch files
At least Microsoft Windows 2000 Determines how long the system waits for scripts applied by Group Policy to run. This se
Only works on Microsoft Windows 2000 Supresses the welcome screen. This setting hides the welcome screen that is displayed
family
setting forces the user to log on to the computer using the classic logon screen. By d
At least Microsoft Windows 2000 Specifies additional programs or documents that Windows starts automatically when a us
At least Microsoft Windows 2000 Ignores customized run-once lists. You can create a customized list of additional program
At least Microsoft Windows 2000 Ignores the customized run list. You can create a customized list of additional programs a
At least Microsoft Windows XP Professional or Windows Server 2003Determines
family whether Windows XP waits for the network during computer startup and user
At least Microsoft Windows 2000 Enables and disables disk quota management on all NTFS volumes of the computer, and
At least Microsoft Windows 2000 Determines whether disk quota limits are enforced and prevents users from changing the
At least Microsoft Windows 2000 Specifies the default disk quota limit and warning level for new users of the volume. This
At least Microsoft Windows 2000 Determines whether the system records an event in the local Application log when users r
At least Microsoft Windows 2000 Determines whether the system records an event in the Application log when users reach
At least Microsoft Windows 2000 Extends the disk quota policies in this folder to NTFS file system volumes on removable m
family the additional time for the computer to wait for the domain controller’s (DC) resp
family the Active Directory site to which computers belong. An Active Directory site is
family the amount of time (in seconds) the DC locator remembers that a domain contro
At least Microsoft Windows XP Professional or Windows Server 2003When
family
applications performing periodic searches for domain controllers (DC) are unable to
family
applications performing periodic searches for Domain Controllers (DCs) are unable
family
applications performing periodic searches for domain controllers (DC) are unable to
family when a successful DC cache entry is refreshed. This setting is applied to calle
family when a successful DC cache entry is refreshed. This setting is applied to calle
family the interval at which Netlogon performs the following scavenging operations:
At least Microsoft Windows XP Professional or Windows Server 2003Defines
family whether a domain controller (DC) should attempt to verify with the PDC the passw
At least Microsoft Windows Server 2003 Specifies the level of debug output for the Net Logon service. The Net Logon service outp
At least Microsoft Windows Server 2003 Specifies the maximum size in bytes of the log file netlogon.log in the directory %windir%\
At least Microsoft Windows Server 2003 This setting controls whether or not the Sysvol share created by the Net Logon service on
At least Microsoft Windows Server 2003 This setting controls whether or not the Netlogon share created by the Net Logon service
At least Microsoft Windows XP Professional or Windows Server 2003
Determines
family if Dynamic Registration of the domain controller (DC) locator DNS resource re
Determines
family which Domain Controller (DC) Locator DNS records are not registered by the
Specifies
family the Refresh Interval of the domain controller (DC) Locator DNS resource record
Specifies
family the Weight field in the SRV resource records registered by the domain controlle
Specifies
family the Priority field in the SRV resource records registered by domain controllers (D
Specifies
family the value for the Time-To-Live (TTL) field in Net Logon registered SRV resource
Determines
family whether domain controllers (DC) will dynamically register DC Locator site-spe
Specifies
family the sites for which the domain controllers (DC) register the site-specific DC Loca
Specifies
family the sites for which the global catalogs (GC) should register site-specific GC loca
Specifies
family the sites for which the domain controllers (DC) housing application directory par
Specifies
family whether the computers to which this setting is applied attempt DNS name resolu
At least Microsoft Windows 2000 Prevents Group Policy from being updated while the computer is in use. This setting appli
At least Microsoft Windows 2000 Specifies how often Group Policy for computers is updated while the computer is in use (i
At least Microsoft Windows 2000 Specifies how often Group Policy is updated on domain controllers while they are running
At least Microsoft Windows 2000 Applies alternate user settings when a user logs on to a computer affected by this setting.
At least Microsoft Windows Server 2003 Allows User based policy processing, Roaming User Profiles and User Object logon scrip
At least Microsoft Windows 2000 Defines a slow connection for purposes of applying and updating Group Policy. If the rate
This
family
setting allows you to enable or disable Resultant Set of Policy (RSoP) logging on a c
This
family
setting allows you to control a user's ability to invoke a computer policy refresh. If yo
This
family
setting controls the ability of users to view their Resultant Set of Policy (RSoP) data.
At least Microsoft Windows 2000 Determines when registry policies are updated. This setting affects all policies in the Adm
At least Microsoft Windows 2000 Determines when Internet Explorer Maintenance policies are updated. This setting affect
At least Microsoft Windows 2000 Determines when software installation policies are updated. This setting affects all policie
At least Microsoft Windows 2000 Determines when folder redirection policies are updated. This setting affects all policies t
At least Microsoft Windows 2000 Determines when policies that assign shared scripts are updated. This setting affects all
At least Microsoft Windows 2000 Determines when security policies are updated. This setting affects all policies that use th
At least Microsoft Windows 2000 Determines when IP security policies are updated. This setting affects all policies that use
At least Microsoft Windows 2000 Determines when policies that assign wireless network settings are updated. This setting
At least Microsoft Windows 2000 Determines when encryption policies are updated. This setting affects all policies that use
At least Microsoft Windows 2000 Determines when disk quota policies are updated. This setting affects all policies that use
At least Microsoft Windows Server 2003 Always use local ADM files for the Group Policy snap-in. By default, when you edit a Gro
Specifies
family whether users can solicit another user’s assistance via Remote Assistance. If y
Specifies
family whether or not a support person or IT administrator (the expert) can offer remote
Only works on Microsoft Windows XP Professional Determines whether System Restore is turned on or off. System Restore enables users,
Only works on Microsoft Windows XP Professional Allows you to turn off the Configuration Interface for System Restore. System Restore en
Usefamily
this setting to control whether or not a user is given the choice to report an error. Wh
Configures
family how errors are reported and what information is sent when Error Reporting is
This
family
setting controls whether or not errors in general applications are included when error
This
family
setting specifies the applications that are always included in error reporting. When th
This
family
setting controls error reporting for errors in general applications when error reporting
This
family
setting controls whether or not errors in the operating system are included when erro
At least Microsoft Windows Server 2003 This setting controls whether or not unplanned shutdown events can be reported when er
Determines
family when Windows File Protection scans protected files. This setting directs Wind
Hides
family
the file scan progress window. This window provides status information to sophistic
Specifies
family the maximum amount of disk space that can be used for the Windows File Prote
Specifies
family an alternate location for the Windows File Protection cache. To enable this sett
family whether the RPC Runtime maintains RPC state information for the system, a
Directs
familythe RPC Runtime to generate extended error information when an error occurs. E
At least Microsoft Windows Server 2003 Directs the RPC Runtime to ignore delegation failures if delegation was asked for. Windo
Directs2003
the RPC
familyRuntime to assume the specified timeout as the idle connection timeout e
At least Microsoft Windows XP Professional with SP2 If you enable this setting, it directs the RPC Runtime on an RPC server to restrict unauthe
At least Microsoft Windows XP Professional with SP2 Enabling this setting directs RPC Clients that need to communicate with the Endpoint Map
Specifies
family a set of parameters for all time providers installed on your system. There are tw
Specifies
family whether the Windows NTP Client is enabled. Enabling the Windows NTP Client
family whether the Windows NTP Client synchronizes time from the domain hierarchy
family whether the Windows NTP Server is enabled. Enabling the Windows NTP Serve
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows can access the Internet to accomplish tasks that require Inter
Specifies
2003whether
family the tasks Publish this file to the Web, Publish this folder to the Web, an
Specifies
2003whether
family Windows should download a list of providers for the Web publishing an
Specifies
2003whether
family the Order Prints Online task is available from Picture Tasks in Windows
Specifies
2003whether
family Windows Messenger collects anonymous information about how Windo
Specifies
2003whether
family with
to show
SP1the Did you know? section of Help and Support Center. This c
Specifies
2003whether
family with
usersSP1
can perform a Microsoft Knowledge Base search from the Help a
At least Microsoft Windows XP Professional or Windows Server 2003Controls
family whether or not errors are reported to Microsoft. Error Reporting is used to repor
family whether to use the Microsoft Web service for finding an application to open a file
Specifies
2003whether
family with
the Internet
SP1 Connection Wizard can connect to Microsoft to download a
Specifies
2003whether
family with
Events.asp
SP1 hyperlinks are available for events within the Event Viewer
Specifies
2003whether
family with
to automatically
SP1 update root certificates using the Windows Update We
Specifies
2003whether
family with
the Windows
SP1 Registration Wizard connects to Microsoft.com for online
Specifies
2003whether
family with
Search
SP1Companion should automatically download content updates du
Specifies
2003whether
family with
to allow
SP1printing over HTTP from this client. Printing over HTTP allows
Specifies
2003whether
family with
to allow
SP1this client to download print driver packages over HTTP. To se
This policy
2003 specifies
family withwhether
SP1 Windows searches Windows Update for device drivers when
XP setting
Professional
allowsService
you to remove
Pack 1 or
access
Microsoft
to Windows
Windows Update.
Server If2003
you family
enable this setting, a
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows Movie Maker automatically downloads codecs. Windows Mo
At least Microsoft Windows XP Professional with SP2 Specifies whether links to Web sites are available in Windows Movie Maker. These links i
At least Microsoft Windows XP Professional with SP2 Specifies whether users can send a final movie to a video hosting provider on the Web by
At least Microsoft Windows XP Professional with SP2 Specifies whether the administrator will be prompted about going to Windows Update to s
At least Microsoft Windows XP Professional with SP2 Allows you to specify that local computer administrators can supplement the Define Activa
At least Microsoft Windows XP Professional with SP2 Allows you to view and change a list of DCOM server application ids (appids) which are e
At least Microsoft Windows XP Professional with SP2 Allows configuration of components of the operating system used by a client computer to
At least Microsoft Windows XP Professional with SP2 The Peer Name Resolution Protocol (PNRP) allows for distributed resolution of a name to
At least Microsoft Windows XP Professional with SP2
At least Microsoft Windows 2000 Specifies the primary Domain Name System (DNS) suffix for all affected computers. The p
family if dynamic update is enabled. Computers configured for dynamic update auto
family the DNS suffixes to attach to an unqualified single-label name before submiss
family whether the DNS client performs primary DNS suffix devolution in a name res
family whether the registration of PTR resource records is enabled for the computer
family the Registration Refresh Interval of A and PTR resource records for computers
Only works on Microsoft Windows XP Professional Determines whether a DNS client that attempts to register its A resource record should ov
Only works on Microsoft Windows XP Professional Defines the DNS servers to which a computer sends queries when it attempts to resolve n
Only works on Microsoft Windows XP Professional Specifies a connection-specific DNS suffix. This setting supersedes the connection-specif
family if a computer performing dynamic registration may register A and PTR resour
family the value for the Time-To-Live (TTL) field in A and PTR resource records registe
family whether the computers to which this setting is applied use secure dynamic upda
family whether the computers to which this setting is applied may send dynamic updat
At least Microsoft Windows 2000 Determines whether the Offline Files feature is enabled. This setting also disables the En
At least Microsoft Windows 2000 Prevents users from enabling, disabling, or changing the configuration of Offline Files. Th
At least Microsoft Windows 2000 Determines whether offline files are fully synchronized when users log on. This setting als
At least Microsoft Windows 2000 Determines whether offline files are fully synchronized when users log off. This setting als
At least Microsoft Windows 2000 Determines whether offline files are synchonized before a computer is suspended. If you
At least Microsoft Windows 2000 Limits the percentage of the computer's disk space that can be used to store automaticall
At least Microsoft Windows 2000 Determines whether network files remain available if the computer is suddenly disconnec
At least Microsoft Windows 2000 Determines how computers respond when they are disconnected from particular offline fil
At least Microsoft Windows 2000 Prevents users from making network files and folders available offline. This setting remov
At least Microsoft Windows 2000 Disables the Offline Files folder. This setting disables the View Files button on the Offline
At least Microsoft Windows 2000 Lists types of files that cannot be used offline. This setting lets you exclude certain types
At least Microsoft Windows 2000 This policy setting lists network files and folders that are always available for offline use. T
At least Microsoft Windows 2000 Hides or displays reminder balloons, and prevents users from changing the setting. Rem
At least Microsoft Windows 2000 Determines how often reminder balloon updates appear. If you enable this setting, you ca
At least Microsoft Windows 2000 Determines how long the first reminder balloon for a network status change is displayed.
At least Microsoft Windows 2000 Determines how long updated reminder balloons are displayed. Reminder balloons appe
At least Microsoft Windows 2000 Deletes local copies of the user's offline files when the user logs off. This setting specifies
At least Microsoft Windows 2000 Determines which events the Offline Files feature records in the event log. Offline Files re
At least Microsoft Windows 2000 Makes subfolders available offline whenever their parent folder is made available offline.
XP setting
Professional
determines
Service
whether
Pack 2offline
or Microsoft
files areWindows
encrypted.
Server
Offline
2003files
family
reside
Service
on a user's
Pack
family
policy setting allows you to manage a list of files or folders for which you wish to proh
At least Microsoft Windows XP Professional or Windows Server 2003Configures
family the threshold value at which Offline Files considers a network connection to be
At least Microsoft Windows 2000 Service Pack 1 Determines whether administrators can enable and configure the Internet Connection Sha
At least Microsoft Windows XP Professional or Windows Server 2003Prohibits
family use of Internet Connection Firewall on your DNS domain network. Determines w
family whether a user can install and configure the Network Bridge. Important: This
At least Microsoft Windows XP Professional or Windows Server 2003If you
family
want to use IEEE 802.1x machine authentication, configure this setting. If you enab
At least Microsoft Windows XP Professional with SP2 Turns on Windows Firewall, which replaces Internet Connection Firewall on all computers
At least Microsoft Windows XP Professional with SP2 Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy set
At least Microsoft Windows XP Professional with SP2 Allows you to view and change the program exceptions list defined by Group Policy. Wind
At least Microsoft Windows XP Professional with SP2 Allows administrators to use the Windows Firewall component in Control Panel to define a
At least Microsoft Windows XP Professional with SP2 Allows remote administration of this computer using administrative tools such as the Micro
At least Microsoft Windows XP Professional with SP2 Allows file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 13
At least Microsoft Windows XP Professional with SP2 Defines the set of Internet Control Message Protocol (ICMP) message types that Window
At least Microsoft Windows XP Professional with SP2 Allows this computer to receive Remote Desktop requests. To do this, Windows Firewall o
At least Microsoft Windows XP Professional with SP2 Allows this computer to receive unsolicited Plug and Play messages sent by network devi
At least Microsoft Windows XP Professional with SP2 Prevents Windows Firewall from displaying notifications to the user when a program requ
At least Microsoft Windows XP Professional with SP2 Allows Windows Firewall to record information about the unsolicited incoming messages t
At least Microsoft Windows XP Professional with SP2 Prevents this computer from receiving unicast responses to its outgoing multicast or broad
At least Microsoft Windows XP Professional with SP2 Allows you to view and change the port exceptions list defined by Group Policy. Windows
At least Microsoft Windows XP Professional with SP2 Turns on Windows Firewall, which replaces Internet Connection Firewall on all computers
At least Microsoft Windows XP Professional with SP2 Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy set
At least Microsoft Windows XP Professional with SP2 Allows you to view and change the program exceptions list defined by Group Policy. Wind
At least Microsoft Windows XP Professional with SP2 Allows remote administration of this computer using administrative tools such as the Micro
At least Microsoft Windows XP Professional with SP2 Allows file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 13
At least Microsoft Windows XP Professional with SP2 Defines the set of Internet Control Message Protocol (ICMP) message types that Window
At least Microsoft Windows XP Professional with SP2 Allows this computer to receive Remote Desktop requests. To do this, Windows Firewall o
At least Microsoft Windows XP Professional with SP2 Allows this computer to receive unsolicited Plug and Play messages sent by network devi
At least Microsoft Windows XP Professional with SP2 Prevents Windows Firewall from displaying notifications to the user when a program requ
At least Microsoft Windows XP Professional with SP2 Allows Windows Firewall to record information about the unsolicited incoming messages t
At least Microsoft Windows XP Professional with SP2 Prevents this computer from receiving unicast responses to its outgoing multicast or broad
At least Microsoft Windows XP Professional with SP2 Allows you to view and change the port exceptions list defined by Group Policy. Windows
At least Microsoft Windows XP Professional with SP2 Allows unsolicited incoming messages from specified systems that authenticate using the
family the percentage of connection bandwidth that the system can reserve. This va
family the maximum number of outstanding packets permitted on the system. When th
family the smallest unit of time that the Packet Scheduler uses when scheduling pac
family an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packe
Specifies
Specifies
family an alternate link layer (Layer-2) priority value for packets that do not conform to
Specifies
family an alternate link layer (Layer-2) priority value for packets with the Best Effort ser
Specifies
family an alternate link layer (Layer-2) priority value for packets with the Controlled Loa
Specifies
family an alternate link layer (Layer-2) priority value for packets with the Guaranteed s
Specifies
family an alternate link layer (Layer-2) priority value for packets with the Network Cont
Specifies
family an alternate link layer (Layer-2) priority value for packets with the Qualitative se
Configures
family a list of the communities defined to the Simple Network Management Protocol
This
family
setting determines the permitted list of hosts that can submit a query to the Simple N
This
family
setting allows Trap configuration for the Simple Network Management Protocol (SNM
Windows XP SP2 or Windows Server 2003 SP1, or computers with BITS
Limits2.0
theinstalled.
network bandwidth that BITS uses for background transfers (this policy does no
Windows XP or Windows Server 2003, or computers with BITS 1.5 installed.
The number of days a pending BITS job can remain inactive before being considered aba
Allows
familyyou to configure how often a Distributed File System (DFS) client attempts to disco
At least Microsoft Windows 2000 Determines whether the computer's shared printers can be published in Active Directory.
At least Microsoft Windows 2000 Determines whether the domain controller can prune (delete from Active Directory) the pr
At least Microsoft Windows 2000 Determines whether the Add Printer Wizard automatically publishes the computer's share
At least Microsoft Windows 2000 Directs the system to periodically verify that the printers published by this computer still ap
At least Microsoft Windows 2000 Specifies the default location criteria used when searching for printers. This setting is a c
At least Microsoft Windows 2000 Adds a customized Web page link to the Printers folder. By default, the Printers folder inc
At least Microsoft Windows 2000 Specifies how often the pruning service on a domain controller contacts computers to veri
At least Microsoft Windows 2000 Sets the priority of the pruning thread. The pruning thread, which runs only on domain co
At least Microsoft Windows 2000 Specifies how many times the pruning service on a domain controller repeats its attempt t
Determines
family whether printers using kernel-mode drivers may be installed on the local com
Specifies
family whether or not to log events when the pruning service on a domain controller at
At least Microsoft Windows 2000 Enables the physical Location Tracking support feature of Windows printers. Location tra
At least Microsoft Windows 2000 Announces the presence of shared printers to print browse master servers for the domain
At least Microsoft Windows 2000 Determines whether the system prunes (deletes from Active Directory) printers that are no
At least Microsoft Windows Server 2003 This policy controls whether the print spooler will accept client connections. When the p
Windows 2000 or later, running IIS. Not supported on Windows Server
Determines
2003 whether Internet printing is activated on this server. Internet printing lets you
At least Microsoft Windows Server 2003 This policy controls the state of the application compatibility engine in the system. The e
At least Microsoft Windows Server 2003 This policy controls the state of the Program Compatibility Wizard. When enabled, this po
At least Microsoft Windows Server 2003 This policy controls the visibility of the Program Compatibility property page shell extensio
At least Microsoft Windows Server 2003 The Application Help features blocks known incompatible applications and displays a dial
At least Microsoft Windows Server 2003 Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running on this co
At least Microsoft Windows XP Professional with SP2 This is the URL that will be passed to the Description area in the Event Properties dialog b
At least Microsoft Windows XP Professional with SP2 This is the program that will be invoked when the user clicks the events.asp link.
At least Microsoft Windows XP Professional with SP2 This specifies the command line parameters that will be passed to the events.asp program
At least Microsoft Windows Server 2003 When you enable this setting, it will prevent Internet Information Services (IIS) from being
Specifies
family whether the Security Center is turned on or off on users' computers that are join
At least Microsoft Windows 2000 Prevents users from viewing and changing the properties of an existing task. This setting
At least Microsoft Windows 2000 Prevents users from starting and stopping tasks manually. This setting removes the Run
At least Microsoft Windows 2000 Prevents users from adding or removing tasks by moving or copying programs in the Sch
At least Microsoft Windows 2000 Prevents users from creating new tasks. This setting removes the Add Scheduled Task it
At least Microsoft Windows 2000 Prevents users from deleting tasks from the Scheduled Tasks folder. This setting remove
At least Microsoft Windows 2000 This setting removes the Open advanced properties for this task when I click Finish check
At least Microsoft Windows 2000 Limits newly scheduled to items on the user's Start menu, and prevents the user from cha
At least Microsoft Windows XP Terminal Services Specifies whether persistent connections are allowed. After a terminal server client loses
At least Microsoft Windows XP Terminal Services Specifies whether to allow Remote Desktop Connection clients to automatically reconnec
At least Microsoft Windows XP Terminal Services Specifies whether to restrict users to a single remote Terminal Services session. If the st
At least Microsoft Windows XP Terminal Services Specifies whether desktop wallpaper is displayed to remote clients connecting via Termin
At least Microsoft Windows Server 2003 Specifies whether to allow an administrator attempting to connect to the console of a serv
At least Microsoft Windows XP Terminal Services Specifies whether to allow the client computer to redirect its time zone settings to the Term
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the sharing of clipboard contents (clipboard redirection) betw
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the mapping of smart card devices (smart card device redire
At least Microsoft Windows XP Terminal Services Specifies whether users can choose where to play the remote computer's audio output du
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the redirection of data to client COM ports from the remote c
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the mapping of client printers in Terminal Services sessions.
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the redirection of data to client LPT ports during a Terminal S
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the mapping of client drives in a Terminal Services session (
At least Microsoft Windows XP Terminal Services Specifies whether the client default printer is automatically set as the default printer in a T
At least Microsoft Windows Server 2003 with SP1 Specifies the Terminal Server fallback printer driver behavior. By default, Terminal Serve
At least Microsoft Windows XP Terminal Services Specifies whether Terminal Services always prompts the client for a password upon conn
At least Microsoft Windows XP Terminal Services Specifies whether to enforce an encryption level for all data sent between the client and th
At least Microsoft Windows Server 2003 Specifies whether a Terminal Server requires secure RPC communication with all clients
At least Microsoft Windows XP Terminal Services Specifies whether Terminal Services limits the number of simultaneous connections to the
At least Microsoft Windows XP Terminal Services Specifies the maximum color resolution (color depth) for Terminal Services connections.
At least Microsoft Windows XP Terminal Services Specifies whether to allow users to connect remotely using Terminal Services. You can u
At least Microsoft Windows XP Terminal Services Specifies whether to disable the administrator rights to customize security permissions in
At least Microsoft Windows 2000 Terminal Services Specifies whether to remove the Windows Security item from the Settings menu on Termi
At least Microsoft Windows 2000 Terminal Services Specifies whether to remove the Disconnect option from the Shut Down Windows dialog b
At least Microsoft Windows Server 2003 with SP1 This policy setting determines whether the desktop is always displayed after a client conn
At least Microsoft Windows XP Terminal Services Specifies the terminal servers and license servers to which a Terminal Server License Se
At least Microsoft Windows XP Terminal Services Specifies how a License Server distributes license upgrades to terminal servers running W
At least Microsoft Windows XP Terminal Services Specifies whether to prevent Terminal Services from creating session-specific temporary
At least Microsoft Windows XP Terminal Services Specifies whether Terminal Services retains a user's per-session temporary folders at log
Controls
2003whether
family passwords
with SP1 can be saved on this computer from Terminal Services clien
Microsoft Windows Server 2003, Enterprise Edition Specifies how client devices are directed when reconnecting to an existing terminal serve
Microsoft Windows Server 2003, Enterprise Edition Specifies whether Terminal Services uses a Session Directory for tracking user sessions,
Microsoft Windows Server 2003, Enterprise Edition Specifies whether to configure a server as a Session Directory Server for Terminal Servic
Microsoft Windows Server 2003, Enterprise Edition Specifies the Cluster Name for the terminal server, associating it with other servers in the
At least Microsoft Windows XP Terminal Services Specifies a time limit for disconnected Terminal Services sessions. You can use this sett
At least Microsoft Windows XP Terminal Services Specifies a time limit for active Terminal Services sessions. You can use this setting to s
At least Microsoft Windows XP Terminal Services Specifies a time limit for active but idle Terminal Services sessions. You can use this set
At least Microsoft Windows XP Terminal Services Specifies whether to allow users to reconnect to a disconnected Terminal Services sessio
Specifies whether to terminate a timed-out Terminal Services session instead of disconne
At least Microsoft Windows XP Terminal Services Specifies whether Terminal Services uses the specified network path for roaming user pro
At least Microsoft Windows Server 2003 with SP1 Determines whether terminal servers must first attempt to locate Terminal Server license
At least Microsoft Windows Server 2003 with SP1 Determines the type of Terminal Server client access license (CAL) a device or user requ
At least Microsoft Windows Server 2003 with SP1 Displays tooltips to the Administrator upon login if there are any licensing issues with the T
At least Microsoft Windows XP Terminal Services Specifies whether Terminal Services uses the specified network share or local directory p
At least Microsoft Windows XP Terminal Services Specifies the level of remote control permitted in a Terminal Services session. Remote co
At least Microsoft Windows XP Terminal Services Configures Terminal Services to run a specified program automatically upon connection.
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the amount of functionality that the shell protoc
At least Microsoft Windows 2000 Disables or restricts the use of Windows Installer. This setting can prevent users from ins
At least Microsoft Windows 2000 Directs Windows Installer to use system permissions when it installs any program on the s
At least Microsoft Windows 2000 Prohibits Windows Installer from generating and saving the files it needs to reverse an int
At least Microsoft Windows 2000 Prevents users from searching for installation files when they add features or components
At least Microsoft Windows 2000 Prevents users from using Windows Installer to install patches. Patches are updates or u
At least Microsoft Windows 2000 Allows Web-based programs to install software on the computer without notifying the user
At least Microsoft Windows 2000 Permits users to change installation options that typically are available only to system adm
At least Microsoft Windows 2000 Allows users to search for installation files during privileged installations. This setting ena
At least Microsoft Windows 2000 Allows users to install programs from removable media, such as floppy disks and CD-ROM
At least Microsoft Windows 2000 Allows users to upgrade programs during privileged installations. This setting permits all
At least Microsoft Windows 2000 Allows Terminal Services administrators to install and configure programs remotely. By d
At least Microsoft Windows 2000 Saves copies of transform files in a secure location on the local computer. Transform files
At least Microsoft Windows 2000 Specifies the types of events that Windows Installer records in its transaction log for each
Microsoft Windows XP or Windows 2000 with Windows Installer v2.0This setting allows you to configure user installs. To configure this setting, set it to enable
Only works on Microsoft Windows XP Professional System Restore enables users, in the event of a problem, to restore their computers to a
Windows Installer v3.0 This setting controls the ability for users or administrators to remove Windows Installer ba
Windows Installer v3.0 This setting causes the Windows Installer to enforce strict rules for component upgrades -
Windows Installer v3.0 This setting controls the ability of non-administrators to install updates that have been dig
Windows Installer v3.0 This policy controls the percentage of disk space available to the Windows Installer basel
Allows
familyyou to disable Windows Messenger. If you enable this setting, Windows Messeng
Windows
family Messenger is automatically loaded and running when a user logs on to a Windo
At least Microsoft Windows Server 2003 Prevents Windows Media Digital Rights Management (DRM) from accessing the Internet
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage whether the 'Install Updates and Shut Down' opt
At least Microsoft Windows 2000 Hides all folders on the user-specific (top) section of the Start menu. Other items appear,
At least Microsoft Windows 2000 Prevents users from connecting to the Windows Update Web site. This setting blocks use
At least Microsoft Windows 2000 Removes items in the All Users profile from the Programs menu on the Start menu. By de
At least Microsoft Windows 2000 Removes the My Documents icon from the Start menu and its submenus. This setting on
At least Microsoft Windows 2000 Removes the Documents menu from the Start menu. The Documents menu contains link
At least Microsoft Windows 2000 Prevents Control Panel, Printers, and Network Connections from running. This setting rem
At least Microsoft Windows 2000 Prevents users from running Network Connections. This setting prevents the Network Co
At least Microsoft Windows 2000 Prevents users from adding the Favorites menu to the Start menu or classic Start menu.
At least Microsoft Windows 2000 Removes the Search item from the Start menu, and disables some Windows Explorer sea
At least Microsoft Windows 2000 Removes the Help command from the Start menu. This setting only affects the Start men
At least Microsoft Windows 2000 Allows you to remove the Run command from the Start menu, Internet Explorer, and Task
At least Microsoft Windows XP Professional or Windows Server 2003Removes
family the My Pictures icon from the Start Menu.
family the My Music icon from the Start Menu.
family the My Network Places icon from the Start Menu.
At least Microsoft Windows 2000 Adds the Log Off <username> item to the Start menu and prevents users from removing i
At least Microsoft Windows 2000 Removes the Log Off <username> item from the Start menu and prevents users from res
At least Microsoft Windows 2000 Prevents users from shutting down or restarting Windows. This setting removes the Shut
At least Microsoft Windows 2000 Prevents users from using the drag-and-drop method to reorder or remove items on the S
At least Microsoft Windows 2000 Removes the Taskbar and Start Menu item from Settings on the Start menu. This setting
At least Microsoft Windows 2000 Hides the menus that appear when you right-click the taskbar and items on the taskbar, s
At least Microsoft Windows 2000 Prevents the operating system and installed programs from creating and displaying shortc
At least Microsoft Windows 2000 Clear history of recently opened documents on exit. If you enable this setting, the system
At least Microsoft Windows 2000 Disables personalized menus. Windows personalizes long menus by moving recently use
At least Microsoft Windows 2000 Disables user tracking. This setting prevents the system from tracking the programs user
At least Microsoft Windows 2000 Lets users run a 16-bit program in a dedicated (not shared) Virtual DOS Machine (VDM) p
At least Microsoft Windows 2000 Prevents the system from conducting a comprehensive search of the target drive to resolv
At least Microsoft Windows 2000 Prevents the system from using NTFS tracking features to resolve a shortcut. By default,
At least Microsoft Windows 2000 Displays Start menu shortcuts to partially installed programs in gray text. This setting mak
family
setting effects the taskbar buttons used to switch between running programs. Taskb
family
setting effects the notification area, also called the system tray. The notification area
family
setting effects the taskbar, which is used to switch between running applications. Th
family
setting effects the presentation of the Start menu. The classic Start menu in Window
At least Microsoft Windows XP Professional or Windows Server 2003Hides
family
pop-up text on the Start menu and in the notification area. When you hold the curs
family
enable this setting, the Pinned Programs list is removed from the Start menu, and th
family
enable this setting, the frequently used programs list is removed from the Start men
family
enable this setting, the All Programs item is removed from the simple Start menu. I
family
enable this setting, the Undock PC button is removed from the simple Start Menu, a
At least Microsoft Windows XP Professional or Windows Server 2003Remove
family user name from Start Menu
At least Microsoft Windows XP Professional or Windows Server 2003Prevents
family the clock in the system notification area from being displayed. If you enable this
family
setting affects the notification area (previously called the system tray) on the taskbar
family
setting affects the taskbar. The taskbar includes the Start button, buttons for current
At least Microsoft Windows 2000 Service Pack 3 or Microsoft Windows
Removes
XP Professional
the Set Program
ServiceAccess
Pack 1and Defaults icon from the Start menu. Clicking the Se
At least Microsoft Windows 2000 Removes icons, shortcuts, and other default and user-defined items from the desktop, inc
At least Microsoft Windows 2000 Removes most occurrences of the My Documents icon. This setting removes the My Doc
family
setting hides My Computer from the desktop and from the new Start menu. It also hid
family most occurrences of the Recycle Bin icon. This setting removes the Recycle Bi
At least Microsoft Windows 2000 Service Pack 3 This setting hides Properties for the context menu on My Documents. If you enable this s
At least Microsoft Windows 2000 Service Pack 3 This setting hides Properties on the context menu for My Computer. If you enable this se
family the Properties option from the Recycle Bin context menu. If you enable this set
At least Microsoft Windows 2000 Removes the My Network Places icon from the desktop. This setting only affects the des
At least Microsoft Windows 2000 Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on t
At least Microsoft Windows 2000 Remote shared folders are not added to My Network Places whenever you open a docum
At least Microsoft Windows 2000 Prevents users from changing the path to the My Documents folder. By default, a user ca
At least Microsoft Windows 2000 Prevents users from manipulating desktop toolbars. If you enable this setting, users cann
At least Microsoft Windows 2000 Prevents users from adjusting the length of desktop toolbars. Also, users cannot repositio
At least Microsoft Windows 2000 Prevents users from saving certain changes to the desktop. If you enable this setting, use
family users from using the Desktop Cleanup Wizard. If you enable this setting, the De
At least Microsoft Windows 2000 Enables Active Desktop and prevents users from disabling it. This setting prevents users
At least Microsoft Windows 2000 Disables Active Desktop and prevents users from enabling it. This setting prevents users
At least Microsoft Windows 2000 Removes Active Desktop content and prevents users from adding Active Desktop content
At least Microsoft Windows 2000 Prevents the user from enabling or disabling Active Desktop or changing the Active Deskt
At least Microsoft Windows 2000 Prevents users from adding Web content to their Active Desktop. This setting removes th
At least Microsoft Windows 2000 Prevents users from deleting Web content from their Active Desktop. This setting remove
At least Microsoft Windows 2000 Prevents users from changing the properties of Web content items on their Active Deskto
At least Microsoft Windows 2000 Prevents users from removing Web content from their Active Desktop. In Active Desktop,
At least Microsoft Windows 2000 Adds and deletes specified Web content items. You can use the Add box in this setting to
At least Microsoft Windows 2000 Specifies the desktop background (wallpaper) displayed on all users' desktops. This setti
At least Microsoft Windows 2000 Permits only bitmap images for wallpaper. This setting limits the desktop background (wa
At least Microsoft Windows 2000 Specifies the maximum number of objects the system displays in response to a command
At least Microsoft Windows 2000 Displays the filter bar above the results of an Active Directory search. The filter bar consis
Only works on Microsoft Windows 2000 Hides the Active Directory folder in My Network Places. The Active Directory folder displa
At least Microsoft Windows 2000 Disables all Control Panel programs. This setting prevents Control.exe, the program file f
At least Microsoft Windows 2000 Hides specified Control Panel items and folders. This setting removes Control Panel item
At least Microsoft Windows 2000 Hides all Control Panel items and folders except those specified in this setting. This settin
family
setting affects the visual style and presentation of the Control Panel. It allows you to
At least Microsoft Windows 2000 Prevents users from using Add or Remove Programs. This setting removes Add or Remo
At least Microsoft Windows 2000 Removes the Change or Remove Programs button from the Add or Remove Programs ba
At least Microsoft Windows 2000 Removes the Add New Programs button from the Add or Remove Programs bar. As a res
At least Microsoft Windows 2000 Removes the Add/Remove Windows Components button from the Add or Remove Progra
At least Microsoft Windows 2000 Service Pack 3 or Microsoft Windows
Removes
XP Professional
the Set Program
ServiceAccess
Pack 1and Defaults button from the Add or Remove Program
At least Microsoft Windows 2000 Removes the Add a program from CD-ROM or floppy disk section from the Add New Prog
At least Microsoft Windows 2000 Removes the Add programs from Microsoft section from the Add New Programs page. Th
At least Microsoft Windows 2000 Prevents users from viewing or installing published programs. This setting removes the A
At least Microsoft Windows 2000 Prevents users from using Add or Remove Programs to configure installed services. This
At least Microsoft Windows 2000 Removes links to the Support Info dialog box from programs on the Change or Remove P
At least Microsoft Windows 2000 Specifies the category of programs that appears when users open the Add New Programs
At least Microsoft Windows 2000 Disables Display in Control Panel. If you enable this setting, Display in Control Panel doe
At least Microsoft Windows 2000 Removes the Desktop tab from Display in Control Panel. This setting prevents users from
At least Microsoft Windows 2000 Prevents users from adding or changing the background design of the desktop. By defau
At least Microsoft Windows 2000 Removes the Appearance and Themes tabs from Display in Control Panel. When this se
At least Microsoft Windows 2000 Removes the Settings tab from Display in Control Panel. This setting prevents users from
At least Microsoft Windows 2000 Removes the Screen Saver tab from Display in Control Panel. This setting prevents user
At least Microsoft Windows 2000 Service Pack 1 Enables desktop screen savers. If you disable this setting, screen savers do not run. Also
At least Microsoft Windows 2000 Service Pack 1 Specifies the screen saver for the user's desktop. If you enable this setting, the system di
At least Microsoft Windows 2000 Service Pack 1 Determines whether screen savers used on the computer are password protected. If you
At least Microsoft Windows 2000 Service Pack 1 Specifies how much user idle time must elapse before the screen saver is launched. Whe
family
setting effects the Themes tab that controls the overall appearance of windows. It is
family users from changing the visual style of the windows and buttons displayed on th
family users from changing the size of the font in the windows and buttons displayed o
family
setting forces the theme color to be the default color scheme. If you enable this setti
family
setting allows you to load a specific visual style file by entering the path (location) of
At least Microsoft Windows 2000 Adds a link to an Internet or intranet Web page to the Add Printer Wizard. You can use th
At least Microsoft Windows 2000 Allows users to use the Add Printer Wizard to search the network for shared printers. If yo
At least Microsoft Windows 2000 Specifies the Active Directory location where searches for printers begin. The Add Printe
This policy
2003 setting
family restricts the servers that a client can connect to for point and print. The
At least Microsoft Windows 2000 Prevents users from using familiar methods to add local and network printers. This settin
At least Microsoft Windows 2000 Prevents users from deleting local and network printers. If a user tries to delete a printer,
At least Microsoft Windows 2000 This setting restricts users to the specified language by disabling the menus and dialog bo
family whether the user can publish shared folders in Active Directory. If you enable
family whether the user can publish DFS roots in Active Directory. If you enable this
At least Microsoft Windows 2000 Prevents users from enabling, disabling, or changing the configuration of Offline Files. Th
At least Microsoft Windows 2000 Determines whether offline files are fully synchronized when users log on. This setting als
At least Microsoft Windows 2000 Determines whether offline files are fully synchronized when users log off. This setting als
At least Microsoft Windows 2000 Determines whether offline files are synchonized before a computer is suspended. If you
At least Microsoft Windows 2000 Determines whether network files remain available if the computer is suddenly disconnec
At least Microsoft Windows 2000 Determines how computers respond when they are disconnected from particular offline fil
At least Microsoft Windows 2000 Prevents users from making network files and folders available offline. This setting remov
At least Microsoft Windows 2000 Disables the Offline Files folder. This setting disables the View Files button on the Offline
At least Microsoft Windows 2000 This policy setting lists network files and folders that are always available for offline use. T
At least Microsoft Windows 2000 Hides or displays reminder balloons, and prevents users from changing the setting. Rem
At least Microsoft Windows 2000 Determines how often reminder balloon updates appear. If you enable this setting, you ca
At least Microsoft Windows 2000 Determines how long the first reminder balloon for a network status change is displayed.
At least Microsoft Windows 2000 Determines how long updated reminder balloons are displayed. Reminder balloons appe
At least Microsoft Windows 2000 Determines which events the Offline Files feature records in the event log. Offline Files re
This
family
policy setting allows you to manage a list of files or folders for which you wish to proh
Allfamily
redirected shell folders, such as My Documents, Desktop, Start Menu, and Application
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can rename LAN or all user remote access connections. If you
At least Microsoft Windows 2000 Service Pack 1 Determines whether Administrators and Network Configuration Operators can change the
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can view and change the properties of components used by a
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can configure advanced TCP/IP settings. If you enable this se
At least Microsoft Windows 2000 Service Pack 1 Determines whether the Advanced Settings item on the Advanced menu in Network Conn
At least Microsoft Windows 2000 Service Pack 1 Determines whether administrators can add and remove network components for a LAN o
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can change the properties of a LAN connection. This setting d
At least Microsoft Windows 2000 Service Pack 1 Determines whether administrators can enable and disable the components used by LAN
At least Microsoft Windows 2000 Service Pack 1 Determines whether a user can view and change the properties of remote access connec
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can view and change the properties of their private remote acc
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can delete remote access connections. If you enable this setti
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can delete all user remote access connections. To create an a
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can connect and disconnect remote access connections. If yo
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can enable/disable LAN connections. If you enable this setting
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can use the New Connection Wizard, which creates new netwo
Determines
family whether nonadministrators can rename a LAN connection. If you enable this
Determines
family whether nonadministrators can rename all-user remote access connections.
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can rename their private remote access connections. Private
At least Microsoft Windows 2000 Service Pack 1 Determines whether the Remote Acccess Preferences item on the Advanced menu in Ne
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can view the status for an active connection. Connection statu
Determines
family whether settings that existed in Windows 2000 Server family will apply to Adm
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage whether notifications are shown to the user when
Only works on Microsoft Windows 2000 Supresses the welcome screen. This setting hides the welcome screen that is displayed
At least Microsoft Windows 2000 Determines how programs interpret two-digit years. This setting specifies the largest two-
This
family
setting configures the location that Windows searches for drivers when a new piece o
At least Microsoft Windows 2000 Determines how the system responds when a user tries to install device driver files that a
At least Microsoft Windows 2000 Specifies an alternate user interface for Windows 2000. The Explorer program (%system
At least Microsoft Windows 2000 Prevents users from running the interactive command prompt, Cmd.exe. This setting also
At least Microsoft Windows 2000 Disables the Windows registry editor Regedit.exe. If this setting is enabled and the user t
At least Microsoft Windows 2000 Limits the Windows programs that users have permission to run on the computer. If you e
At least Microsoft Windows 2000 Prevents Windows from running the programs you specify in this setting. If you enable th
At least Microsoft Windows 2000 Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you inse
Allows
familyyou to restrict programs from being run from online Help. If you enable this setting
At least Microsoft Windows 2000 Directs the system to search Active Directory for missing Component Object Model (COM
Only works on Microsoft Windows XP Professional This setting controls automatic updates to a user's computer. Whenever a user connects
At least Microsoft Windows 2000 Restores the definitions of the %HOMESHARE% and %HOMEPATH% environment varia
At least Microsoft Windows 2000 Sets the maximum size of each user profile and determines the system's response when
At least Microsoft Windows 2000 Lets you add to the list of folders excluded from the user's roaming profile. This setting le
At least Microsoft Windows 2000 Directs the system to wait for the logon scripts to finish running before it starts the Window
At least Microsoft Windows 2000 Hides the instructions in logon scripts written for Windows NT 4.0 and earlier. Logon scrip
At least Microsoft Windows 2000 Displays the instructions in logon scripts as they run. Logon scripts are batch files of instr
At least Microsoft Windows 2000 Displays the instructions in logoff scripts as they run. Logoff scripts are batch files of instr
At least Microsoft Windows 2000 Prevents users from starting Task Manager (Taskmgr.exe). If this setting is enabled and
At least Microsoft Windows 2000 Prevents users from locking the system. While locked, the desktop is hidden and the syst
At least Microsoft Windows 2000 Prevents users from changing their Windows password on demand. This setting disables
At least Microsoft Windows 2000 Prevents the user from logging off. This setting does not let the user log off the system by
At least Microsoft Windows 2000 Specifies additional programs or documents that Windows starts automatically when a us
At least Microsoft Windows 2000 Ignores customized run-once lists. You can create a customized list of additional program
At least Microsoft Windows 2000 Ignores the customized run list. You can create a customized list of additional programs a
At least Microsoft Windows 2000 Specifies how often Group Policy for users is updated while the computer is in use (in the
At least Microsoft Windows 2000 Defines a slow connection for purposes of applying and updating Group Policy. If the rate
At least Microsoft Windows 2000 Determines which domain controller the Group Policy Object Editor snap-in uses. -- Use
At least Microsoft Windows 2000 Creates new Group Policy object links in the disabled state. This setting creates all new G
At least Microsoft Windows 2000 Sets the default display name for new Group Policy objects. This setting allows you to sp
At least Microsoft Windows 2000 Prevents administrators from viewing or using Group Policy preferences. A Group Policy
At least Microsoft Windows 2000 Prevents the system from updating the Administrative Templates source files automatical
This
family
setting controls the ability of users to view their Resultant Set of Policy (RSoP) data.
This
family
settings allows you to configure client computers to always lock when resuming from
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows can access the Internet to accomplish tasks that require Inter
Specifies
2003 whether
family the tasks Publish this file to the Web, Publish this folder to the Web, an
Specifies
2003 whether
family Windows should download a list of providers for the Web publishing an
Specifies
2003 whether
family the Order Prints Online task is available from Picture Tasks in Windows
Specifies
2003 whether
family Windows Messenger collects anonymous information about how Windo
Specifies
family whether to use the Microsoft Web service for finding an application to open a file
At least Microsoft Windows XP Professional with SP2 Specifies whether to allow printing over HTTP from this client. Printing over HTTP allows
At least Microsoft Windows XP Professional with SP2 Specifies whether to allow this client to download print driver packages over HTTP. To se
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows Movie Maker automatically downloads codecs. Windows Mo
At least Microsoft Windows XP Professional with SP2 Specifies whether links to Web sites are available in Windows Movie Maker. These links i
At least Microsoft Windows XP Professional with SP2 Specifies whether users can send a final movie to a video hosting provider on the Web by
At least Microsoft Windows XP Professional with SP2 Specifies whether the administrator will be prompted about going to Windows Update to s
Specifies
2003 whether
family to prevent the MS-DOS subsystem (ntvdm.exe) from running for all use
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage the default risk level for file types. To fully custom
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the list of high risk file types. If the file attachme
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the list of moderate risk file types. If the attachm
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the list of low risk file types. If the attachment is
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the logic that Windows uses to determine the ri
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage whether Windows marks file attachments with in
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage whether users can manually remove the zone in
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage the behavior for notifying registered antivirus pro
At least Microsoft Windows 2000 This setting allows you to remove the Active Desktop and Web view features. If you enabl
At least Microsoft Windows 2000 Removes the Folder Options item from all Windows Explorer menus and removes the Fol
At least Microsoft Windows 2000 Removes the File menu from My Computer and Windows Explorer. This setting does not
At least Microsoft Windows 2000 Prevents users from using Windows Explorer or My Network Places to map or disconnect
At least Microsoft Windows 2000 Removes the Search button from the Windows Explorer toolbar. This setting removes the
At least Microsoft Windows 2000 Removes shortcut menus from the desktop and Windows Explorer. Shortcut menus appe
At least Microsoft Windows 2000 Removes the Manage item from the Windows Explorer context menu. This context menu
At least Microsoft Windows 2000 This setting is designed to ensure that shell extensions can operate on a per-user basis. I
At least Microsoft Windows 2000 Determines whether Windows traces shortcuts back to their sources when it cannot find th
At least Microsoft Windows 2000 Removes the icons representing selected hard drives from My Computer and Windows E
At least Microsoft Windows 2000 Prevents users from using My Computer to gain access to the content of selected drives.
At least Microsoft Windows 2000 Removes the Hardware tab. This setting removes the Hardware tab from Mouse, Keyboa
At least Microsoft Windows 2000 Removes the DFS tab from Windows Explorer. This setting removes the DFS tab from W
Removes
family the Security tab from Windows Explorer. If you enable this setting, users openi
At least Microsoft Windows 2000 Prevents users from selecting the option to animate the movement of windows, menus, an
At least Microsoft Windows 2000 Disables the Hide keyboard navigation indicators until I use the ALT key option in Display
At least Microsoft Windows 2000 Removes computers in the user's workgroup and domain from lists of network resources
At least Microsoft Windows 2000 Removes all computers outside of the user's workgroup or local domain from lists of netw
At least Microsoft Windows 2000 Determines how many shortcuts the system can display in the Documents menu on the S
At least Microsoft Windows 2000 Prevents users from submitting alternate logon credentials to install a program. This setti
At least Microsoft Windows 2000 Prompts users for alternate logon credentials during network-based installations. This se
Windows
family Explorer allows you to create and modify re-writable CDs if you have a CD write
When
family
a file or folder is deleted in Windows Explorer, a copy of the file or folder is placed i
Allows
familyyou to have Windows Explorer display a confirmation dialog whenever a file is del
Limits
family
the percentage of a volume's disk space that can be used to store deleted files. If y
Only works on Microsoft Windows XP Professional Removes the Shared Documents folder from My Computer. When a Windows client in is
This
family
settings controls whether the thumbnail views are cached. If you enable this setting,
At least Microsoft Windows Server 2003 Turn off Windows+X hotkeys. Keyboards with a Windows key provide users with shortcut
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the amount of functionality that the shell protoc
Configures
family the list of items displayed in the Places Bar in the Windows File/Open dialog. I
At least Microsoft Windows 2000 Removes the shortcut bar from the Open dialog box. This setting, and others in this folde
At least Microsoft Windows 2000 Removes the Back button from the Open dialog box. This setting, and others in this folde
At least Microsoft Windows 2000 Removes the list of most recently used files from the Open dialog box. If you disable this
At least Microsoft Windows 2000 Prevents users from entering author mode. This setting prevents users from opening the
At least Microsoft Windows 2000 Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) s
At least Microsoft Windows 2000 Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted
Permits
family or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted
Permits
At least Microsoft Windows Server 2003 Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted
Permits
Permits
Permits
Permits
Permits
Permits
Permits
2003
or prohibits
family use of this snap-in. If you enable this setting, the snap-in is permitted
At least Microsoft Windows 2000 Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory
Permits
Permits
Permits
Permits
Permits
Permits
Permits
Permits
Permits
Permits
At least Microsoft Windows 2000 Prevents users from viewing and changing the properties of an existing task. This setting
At least Microsoft Windows 2000 Prevents users from starting and stopping tasks manually. This setting removes the Run
At least Microsoft Windows 2000 Prevents users from adding or removing tasks by moving or copying programs in the Sch
At least Microsoft Windows 2000 Prevents users from creating new tasks. This setting removes the Add Scheduled Task it
At least Microsoft Windows 2000 Prevents users from deleting tasks from the Scheduled Tasks folder. This setting remove
At least Microsoft Windows 2000 This setting removes the Open advanced properties for this task when I click Finish check
At least Microsoft Windows 2000 Limits newly scheduled to items on the user's Start menu, and prevents the user from cha
At least Microsoft Windows XP Terminal Services Configures Terminal Services to run a specified program automatically upon connection.
Controls
2003whether
family awith
userSP1
can save passwords using a Terminal Services client. If you ena
At least Microsoft Windows XP Terminal Services Specifies a time limit for disconnected Terminal Services sessions. You can use this sett
At least Microsoft Windows XP Terminal Services Specifies a time limit for active Terminal Services sessions. You can use this setting to s
At least Microsoft Windows XP Terminal Services Specifies a time limit for active but idle Terminal Services sessions. You can use this set
At least Microsoft Windows XP Terminal Services Specifies whether to allow users to reconnect to a disconnected Terminal Services sessio
At least Microsoft Windows XP Terminal Services Specifies whether to terminate a timed-out Terminal Services session instead of disconne
At least Microsoft Windows XP Terminal Services Specifies the level of remote control permitted in a Terminal Services session. Remote co
At least Microsoft Windows 2000 Directs Windows Installer to use system permissions when it installs any program on the s
At least Microsoft Windows 2000 Specifies the order in which Windows Installer searches for installation files. By default, th
At least Microsoft Windows 2000 Prohibits Windows Installer from generating and saving the files it needs to reverse an int
At least Microsoft Windows 2000 Prevents users from installing programs from removable media. If a user tries to install a
At least Microsoft Windows XP Professional or Windows Server 2003 Allows
familyyou to disable Windows Messenger. If you enable this setting, Windows Messeng
At least Microsoft Windows XP Professional or Windows Server 2003 Windows
family Messenger is automatically loaded and running when a user logs on to a Windo
At least Microsoft Windows XP Professional or Windows Server 2003 This
family
setting allows you to remove access to Windows Update. If you enable this setting, a
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of
at least Internet Explorer v5.0 Makes the Customize button in the Search Assistant appear dimmed. The Search Assista
at least Internet Explorer v5.0 Disables using the F3 key to search in Internet Explorer and Windows Explorer. If you en
at least Internet Explorer v5.0 Prevents branding of Internet programs, such as customization of Internet Explorer and O
at least Internet Explorer v5.0 Prevents users from exporting or importing favorite links by using the Import/Export Wizar
at least Internet Explorer v5.0 Removes the General tab from the interface in the Internet Options dialog box. If you ena
at least Internet Explorer v5.0 Removes the Security tab from the interface in the Internet Options dialog box. If you ena
at least Internet Explorer v5.0 Removes the Content tab from the interface in the Internet Options dialog box. If you ena
at least Internet Explorer v5.0 Removes the Connections tab from the interface in the Internet Options dialog box. If you
at least Internet Explorer v5.0 Removes the Programs tab from the interface in the Internet Options dialog box. If you en
at least Internet Explorer v5.0 Removes the Privacy tab from the interface in the Internet Options dialog box. If you enab
at least Internet Explorer v5.0 Removes the Advanced tab from the interface in the Internet Options dialog box. If you e
at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether .NET Framework components that are s
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether .NET Framework components that are n
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether users may download signed ActiveX co
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether users may download unsigned ActiveX
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 ActiveX controls not marked as safe. If you enab
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether ActiveX controls and plug-ins can be ru
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether an ActiveX control marked safe for scrip
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether file downloads are permitted from the zo
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether pages of the zone may download HTML
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 permissions for Java applets. If you enable this
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether Internet Explorer can access data from
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether a resource hosted on an admin-restricte
This policy
Server
setting
2003determines
Service Pack whether
1 users will be prompted for non user-initiated file do
This policy
Server
setting
2003manages
Service Pack
whether
1 users will be automatically prompted for ActiveX con
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether a user's browser can be redirected to an
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 restrictions on script-initiated pop-up windows an
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 dynamic binary and script behaviors: componen
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether users can display nonsecure items and
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether users are prompted to select a certificat
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether users can drag files or copy and paste f
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether users can install Active Desktop items fr
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether applications may be run and files may b
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 the opening of sub-frames and access of applica
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 MIME sniffing for file promotion from one type to
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 software channel permissions. If you enable this
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether data on HTML forms on pages in the zo
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether unwanted pop-up windows appear. Pop
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 the preservation of information in the browser's h
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether Web sites from less privileged zones, su
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether script code on pages in the zone is run.
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether scripts can perform a clipboard operatio
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether applets are exposed to scripts within the
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 settings for logon options. If you enable this poli
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 a list of sites that you want to associate with a pa
This policy
Server
setting
2003controls
Service whether
Pack 1 local sites which are not explicitly mapped into any Se
This policy
Server
setting
2003controls
Service whether
Pack 1 sites which bypass the proxy server are mapped into
This policy
Server
setting
2003controls
Service whether
Pack 1 URLs representing UNCs are mapped into the local In
This template
Server 2003
policyService
setting Pack
allows1 you to configure policy settings in this zone consistent
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer checks the Internet for
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether users can automatically download and i
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether users can download and install self-inst
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will launch COM add-o
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will display animated p
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will play sounds found
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will display videos foun
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether users receive a dialog requesting permi
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether software, such as ActiveX controls and
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will check revocation s
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer checks for digital signa
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will save encrypted pa
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer deletes the contents o
at least Internet Explorer v5.0 Prevents users from changing settings on the Advanced tab in the Internet Options dialog
at least Internet Explorer v5.0 Prevents users from changing the home page of the browser. The home page is the first p
at least Internet Explorer v5.0 Specifies that Automatic Detection will be used to configure dial-up settings for users. Au
at least Internet Explorer v5.0 Prevents automatic proxy scripts, which interact with a server to automatically configure u
at least Internet Explorer v5.0 Specifies that error messages will be displayed to users if problems occur with proxy scrip
at least Internet Explorer v5.0 Prevents users from changing the browser cache settings, such as the location and amou
at least Internet Explorer v5.0 Prevents users from changing the history settings for the browser. If you enable this polic
at least Internet Explorer v5.0 Prevents users from changing the default Web page colors. If you enable this policy, the
at least Internet Explorer v5.0 Prevents users from changing the colors of links on Web pages. If you enable this policy,
at least Internet Explorer v5.0 Prevents users from changing font settings. If you enable this policy, the Font button on t
at least Internet Explorer v5.0 Prevents users from changing language settings. If you enable this policy, the Languages
at least Internet Explorer v5.0 Prevents users from changing accessibility settings. If you enable this policy, the Accessi
at least Internet Explorer v5.0 Prevents users from running the Internet Connection Wizard. If you enable this policy, the
at least Internet Explorer v5.0 Prevents users from changing dial-up settings. If you enable this policy, the Settings butto
at least Internet Explorer v5.0 Prevents users from changing proxy settings. If you enable this policy, the proxy settings
at least Internet Explorer v5.0 Prevents users from changing automatic configuration settings. Automatic configuration is
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 pop-up management functionality in Internet Exp
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 a list of web sites that will be allowed to open po
at least Internet Explorer v5.0 Prevents users from changing ratings that help control the type of Internet content that ca
at least Internet Explorer v5.0 Prevents users from changing certificate settings in Internet Explorer. Certificates are use
at least Internet Explorer v5.0 Prevents users from changing Profile Assistant settings. If you enable this policy, the My
at least Internet Explorer v5.0 Prevents Microsoft Internet Explorer from automatically completing forms, such as filling in
at least Internet Explorer v5.0 Disables automatic completion of user names and passwords in forms on Web pages, an
at least Internet Explorer v5.0 Prevents users from changing the default programs for messaging tasks. If you enable th
at least Internet Explorer v5.0 Prevents users from changing the default programs for managing schedules and contacts
at least Internet Explorer v5.0 Prevents users from restoring default settings for home and search pages. If you enable
at least Internet Explorer v5.0 Prevents Microsoft Internet Explorer from checking to see whether it is the default browse
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 the crash detection feature of add-on Manageme
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether users have the ability to allow or deny a
at least Internet Explorer v5.0 Prevents users from configuring unique identities by using Identity Manager. Identity Man
at least Internet Explorer v6.0 Allows Administrators to enable and disable the ability for Outlook Express users to save
at least Internet Explorer v5.0 Prevents users from adding channels to Internet Explorer. Channels are Web sites that a
at least Internet Explorer v5.0 Prevents users from disabling channel synchronization in Microsoft Internet Explorer. Ch
at least Internet Explorer v5.0 Prevents users from specifying that Web pages can be downloaded for viewing offline. W
at least Internet Explorer v5.0 Prevents users from editing an existing schedule for downloading Web pages for offline v
at least Internet Explorer v5.0 Prevents users from clearing the preconfigured settings for Web pages to be downloaded
at least Internet Explorer v5.0 Prevents channel providers from recording information about when their channel pages a
at least Internet Explorer v5.0 Disables existing schedules for downloading Web pages for offline viewing. When users
at least Internet Explorer v5.0 Prevents users from viewing the Channel bar interface. Channels are Web sites that are a
at least Internet Explorer v5.0 Prevents content from being downloaded from Web sites that users have subscribed to. W
at least Internet Explorer v5.0 Prevents users from adding, editing, or removing schedules for offline viewing of Web pag
at least Internet Explorer v5.0 Restricts the amount of information downloaded for offline viewing. If you enable this poli
at least Internet Explorer v5.0 Prevents users from saving Web pages from the browser File menu to their hard disk or to
at least Internet Explorer v5.0 Prevents users from opening a new browser window from the File menu. If this policy is e
at least Internet Explorer v5.0 Prevents users from opening a file or Web page from the File menu in Internet Explorer.
at least Internet Explorer v5.0 Prevents users from saving the complete contents that are displayed on or run from a We
at least Internet Explorer v5.0 Prevents users from closing Microsoft Internet Explorer and Windows Explorer. If you ena
at least Internet Explorer v5.0 Prevents users from viewing the HTML source of Web pages by clicking the Source comm
at least Internet Explorer v5.0 Prevents users from displaying the browser in full-screen (kiosk) mode, without the standa
at least Internet Explorer v5.0 Prevents users from adding, removing, or editing the list of Favorite links. The Favorites l
at least Internet Explorer v5.0 Prevents users from opening the Internet Options dialog box from the Tools menu in Micr
at least Internet Explorer v5.0 Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet
at least Internet Explorer v5.0 Prevents users from displaying tips for users who are switching from Netscape. If you ena
Prevents users from running the Internet Explorer Tour from the Help menu in Internet Ex
at least Internet Explorer v5.0 Prevents users from sending feedback to Microsoft by clicking the Send Feedback comm
at least Internet Explorer v5.0 Prevents the shortcut menu from appearing when users click the right mouse button while
at least Internet Explorer v5.0 Prevents using the shortcut menu to open a link in a new browser window. If you enable
at least Internet Explorer v5.0 Prevents users from saving a program or file that Microsoft Internet Explorer has downloa
at least Internet Explorer v5.0 Prevents users from determining which buttons appear on the Microsoft Internet Explorer
at least Internet Explorer v5.0 Prevents users from determining which toolbars are displayed in Microsoft Internet Explor
at least Internet Explorer v5.0 Specifies which buttons will be displayed on the standard toolbar in Microsoft Internet Exp
at least Internet Explorer v5.0 Limits the amount of storage that a page or site using the DHTML Persistence behavior c
at least Internet Explorer v5.0 Designates the Media Player ActiveX control as administrator-approved. This control is u
at least Internet Explorer v5.0 Designates a set of Microsoft ActiveX controls used to manipulate pop-up menus in the br
at least Internet Explorer v5.0 Designates the Microsoft Agent ActiveX control as administrator-approved. Microsoft Age
at least Internet Explorer v5.0 Designates the Microsoft Chat ActiveX control as administrator-approved. This control is
at least Internet Explorer v5.0
at least Internet Explorer v5.0 Designates the Microsoft Network (MSN) Carpoint automatic pricing control as administra
at least Internet Explorer v5.0 Designates a set of Microsoft Network (MSN) Investor controls as administrator-approved
at least Internet Explorer v5.0 Designates a set of MSNBC controls as administrator-approved. These controls enable e
Internet
Server
Explorer
2003 contains
Servicedynamic
Pack 1 binary behaviors: components that encapsulate specif
Internet
Server
Explorer
2003 contains
Servicedynamic
Internet
Server
Explorer
2003 contains
Servicedynamic
For each
Server
zone,
2003
the Service
Binary and
PackScripted
1 Behavior security restrictions may be configured t
The MKServer
Protocol
2003 Security
ServiceRestriction
Pack 1 policy setting reduces attack surface area by preven
The MKServer
Protocol
2003 Security
ServiceRestriction
The MKServer
Protocol
2003 Security
ServiceRestriction
Internet
Server
Explorer
2003 places
Service
zonePack
restrictions
1 on each Web page it opens, which are depende
Internet
Server
Explorer
2003 places
Service
zonePack
restrictions
Internet
Server
Explorer
2003 places
Service
zonePack
restrictions
Internet
Server
Explorer
2003 uses
Service
Multipurpose
Pack 1 Internet Mail Extensions (MIME) data to determine fil
Internet
Server
Explorer
2003 uses
Service
Multipurpose
Internet
Server
Explorer
2003 uses
Service
Multipurpose
This policy
Serversetting
2003determines
1 Internet Explorer MIME sniffing will prevent promo
This policy
Serversetting
2003determines
This policy
Serversetting
2003determines
This policy
Serversetting
2003defines
Servicewhether
Pack 1 a reference to an object is accessible when the user n
This policy
Serversetting
2003defines
Servicewhether
This policy
Serversetting
2003defines
Servicewhether
Internet
Server
Explorer
2003 allows
Service
scripts
Packto1programmatically open, resize, and reposition windows
Internet
Server
Explorer
2003 allows
Service
scripts
Internet
Server
Explorer
2003 allows
Service
scripts
Internet
Server
Explorer
2003 places
Service
restrictions
Pack 1 on each Web page it opens. The restrictions are depe
Internet
Server
Explorer
2003 places
Service
restrictions
Internet
Server
Explorer
2003 places
Service
restrictions
This policy
Serversetting
2003allows
Service you
Pack
to manage
1 whether the Information Bar is displayed for Inte
This policy
Serversetting
2003allows
Service you
Pack
to manage
1 whether the Information Bar is displayed for spe
This policy
Serversetting
2003allows
Service you
Pack
to manage
1 whether the Information Bar is displayed for proc
This policy
Serversetting
2003enables
Service blocking
Pack 1 of ActiveX control installation prompts for Internet Exp
This policy
Serversetting
2003enables
Service applications
Pack 1 hosting the Web Browser Control to block automa
This policy
Serversetting
2003enables
This policy
Serversetting
2003enables
Service blocking
Pack 1 of file download prompts that are not user initiated. If
This policy
Serversetting
2003enables
This policy
Serversetting
2003enables
This policy
Serversetting
2003allows
Service you
Pack
to ensure
1 that any Internet Explorer add-ons not listed in the
This policy
Serversetting
2003allows
Service you
Pack
to manage
1 a list of add-ons to be allowed or denied by Inter
This policy
Serversetting
2003allows
Service you
Pack
to manage
1 whether the listed processes respect add-on ma
This policy
Serversetting
2003allows
Service you
Pack
to manage
1 whether processes respect add-on managemen
Windows
Server
Explorer
2003 and
Service
Internet
PackExplorer
1 may be configured to prevent active content obta
Internet
Server
Explorer
2003 may
Service
be configured
Pack 1 to prevent active content obtained through restricted
Internet
Server
Explorer
2003 may
Service
be configured
For each
Server
zone,
2003
the Service
NetworkPack
Protocol
1 Lockdown security restriction may be configured to p
For each
Server
zone,
2003
the Service
NetworkPack
Protocol
For each
Server
zone,
2003
the Service
NetworkPack
Protocol
For each
Server
zone,
2003
the Service
NetworkPack
Protocol
For each
Server
zone,
2003
the Service
NetworkPack
Protocol
at least Internet Explorer v5.0 Applies security zone information to all users of the same computer. A security zone is a g
at least Internet Explorer v5.0 Prevents users from changing security zone settings. A security zone is a group of Web s
at least Internet Explorer v5.0 Prevents users from adding or removing sites from security zones. A security zone is a gr
at least Internet Explorer v5.0 Applies proxy settings to all users of the same computer. If you enable this policy, users c
at least Internet Explorer v5.0 Prevents Internet Explorer from automatically installing components. If you enable this po
at least Internet Explorer v5.0 Prevents Internet Explorer from checking whether a new version of the browser is availab
at least Internet Explorer v5.0 Specifies that programs using the Microsoft Software Distribution Channel will not notify u
at least Internet Explorer v5.0 Prevents the Internet Explorer splash screen from appearing when users start the browse
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 the crash detection feature of add-on Manageme
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether users have the ability to allow or deny a
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 pop-up management functionality in Internet Exp
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 a list of web sites that will be allowed to open po
at least Internet Explorer v5.0 Removes the General tab from the interface in the Internet Options dialog box. If you ena
at least Internet Explorer v5.0 Removes the Security tab from the interface in the Internet Options dialog box. If you ena
at least Internet Explorer v5.0 Removes the Content tab from the interface in the Internet Options dialog box. If you ena
at least Internet Explorer v5.0 Removes the Connections tab from the interface in the Internet Options dialog box. If you
at least Internet Explorer v5.0 Removes the Programs tab from the interface in the Internet Options dialog box. If you en
at least Internet Explorer v5.0 Removes the Privacy tab from the interface in the Internet Options dialog box. If you enab
at least Internet Explorer v5.0 Removes the Advanced tab from the interface in the Internet Options dialog box. If you e
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Server
setting
2003manages
Service Pack
whether
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003determines
Service Packwhether
This policy
Server
setting
2003manages
Service Pack
whether
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 a list of sites that you want to associate with a pa
This policy
Server
setting
2003controls
Service whether
Pack 1 local sites which are not explicitly mapped into any Se
This policy
Server
setting
2003controls
Service whether
Pack 1 sites which bypass the proxy server are mapped into
This policy
Server
setting
2003controls
Service whether
Pack 1 URLs representing UNCs are mapped into the local In
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer checks the Internet for
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether users can automatically download and i
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether users can download and install self-inst
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will launch COM add-o
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will display animated p
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will play sounds found
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will display videos foun
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether users receive a dialog requesting permi
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether software, such as ActiveX controls and
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will check revocation s
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer checks for digital signa
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will save encrypted pa
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer deletes the contents o
Internet
Server
Explorer
2003 contains
Servicedynamic
Internet
Server
Explorer
2003 contains
Servicedynamic
Internet
Server
Explorer
2003 contains
Servicedynamic
For each
Server
zone,
2003
the Service
Binary and
PackScripted
1 Behavior security restrictions may be configured t
The MK Server
Protocol
2003 Security
ServiceRestriction
The MK Server
Protocol
2003 Security
ServiceRestriction
The MK Server
Protocol
2003 Security
ServiceRestriction
Internet
Server
Explorer
2003 places
Servicezone
Pack
restrictions
Internet
Server
Explorer
2003 places
Servicezone
Pack
restrictions
Internet
Server
Explorer
2003 places
Servicezone
Pack
restrictions
Internet
Server
Explorer
2003 uses
Service
Multipurpose
Internet
Server
Explorer
2003 uses
Service
Multipurpose
Internet
Server
Explorer
2003 uses
Service
Multipurpose
This policy
Server
setting
2003determines
This policy
Server
setting
2003determines
This policy
Server
setting
2003determines
This policy
Server
setting
2003defines
Servicewhether
This policy
Server
setting
2003defines
Servicewhether
This policy
Server
setting
2003defines
Servicewhether
Internet
Server
Explorer
2003 allows
Service
scripts
Internet
Server
Explorer
2003 allows
Service
scripts
Internet
Server
Explorer
2003 allows
Service
scripts
Internet
Server
Explorer
2003 places
Servicerestrictions
Internet
Server
Explorer
2003 places
Servicerestrictions
Internet
Server
Explorer
2003 places
Servicerestrictions
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether the Information Bar is displayed for Inte
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether the Information Bar is displayed for spe
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether the Information Bar is displayed for proc
This policy
Server
setting
2003enables
Service blocking
Pack 1 of ActiveX control installation prompts for Internet Exp
This policy
Server
setting
2003enables
This policy
Server
setting
2003enables
This policy
Server
setting
2003enables
Service blocking
Pack 1 of file download prompts that are not user initiated. If
This policy
Server
setting
2003enables
This policy
Server
setting
2003enables
This policy
Server
setting
2003allows
Service you
Pack
to ensure
1 that any Internet Explorer add-ons not listed in the
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 a list of add-ons to be allowed or denied by Inter
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether the listed processes respect add-on ma
This policy
Server
setting
2003allows
Serviceyou
Pack
to manage
1 whether processes respect add-on managemen
WindowsServer
Explorer
2003 and
Service
Internet
PackExplorer
1 may be configured to prevent active content obta
Internet
Server
Explorer
2003mayService
be configured
Internet
Server
Explorer
2003mayService
be configured
For each
Server
zone,2003
the Service
NetworkPack
Protocol
For each
Server
zone,2003
the Service
NetworkPack
Protocol
For each
Server
zone,2003
the Service
NetworkPack
Protocol
For each
Server
zone,2003
the Service
NetworkPack
Protocol
For each
Server
zone,2003
the Service
NetworkPack
Protocol
at least Windows NetMeeting v3.0 Disables the application sharing feature of NetMeeting completely. Users will not be able
at least Windows NetMeeting v3.0 Prevents users from sharing anything themselves. They will still be able to view shared a
at least Windows NetMeeting v3.0 Prevents users from sharing the whole desktop. They will still be able to share individual
at least Windows NetMeeting v3.0 Prevents users from sharing command prompts. This prevents users from inadvertently s
at least Windows NetMeeting v3.0 Prevents users from sharing Explorer windows. This prevents users from inadvertently sh
at least Windows NetMeeting v3.0 Prevents users from allowing others in a conference to control what they have shared. Th
at least Windows NetMeeting v3.0 Prevents users from sharing applications in true color. True color sharing uses more ban
at least Windows NetMeeting v3.0 Limits the bandwidth audio and video will consume when in a conference. This setting wi
at least Windows NetMeeting v3.0 Disables the audio feature of NetMeeting. Users will not be able to send or receive audio
at least Windows NetMeeting v3.0 Disables full duplex mode audio. Users will not be able to listen to incoming audio while s
at least Windows NetMeeting v3.0 Prevents user from changing the DirectSound audio setting. DirectSound provides much
at least Windows NetMeeting v3.0 Prevents users from sending video if they have the hardware. Users will still be able to re
at least Windows NetMeeting v3.0 Prevents users from receiving video. Users will still be able to send video provided they h
at least Windows NetMeeting v3.0 Hides the General page of the Tools Options dialog. Users will not then be able to chang
at least Windows NetMeeting v3.0 Disables the Advanced Calling button on the General Options page. Users will not then b
at least Windows NetMeeting v3.0 Hides the Security page of the Tools Options dialog. Users will not then be able to chang
at least Windows NetMeeting v3.0 Hides the Audio page of the Tools Options dialog. Users will not then be able to change a
at least Windows NetMeeting v3.0 Hides the Video page of the Tools Options dialog. Users will not then be able to change v
at least Windows NetMeeting v3.0 Configures NetMeeting to download settings for users each time it starts. The settings ar
at least Windows NetMeeting v3.0 Disables the directory feature of NetMeeting. Users will not logon to a directory (ILS) serv
at least Windows NetMeeting v3.0 Prevents users from adding directory (ILS) servers to the list of those they can use for pla
at least Windows NetMeeting v3.0 Prevents users from viewing directories as Web pages in a browser.
at least Windows NetMeeting v3.0 Sets the URL NetMeeting will display when the user chooses the Help Online Support com
at least Windows NetMeeting v3.0 Sets the level of security for both outgoing and incoming NetMeeting calls.
at least Windows NetMeeting v3.0 Prevents users from changing the way calls are placed, either directly or via a gatekeeper
at least Windows NetMeeting v3.0 Prevents users from turning on automatic acceptance of incoming calls. This ensures tha
at least Windows NetMeeting v3.0 Make the automatic acceptance of incoming calls persistent.
at least Windows NetMeeting v3.0 Prevents users from sending files to others in a conference.
at least Windows NetMeeting v3.0 Prevents users from receiving files from others in a conference.
at least Windows NetMeeting v3.0 Limits the size of files users can send to others in a conference.
at least Windows NetMeeting v3.0 Disables the Chat feature of NetMeeting.
at least Windows NetMeeting v3.0 Disables the 2.x whiteboard feature of NetMeeting. The 2.x whiteboard is available for co
at least Windows NetMeeting v3.0 Disables the T.126 whiteboard feature of NetMeeting.
Disables the remote desktop sharing feature of NetMeeting. Users will not be able to set
Windows Server 2003, XP SP1, 2000 SP3 Specifies whether this computer will receive security updates and other important downloa
Windows Server 2003, XP SP1, 2000 SP3 Specifies an intranet server to host updates from the Microsoft Update Web sites. You can
Windows Server 2003, XP SP1, 2000 SP3 Specifies the target group name that should be used to receive updates from an intranet M
Windows Server 2003, XP SP1, 2000 SP3 Specifies the amount of time for Automatic Updates to wait, following system startup, befo
Windows Server 2003, XP SP1, 2000 SP3 Specifies that to complete a scheduled installation, Automatic Updates will wait for the com
Windows Server 2003, XP SP1, 2000 SP3 Specifies the hours that Windows will use to determine how long to wait before checking f
Windows Server 2003, XP SP1, 2000 SP3 Specifies whether Automatic Updates should automatically install certain updates that nei
Windows Server 2003, XP SP1, 2000 SP3 Specifies the amount of time for Automatic Updates to wait before proceeding with a sche
Windows Server 2003, XP SP1, 2000 SP3 Specifies the amount of time for Automatic Updates to wait before prompting again with a
Windows Server 2003, XP SP1, 2000 SP3 Specifies whether, when logged on, non-administrative users will receive update notificati
Windows Media Player for Windows XP and later. Enables Windows Media Player to be shown only in skin mode, using a specified skin. Th
Windows Media Player for Windows XP and later. Prevents the anchor window from being displayed when Windows Media Player is in skin
Windows Media Player for Windows XP and later. Prevents Windows Media Player from downloading codecs. This policy prevents the Play
Windows Media Player for Windows XP and later. Hides the Network tab. This policy hides the Network tab in Windows Media Player. The
Windows Media Player for Windows XP and later. Specifies that the selected protocols are used when receiving streaming media from a ser
Windows Media Player for Windows XP and later. Specifies the HTTP proxy settings for Windows Media Player. This policy specifies the pr
Windows Media Player for Windows XP and later. Specifies the MMS proxy settings for Windows Media Player. This policy specifies the pro
Windows Media Player for Windows XP and later. Specifies whether network buffering uses the default or a specified number of seconds. T
Windows Media Player 9 Series and later. Do Not Show First Use Dialog Boxes This policy prevents the Privacy Options and Install
Windows Media Player 9 Series and later. This policy prevents a shortcut icon for the Player from being added to the user's desktop
Windows Media Player 9 Series and later. This policy prevents a shortcut for the Player from being added to the Quick Launch bar.
Windows Media Player 9 Series and later. Prevents users from being prompted to update Windows Media Player. This policy preve
Windows Media Player 9 Series and later. Prevents video smoothing from occurring. This policy prevents video smoothing, which ca
Windows Media Player 9 Series and later. Prevents media information for CDs and DVDs from being retrieved from the Internet. Th
Windows Media Player 9 Series and later. Prevents media information for music files from being retrieved from the Internet. This po
Windows Media Player 9 Series and later. Prevents radio station presets from being retrieved from the Internet. This policy prevents
Windows Media Player 9 Series and later. Hides the Privacy tab. This policy hides the Privacy tab in Windows Media Player. The de
Windows Media Player 9 Series and later. Hides the Security tab. This policy hides the Security tab in Windows Media Player. The d
Windows Media Player 9 Series and later. Enables a screen saver to interrupt playback. This policy displays a screen saver during
Windows Media Player 9 Series and later. Specifies the RTSP proxy settings for Windows Media Player. This policy specifies the pr
Registry Settings
HKLM\Software\Policies\Microsoft\Windows\System!HelpQualifiedRootDir
HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\MYS!DisableShowAtLogon
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReasonOn, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReason
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!SnapShot
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampEnabled, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampInterval
HKLM\Software\Policies\Microsoft\Windows NT\Setup!SourcePath
HKLM\Software\Policies\Microsoft\Windows NT\Setup!ServicePackSourcePath
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStatusMessages
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!VerboseStatus
HKLM\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoEncryptOnMove
HKLM\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKLM\Software\Policies\Microsoft\Windows\System!DLT_AllowDomainMode
HKLM\Software\Policies\Microsoft\Windows NT!DontPowerOffAfterShutdown
HKLM\Software\Policies\Microsoft\Windows\System!CompatibleRUPSecurity
HKLM\Software\Policies\Microsoft\Windows\System!DeleteRoamingCache
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkDetectEnabled
HKLM\Software\Policies\Microsoft\Windows\System!UserProfileMinTransferRate, HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkTimeOut
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkProfileDefault
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkUIEnabled
HKLM\Software\Policies\Microsoft\Windows\System!ProfileDlgTimeOut
HKLM\Software\Policies\Microsoft\Windows\System!ProfileErrorAction
HKLM\Software\Policies\Microsoft\Windows\System!ProfileUnloadTimeout
HKLM\Software\Policies\Microsoft\Windows\System!AddAdminGroupToRUP
HKLM\Software\Policies\Microsoft\Windows\System!ReadOnlyProfile
HKLM\Software\Policies\Microsoft\Windows\System!LocalProfile
HKLM\Software\Policies\Microsoft\Windows\System!LeaveAppMgmtData
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunStartupScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideStartupScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideShutdownScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxGPOScriptWait
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonType
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run!{1,2,3,...}
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRun
HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon!SyncForegroundPolicy
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enable
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enforce
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Limit, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LimitUnits, HKLM\Software\Polic
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverLimit
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverThreshold
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ApplyToRemovableMedia
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ExpectedDialupDelay
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteName
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NegativeCachePeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryInitialPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryMaximumPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryQuitTime
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NonBackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ScavengeInterval
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AvoidPdcOnWan
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!dbFlag
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!MaximumLogFileSize
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveSysvolShareAccess
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveScriptsShareAccess
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!UseDynamicDns
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsAvoidRegisterRecords
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsRefreshInterval
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvWeight
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvPriority
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsTtl
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AutoSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!GcSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NdncSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowSingleLabelDnsDomain
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableBkGndGroupPolicy
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeDC, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTi
HKLM\Software\Policies\Microsoft\Windows\System!UserPolicyMode
HKLM\Software\Policies\Microsoft\Windows\System!AllowX-ForestPolicy-and-RUP
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKLM\Software\Policies\Microsoft\Windows\System!RSoPLogging
HKLM\Software\Policies\Microsoft\Windows\System!DenyUsersFromMachGP
HKLM\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy, HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoSlowLink, HKLM\Software\Policies\Microsoft\W
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoSlowLink, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoSlowLink, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoSlowLink, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPolicy, HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoSlowLink, HKLM\Software\Policies\Microsoft\Windo
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoSlowLink, HKLM\Software\Policies\Microsoft\W
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoSlowLink, HKLM\Software\Policies\Microsoft\W
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoSlowLink, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\Group Policy!OnlyUseLocalAdminFiles
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowToGetHelp, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllow
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowUnsolicited, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllow
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableSR
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableConfig
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!ShowUI, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWAllowHeadless, HK
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoExternalURL, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNo
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!AllOrNone, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeMicrosoftApps, H
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\InclusionList
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\ExclusionList
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeKernelFaults
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeShutdownErrs
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcScan
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcShowProgress
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcQuota
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SFCDllCacheDir
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!StateInformation
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInformation, HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInfoExceptions
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\IgnoreDelegationFailure!IgnoreDelegationFailure
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!MinimumConnectionTimeout
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!RestrictRemoteClients
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!EnableAuthEpResolution
HKLM\Software\Policies\Microsoft\W32Time\Config!FrequencyCorrectRate, HKLM\Software\Policies\Microsoft\W32Time\Config!HoldPeriod, HKLM\Software\
HKLM\Software\Policies\Microsoft\W32time\TimeProviders\NtpClient!Enabled
HKLM\Software\Policies\Microsoft\W32time\Parameters!NtpServer, HKLM\Software\Policies\Microsoft\W32time\Parameters!Type, HKLM\Software\Policies\M
HKLM\Software\Policies\Microsoft\W32Time\TimeProviders\NtpServer!Enabled
HKLM\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPub
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks
HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate
HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration
HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!AllowLocalActivationSecurityCheckExemptionList
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!ListBox_Support_ActivationSecurityCheckExemptionList
HKLM\Software\policies\Microsoft\Peernet!Disabled
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!SeedServer, HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DontIncludeMicrosoftS
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!SeedServer
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!SeedServer
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!DisableMulticastBootstrap
HKLM\Software\Policies\Microsoft\System\DNSClient!NV PrimaryDnsSuffix
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationEnabled
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!SearchList
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UseDomainNameDevolution
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterReverseLookup
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationRefreshInterval
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationOverwritesInConflict
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!NameServer
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AdapterDomainName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterAdapterName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationTtl
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateSecurityLevel
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateTopLevelDomainZones
HKLM\
HKLM\Software\Policies\Microsoft\Windows\NetCache!Enabled
HKLM\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend
HKLM\Software\Policies\Microsoft\Windows\NetCache!DefCacheSize
HKLM\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoMakeAvailableOffline
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoCacheViewer
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!ExcludeExtensions
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!NoReminders
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderFreqMinutes
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!InitialBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!PurgeAtLogoff, HKLM\Software\Policies\Microsoft\Windows\NetCache\Assign
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EventLoggingLevel
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!AlwaysPinSubFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EncryptCache
HKLM\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList
HKLM\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList!SlowLinkSpeed
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_ShowSharedAccessUI
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_PersonalFirewallConfig
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowNetBridge_NLA
HKLM\Software\Policies\Microsoft\Windows\Network Connections\8021X!8021XCARootHash
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!EnableFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\Mic
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFir
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFi
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!EnableFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\M
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsF
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsF
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\ICFv4!BypassFirewall
HKLM\Software\Policies\Microsoft\Windows\Psched!NonBestEffortLimit
HKLM\Software\Policies\Microsoft\Windows\Psched!MaxOutstandingSends
HKLM\Software\Policies\Microsoft\Windows\Psched!TimerResolution
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNonConforming
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeQualitative
HKLM\Software\Policies\SNMP\Parameters\ValidCommunities!{1,2,3,...}
HKLM\Software\Policies\SNMP\Parameters\PermittedManagers!{1,2,3,...}
HKLM\Software\Policies\SNMP\Parameters\TrapConfiguration\public!{1,2,3,...}
HKLM\Software\Policies\Microsoft\Windows\BITS!EnableBITSMaxBandwidth, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTransferRateOnSchedul
HKLM\Software\Policies\Microsoft\Windows\BITS!JobInactivityTimeout
HKLM\Software\Policies\Microsoft\System\DFSClient!DfsDcNameDelay
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PublishPrinters
HKLM\Software\Policies\Microsoft\Windows NT\Printers!Immortal
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Auto Publishing
HKLM\Software\Policies\Microsoft\Windows NT\Printers!VerifyPublishedState
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocation
HKLM\Software\Policies\Microsoft\Windows NT\Printers!SupportLink
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningInterval
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningPriority
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetries
HKLM\Software\Policies\Microsoft\Windows NT\Printers!KMPrintersAreBlocked
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetryLog
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocationSupport
HKLM\Software\Policies\Microsoft\Windows NT\Printers!ServerThread
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruneDownlevel
HKLM\Software\Policies\Microsoft\Windows NT\Printers!RegisterSpoolerRemoteRpcEndPoint
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPrinting
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableEngine
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableWizard
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePropPage
HKLM\Software\Policies\Microsoft\Windows\AppCompat!LogAppHelpEvents
HKLM\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionURL
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgram
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgramCommandLineParameters
HKLM\Software\Policies\Microsoft\Windows NT\IIS!PreventIISInstall
HKLM\Software\Policies\Microsoft\Windows NT\Security Center!SecurityCenterInDomain
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!KeepAliveEnable, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Servic
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableAutoReconnect
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fSingleSessionPerUser
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fNoRemoteDesktopWallpaper
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableForcibleLogoff
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableTimeZoneRedirection
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableClip
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableSmartCard
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCam
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCcm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCpm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableLPT
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCdm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fForceClientLptDef
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPolicyFallbackPrintDriver, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Termina
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPromptForPassword
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MinEncryptionLevel
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEncryptRPCTraffic
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxInstanceCount
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!ColorDepth
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDenyTSConnections, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Se
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fWritableTSCCPermTab
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNTSecurity
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDisconnect
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!fTurnOffSingleAppMode
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fSecureLicensing
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fPreventLicenseUpgrade
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!PerSessionTempDir
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!DeleteTempDirsOnExit
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryExposeServerIP
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryActive
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryLocation
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryClusterName
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime VALUE 0, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFProfilePath
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicenseServers
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicensingMode
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Te
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirUNC, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Servic
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!W
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableMSI
HKLM\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatch
HKLM\Software\Policies\Microsoft\Windows\Installer!SafeForScripting
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableUserControl
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownMedia
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownPatch
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableAdminTSRemote
HKLM\Software\Policies\Microsoft\Windows\Installer!TransformsSecure
HKLM\Software\Policies\Microsoft\Windows\Installer!Logging
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableUserInstalls
HKLM\Software\Policies\Microsoft\Windows\Installer!LimitSystemRestoreCheckpointing
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatchUninstall
HKLM\Software\Policies\Microsoft\Windows\Installer!EnforceUpgradeComponentRules
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLUAPatching
HKLM\Software\Policies\Microsoft\Windows\Installer!MaxPatchCacheSize
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKLM\Software\Policies\Microsoft\WMDRM!DisableOnline
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuSubFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWindowsUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCommonGroups
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetworkConnections
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFavoritesMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFind
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMHelp
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyPictures
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyMusic
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuNetworkPlaces
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceStartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!StartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoClose
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsHistory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentDocsOnExit
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Intellimenus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInstrumentation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MemCheckBoxInRunDlg
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveSearch
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveTrack
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!GreyMSIAds
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTaskGrouping
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoTrayNotify
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LockTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSimpleStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMBalloonTip
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuPinnedList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMFUprogramsList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMorePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuEjectPC
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserNameInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideClock
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayItemsDisplay
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarsOnTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMConfigurePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{450D8FBA-AD25-11D0-98A8-0800361B1103}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{645FF040-5081-101B-9F08-00AA002F954E}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyComputer
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesRecycleBin
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetIcon
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisablePersonalDirChange
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCloseDragDropBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMovingBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSaveSettings
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktopCleanupWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceActiveDesktopOn
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktopChanges
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoAddingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDeletingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoEditingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoClosingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Add, HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpaper, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpap
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoHTMLWallPaper
HKCU\Software\Policies\Microsoft\Windows\Directory UI!QueryLimit
HKCU\Software\Policies\Microsoft\Windows\Directory UI!EnableFilter
HKCU\Software\Policies\Microsoft\Windows\Directory UI!HideDirectoryFolder
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disal
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Restri
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl!ForceClassicControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddRemovePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoRemovePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoWindowsSetupPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoChooseProgramsPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromCDorFloppy
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromInternet
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoSupportInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!DefaultCategory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispCPL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispBackgroundPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoChangingWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispAppearancePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispSettingsPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispScrSavPage
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveActive
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!SCRNSAVE.EXE
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaverIsSecure
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveTimeOut
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThemesTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoVisualStyleChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoSizeChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoColorChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!SetVisualStyle
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Printers Page URL
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Downlevel Browse
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Default Search Scope
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!Restricted, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!InF
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!NoAddPrinter
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!NoDeletePrinter
HKCU\Software\Policies\Microsoft\Control Panel\Desktop!MultiUILanguageID
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishSharedFolders
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishDfsRoots
HKCU\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend
HKCU\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoMakeAvailableOffline
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoCacheViewer
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!NoReminders
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderFreqMinutes
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!InitialBalloonTimeoutSeconds
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderBalloonTimeoutSeconds
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EventLoggingLevel
HKCU\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList
HKCU\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList!DisableFRAdminPin
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowAdvancedTCPIPConfig
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AdvancedSettings
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AddRemoveComponents
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_ChangeBindState
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasAllUserProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasMyProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteAllUserConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_NewConnectionWizard
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameLanConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameAllUserRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameMyRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DialupPrefs
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_Statistics
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_EnableAdminProhibits
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_IpStateChecking
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax!1
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchFloppies, HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchC
HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing!BehaviorOnFailedVerify
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Shell
HKCU\Software\Policies\Microsoft\Windows\System!DisableCMD
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableRegistryTools
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Restr
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disa
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKCU\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKCU\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ConnectHomeDirToRoot
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!EnableProfileQuota, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKCU\Software\Policies\Microsoft\Windows\System!ExcludeProfileDirs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLegacyLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogoffScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableTaskMgr
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableLockWorkstation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableChangePassword
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoLogoff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run!{1,2,3,...}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRunOnce
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRun
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DCOption
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!NewGPOLinksDisabled
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!GPODisplayName
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!ShowPoliciesOnly
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DisableAutoADMUpdate
HKCU\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKCU\Software\Policies\Microsoft\Windows\System\Power!PromptPasswordOnResume
HKCU\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPub
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKCU\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!ModRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!LowRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!UseTrustedHandlers
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!SaveZoneInformation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!HideZoneInfoOnProperties
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!ScanWithAntiVirus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClassicShell
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFolderOptions
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFileMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetConnectDisconnect
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoShellSearchButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoManageMyComputerVerb
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!EnforceShellExtensionSecurity
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LinkResolveIgnoreLinkInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDrives
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewOnDrive
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoHardwareTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDFSTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSecurityTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeAnimation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeKeyboardNavigationIndicators
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoComputersNearMe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoEntireNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!MaxRecentDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoRunasInstallPrompt
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!PromptRunasInstallNetPath
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoCDBurning
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoRecycleFiles
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!ConfirmFileDelete
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!RecycleBinSize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoSharedDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoThumbnailCache
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoWinKeys
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place0, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoPlacesBar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoBackButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoFileMru
HKCU\Software\Policies\Microsoft\MMC!RestrictAuthorMode
HKCU\Software\Policies\Microsoft\MMC!RestrictToPermittedSnapins
HKCU\Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C96401CF-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{de751566-4cc6-11d1-8ca0-00c04fc297eb}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A994E107-6854-4F3D-917C-E6F01670F6D3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{23DC5869-BD9F-46fd-AADD-1F869BA64FC3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{58221C67-EA27-11CF-ADCF-00AA00A80033}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{43668E21-2636-11D1-A1CE-0080C88593A5}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FF5903A8-78D6-11D1-92F6-006097B01056}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{18BA7139-D98B-43c2-94DA-2604E34E175D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{57C596D0-9370-40C0-BA0D-AB491B63255D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C96401D1-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3D5D035E-7721-4B83-A645-6C07A3D403B7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{45ac8c63-23e2-11d1-a696-00c04fd58bc3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F83C-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1F5EEC01-1214-4D94-80C5-4BDCD2014DDD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3F276EB4-70EE-11D1-8A0F-00C04FB93753}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE450B-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{9EC88934-C774-11d1-87F4-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4502-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{394C052E-B830-11D0-9A86-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B708457E-DB61-4C55-A92F-0D4B5E9B1224}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2E19B602-48EB-11d2-83CA-00104BCA42CF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90810502-38F1-11D1-9345-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6E8E0081-19CD-11D1-AD91-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5880CD5C-8EC0-11d1-9570-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{243E20B0-48ED-11D2-97DA-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DAB1A262-4FD7-11D1-842C-00C04FB6C218}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-11d0-bb77-00aa00a1eab7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7AF60DD3-4979-11D1-8A6C-00C04FC33566}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F3621F1-23C6-11D1-AD97-00AA00B88E5A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E12BBB5D-D59D-4E61-947A-301D25AE8C23}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D70A2BEA-A63E-11D1-A7D4-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6DC3804B-7212-458D-ADB0-9A07E2AE1FA2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957D-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FC715823-C5FB-11D1-9EEF-00A0C90347FF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3060E8CE-7020-11D2-842D-00C04FA372D4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66650-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B6664F-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{942A8E4F-A261-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2DA6AA7F-8C88-4194-A558-0D36E7FD3E64}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AE-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AF-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{c40d66a0-e90c-46c6-aa3b-473e38c72bf2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{d524927d-6c08-46bf-86af-391534d779d3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66661-4972-11d1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{fe883157-cebd-4570-b7a2-e4fe06abe626}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7E45546F-6D52-4D10-B702-9C2E67232E62}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1BC972D6-555C-4FF7-BE2C-C584021A0A6A}!Restrict_Run
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!W
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime VALUE 0, HKCU\SOFTWARE\Policies\Microsoft\Windows NT
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKCU\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKCU\Software\Policies\Microsoft\Windows\Installer!SearchOrder
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableMedia
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate!DisableWindowsUpdateAccess
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchCustomization
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFindFiles
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExternalBranding
HKCU\Software\Policies\Microsoft\Internet Explorer!DisableImportExportFavorites
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2001
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2001
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKCU\Software\Policies\Microsoft\Wi
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKCU\Software\Policies\Microsoft\Wi
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKCU\Software\Policies\M
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKCU\Software\Polici
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKCU\Software\Po
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTemplat
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKCU\Software\
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKCU\Software\
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKCU
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, H
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOC
HKCU\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!CheckExeSignatures
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Advanced
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!HomePage
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DialupAutodetect
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnableAutoProxyResultCache
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisplayScriptDownloadFailureUI
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Cache
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!History
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Colors
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!links
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Fonts
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Languages
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Accessibility
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Connwiz Admin Lock
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Connection Settings
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Proxy
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Autoconfig
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Ratings
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Certificates
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Profiles
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!FormSuggest
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!FormSuggest Passwords
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Messaging
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!CalendarContact
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!ResetWebSettings
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Check_If_Default
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Identities!Locked Down
HKCU\Software\Microsoft\Outlook Express!BlockExeAttachments
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelLogging
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoScheduledUpdates
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelUI
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSubscriptionContent
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingScheduleGroups
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionSize, HKCU\Software\Policies\Microsoft\Internet Explorer\Infode
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserSaveAs
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileNew
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileOpen
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserSaveWebComplete
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserClose
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoViewSource
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoTheaterMode
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoFavorites
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserOptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTipOfTheDay
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemNetscapeHelp
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTutorial
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemSendFeedback
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserContextMenu
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoOpeninNewWnd
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoSelectDownloadDir
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarCustomize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoBandCustomize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!SpecifyDefaultButtons, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Exp
HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence\0!DomainLimit, HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence\0!Document
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{05589FA1-C356-11CE-BF01-00AA0055595A}, HKCU\Softwa
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{275E2FE0-7486-11D0-89D6-00A0C90C9B67}, HKCU\Softwa
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D45FD31B-5C6E-11D1-9EC1-00C04FD7081F}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D6526FE0-E651-11CF-99CB-00C04FD64497}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{BD1F006E-174F-11D2-95C0-00C04F9A8CFA}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{26F24A93-1DA2-11D0-A334-00AA004A5FC5}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2D360201-FFF5-11D1-8D03-00A0C959BC0A}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{AE24FDAE-03C6-11D1-8B76-0080C744F389}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{DED22F57-FEE2-11D0-953B-00C04FD9152D}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{9276B91A-E780-11d2-8A8D-00C04FA31D93}, HKCU\Softwa
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2FF18E10-DE11-11D1-8161-00A0C90DD90C}
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Ex
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies\Micro
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Software\Policies\M
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsoft\Intern
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft\Interne
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Microsoft\Inte
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies\Micros
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Microsoft\Inte
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft\Interne
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\Policies\Mi
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Policies\Mic
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies\Micros
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_HKLM_only
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_options_edit
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_zones_map_edit
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ProxySettingsPerUser
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoUpdateCheck
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMSAppLogo5ChannelNotify
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSplash
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKLM\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2001
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2001
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKLM\Software\Policies\M
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKLM\Software\Polici
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKLM\Software\Po
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTemplat
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKLM\Software\
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKLM\Software\
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKLM
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, H
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOC
HKLM\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!CheckExeSignatures
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Ex
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies\Micros
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Software\Policies\M
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsoft\Intern
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft\Interne
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Microsoft\Inte
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies\Micros
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microsoft\Inter
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft\Interne
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\Micros
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3
HKCU\Software\Policies\Microsoft\Conferencing!NoAppSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDesktop
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDosWindows
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingExplorer
HKCU\Software\Policies\Microsoft\Conferencing!NoAllowControl
HKCU\Software\Policies\Microsoft\Conferencing!NoTrueColorSharing
HKCU\Software\Policies\Microsoft\Conferencing!MaximumBandwidth
HKCU\Software\Policies\Microsoft\Conferencing!NoAudio
HKCU\Software\Policies\Microsoft\Conferencing!NoFullDuplex
HKCU\Software\Policies\Microsoft\Conferencing!NoChangeDirectSound
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingVideo
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingVideo
HKCU\Software\Policies\Microsoft\Conferencing!NoGeneralPage
HKCU\Software\Policies\Microsoft\Conferencing!NoAdvancedCalling
HKCU\Software\Policies\Microsoft\Conferencing!NoSecurityPage
HKCU\Software\Policies\Microsoft\Conferencing!NoAudioPage
HKCU\Software\Policies\Microsoft\Conferencing!NoVideoPage
HKCU\Software\Policies\Microsoft\Conferencing!Use AutoConfig, HKCU\Software\Policies\Microsoft\Conferencing!ConfigFile
HKCU\Software\Policies\Microsoft\Conferencing!NoDirectoryServices
HKCU\Software\Policies\Microsoft\Conferencing!NoAddingDirectoryServers
HKCU\Software\Policies\Microsoft\Conferencing!NoWebDirectory
HKCU\Software\Policies\Microsoft\Conferencing!IntranetSupportURL
HKCU\Software\Policies\Microsoft\Conferencing!CallSecurity
HKCU\Software\Policies\Microsoft\Conferencing!NoChangingCallMode
HKCU\Software\Policies\Microsoft\Conferencing!NoAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!PersistAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingFiles
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingFiles
HKCU\Software\Policies\Microsoft\Conferencing!MaxFileSendSize
HKCU\Software\Policies\Microsoft\Conferencing!NoChat
HKCU\Software\Policies\Microsoft\Conferencing!NoOldWhiteBoard
HKCU\Software\Policies\Microsoft\Conferencing!NoNewWhiteBoard
HKLM\Software\Policies\Microsoft\Conferencing!NoRDS
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AUOptions
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUServer, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUSe
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGroupEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGrou
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RescheduleWaitTimeEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoRebootWithLoggedOnUsers
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!DetectionFrequencyEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AutoInstallMinorUpdates
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootWarningTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpda
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpd
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!ElevateNonAdmins
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!SetAndLockSkin, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DefaultSkin
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DoNotShowAnchor
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCodecDownload
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideNetworkTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!WindowsMediaStreamingProtocols, HKCU\Software\Policies\Microsoft\WindowsMediaPla
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HT
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MM
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBufferingPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!BufferingType, HK
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!GroupPrivacyAcceptance
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DesktopShortcut
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!QuickLaunchShortcut
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DisableAutoUpdate
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DontUseFrameInterpolation
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCDDVDMetadataRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventMusicFileMetadataRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventRadioPresetsRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HidePrivacyTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideSecurityTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!EnableScreenSaver
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RT
oft\Windows NT\Reliability!ShutdownReasonUI
ft\Windows NT\Reliability!TimeStampInterval
soft\Windows\System!SlowLinkTimeOut
T\DiskQuota!LimitUnits, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Threshold, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ThresholdUnits

t\Windows\System!GroupPolicyRefreshTimeOffset
osoft\Windows\System!GroupPolicyRefreshTimeOffsetDC
ackgroundPolicy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges

owLink, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\
nk, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoGPOListChanges
wLink, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoGPOListChanges
wLink, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Win
ackgroundPolicy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoGPOListChanges
nk, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windows\
lowLink, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoBackgroundPolicy, HKLM\Software\Policies\Microsof
owLink, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\
nk, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windows\G
crosoft\Windows NT\Terminal Services!fAllowFullControl, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!MaxTicketExpiry, HKLM\Software\policies\Micros

crosoft\Windows NT\Terminal Services!fAllowUnsolicitedFullControl
th\ErrorReporting\DW!DWAllowHeadless, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWAllowHeadless
icrosoft\PCHealth\ErrorReporting\DW!DWNoFileCollection, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoSecondLevelCollection, HKLM\Software\P
ealth\ErrorReporting!IncludeMicrosoftApps, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeWindowsApps
dows NT\Rpc!ExtErrorInfoExceptions
W32Time\Config!HoldPeriod, HKLM\Software\Policies\Microsoft\W32Time\Config!LargePhaseOffset, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxAllowedPhaseO

Parameters!Type, HKLM\Software\Policies\Microsoft\W32time\Parameters!CrossSiteSyncFlags, HKLM\Software\Policies\Microsoft\W32time\Parameters!ResolvePeerBackof
ows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKLM\Software\Microsoft\
rnet\Pnrp\IPv6-Global!DontIncludeMicrosoftSeedServer
Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!PurgeOnlyAutoCacheAtLogoff
OFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!RemoteAddresses
OFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!RemoteAddresses
Unreachable, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundSourceQuench, HKLM\SOFTWARE\Policies\Microsoft\Wind
M\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!RemoteAddresses
M\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!RemoteAddresses
FTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logg
ticastBroadcast
SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!RemoteAddresses
OFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!RemoteAddresses
nUnreachable, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundSourceQuench, HKLM\SOFTWARE\Policies\Microsoft\W
M\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!RemoteAddresses
LM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!RemoteAddresses
OFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\
ulticastBroadcast
\Windows\BITS!MaxTransferRateOnSchedule, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBandwidthValidFrom, HKLM\Software\Policies\Microsoft\Windows\BITS
licies\Microsoft\Windows NT\Terminal Services!KeepAliveInterval

WARE\Policies\Microsoft\Windows NT\Terminal Services!FallbackPrintDriverType
E\Policies\Microsoft\Windows NT\Terminal Services!fDenyTSConnections
SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime
FTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip

licies\Microsoft\Windows NT\Terminal Services!WFHomeDir, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirDrive
es\Microsoft\Windows NT\Terminal Services!WorkDirectory

are\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Delete
ows\CurrentVersion\Policies\System!WallpaperStyle
ndows\CurrentVersion\Policies\Explorer\DisallowCpl!{1,2,3,...}
dows\CurrentVersion\Policies\Explorer\RestrictCpl!{1,2,3,...}
osoft\Windows NT\Printers\PointAndPrint!InForest, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!TrustedServers, HKCU\Software\Policies\Microsoft

osoft\Windows\DriverSearching!DontSearchCD, HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate
ndows\CurrentVersion\Policies\Explorer\RestrictRun!{1,2,3,...}
ndows\CurrentVersion\Policies\Explorer\DisallowRun!{1,2,3,...}
soft\Windows\CurrentVersion\Policies\System!ProfileQuotaMessage, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxProfileSize, HKCU\Software\Mi

ft\Windows\System!GroupPolicyRefreshTimeOffset
ows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKCU\Software\Microsoft

soft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place1, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place2, HKCU\Software
es\Microsoft\Windows NT\Terminal Services!WorkDirectory, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fInheritInitialProgram
SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

mplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\
mplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\
esZoneTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKCU\Software\Policies\Microsoft\Win
edSitesZoneTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!Restricted Sites, HKCU\Software\Policies\Mic
alMachineZoneTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!Local Machine Zone, HKCU\Software
Policies!LocalMachineZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!Locke
netZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-Down Internet, HKCU\Softwa
netZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-Down Intranet, HKCU\Softwa
TrustedSitesZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!Locked-Down Trusted
es!RestrictedSitesZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!Locked-Down
OWN\Settings!LOCALMACHINE_CD_UNLOCK
are\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionCount, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MinUpda
crosoft\Windows\CurrentVersion\Policies\Explorer!Btn_Back, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Forward, HKCU\Software\Microsoft\W

oft\Internet Explorer\Persistence\0!DocumentLimit
-11CE-BF01-00AA0055595A}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{22D6F312-B0F6-11D0-94AB-0080C74C7E95}
11D0-89D6-00A0C90C9B67}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{7823A620-9DD9-11CF-A662-00AA00C066D2
E-11D1-9EC1-00C04FD7081F}
-11CF-99CB-00C04FD64497}
-11D2-95C0-00C04F9A8CFA}
D-11CF-96B8-444553540000}
-11D0-A334-00AA004A5FC5}
-11D1-8D03-00A0C959BC0A}
6-11D1-8B76-0080C744F389}
2-11D0-953B-00C04FD9152D}
-11d2-8A8D-00C04FA31D93}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{52ADE293-85E8-11D2-BB22-00104B0EA281}
-11D1-8161-00A0C90DD90C}
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Fea
L!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKCU\Software\Policies\Micros

_MK_PROTOCOL
OWN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKCU\Software\Policie

ACHINE_LOCKDOWN
ed), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explor
ed), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\
rved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Exp
S!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKCU\Software\Policies\Micros

W_RESTRICTIONS
rved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Exp
ed), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\
ALL!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKCU\Software\Policies\

CT_ACTIVEXINSTALL
OAD!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKCU\Software\Policies\M

CT_FILEDOWNLOAD
MANAGEMENT
!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microso

COL_LOCKDOWN
mplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I
mplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I
esZoneTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKLM\Software\Policies\Microsoft\Win
edSitesZoneTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!Restricted Sites, HKLM\Software\Policies\Micr
alMachineZoneTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!Local Machine Zone, HKLM\Software\
olicies!LocalMachineZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!Locke
etZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-Down Internet, HKLM\Softwar
etZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-Down Intranet, HKLM\Softwar
TrustedSitesZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!Locked-Down Trusted
es!RestrictedSitesZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!Locked-Down
OWN\Settings!LOCALMACHINE_CD_UNLOCK
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Fea
L!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKLM\Software\Policies\Micros

_MK_PROTOCOL
OWN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKLM\Software\Policie

ACHINE_LOCKDOWN
ed), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explore
d), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\
rved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Exp
S!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKLM\Software\Policies\Micros

W_RESTRICTIONS
rved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Expl
d), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\
ALL!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKLM\Software\Policies\

CT_ACTIVEXINSTALL
AD!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKLM\Software\Policies\M

CT_FILEDOWNLOAD
MANAGEMENT
!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microso

OL_LOCKDOWN
soft\Windows\WindowsUpdate\AU!AUOptions, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!ScheduledInstallDay, HKLM\Software\Policies\Microsoft\Wind

oft\Windows\WindowsUpdate\AU!UseWUServer, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!WUServer, HKLM\Software\Policies\Microsoft\Windows\W
rosoft\Windows\WindowsUpdate!TargetGroup
\Policies\Microsoft\Windows\WindowsUpdate\AU!RescheduleWaitTime
Policies\Microsoft\Windows\WindowsUpdate\AU!DetectionFrequency
are\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootWarningTimeout
are\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeout
ndowsMediaPlayer!DefaultSkin
oftware\Policies\Microsoft\WindowsMediaPlayer\Protocols!Multicast, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!UDP, HKCU\Software\Policies\Micros
Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\Polic
Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!AutodetectProxy, HKCU\Software\Policie
soft\WindowsMediaPlayer!BufferingType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!UseDefaultBuffering, HKCU\Software\Policies\Microsoft\WindowsMediaPl
Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!AutodetectProxy, HKCU\Software\Polic

\Windows NT\DiskQuota!ThresholdUnits
GPOListChanges
undPolicy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoGPOListChanges
Policy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoGPOListChanges

GPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoGPOListChanges
oundPolicy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoGPOListChanges
undPolicy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoGPOListChanges
xTicketExpiry, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!MaxTicketExpiryUnits, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fUs
NoSecondLevelCollection, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!ForceQueueMode, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!D
crosoft\W32Time\Config!MaxAllowedPhaseOffset, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxNegPhaseCorrection, HKLM\Software\Policies\Microsoft\W32Time

oft\W32time\Parameters!ResolvePeerBackoffMinutes, HKLM\Software\Policies\Microsoft\W32time\Parameters!ResolvePeerBackoffMaxTimes, HKLM\Software\Policies\Micr
r!NoWebServices, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP, H

h, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\I
icrosoft\WindowsFirewall\DomainProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSuccessfulConnec
nch, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardPr
s\Microsoft\WindowsFirewall\StandardProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogSuccessfulC
M\Software\Policies\Microsoft\Windows\BITS!MaxBandwidthValidTo, HKLM\Software\Policies\Microsoft\Windows\BITS!UseSystemMaximum, HKLM\Software\Policies\Micro
ces!WFHomeDirDrive
dServers, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!ServerList
s\System!MaxProfileSize, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!IncludeRegInProQuota, HKCU\Software\Microsoft\Windows\CurrentVersion\Po
r!NoWebServices, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP, H
comdlg32\Placesbar!Place2, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place3, HKCU\Software\Microsoft\Windows\CurrentVersion\Po
es!fInheritInitialProgram
\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1004, HK
\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1004, HK
Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
Restricted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
olicies!Local Machine Zone, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKCU\Software\Policies\Microsoft\Windows\Curren
e Lockdown Settings\Template Policies!Locked-Down Local Machine Zone, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!
Policies!Locked-Down Internet, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKCU\Software\Policies\Microsoft\Win
Policies!Locked-Down Intranet, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKCU\Software\Policies\Microsoft\Win
ings\Template Policies!Locked-Down Trusted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1001, HKCU\Software
wn Settings\Template Policies!Locked-Down Restricted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1001, HKCU
et Explorer\Infodelivery\Restrictions!MinUpdateInterval, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UpdateExcludeBegin, HKCU\Software\P
er!Btn_Forward, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Stop, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_R
2D6F312-B0F6-11D0-94AB-0080C74C7E95}
823A620-9DD9-11CF-A662-00AA00C066D2}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{F5131C24-E56D-11CF-B78A-
2ADE293-85E8-11D2-BB22-00104B0EA281}
Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEA
explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe, HKCU\Software\Policies\Micros
KDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe, HKCU\Software\Po
U\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Fe
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Featu
KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Ma
explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe, HKCU\Software\Policies\Microso
KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Ma
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Featu
STALL!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe, HKCU\Software\Polici
OAD!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe, HKCU\Software\Policies
xplorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe, HKCU\Software\Policies\Microsoft

\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1004, HKL
Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
Restricted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
olicies!Local Machine Zone, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKLM\Software\Policies\Microsoft\Windows\Curren
Lockdown Settings\Template Policies!Locked-Down Local Machine Zone, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!
olicies!Locked-Down Internet, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKLM\Software\Policies\Microsoft\Win
olicies!Locked-Down Intranet, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKLM\Software\Policies\Microsoft\Win
ings\Template Policies!Locked-Down Trusted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1001, HKLM\Software\
wn Settings\Template Policies!Locked-Down Restricted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1001, HKLM
Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEA
explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe, HKLM\Software\Policies\Microso
KDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe, HKLM\Software\Po
M\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Fe
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Featu
KLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Ma
explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe, HKLM\Software\Policies\Microso
KLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Mai
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Featu
TALL!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe, HKLM\Software\Policie
OAD!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe, HKLM\Software\Policies\

xplorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe, HKLM\Software\Policies\Microsoft\
lDay, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!ScheduledInstallTime
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!WUStatusServer
otocols!UDP, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!UDPPorts, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!TCP, HKCU\S
HTTP!AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protoco
MS!AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols
Software\Policies\Microsoft\WindowsMediaPlayer!UseDefaultBuffering, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBuffering
RTSP!AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protoc

Microsoft\Windows NT\Terminal Services!fUseMailto
cies\Microsoft\PCHealth\ErrorReporting\DW!DWFileTreeRoot, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWReporteeName
, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxPosPhaseCorrection, HKLM\Software\Policies\Microsoft\W32Time\Config!PhaseCorrectRate, HKLM\Software\Polic

ckoffMaxTimes, HKLM\Software\Policies\Microsoft\W32time\Parameters!SpecialPollInterval, HKLM\Software\Policies\Microsoft\W32time\Parameters!EventLogFlags
Policies\Microsoft\Messenger\Client!CEIP, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftK

es\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInboundEchoRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!A
DomainProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogFilePath, HKLM\SOFTWARE\Policies\
olicies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundEchoRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSet
wall\StandardProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogFilePath, HKLM\SOFTWARE\P

emMaximum, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTransferRateOffSchedule
oftware\Microsoft\Windows\CurrentVersion\Policies\System!WarnUser, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!WarnUserTimeout
\Policies\Microsoft\Messenger\Client!CEIP, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKCU\Software\Policies\Microsoft\Win
oftware\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place4
ntVersion\Internet Settings\Zones\3!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1200, HKCU\Software\Policies\Microsoft\Win
osoft\Windows\CurrentVersion\Internet Settings\Zones\2!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1200, HKCU\Software\
licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1200, HKCU
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!
Version\Internet Settings\Lockdown_Zones\0!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1004, HKCU\Software\P
!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
gs\Lockdown_Zones\2!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1004, HKCU\Software\Policies\Microsoft\Wind
net Settings\Lockdown_Zones\4!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1004, HKCU\Software\Policies\Micro
ions!UpdateExcludeBegin, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UpdateExcludeEnd, HKCU\Software\Policies\Microsoft\Internet Explo
dows\CurrentVersion\Policies\Explorer!Btn_Refresh, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Home, HKCU\Software\Microsoft\Windows\Cu
wedControls!{F5131C24-E56D-11CF-B78A-444553540000}
oft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVI
explore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies\Microsof
OCKDOWN!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Software
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureCont
olicies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\F
ftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Featu
explore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies\Microsoft
tware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Feature
olicies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\F
NSTALL!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\Poli
NLOAD!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Policie
plore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microsoft\In

tVersion\Internet Settings\Zones\3!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1200, HKLM\Software\Policies\Microsoft\Wind
osoft\Windows\CurrentVersion\Internet Settings\Zones\2!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1200, HKLM\Software\P
icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1200, HKLM\
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1
Version\Internet Settings\Lockdown_Zones\0!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1004, HKLM\Software\P
1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
s\Lockdown_Zones\2!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1004, HKLM\Software\Policies\Microsoft\Windo
net Settings\Lockdown_Zones\4!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1004, HKLM\Software\Policies\Micro
oft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIO
explore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies\Microsoft
OCKDOWN!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Software\
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureContr
olicies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FE
ftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Featur
explore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies\Microsoft\
ware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Feature
olicies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FE
NSTALL!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\Polic
LOAD!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Policies

plore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microsoft\Int
WindowsMediaPlayer\Protocols!TCP, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!HTTP
licies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Softwar
es\Microsoft\WindowsMediaPlayer\Protocols\MMS!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!AutodetectProxy, HKCU\Software\Po
!NetworkBuffering
olicies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!AutodetectProxy, HKCU\Software

DWReporteeName
nfig!PhaseCorrectRate, HKLM\Software\Policies\Microsoft\W32Time\Config!PollAdjustFactor, HKLM\Software\Policies\Microsoft\W32Time\Config!SpikeWatchPeriod, HKLM\S

W32time\Parameters!EventLogFlags
icies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport, HKLM\Software\Microsoft\Windows\CurrentVe

ndowsFirewall\DomainProfile\IcmpSettings!AllowInboundRouterRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutbound
ng!LogFilePath, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogFileSize
oft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundRouterRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowO
e\Logging!LogFilePath, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogFileSize
es\System!WarnUserTimeout
nWith, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HK
1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
rnet Settings\Zones\2!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1201, HKCU\Software\Policies\Microsoft\Windows\Current
ersion\Internet Settings\Zones\4!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1201, HKCU\Software\Policies\Microsoft\Window
ws\CurrentVersion\Internet Settings\Zones\0!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1201, HKCU\Software\Policies\Micr
s\Lockdown_Zones\0!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1200, HKCU\Software\Policies\Microsoft\Windo
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
Zones\4!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentV
CU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxWebcrawlLevels
ome, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Search, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Favorites,

orer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.e
Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKCU\Software\Policies\Microsof
E_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKCU\Softw
Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATU
osoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_M
olicies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureContro
Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKCU\Software\Policies\Microsoft
cies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\
soft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_S
EXINSTALL!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKCU\Software\P
WNLOAD!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKCU\Software\Polic
erved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Inte

1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
net Settings\Zones\2!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentV
rsion\Internet Settings\Zones\4!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1201, HKLM\Software\Policies\Microsoft\Window
ws\CurrentVersion\Internet Settings\Zones\0!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1201, HKLM\Software\Policies\Micro
\Lockdown_Zones\0!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1200, HKLM\Software\Policies\Microsoft\Window
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
Zones\4!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVe
rer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.ex
Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKLM\Software\Policies\Microsoft\
E_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKLM\Softwa
Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATU
soft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_M
licies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureContro
Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKLM\Software\Policies\Microsoft\
cies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\F
soft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_S
XINSTALL!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKLM\Software\P
NLOAD!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKLM\Software\Polici

erved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Inte
yer\Protocols\HTTP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaP
s\MMS!AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Pr
ocols\RTSP!AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlay

W32Time\Config!SpikeWatchPeriod, HKLM\Software\Policies\Microsoft\W32Time\Config!UpdateInterval, HKLM\Software\Policies\Microsoft\W32Time\Config!AnnounceFlags
KLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSI
ll\DomainProfile\IcmpSettings!AllowOutboundTimeExceeded, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundParameterP
Firewall\StandardProfile\IcmpSettings!AllowOutboundTimeExceeded, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundP
ws NT\Printers!DisableWebPnPDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMake
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1
01, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
\Zones\0!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
ows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1400, HKCU
ows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1400, HKCU
olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
rentVersion\Policies\Explorer!Btn_Favorites, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_History, HKCU\Software\Microsoft\Windows\CurrentV
reControl\FEATURE_BEHAVIORS!iexplore.exe
plorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe
INE_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe
nternet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe
et Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe
icrosoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe
plorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe
rosoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe
et Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe
VEXINSTALL!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe
WNLOAD!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe
er.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe

1, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Z
Zones\0!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
ws\CurrentVersion\Internet Settings\Lockdown_Zones\3!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1400, HKLM
ws\CurrentVersion\Internet Settings\Lockdown_Zones\1!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1400, HKLM
icies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
ftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L
eControl\FEATURE_BEHAVIORS!iexplore.exe
plorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe
NE_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe
nternet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe
t Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe
crosoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe
orer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe
osoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe
t Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe
EXINSTALL!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe
WNLOAD!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe

r.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe
U\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowse
re\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!BypassProxyLocal, HKCU\So
oftware\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!BypassProxyLocal, HK
es\Microsoft\W32Time\Config!AnnounceFlags, HKLM\Software\Policies\Microsoft\W32Time\Config!EventLogFlags, HKLM\Software\Policies\Microsoft\W32Time\Config!Local
dows\Internet Connection Wizard!ExitOnMSICW, HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks, HKLM\SOFTWARE\Policies\Microsoft\Sys
ofile\IcmpSettings!AllowOutboundParameterProblem, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInboundTimestampRequest,
tandardProfile\IcmpSettings!AllowOutboundParameterProblem, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundTimestam
tware\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish, HKCU\Software\Microsoft\Windows\CurrentVe
rnet Settings\Zones\3!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1405, HKCU\Software\Policies\Microsoft\Windows\Curren
rnet Settings\Zones\1!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1405, HKCU\Software\Policies\Microsoft\Windows\Curren
ws\CurrentVersion\Internet Settings\Zones\2!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1405, HKCU\Software\Policies\Micro
oft\Windows\CurrentVersion\Internet Settings\Zones\4!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1405, HKCU\Software\Pol
icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1405, HKCU\
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
rnet Settings\Lockdown_Zones\3!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1402, HKCU\Software\Policies\Micr
s\CurrentVersion\Internet Settings\Lockdown_Zones\2!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKCU\
ft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!140
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Folders, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Fullscreen, HKC
ACHINE_LOCKDOWN!iexplore.exe
TIVEXINSTALL!iexplore.exe
OWNLOAD!iexplore.exe
s\CurrentVersion\Internet Settings\Zones\2!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1405, HKLM\Software\Policies\Micros
t\Windows\CurrentVersion\Internet Settings\Zones\4!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1405, HKLM\Software\Polic
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1405, HKLM\S
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
s\CurrentVersion\Internet Settings\Lockdown_Zones\2!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKLM\S
t\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1402
CHINE_LOCKDOWN!iexplore.exe
TIVEXINSTALL!iexplore.exe
OWNLOAD!iexplore.exe
owsMediaPlayer\Protocols\HTTP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\Policies\Micr
Protocols\MMS!BypassProxyLocal, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!BypassProxyLocalAddress
ayer\Protocols\RTSP!BypassProxyLocal, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!BypassProxyLocalAddress
are\Policies\Microsoft\W32Time\Config!LocalClockDispersion, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxPollInterval, HKLM\Software\Policies\Microsoft\W32Ti
ks, HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoR
mpSettings!AllowInboundTimestampRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInboundMaskRequest, HKLM\SOFTW
dProfile\IcmpSettings!AllowInboundTimestampRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundMaskRequest, H
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServi
Zones\2!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
t Settings\Zones\4!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
rsion\Internet Settings\Zones\0!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1406, HKCU\Software\Policies\Microsoft\Window
\CurrentVersion\Internet Settings\Lockdown_Zones\0!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1405, HKCU\S
_Zones\3!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentV
et Settings\Lockdown_Zones\2!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1405, HKCU\Software\Policies\Micros
ion\Internet Settings\Lockdown_Zones\4!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1405, HKCU\Software\Polic
ersion\Policies\Explorer!Btn_Fullscreen, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Tools, HKCU\Software\Microsoft\Windows\CurrentVersion
ones\2!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
Settings\Zones\4!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVers
sion\Internet Settings\Zones\0!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1406, HKLM\Software\Policies\Microsoft\Windows
CurrentVersion\Internet Settings\Lockdown_Zones\0!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1405, HKLM\So
t Settings\Lockdown_Zones\2!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1405, HKLM\Software\Policies\Microso
on\Internet Settings\Lockdown_Zones\4!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1405, HKLM\Software\Polici
utodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP
val, HKLM\Software\Policies\Microsoft\W32Time\Config!MinPollInterval
oft\Windows\Registration Wizard Control!NoRegistration, HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates, HKLM\Software\Policies\Microso
s!AllowInboundMaskRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundPacketTooBig
\IcmpSettings!AllowInboundMaskRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundPacketTooBig
urrentVersion\Policies\Explorer!NoWebServices, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKCU\Software\Policies\Micro
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1601, HKCU\S
tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!160
6, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
t Settings\Lockdown_Zones\0!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1406, HKCU\Software\Policies\Microso
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
ones\2!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
ckdown_Zones\4!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1406, HKCU\Software\Policies\Microsoft\Windows\
\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_MailNews, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Size, HKCU\Softwar
ies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1601, HKLM\So
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1601,
, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Z
Settings\Lockdown_Zones\0!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1406, HKLM\Software\Policies\Microsof
oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L
ones\2!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVers
kdown_Zones\4!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1406, HKLM\Software\Policies\Microsoft\Windows\C
crosoft\WindowsMediaPlayer\Protocols\HTTP!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyPort, HKCU\Software\Policies\M
FileUpdates, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownloa
ndPacketTooBig
s!AllowOutboundPacketTooBig
ePrintsWizard, HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKCU\S
sion\Internet Settings\Zones\2!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1604, HKCU\Software\Policies\Microsoft\Window
CurrentVersion\Internet Settings\Zones\4!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1604, HKCU\Software\Policies\Microso
ft\Windows\CurrentVersion\Internet Settings\Zones\0!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1604, HKCU\Software\Poli
nes\0!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVer
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!16
ftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
on\Policies\Explorer!Btn_Size, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Print, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\E
ion\Internet Settings\Zones\2!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1604, HKLM\Software\Policies\Microsoft\Windows\
urrentVersion\Internet Settings\Zones\4!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1604, HKLM\Software\Policies\Microsoft\
\Windows\CurrentVersion\Internet Settings\Zones\0!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1604, HKLM\Software\Polici
nes\0!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
ft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!160
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
s\HTTP!ProxyPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!BypassProxyLocal, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Pro
indows NT\Printers!DisableWebPnPDownload, HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate, HKLM\Software\Policies\Microsoft
olicies\Explorer!NoInternetOpenWith, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKCU\Software\Policies\Microsoft\Windows NT\Printers!
4, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Z
nes\4!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVer
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo
sion\Internet Settings\Lockdown_Zones\3!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1604, HKCU\Software\Poli
sion\Internet Settings\Lockdown_Zones\1!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1604, HKCU\Software\Poli
\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1604
s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zon
Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Edit, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Discussions, HKCU\Software\Micros
es\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1607, HKLM\So
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zo
es\4!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
Settings\Zones\0!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Loc
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1604,
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone
\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!BypassProxyLocalAddress
wsUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDow
ware\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKCU\Software\Policies\
t\Windows\CurrentVersion\Internet Settings\Zones\2!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1608, HKCU\Software\Polic
s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1608, HKCU\Soft
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1608
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1606,
ockdown_Zones\3!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1606, HKCU\Software\Policies\Microsoft\Windows
on\Internet Settings\Lockdown_Zones\2!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1606, HKCU\Software\Polici
rrentVersion\Internet Settings\Lockdown_Zones\4!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1606, HKCU\Softw
rer!Btn_Discussions, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Cut, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn
on\Internet Settings\Zones\3!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1608, HKLM\Software\Policies\Microsoft\Windows\
Windows\CurrentVersion\Internet Settings\Zones\2!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1608, HKLM\Software\Policie
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1608, HKLM\Softw
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1608,
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1606, H
n\Internet Settings\Lockdown_Zones\2!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1606, HKLM\Software\Policies
entVersion\Internet Settings\Lockdown_Zones\4!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1606, HKLM\Softwa
s\Microsoft\WindowsMovieMaker!CodecDownload, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKLM\Software\Policies\Microsoft\WindowsMovieMak
er!CodecDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
Settings\Zones\2!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVers
n\Internet Settings\Zones\4!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1609, HKCU\Software\Policies\Microsoft\Windows\C
urrentVersion\Internet Settings\Zones\0!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1609, HKCU\Software\Policies\Microsof
n\Internet Settings\Lockdown_Zones\0!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1607, HKCU\Software\Policie
kdown_Zones\2!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1607, HKCU\Software\Policies\Microsoft\Windows\C
ttings\Lockdown_Zones\4!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1607, HKCU\Software\Policies\Microsoft\W
Windows\CurrentVersion\Policies\Explorer!Btn_Copy, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Paste, HKCU\Software\Microsoft\Windows\Cu
ettings\Zones\2!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
Internet Settings\Zones\4!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1609, HKLM\Software\Policies\Microsoft\Windows\Cur
rentVersion\Internet Settings\Zones\0!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1609, HKLM\Software\Policies\Microsoft\W
Internet Settings\Lockdown_Zones\0!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1607, HKLM\Software\Policies\
down_Zones\2!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1607, HKLM\Software\Policies\Microsoft\Windows\Cu
ngs\Lockdown_Zones\4!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1607, HKLM\Software\Policies\Microsoft\Win
oftware\Policies\Microsoft\WindowsMovieMaker!WebPublish, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKLM\Software\Micr
owsMovieMaker!WebPublish
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon
es\0!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
down_Zones\0!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1608, HKCU\Software\Policies\Microsoft\Windows\Cu
s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zo
s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zo
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
\4!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion
Paste, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Encoding
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1802, H
LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
s\0!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
own_Zones\0!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1608, HKLM\Software\Policies\Microsoft\Windows\Curr
KLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
er!NoPublishingWizard, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\E
urrentVersion\Internet Settings\Zones\2!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1803, HKCU\Software\Policies\Microsoft
indows\CurrentVersion\Internet Settings\Zones\4!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1803, HKCU\Software\Policies
\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1803, HKCU\Softw
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
urrentVersion\Internet Settings\Lockdown_Zones\3!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1800, HKCU\Softw
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd
entVersion\Internet Settings\Zones\2!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1803, HKLM\Software\Policies\Microsoft\W
dows\CurrentVersion\Internet Settings\Zones\4!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1803, HKLM\Software\Policies\M
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1803, HKLM\Softwa
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett
icrosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones
Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP, HKLM\Software\Policies\Microsoft\PC
es\2!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
tings\Zones\4!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion
n\Internet Settings\Zones\0!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1804, HKCU\Software\Policies\Microsoft\Windows\Cu
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones
ettings\Lockdown_Zones\3!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1802, HKCU\Software\Policies\Microsoft\W
entVersion\Internet Settings\Lockdown_Zones\2!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1802, HKCU\Softwa
dows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1802, HK
re\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1809, H
re\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1809, H
2!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set
gs\Zones\4!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
nternet Settings\Zones\0!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1804, HKLM\Software\Policies\Microsoft\Windows\Curre
crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0
ings\Lockdown_Zones\3!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1802, HKLM\Software\Policies\Microsoft\Wi
ntVersion\Internet Settings\Lockdown_Zones\2!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1802, HKLM\Software
ows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1802, HKLM
t!CEIP, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch, HKLM\Software\Policies\
urrentVersion\Internet Settings\Zones\3!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A00, HKCU\Software\Policies\Microsoft
urrentVersion\Internet Settings\Zones\1!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A00, HKCU\Software\Policies\Microsoft
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1A00, HKCU\Softw
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1A00, HK
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone
entVersion\Internet Settings\Lockdown_Zones\0!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1803, HKCU\Softwar
s\3!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion
ings\Lockdown_Zones\2!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1803, HKCU\Software\Policies\Microsoft\W
ternet Settings\Lockdown_Zones\4!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1803, HKCU\Software\Policies\M
entVersion\Internet Settings\Zones\3!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A00, HKLM\Software\Policies\Microsoft\W
entVersion\Internet Settings\Zones\1!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A00, HKLM\Software\Policies\Microsoft\W
crosoft\Windows\CurrentVersion\Internet Settings\Zones\2!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1A00, HKLM\Softwar
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1A00, HKL
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
Version\Internet Settings\Lockdown_Zones\0!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1803, HKLM\Software\
3!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I
1!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I
gs\Lockdown_Zones\2!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1803, HKLM\Software\Policies\Microsoft\Wind
net Settings\Lockdown_Zones\4!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1803, HKLM\Software\Policies\Micr
MicrosoftKBSearch, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetO
es\3!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
es\1!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
\Internet Settings\Zones\2!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1A04, HKCU\Software\Policies\Microsoft\Windows\Cu
ntVersion\Internet Settings\Zones\4!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1A04, HKCU\Software\Policies\Microsoft\W
ndows\CurrentVersion\Internet Settings\Zones\0!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A04, HKCU\Software\Policies
ngs\Lockdown_Zones\0!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1804, HKCU\Software\Policies\Microsoft\Win
re\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd
2!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\I
n_Zones\4!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1804, HKCU\Software\Policies\Microsoft\Windows\Curren
3!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
1!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
ternet Settings\Zones\2!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1A04, HKLM\Software\Policies\Microsoft\Windows\Curre
Version\Internet Settings\Zones\4!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1A04, HKLM\Software\Policies\Microsoft\Wind
ows\CurrentVersion\Internet Settings\Zones\0!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A04, HKLM\Software\Policies\Mi
_Zones\4!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentV
CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\W
\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05, HKCU\Soft
\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1E05, HKCU\Soft
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone
4!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set
ings\Zones\0!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion
1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HK
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HK
\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdo
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
icrosoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05, HKLM\Softwa
icrosoft\Windows\CurrentVersion\Internet Settings\Zones\1!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1E05, HKLM\Softwa
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
gs\Zones\0!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
ows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HKLM
ows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HKLM
olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
Update, HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW, HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLin
n\Internet Settings\Zones\3!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2000, HKCU\Software\Policies\Microsoft\Windows\C
n\Internet Settings\Zones\1!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2000, HKCU\Software\Policies\Microsoft\Windows\C
ndows\CurrentVersion\Internet Settings\Zones\2!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2000, HKCU\Software\Policies
crosoft\Windows\CurrentVersion\Internet Settings\Zones\4!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2000, HKCU\Softwar
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2000, H
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
nternet Settings\Lockdown_Zones\3!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04, HKCU\Software\Policies\M
nternet Settings\Lockdown_Zones\1!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A04, HKCU\Software\Policies\M
ows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKC
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1
nternet Settings\Zones\3!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2000, HKLM\Software\Policies\Microsoft\Windows\Curre
nternet Settings\Zones\1!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2000, HKLM\Software\Policies\Microsoft\Windows\Curre
ows\CurrentVersion\Internet Settings\Zones\2!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2000, HKLM\Software\Policies\Mi
osoft\Windows\CurrentVersion\Internet Settings\Zones\4!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2000, HKLM\Software\P
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2000, HKLM
icies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
rnet Settings\Lockdown_Zones\3!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04, HKLM\Software\Policies\Mic
rnet Settings\Lockdown_Zones\1!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A04, HKLM\Software\Policies\Mic
ws\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKLM\
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A0
oft\EventViewer!MicrosoftEventVwrDisableLinks, HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate, HKLM\Software\Policies\Micro
ternet Settings\Zones\4!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2001, HKCU\Software\Policies\Microsoft\Windows\Curre
entVersion\Internet Settings\Zones\0!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2001, HKCU\Software\Policies\Microsoft\W
ows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1C00, HKC
wn_Zones\3!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00, HKCU\Software\Policies\Microsoft\Windows\Curre
wn_Zones\1!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1C00, HKCU\Software\Policies\Microsoft\Windows\Curre
ernet Settings\Lockdown_Zones\2!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00, HKCU\Software\Policies\Mi
ersion\Internet Settings\Lockdown_Zones\4!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1C00, HKCU\Software\P
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1
gs\Zones\2!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Int
Version\Internet Settings\Zones\0!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2001, HKLM\Software\Policies\Microsoft\Windo
s\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1C00, HKLM\S
_Zones\3!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00, HKLM\Software\Policies\Microsoft\Windows\Current
_Zones\1!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1C00, HKLM\Software\Policies\Microsoft\Windows\Current
et Settings\Lockdown_Zones\2!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00, HKLM\Software\Policies\Micro
sion\Internet Settings\Lockdown_Zones\4!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1C00, HKLM\Software\Poli
otAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration, HKLM\Software\Policies\Microsoft\SearchCompanion!DisableConten
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2100, HK
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
0!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set
rnet Settings\Lockdown_Zones\0!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1E05, HKCU\Software\Policies\Mic
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett
n_Zones\2!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1E05, HKCU\Software\Policies\Microsoft\Windows\Curren
\Lockdown_Zones\4!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1E05, HKCU\Software\Policies\Microsoft\Windo
ows\CurrentVersion\Internet Settings\Zones\3!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2100, HKLM\Software\Policies\Mic
ows\CurrentVersion\Internet Settings\Zones\1!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2100, HKLM\Software\Policies\Mic
olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2100, HKLM
001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
t Settings\Lockdown_Zones\0!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1E05, HKLM\Software\Policies\Micros
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
Zones\2!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVe
ckdown_Zones\4!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1E05, HKLM\Software\Policies\Microsoft\Windows
\Microsoft\SearchCompanion!DisableContentFileUpdates, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKLM\Software\Policies\Microsoft\W
ows\CurrentVersion\Internet Settings\Zones\4!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2101, HKCU\Software\Policies\Mic
crosoft\Windows\CurrentVersion\Internet Settings\Zones\0!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2101, HKCU\Software
_Zones\0!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2000, HKCU\Software\Policies\Microsoft\Windows\Current
crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
ersion\Internet Settings\Zones\2!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2101, HKLM\Software\Policies\Microsoft\Windo
soft\Windows\CurrentVersion\Internet Settings\Zones\0!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2101, HKLM\Software\Po
ones\0!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVer
soft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!20
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
PPrinting, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWind
!2101, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett
s\Zones\4!2101, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Int
ernet Settings\Zones\0!2101, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2102, HKCU\Software\Policies\Microsoft\Windows\Curre
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
Version\Internet Settings\Lockdown_Zones\3!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2004, HKCU\Software\
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2
01, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
ones\4!2101, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
et Settings\Zones\0!2101, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVe
tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo
rsion\Internet Settings\Lockdown_Zones\3!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2004, HKLM\Software\Pol
rsion\Internet Settings\Lockdown_Zones\1!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2004, HKLM\Software\Pol
s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zo
\Windows\DriverSearching!DontSearchWindowsUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess, HKLM\Software\Polic
ntVersion\Internet Settings\Zones\3!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2201, HKCU\Software\Policies\Microsoft\Wi
ntVersion\Internet Settings\Zones\1!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2201, HKCU\Software\Policies\Microsoft\Wi
rosoft\Windows\CurrentVersion\Internet Settings\Zones\2!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2201, HKCU\Software
olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2201, HKCU
soft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!21
ersion\Internet Settings\Lockdown_Zones\2!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2100, HKCU\Software\Po
oft\Windows\CurrentVersion\Internet Settings\Zones\2!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2201, HKLM\Software\Po
oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!220
\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2100
ockdown_Zones\3!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2100, HKLM\Software\Policies\Microsoft\Windows
urrentVersion\Internet Settings\Lockdown_Zones\4!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2100, HKLM\Softw
WindowsUpdateAccess, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKLM\S
ernet Settings\Zones\2!2201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2300, HKCU\Software\Policies\Microsoft\Windows\Curren
ersion\Internet Settings\Zones\4!2201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2300, HKCU\Software\Policies\Microsoft\Windo
rsion\Internet Settings\Lockdown_Zones\0!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2101, HKCU\Software\Po
Lockdown_Zones\2!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2101, HKCU\Software\Policies\Microsoft\Window
t Settings\Zones\2!2201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2300, HKLM\Software\Policies\Microsoft\Windows\CurrentVe
on\Internet Settings\Zones\4!2201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2300, HKLM\Software\Policies\Microsoft\Windows\C
CurrentVersion\Internet Settings\Zones\0!2201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2300, HKLM\Software\Policies\Microso
n\Internet Settings\Lockdown_Zones\0!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2101, HKLM\Software\Policie
, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2101, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
ettings\Lockdown_Zones\4!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2101, HKLM\Software\Policies\Microsoft\W
osoft\WindowsMovieMaker!WebHelp, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
s\Zones\0!2300, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
licies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
1, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
nes\4!2101, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVers
oft\Windows\CurrentVersion\Internet Settings\Zones\3!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1004, HKLM\Software\Pol
tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!100
nes\0!2300, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
down_Zones\0!2101, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2102, HKLM\Software\Policies\Microsoft\Windows\Cu
es\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zo
s\4!2101, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion
Computer/User
PolicyNode
Path Full Policy Name
MACHINE Administrative Templates\System Restrict potentially unsafe HTML Help functions to specified folders
MACHINE Administrative Templates\System Do not display Manage Your Server page at logon
MACHINE Administrative Templates\System Display Shutdown Event Tracker
MACHINE Administrative Templates\System Activate Shutdown Event Tracker System State Data feature
MACHINE Administrative Templates\System Enable Persistent Time Stamp
MACHINE Administrative Templates\System Specify Windows installation file location
MACHINE Administrative Templates\System Specify Windows Service Pack installation file location
MACHINE Administrative Templates\System Remove Boot / Shutdown / Logon / Logoff status messages
MACHINE Administrative Templates\System Verbose vs normal status messages
MACHINE Administrative Templates\System Restrict these programs from being launched from Help
MACHINE Administrative Templates\System Turn off Autoplay
MACHINE Administrative Templates\System Do not automatically encrypt files moved to encrypted folders
MACHINE Administrative Templates\System Download missing COM components
MACHINE Administrative Templates\System Allow Distributed Link Tracking clients to use domain resources
MACHINE Administrative Templates\System Do not turn off system power after a Windows system shutdown has occurred.
MACHINE Administrative Templates\System\User
DoProfiles
not check for user ownership of Roaming Profile Folders
Delete
Profiles
cached copies of roaming profiles
DoProfiles
not detect slow network connections
Slow Profiles
network connection timeout for user profiles
Wait Profiles
for remote user profile
Prompt
Profiles
user when slow link is detected
Timeout
Profilesfor dialog boxes
LogProfiles
users off when roaming profile fails
Maximum
Profilesretries to unload and update user profile
AddProfiles
the Administrators security group to roaming user profiles
Prevent
Profiles
Roaming Profile changes from propagating to the server
Only Profiles
allow local user profiles
LeaveProfiles
Windows Installer and Group Policy Software Installation Data
MACHINE Administrative Templates\System\Scripts
Run startup scripts asynchronously
Run startup scripts visible
Run shutdown scripts visible
Maximum wait time for Group Policy scripts
MACHINE Administrative Templates\System\Logon
Always use classic logon
Always wait for the network at computer startup and logon
MACHINE Administrative Templates\System\Disk
Enable
Quotas disk quotas
Enforce
Quotas disk quota limit
Default
Quotas quota limit and warning level
Log Quotas
event when quota limit exceeded
Log Quotas
event when quota warning level exceeded
Apply
Quotaspolicy to removable media
MACHINE Administrative Templates\System\NetExpected
Logon dial-up delay on logon
MACHINE Administrative Templates\System\NetSite
Logon
Name
MACHINE Administrative Templates\System\NetNegative
Logon DC Discovery Cache Setting
MACHINE Administrative Templates\System\NetInitial
Logon DC Discovery Retry Setting for Background Callers
MACHINE Administrative Templates\System\NetMaximum
Logon DC Discovery Retry Interval Setting for Background Callers
MACHINE Administrative Templates\System\NetFinal
Logon DC Discovery Retry Setting for Background Callers
MACHINE Administrative Templates\System\NetPositive
Logon Periodic DC Cache Refresh for Background Callers
MACHINE Administrative Templates\System\NetPositive
Logon Periodic DC Cache Refresh for Non-Background Callers
MACHINE Administrative Templates\System\NetScavenge
Logon Interval
MACHINE Administrative Templates\System\NetContact
Logon PDC on logon failure
MACHINE Administrative Templates\System\NetLog
Logon
File Debug Output Level
MACHINE Administrative Templates\System\NetMaximum
Logon Log File Size
MACHINE Administrative Templates\System\NetSysvol
Logonshare compatibility
MACHINE Administrative Templates\System\NetNetlogon
Logon share compatibility
MACHINE Administrative Templates\System\NetDynamic
Logon\DC Registration
Locator DNS of the
Records
DC Locator DNS Records
MACHINE Administrative Templates\System\NetDC
Logon\DC
Locator DNS Locatorrecords
DNS notRecords
registered by the DCs
MACHINE Administrative Templates\System\NetRefresh
Logon\DC Interval
Locator
of theDNSDCRecords
Locator DNS Records
MACHINE Administrative Templates\System\NetWeight
Logon\DCSet inLocator
the DCDNS Locator
Records
DNS SRV Records
MACHINE Administrative Templates\System\NetPriority
Logon\DCSet inLocator
the DCDNS Locator
Records
DNS SRV Records
MACHINE Administrative Templates\System\NetTTL
Logon\DC
Set in the Locator
DC Locator
DNS Records
DNS Records
MACHINE Administrative Templates\System\NetAutomated
Logon\DCSite Locator
Coverage
DNS Records
by the DC Locator DNS SRV Records
MACHINE Administrative Templates\System\NetSites
Logon\DC
Covered Locator
by theDNSDC Locator
RecordsDNS SRV Records
Logon\DC
Covered Locator
by theDNSGC Locator
RecordsDNS SRV Records
Logon\DC
Covered Locator
by theDNSApplication
Records Directory Partition Locator DNS SRV Records
MACHINE Administrative Templates\System\NetLocation
Logon\DC of the
Locator
DCs hosting
DNS Records
a domain with single label DNS name
MACHINE Administrative Templates\System\Group
TurnPolicy
off background refresh of Group Policy
Group Policy
Policy refresh interval for computers
Group Policy
Policy refresh interval for domain controllers
UserPolicy
Group Policy loopback processing mode
AllowPolicy
Cross-Forest User Policy and Roaming User Profiles
Group Policy
Policy slow link detection
TurnPolicy
off Resultant Set of Policy logging
RemovePolicyusers ability to invoke machine policy refresh
Disallow
PolicyInteractive Users from generating Resultant Set of Policy data
Registry
Policypolicy processing
Internet
Policy
Explorer Maintenance policy processing
Software
PolicyInstallation policy processing
FolderPolicy
Redirection policy processing
Scripts
Policy
policy processing
Security
Policy
policy processing
IP Security
Policy policy processing
Wireless
Policypolicy processing
EFS Policy
recovery policy processing
DiskPolicy
Quota policy processing
AlwaysPolicy
use local ADM files for Group Policy Object Editor
MACHINE Administrative Templates\System\Remote
Solicited
Assistance
Remote Assistance
Offer Remote
Assistance Assistance
MACHINE Administrative Templates\System\System
Turn offRestore
System Restore
MACHINE Administrative Templates\System\System
Turn offRestore
Configuration
MACHINE Administrative Templates\System\Error
Display
Reporting
Error Notification
Configure
Reporting Error Reporting
Default
Reporting\Advanced
application reporting Errorsettings
Reporting settings
ListReporting\Advanced
of applications to always Errorreport
Reporting
errors
settings
for
ListReporting\Advanced
of applications to never Errorreport
Reporting
errorssettings
for
Report
Reporting\Advanced
operating systemError errors
Reporting settings
Report
Reporting\Advanced
unplanned shutdown Errorevents
Reporting settings
MACHINE Administrative Templates\System\Windows
Set Windows
File Protection
File Protection scanning
Hide theFilefileProtection
scan progress window
Limit Windows
File Protection
File Protection cache size
SpecifyFileWindows
Protection
File Protection cache location
RPC Troubleshooting
Procedure Call State Information
Propagation
Procedure of extended
Call error information
IgnoreProcedure
DelegationCall Failure
Minimum Procedure
Idle Connection
Call Timeout for RPC/HTTP connections
Restrictions
Procedurefor Unauthenticated
Call RPC clients
RPC Endpoint
Procedure Mapper
Call Client Authentication
Global Configuration
Time Service Settings
Enable Time
Windows Service\Time
NTP Client Providers
Configure
Time Windows
Service\Time
NTP Client
Providers
Enable Time
Windows
Service\Time
NTP ServerProviders
MACHINE Administrative Templates\System\Internet
Restrict
Communication
Internet communication
Management
Turn off
Communication
the Publish to Management\Internet
Web task for files andCommunication
folders settings
Turn off
Communication
Internet download
Management\Internet
for Web publishing Communication
and online ordering
settings
wizards
Turn off
Communication
the Order Prints
Management\Internet
picture task Communication settings
Turn off
Communication
the Windows Messenger
Management\Internet
Customer Experience
Communication Improvement
settings Program
Turn off
Communication
Help and Support
Management\Internet
Center Did you know?
Communication
content settings
Turn off
Communication
Help and Support
Management\Internet
Center Microsoft Knowledge
CommunicationBasesettings
search
Turn off
Communication
Windows ErrorManagement\Internet
Reporting Communication settings
Turn off
Communication
Internet File Association
Management\Internet
service Communication settings
Turn off
Communication
Internet Connection
Management\Internet
Wizard if URL connection
Communication
is referring
settings
to Microsoft.com
Turn off
Communication
Event Viewer Management\Internet
Events.asp links Communication settings
Turn off
Communication
Automatic Root Management\Internet
Certificates Update Communication settings
Turn off
Communication
Registration ifManagement\Internet
URL connection is referring
Communication
to Microsoft.com
settings
Turn off
Communication
Search Companion
Management\Internet
content file updates
Communication settings
Turn off
Communication
printing over HTTP
Management\Internet Communication settings
Turn off
Communication
downloading of Management\Internet
print drivers over HTTP
Turn off
Communication
Windows Update Management\Internet
device driver searching
Turn off
Communication
access to all Windows
Management\Internet
Update features
Turn off
Communication
Windows Movie Management\Internet
Maker automatic codecCommunication
downloads settings
Turn off
Communication
Maker online Web links
Turn off
Communication
Maker saving to online
Communication
video hostingsettings
provider
MACHINE Administrative Templates\System Turn off Windows Update device driver search prompt
MACHINE Administrative Templates\System\Distributed
Allow localCOM\Application
activation security
Compatibility
check exemptions
Settings
MACHINE Administrative Templates\System\Distributed
Define Activation
COM\Application
Security Check
Compatibility
exemptions
Settings
MACHINE Administrative Templates\Network\Microsoft
Turn off Peer-to-Peer
Microsoft Peer-to-Peer
Networking Networking
Services Services
Set the Seed
Peer-to-Peer
Server Networking Services\Peer Name Resolution Protocol\Global Clouds
Multicast Bootstrap
Networking Services\Peer Name Resolution Protocol\Global Clouds
Set the Seed
Peer-to-Peer
Server Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
Multicast Bootstrap
Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
Set the Seed
Peer-to-Peer
Server Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
Multicast Bootstrap
Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
MACHINE Administrative Templates\Network\DNS
Primary
ClientDNS Suffix
Dynamic
ClientUpdate
DNSClient
Suffix Search List
Primary
ClientDNS Suffix Devolution
Register
ClientPTR Records
Registration
Client Refresh Interval
Replace
ClientAddresses In Conflicts
DNSClient
Servers
Connection-Specific
Client DNS Suffix
Register
ClientDNS records with connection-specific DNS suffix
TTLClient
Set in the A and PTR records
Update
Client
Security Level
Update
Client
Top Level Domain Zones
MACHINE Administrative Templates\Network\DNS Client
MACHINE Administrative Templates\Network\Offline
AllowFiles
or Disallow use of the Offline Files feature
Prohibit
Files
user configuration of Offline Files
Synchronize
Files all offline files when logging on
Synchronize
Files all offline files before logging off
Synchronize
Files offline files before suspend
Default
Files
cache size
ActionFiles
on server disconnect
Non-default
Files server disconnect actions
RemoveFiles'Make Available Offline'
Prevent
Files
use of Offline Files folder
Files not
Filescached
Administratively
Files assigned offline files
Turn offFiles
reminder balloons
ReminderFiles balloon frequency
Initial Files
reminder balloon lifetime
ReminderFiles balloon lifetime
At logoff,
Filesdelete local copy of user’s offline files
EventFileslogging level
Subfolders
Files always available offline
Encrypt Files
the Offline Files cache
ProhibitFiles
'Make Available Offline' for these file and folders
Configure
Files Slow link speed
MACHINE Administrative Templates\Network\Network
ProhibitConnections
use of Internet Connection Sharing on your DNS domain network
ProhibitConnections
use of Internet Connection Firewall on your DNS domain network
ProhibitConnections
installation and configuration of Network Bridge on your DNS domain network
IEEE 802.1xConnections
Certificate Authority for Machine Authentication
Windows Connections\Windows
Firewall: Protect all network
Firewall\Domain
connections
Profile
Firewall: Do not allowFirewall\Domain
exceptions Profile
Firewall: Define program
Firewall\Domain
exceptions Profile
Firewall: Allow local program
Firewall\Domain
exceptions
Profile
Firewall: Allow remote Firewall\Domain
administration Profile
exception
Firewall: Allow file and
Firewall\Domain
printer sharingProfile
exception
Firewall: Allow ICMPFirewall\Domain
exceptions Profile
Firewall: Allow Remote Firewall\Domain
Desktop exception
Profile
Firewall: Allow UPnPFirewall\Domain
framework exception
Profile
Firewall: Prohibit notifications
Firewall\Domain Profile
Firewall: Allow loggingFirewall\Domain Profile
Firewall: Prohibit unicast
Firewall\Domain
response to Profile
multicast or broadcast requests
Firewall: Define port Firewall\Domain
exceptions Profile
Firewall: Allow local port
Firewall\Domain
exceptions Profile
Firewall: Protect all network
Firewall\Standard
connections
Profile
Firewall: Do not allowFirewall\Standard
exceptions Profile
Firewall: Define program
Firewall\Standard
exceptions Profile
Firewall: Allow local program
Firewall\Standard
exceptions
Profile
Firewall: Allow remote Firewall\Standard
administration exception
Profile
Firewall: Allow file and
Firewall\Standard
printer sharing exception
Profile
Firewall: Allow ICMPFirewall\Standard
exceptions Profile
Firewall: Allow Remote Firewall\Standard
Desktop exception
Profile
Firewall: Allow UPnPFirewall\Standard
framework exception
Profile
Firewall: Prohibit notifications
Firewall\Standard Profile
Firewall: Allow loggingFirewall\Standard Profile
Firewall: Prohibit unicast
Firewall\Standard
response to multicast
Profile or broadcast requests
Firewall: Define port Firewall\Standard
exceptions Profile
Firewall: Allow local port
Firewall\Standard
exceptions Profile
Firewall: Allow authenticated
Firewall IPSec bypass
MACHINE Administrative Templates\Network\QoS
LimitPacket
reservable
Scheduler
bandwidth
LimitPacket
outstanding
Scheduler
packets
SetPacket
timer resolution
Scheduler
BestPacket
effort service
Scheduler\DSCP
type value of conforming packets
Controlled
Packet Scheduler\DSCP
load service type value of conforming packets
Guaranteed
service type value of conforming packets
Network
Packet control
Scheduler\DSCP
Qualitative
BestPacket
effort service
Scheduler\DSCP
type value of non-conforming packets
Controlled
load service type value of non-conforming packets
Guaranteed
service type value of non-conforming packets
Network
Packet control
Scheduler\DSCP
Qualitative
Non-conforming
Packet Scheduler\Layer-2
packets priority value
BestPacket
effort service
Scheduler\Layer-2
type priority value
Controlled
load service type priority value
Guaranteed
service type priority value
Network
Packetcontrol
Scheduler\Layer-2
Qualitative
MACHINE Administrative Templates\Network\SNMP
Communities
Permitted Managers
Traps for public community
MACHINE Administrative Templates\Network\Background
Maximum network
Intelligentbandwidth
Transfer that
Service
BITS uses
MACHINE Administrative Templates\Network\Background
Timeout (days)
Intelligent
for inactive
Transfer
jobsService
MACHINE Administrative Templates\Network Sets how often a DFS Client discovers DC's
MACHINE Administrative Templates\Printers Allow printers to be published
MACHINE Administrative Templates\Printers Allow pruning of published printers
MACHINE Administrative Templates\Printers Automatically publish new printers in Active Directory
MACHINE Administrative Templates\Printers Check published state
MACHINE Administrative Templates\Printers Computer location
MACHINE Administrative Templates\Printers Custom support URL in the Printers folder's left pane
MACHINE Administrative Templates\Printers Directory pruning interval
MACHINE Administrative Templates\Printers Directory pruning priority
MACHINE Administrative Templates\Printers Directory pruning retry
MACHINE Administrative Templates\Printers Disallow installation of printers using kernel-mode drivers
MACHINE Administrative Templates\Printers Log directory pruning retry events
MACHINE Administrative Templates\Printers Pre-populate printer search location text
MACHINE Administrative Templates\Printers Printer browsing
MACHINE Administrative Templates\Printers Prune printers that are not automatically republished
MACHINE Administrative Templates\Printers Allow Print Spooler to accept client connections
MACHINE Administrative Templates\Printers Web-based printing
MACHINE Administrative Templates\Windows Components\Application
Turn Off Application Compatibility
Compatibility
Engine
Turn Off Program CompatibilityCompatibility
Wizard
Remove Program Compatibility Compatibility
Property Page
Turn On Application HelpCompatibility
Log Events
Prevent access to 16-bit Compatibility
applications
MACHINE Administrative Templates\Windows Components\Event
Events.asp URL Viewer
Events.asp program Viewer
Events.asp program Viewer
command line parameters
MACHINE Administrative Templates\Windows Components\Internet
Prevent IIS installation Information Services
MACHINE Administrative Templates\Windows Components\Security
Turn on Security Center Center
(Domain PCs only)
MACHINE Administrative Templates\Windows Components\Task
Hide Property Pages Scheduler
Prevent Task Run Scheduler
or End
Scheduler
Prohibit New TaskScheduler
Creation
Scheduler
Hide Advanced Properties
Scheduler Checkbox in Add Scheduled Task Wizard
Prohibit Browse Scheduler
MACHINE Administrative Templates\Windows Components\Terminal
Keep-Alive Connections Services
Automatic reconnection Services
Restrict Terminal Services Services
users to a single remote session
Enforce Removal of Remote ServicesDesktop Wallpaper
Deny log off of an administrator
Services logged in to the console session
Allow Time Zone RedirectionServices\Client/Server data redirection
Do not allow clipboardServices\Client/Server
redirection data redirection
Do not allow smart card Services\Client/Server
device redirection data redirection
Allow audio redirectionServices\Client/Server data redirection
Do not allow COM portServices\Client/Server
Do not allow client printerServices\Client/Server
Do not allow LPT port Services\Client/Server
Do not allow drive redirection
Services\Client/Server data redirection
Do not set default client
Services\Client/Server
printer to be default printer
data redirection
in a session
Terminal Server FallbackServices\Client/Server
Printer Driver Behavior
data redirection
Always prompt client forServices\Encryption
password upon connection
and Security
Set client connection encryption
Services\Encryption
level and Security
Secure Server (Require Services\Encryption
Security) and Security\RPC Security Policy
Limit number of connections
Services
Limit maximum color depth
Services
Allow users to connectServices
remotely using Terminal Services
Do not allow local administrators
Services to customize permissions
Remove Windows Security Services item from Start menu
Remove Disconnect optionServices from Shut Down dialog
Always show desktop Services
on connection
License Server Security Services\Licensing
Group
Prevent License Upgrade Services\Licensing
Do not use temp folders Services\Temporary
per session folders
Do not delete temp folder
Services\Temporary
upon exit folders
Do not allow passwords Services\Client
to be saved
Terminal Server IP Address
Services\Session
Redirection Directory
Join Session DirectoryServices\Session Directory
Session Directory ServerServices\Session Directory
Session Directory Cluster
Services\Session
Name Directory
Set time limit for disconnected
Services\Sessions
sessions
Sets a time limit for active
Services\Sessions
Terminal Services sessions
Services\Sessions
but idle Terminal Services sessions
Allow reconnection from Services\Sessions
original client only
Terminate session when Services\Sessions
time limits are reached
Set path for TS Roaming Services
Profiles
Use the specified Terminal
Services Server license servers
Set the Terminal Server Services
licensing mode
Show Tooltips for Licensing
Services problems on Terminal Server
TS User Home Directory Services
Sets rules for remote control
Services of Terminal Services user sessions
Services
MACHINE Administrative Templates\Windows Components\Windows
Turn off shell protocol protected
Explorer mode
Disable Windows Installer
Installer
Always install with elevated
Installer privileges
Prohibit rollback Installer
Remove browse dialogInstaller
box for new source
Prohibit patching Installer
Disable IE security prompt
Installer
for Windows Installer scripts
Enable user control overInstaller
installs
Enable user to browseInstaller
for source while elevated
Enable user to use mediaInstaller
source while elevated
Enable user to patch elevated
Installer products
Allow admin to install from
Installer
Terminal Services session
Cache transforms in secure
Installer location on workstation
Logging Installer
Prohibit User Installs Installer
Turn off creation of System
InstallerRestore Checkpoints
Prohibit removal of updates
Installer
Enforce upgrade component
Installer rules
Prohibit non-administrators
Installerfrom applying vendor signed updates
Baseline file cache maximum
Installersize
Do not allow Windows Messenger
Messenger to be run
Do not automatically start
Messenger
Windows Messenger initially
Prevent Windows Media Media
DRMDigital
Internet
Rights
Access
Management
Do not allow Windows MovieMovie Maker
Maker to run
Do not display 'Install Updates
Update and Shut Down' option in Shut Down Windows dialog box
Do not adjust default option
Update
to 'Install Updates and Shut Down' in Shut Down Windows dialog box
USER Administrative Templates\Start MenuRemove
and Taskbar
user's folders from the Start Menu
and Taskbar
links and access to Windows Update
and Taskbar
common program groups from Start Menu
and Taskbar
My Documents icon from Start Menu
and Taskbar
Documents menu from Start Menu
and Taskbar
programs on Settings menu
and Taskbar
Network Connections from Start Menu
and Taskbar
Favorites menu from Start Menu
and Taskbar
Search menu from Start Menu
and Taskbar
Help menu from Start Menu
and Taskbar
Run menu from Start Menu
and Taskbar
My Pictures icon from Start Menu
and Taskbar
My Music icon from Start Menu
and Taskbar
My Network Places icon from Start Menu
USER Administrative Templates\Start MenuAdd
andLogoff
Taskbar to the Start Menu
and Taskbar
Logoff on the Start Menu
and Taskbar
and prevent access to the Shut Down command
and Taskbar
Drag-and-drop context menus on the Start Menu
USER Administrative Templates\Start MenuPrevent
and Taskbar
changes to Taskbar and Start Menu Settings
and Taskbar
access to the context menus for the taskbar
USER Administrative Templates\Start MenuDo
and
notTaskbar
keep history of recently opened documents
USER Administrative Templates\Start MenuClear
and Taskbar
history of recently opened documents on exit
USER Administrative Templates\Start MenuTurn
and off
Taskbar
personalized menus
and off
Taskbar
user tracking
USER Administrative Templates\Start MenuAdd
andRun
Taskbar
in Separate Memory Space check box to Run dialog box
and
notTaskbar
use the search-based method when resolving shell shortcuts
and
notTaskbar
use the tracking-based method when resolving shell shortcuts
USER Administrative Templates\Start MenuGray
and Taskbar
unavailable Windows Installer programs Start Menu shortcuts
USER Administrative Templates\Start MenuPrevent
and Taskbar
grouping of taskbar items
and off
Taskbar
notification area cleanup
USER Administrative Templates\Start MenuLock
and the
Taskbar
Taskbar
USER Administrative Templates\Start MenuForce
and Taskbar
classic Start Menu
and Taskbar
Balloon Tips on Start Menu items
and Taskbar
pinned programs list from the Start Menu
and Taskbar
frequent programs list from the Start Menu
and Taskbar
All Programs list from the Start menu
and Taskbar
the Undock PC button from the Start Menu
and Taskbar
user name from Start Menu
and Taskbar
Clock from the system notification area
USER Administrative Templates\Start MenuHide
and the
Taskbar
notification area
and
notTaskbar
display any custom toolbars in the taskbar
and Taskbar
Set Program Access and Defaults from Start menu
USER Administrative Templates\Desktop Hide and disable all items on the desktop
USER Administrative Templates\Desktop Remove My Documents icon on the desktop
USER Administrative Templates\Desktop Remove My Computer icon on the desktop
USER Administrative Templates\Desktop Remove Recycle Bin icon from desktop
USER Administrative Templates\Desktop Remove Properties from the My Documents context menu
USER Administrative Templates\Desktop Remove Properties from the My Computer context menu
USER Administrative Templates\Desktop Remove Properties from the Recycle Bin context menu
USER Administrative Templates\Desktop Hide My Network Places icon on desktop
USER Administrative Templates\Desktop Hide Internet Explorer icon on desktop
USER Administrative Templates\Desktop Do not add shares of recently opened documents to My Network Places
USER Administrative Templates\Desktop Prohibit user from changing My Documents path
USER Administrative Templates\Desktop Prevent adding, dragging, dropping and closing the Taskbar's toolbars
USER Administrative Templates\Desktop Prohibit adjusting desktop toolbars
USER Administrative Templates\Desktop Don't save settings at exit
USER Administrative Templates\Desktop Remove the Desktop Cleanup Wizard
USER Administrative Templates\Desktop\Active
EnableDesktop
Active Desktop
Disable
Desktop
Active Desktop
Disable
Desktop
all items
Prohibit
Desktop
changes
Prohibit
Desktop
adding items
Prohibit
Desktop
deleting items
Prohibit
Desktop
editing items
Prohibit
Desktop
closing items
Add/Delete
Desktop items
ActiveDesktop
Desktop Wallpaper
AllowDesktop
only bitmapped wallpaper
Maximum
Directory
size of Active Directory searches
EnableDirectory
filter in Find dialog box
Hide Directory
Active Directory folder
USER Administrative Templates\Control Panel
Prohibit access to the Control Panel
Hide specified Control Panel applets
Show only specified Control Panel applets
Force classic Control Panel Style
USER Administrative Templates\Control Panel\Add
Removeor AddRemove
or Remove
Programs
Programs
Hide Change
or Removeor Remove
Programs
Programs page
Hide AddorNew RemovePrograms
Programs
page
Hide Add/Remove
or RemoveWindowsProgramsComponents page
Hide theor SetRemove
Program Programs
Access and Defaults page
Hide theor AddRemove
a program
Programs
from CD-ROM or floppy disk option
programs
Programs
from Microsoft option
programs
Programs
from your network option
Go directly
or Remove
to Components
ProgramsWizard
Removeor Support
Remove Information
Programs
Specify default
or Remove category
Programs
for Add New Programs
USER Administrative Templates\Control Panel\Display
Remove Display in Control Panel
Hide Desktop tab
Prevent changing wallpaper
Hide Appearance and Themes tab
Hide Settings tab
Hide Screen Saver tab
Screen Saver
Screen Saver executable name
Password protect the screen saver
Screen Saver timeout
USER Administrative Templates\Control Panel\Display\Desktop
Remove Theme option Themes
Prevent selection of windows
Themes and buttons styles
Prohibit selection of fontThemes
size
Prohibit Theme colorThemes selection
Load a specific visualThemesstyle file or force Windows Classic
USER Administrative Templates\Control Panel\Printers
Browse a common web site to find printers
Browse the network to find printers
Default Active Directory path when searching for printers
Point and Print Restrictions
Prevent addition of printers
Prevent deletion of printers
USER Administrative Templates\Control Panel\Regional
Restrict selectionand Language
of WindowsOptions
menus and dialogs language
USER Administrative Templates\Shared Folders
Allow shared folders to be published
USER Administrative Templates\Shared Folders
Allow DFS roots to be published
USER Administrative Templates\Network\Offline
ProhibitFiles
user configuration of Offline Files
Synchronize
Files all offline files when logging on
Synchronize
Files all offline files before logging off
Synchronize
Files offline files before suspend
ActionFiles
on server disconnect
Non-default
Files server disconnect actions
Remove Files
'Make Available Offline'
Prevent Files
use of Offline Files folder
Administratively
Files assigned offline files
Turn offFiles
reminder balloons
ReminderFiles balloon frequency
Initial Files
reminder balloon lifetime
ReminderFiles balloon lifetime
EventFiles
logging level
ProhibitFiles
'Make Available Offline' for these file and folders
Do not Files
automatically make redirected folders available offline
USER Administrative Templates\Network\Network
Ability toConnections
rename LAN connections or remote access connections available to all users
ProhibitConnections
access to properties of components of a LAN connection
ProhibitConnections
access to properties of components of a remote access connection
ProhibitConnections
TCP/IP advanced configuration
ProhibitConnections
access to the Advanced Settings item on the Advanced menu
ProhibitConnections
adding and removing components for a LAN or remote access connection
ProhibitConnections
access to properties of a LAN connection
ProhibitConnections
Enabling/Disabling components of a LAN connection
change properties of an all user remote access connection
ProhibitConnections
changing properties of a private remote access connection
ProhibitConnections
deletion of remote access connections
delete all user remote access connections
ProhibitConnections
connecting and disconnecting a remote access connection
Enable/Disable a LAN connection
ProhibitConnections
access to the New Connection Wizard
rename LAN connections
rename all user remote access connections
ProhibitConnections
renaming private remote access connections
ProhibitConnections
access to the Remote Access Preferences item on the Advanced menu
ProhibitConnections
viewing of status for an active connection
Enable Connections
Windows 2000 Network Connections settings for Administrators
Turn offConnections
notifications when a connection has only limited or no connectivity
USER Administrative Templates\System Don't display the Getting Started welcome screen at logon
USER Administrative Templates\System Century interpretation for Year 2000
USER Administrative Templates\System Configure driver search locations
USER Administrative Templates\System Code signing for device drivers
USER Administrative Templates\System Custom user interface
USER Administrative Templates\System Prevent access to the command prompt
USER Administrative Templates\System Prevent access to registry editing tools
USER Administrative Templates\System Run only allowed Windows applications
USER Administrative Templates\System Don't run specified Windows applications
USER Administrative Templates\System Turn off Autoplay
USER Administrative Templates\System Restrict these programs from being launched from Help
USER Administrative Templates\System Download missing COM components
USER Administrative Templates\System Windows Automatic Updates
USER Administrative Templates\System\User
Connect
Profileshome directory to root of the share
Limit
Profiles
profile size
Exclude
Profilesdirectories in roaming profile
USER Administrative Templates\System\Scripts
Run legacy logon scripts hidden
Run logon scripts visible
Run logoff scripts visible
USER Administrative Templates\System\Ctrl+Alt+Del
Remove Task Options
Manager
Remove Lock Options
Computer
Remove ChangeOptionsPassword
Remove LogoffOptions
USER Administrative Templates\System\Logon
USER Administrative Templates\System\Group
GroupPolicy
Policy refresh interval for users
GroupPolicy
Policy slow link detection
GroupPolicy
Policy domain controller selection
Create
Policy
new Group Policy object links disabled by default
Default
Policy
name for new Group Policy objects
Enforce
Policy
Show Policies Only
TurnPolicy
off automatic update of ADM files
Disallow
PolicyInteractive Users from generating Resultant Set of Policy data
USER Administrative Templates\System\Power
Prompt
Management
for password on resume from hibernate / suspend
USER Administrative Templates\System\Internet
Restrict
Communication
Internet communication
Management
Turn off
Communication
the Publish to Management\Internet
Web task for files andCommunication
folders settings
Turn off
Communication
Internet download
Management\Internet
for Web publishingCommunication
and online ordering
settings
wizards
Turn off
Communication
the Order PrintsManagement\Internet
picture task Communication settings
Turn off
Communication
the Windows Messenger
Management\Internet
Customer Experience
CommunicationImprovement
settings Program
Turn off
Communication
Internet File Association
Management\Internet
service Communication settings
Turn off
Communication
printing over HTTP
Management\Internet Communication settings
Turn off
Communication
downloading of Management\Internet
print drivers over HTTP
Turn off
Communication
Maker automatic codecCommunication
downloads settings
Turn off
Communication
Maker online Web links
Turn off
Communication
Maker saving to online
Communication
video hostingsettings
provider
USER Administrative Templates\System Turn off Windows Update device driver search prompt
USER Administrative Templates\Windows Components\Application
Prevent access to 16-bit Compatibility
applications
USER Administrative Templates\Windows Components\Attachment
Default risk level for file attachments
Manager
Inclusion list for high risk Manager
file types
Inclusion list for moderateManager
risk file types
Inclusion list for low file types
Manager
Trust logic for file attachments
Manager
Do not preserve zone information
Manager in file attachments
Hide mechanisms to remove Managerzone information
Notify antivirus programsManager
when opening attachments
USER Administrative Templates\Windows Components\Windows
Turn on Classic Shell Explorer
Removes the Folder Options Explorer menu item from the Tools menu
Remove File menu from Explorer
Windows Explorer
Remove Map Network ExplorerDrive and Disconnect Network Drive
Remove Search buttonExplorerfrom Windows Explorer
Remove Windows Explorer's Explorer default context menu
Hides the Manage itemExplorer
on the Windows Explorer context menu
Allow only per user or approved
Explorer shell extensions
Do not track Shell shortcuts
Explorerduring roaming
Hide these specified drivesExplorer
in My Computer
Prevent access to drives Explorer
from My Computer
Remove Hardware tabExplorer
Remove DFS tab Explorer
Remove Security tab Explorer
Remove UI to change Explorer
menu animation setting
Remove UI to change Explorer
keyboard navigation indicator setting
No Computers Near Me Explorer
in My Network Places
No Entire Network in My Explorer
Network Places
Maximum number of recent Explorerdocuments
Do not request alternateExplorer
credentials
Request credentials forExplorer
network installations
Remove CD Burning features
Explorer
Do not move deleted files
Explorer
to the Recycle Bin
Display confirmation dialog
Explorer
when deleting files
Maximum allowed Recycle Explorer
Bin size
Remove Shared Documents Explorer from My Computer
Turn off caching of thumbnail
Explorerpictures
Turn off Windows+X hotkeys
Explorer
Turn off shell protocol protected
Explorer mode
Items displayed in Places
Explorer\Common
Bar Open File Dialog
Hide the common dialog Explorer\Common
places bar Open File Dialog
Hide the common dialog Explorer\Common
back button Open File Dialog
Hide the dropdown list Explorer\Common
of recent files Open File Dialog
USER Administrative Templates\Windows Components\Microsoft
Restrict the user from entering
Management author
Console
mode
Restrict users to the explicitly
Managementpermitted
Console
list of snap-ins
Active Directory Users Management
and Computers Console\Restricted/Permitted snap-ins
Active Directory DomainsManagement
and TrustsConsole\Restricted/Permitted snap-ins
Active Directory Sites and
Management
Services Console\Restricted/Permitted snap-ins
ADSI Edit Management Console\Restricted/Permitted snap-ins
ActiveX Control Management Console\Restricted/Permitted snap-ins
Certificates Management Console\Restricted/Permitted snap-ins
Certification Authority Management Console\Restricted/Permitted snap-ins
Certificate Templates Management Console\Restricted/Permitted snap-ins
Wireless Monitor Management Console\Restricted/Permitted snap-ins
Component Services Management Console\Restricted/Permitted snap-ins
Computer Management Management Console\Restricted/Permitted snap-ins
Device Manager Management Console\Restricted/Permitted snap-ins
Disk Management Management Console\Restricted/Permitted snap-ins
Disk Defragmenter Management Console\Restricted/Permitted snap-ins
Distributed File SystemManagement Console\Restricted/Permitted snap-ins
Event Viewer Management Console\Restricted/Permitted snap-ins
FAX Service Management Console\Restricted/Permitted snap-ins
FrontPage Server Extensions
Management Console\Restricted/Permitted snap-ins
Indexing Service Management Console\Restricted/Permitted snap-ins
.Net Framework Configuration
Internet AuthenticationManagement
Service (IAS)Console\Restricted/Permitted snap-ins
Internet Information Services
IP Security Policy Management
IP Security Monitor Management Console\Restricted/Permitted snap-ins
Link to Web Address Management Console\Restricted/Permitted snap-ins
Local Users and Groups Management Console\Restricted/Permitted snap-ins
Performance Logs andManagement
Alerts Console\Restricted/Permitted snap-ins
QoS Admission ControlManagement Console\Restricted/Permitted snap-ins
Remote Desktops Management Console\Restricted/Permitted snap-ins
Removable Storage Management
Routing and Remote Access
Security Configuration Management
and Analysis Console\Restricted/Permitted snap-ins
Security Templates Management Console\Restricted/Permitted snap-ins
Services Management Console\Restricted/Permitted snap-ins
Shared Folders Management Console\Restricted/Permitted snap-ins
System Information Management Console\Restricted/Permitted snap-ins
Telephony Management Console\Restricted/Permitted snap-ins
Terminal Services Configuration
WMI Control Management Console\Restricted/Permitted snap-ins
AppleTalk Routing Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Authorization ManagerManagement Console\Restricted/Permitted snap-ins\Extension snap-ins
Certification Authority Policy
Management
SettingsConsole\Restricted/Permitted snap-ins\Extension snap-ins
Connection Sharing (NAT)Management Console\Restricted/Permitted snap-ins\Extension snap-ins
DCOM Configuration Extension
Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Device Manager Management Console\Restricted/Permitted snap-ins\Extension snap-ins
DHCP Relay Management Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Event Viewer Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Extended View (Web View)Management Console\Restricted/Permitted snap-ins\Extension snap-ins
IAS Logging Management Console\Restricted/Permitted snap-ins\Extension snap-ins
IGMP Routing Management Console\Restricted/Permitted snap-ins\Extension snap-ins
IP Routing Management Console\Restricted/Permitted snap-ins\Extension snap-ins
IPX RIP Routing Management Console\Restricted/Permitted snap-ins\Extension snap-ins
IPX Routing Management Console\Restricted/Permitted snap-ins\Extension snap-ins
IPX SAP Routing Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Logical and Mapped Drives
Management Console\Restricted/Permitted snap-ins\Extension snap-ins
OSPF Routing Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Public Key Policies Management Console\Restricted/Permitted snap-ins\Extension snap-ins
RAS Dialin - User Node Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Remote Access Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Removable Storage Management Console\Restricted/Permitted snap-ins\Extension snap-ins
RIP Routing Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Routing Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Shared Folders Ext Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Send Console Message Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Service DependenciesManagement Console\Restricted/Permitted snap-ins\Extension snap-ins
SMTP Protocol Management Console\Restricted/Permitted snap-ins\Extension snap-ins
SNMP Management Console\Restricted/Permitted snap-ins\Extension snap-ins
System Properties Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Group Policy Management Management Console\Restricted/Permitted snap-ins\Group Policy
Group Policy Object Editor
Management Console\Restricted/Permitted snap-ins\Group Policy
Group Policy tab for Active
Management
DirectoryConsole\Restricted/Permitted
Tools snap-ins\Group Policy
Resultant Set of PolicyManagement
snap-in Console\Restricted/Permitted snap-ins\Group Policy
Administrative TemplatesManagement
(Computers)Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-in
(Users) Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-in
Folder Redirection Management Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-in
Management Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-in
Remote Installation Services
Scripts (Logon/Logoff) Management Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-in
Security Settings Management Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-in
Wireless Network (IEEE Management
802.11) Policies
Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-in
(Computers)Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Pol
(Users) Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Pol
Folder Redirection Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Pol
Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Pol
Scripts (Logon/Logoff) Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Pol
Security Settings Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Pol
USER Administrative Templates\Windows Components\Task
Hide Property PagesScheduler
Prevent Task Run Scheduler
or End
Scheduler
Prohibit New TaskScheduler
Creation
Scheduler
Hide Advanced Properties
Scheduler Checkbox in Add Scheduled Task Wizard
Prohibit Browse Scheduler
USER Administrative Templates\Windows Components\Terminal
Services
Do not allow passwords Services\Client
to be saved
Set time limit for disconnected
Services\Sessions
sessions
Services\Sessions
Terminal Services sessions
Services\Sessions
but idle Terminal Services sessions
Allow reconnection from Services\Sessions
original client only
Terminate session when Services\Sessions
time limits are reached
Sets rules for remote control
Servicesof Terminal Services user sessions
Always install with elevated
Installer
privileges
Search order Installer
Prohibit rollback Installer
Prevent removable media Installer
source for any install
Do not allow Windows Messenger
Messenger to be run
Do not automatically start
Messenger
Windows Messenger initially
Remove access to useUpdateall Windows Update features
Do not display 'Install Updates
Update and Shut Down' option in Shut Down Windows dialog box
Do not adjust default option
Update to 'Install Updates and Shut Down' in Shut Down Windows dialog box
Do not allow Windows Movie
Movie Maker
Maker to run
Supported on
At least Internet Explorer 6 Service Pack 1
At least Microsoft Windows Server 2003
At least Microsoft Windows XP Professional or Windows Server 2003 family
At least Microsoft Windows 2000
At least Microsoft Windows XP Professional with SP1 or Windows Server 2003 family
At least Microsoft Windows 2000 Service Pack 4, Microsoft Windows XP Professional Service Pack 1 or Microsoft Windows Server 2003 family
At least Microsoft Windows XP Professional with SP2 or Windows Server 2003 family with SP1
Only works on Microsoft Windows 2000
Only works on Microsoft Windows XP Professional
At least Microsoft Windows 2000 Service Pack 3, Microsoft Windows XP Professional Service Pack 1 or Microsoft Windows Server 2003 family

At least Microsoft Windows 2000 Service Pack 5, Microsoft Windows XP Professional Service Pack 2 or Microsoft Windows Server 2003 family Service Pack
At least Microsoft Windows 2000 Service Pack 1
Windows XP SP2 or Windows Server 2003 SP1, or computers with BITS 2.0 installed.
Windows XP or Windows Server 2003, or computers with BITS 1.5 installed.
Windows 2000 or later, running IIS. Not supported on Windows Server 2003
At least Microsoft Windows XP Terminal Services
At least Microsoft Windows Server 2003 with SP1
At least Microsoft Windows 2000 Terminal Services
At least Microsoft Windows 2000 Terminal Services
Microsoft Windows Server 2003, Enterprise Edition

Microsoft Windows XP or Windows 2000 with Windows Installer v2.0
Windows Installer v3.0
At least Microsoft Windows 2000 Service Pack 3 or Microsoft Windows XP Professional Service Pack 1
At least Microsoft Windows 2000 Service Pack 3 or Microsoft Windows XP Professional Service Pack 1
Help/Explain Text
With this policy, you can restrict certain HTML Help commands to function only in HTML Help (.chm) files within specified folders and their subfolders. Alterna
Specifies whether to turn off the automatic display of the Manage Your Server page. If the status is set to Enabled, the Manage Your Server page does not a
The Shutdown Event Tracker can be displayed when you shut down a workstation or server. This is an extra set of questions that is displayed when you invo
Defines when the Shutdown Event Tracker System State Data feature is activated. The system state data file contains information about the basic system sta
The Persistent System Timestamp allows the system to detect the time of unexpected shutdowns by writing the current time to disk on a schedule controlled b
Specifies an alternate location for Windows installation files. To enable this setting, and enter the fully qualified path to the new location in the Windows Setu
Specifies an alternate location for Windows Service Pack installation files. To enable this setting, enter the fully qualified path to the new location in the Wind
Suppresses system status messages. If you enable this setting, the system does not display a message reminding users to wait while their system starts or s
Directs the system to display highly detailed status messages. If you enable this setting, the system displays status messages that reflect each step in the pro
Allows you to restrict programs from being run from online Help. If you enable this setting, you can prevent programs that you specify from being allowed to b
Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the m
Prevents Windows Explorer from encrypting files that are moved to an encrypted folder. If you disable this setting or do not configure it, Windows Explorer au
Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. Many Windows programs, s
Specifies that Distributed Link Tracking clients in this domain may use the Distributed LInk Tracking (DLT) server, which runs on domain controllers. The DLT
This setting allows you to configure whether power is automatically turned off when Windows shutdown completes. This setting does not effect Windows shu
This setting disables the more secure default setting for the user’s roaming user profile folder. Once an administrator has configured a users' roaming profile,
Determines whether the system saves a copy of a user’s roaming profile on the local computer's hard drive when the user logs off. This setting, and related s
Disables the slow link detection feature. Slow link detection measures the speed of the connection between a user's computer and the remote server that sto
Defines a slow connection for roaming user profiles. If the server on which the user's roaming user profile resides takes longer to respond than the threshold
Directs the system to wait for the remote copy of the roaming user profile to load, even when loading is slow. Also, the system waits for the remote copy when
Notifies users when their roaming profile is slow to load. The notice lets users decide whether to use a local copy or to wait for the roaming user profile. If you
Determines how long the system waits for a user response before it uses a default value. The default value is applied when the user does not respond to me
Logs a user off automatically when the system cannot load the user's roaming user profile. This setting is used when the system cannot find the roaming use
Determines how many times the system tries to unload and update the registry portion of a user profile. When the number of trials specified by this setting is e
This setting adds the Administrator security group to the roaming user profile share. Once an administrator has configured a users' roaming profile, the profile
This setting determines if the changes a user makes to their roaming profile are merged with the server copy of their profile. By default, when a roaming profi
This setting determines if roaming user profiles are available on a particular computer. By default, when roaming profile users log on to a computer, their roam
Determines whether the system retains a roaming user’s Windows Installer and Group Policy based software installation data on their profile deletion. By def
Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and creates the desktop. If you enabl
Lets the system run startup scripts simultaneously. Startup scripts are batch files that run before the user is invited to log on. By default, the system waits for
Displays the instructions in startup scripts as they run. Startup scripts are batch files of instructions that run before the user is invited to log on. By default, the
Displays the instructions in shutdown scripts as they run. Shutdown scripts are batch files of instructions that run when the user restarts the system or shuts i
Determines how long the system waits for scripts applied by Group Policy to run. This setting limits the total time allowed for all logon, startup, and shutdown
Supresses the welcome screen. This setting hides the welcome screen that is displayed on Windows 2000 Professional and Windows XP Professional each
This setting forces the user to log on to the computer using the classic logon screen. By default, a workgroup is set to use the simple logon screen. This settin
Specifies additional programs or documents that Windows starts automatically when a user logs on to the system. To use this setting, click Show, click Add,
Ignores customized run-once lists. You can create a customized list of additional programs and documents that are started automatically the next time the sy
Ignores the customized run list. You can create a customized list of additional programs and documents that the system starts automatically when it runs on
Determines whether Windows XP waits for the network during computer startup and user logon. By default, Windows XP does not wait for the network to be f
Enables and disables disk quota management on all NTFS volumes of the computer, and prevents users from changing the setting. If you enable this setting
Determines whether disk quota limits are enforced and prevents users from changing the setting. If you enable this setting, disk quota limits are enforced. If y
Specifies the default disk quota limit and warning level for new users of the volume. This setting determines how much disk space can be used by each user
Determines whether the system records an event in the local Application log when users reach their disk quota limit on a volume, and prevents users from ch
Determines whether the system records an event in the Application log when users reach their disk quota warning level on a volume. If you enable this settin
Extends the disk quota policies in this folder to NTFS file system volumes on removable media. If you disable this setting or do not configure it, the disk quota
Specifies the additional time for the computer to wait for the domain controller’s (DC) response when logging on to the network. To specify the Expected dial-
Specifies the Active Directory site to which computers belong. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrator
Specifies the amount of time (in seconds) the DC locator remembers that a domain controller (DC) could not be found in a domain. When a subsequent attem
When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setting determines the amount of tim
When applications performing periodic searches for Domain Controllers (DCs) are unable to find a DC, the value set in this setting determines the maximum r
When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setting determines when retries are
Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that periodically attempt to locate DCs, and it is applied
Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that do not periodically attempt to locate DCs, and it is a
Determines the interval at which Netlogon performs the following scavenging operations: - Checks if a password on a secure channel needs to be modified, a
Defines whether a domain controller (DC) should attempt to verify with the PDC the password provided by a client if the DC failed to validate the password. C
Specifies the level of debug output for the Net Logon service. The Net Logon service outputs debug information to the log file netlogon.log in the directory %w
Specifies the maximum size in bytes of the log file netlogon.log in the directory %windir%\debug when logging is enabled. By default, the maximum size of th
This setting controls whether or not the Sysvol share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharing
This setting controls whether or not the Netlogon share created by the Net Logon service on a domain controller (DC) should support compatibility in file shar
Determines if Dynamic Registration of the domain controller (DC) locator DNS resource records is enabled. These DNS records are dynamically registered by
Determines which Domain Controller (DC) Locator DNS records are not registered by the Netlogon service. To enable this setting, select Enable and specify
Specifies the Refresh Interval of the domain controller (DC) Locator DNS resource records for DCs to which this setting is applied. These DNS records are dy
Specifies the Weight field in the SRV resource records registered by the domain controllers (DC) to which this setting is applied. These DNS records are dyna
Specifies the Priority field in the SRV resource records registered by domain controllers (DC) to which this setting is applied. These DNS records are dynamic
Specifies the value for the Time-To-Live (TTL) field in Net Logon registered SRV resource records. These DNS records are dynamically registered by the Net
Determines whether domain controllers (DC) will dynamically register DC Locator site-specific SRV records for the closest sites where no DC for the same do
Specifies the sites for which the domain controllers (DC) register the site-specific DC Locator DNS SRV resource records. These records are registered in ad
Specifies the sites for which the global catalogs (GC) should register site-specific GC locator DNS SRV resource records. These records are registered in add
Specifies the sites for which the domain controllers (DC) housing application directory partition should register the site-specific, application directory partition-
Specifies whether the computers to which this setting is applied attempt DNS name resolution of a single-label domain names. By default, when a computer
Prevents Group Policy from being updated while the computer is in use. This setting applies to Group Policy for computers, users, and domain controllers. If
Specifies how often Group Policy for computers is updated while the computer is in use (in the background). This setting specifies a background update rate
Specifies how often Group Policy is updated on domain controllers while they are running (in the background). The updates specified by this setting occur in a
Applies alternate user settings when a user logs on to a computer affected by this setting. This setting directs the system to apply the set of Group Policy obje
Allows User based policy processing, Roaming User Profiles and User Object logon scripts for cross forest interactive logons. This setting affects all user acc
Defines a slow connection for purposes of applying and updating Group Policy. If the rate at which data is transferred from the domain controller providing a
This setting allows you to enable or disable Resultant Set of Policy (RSoP) logging on a client computer. RSoP logs information on Group Policy settings tha
This setting allows you to control a user's ability to invoke a computer policy refresh. If you enable this setting, users may not invoke a refresh of computer po
This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged on users can view their own Resulta
Determines when registry policies are updated. This setting affects all policies in the Administrative Templates folder and any other policies that store values
Determines when Internet Explorer Maintenance policies are updated. This setting affects all policies that use the Internet Explorer Maintenance component
Determines when software installation policies are updated. This setting affects all policies that use the software installation component of Group Policy, such
Determines when folder redirection policies are updated. This setting affects all policies that use the folder redirection component of Group Policy, such as th
Determines when policies that assign shared scripts are updated. This setting affects all policies that use the scripts component of Group Policy, such as tho
Determines when security policies are updated. This setting affects all policies that use the security component of Group Policy, such as those in Windows S
Determines when IP security policies are updated. This setting affects all policies that use the IP security component of Group Policy, such as policies in Com
Determines when policies that assign wireless network settings are updated. This setting affects all policies that use the wireless network component of Grou
Determines when encryption policies are updated. This setting affects all policies that use the encryption component of Group Policy, such as policies related
Determines when disk quota policies are updated. This setting affects all policies that use the disk quota component of Group Policy, such as those in Comp
Always use local ADM files for the Group Policy snap-in. By default, when you edit a Group Policy object (GPO) using the Group Policy Object Editor snap-in
Specifies whether users can solicit another user’s assistance via Remote Assistance. If you use Windows Firewall in your organization, depending on the kin
Specifies whether or not a support person or IT administrator (the expert) can offer remote assistance to this computer without a user explicitly requesting it fi
Determines whether System Restore is turned on or off. System Restore enables users, in the event of a problem, to restore their computers to a previous st
Allows you to turn off the Configuration Interface for System Restore. System Restore enables users, in the event of a problem, to restore their computers to
Use this setting to control whether or not a user is given the choice to report an error. When Display Error Notification is enabled, the user will be notified that
Configures how errors are reported and what information is sent when Error Reporting is enabled. This Policy will not enable or disable Error Reporting, to do
This setting controls whether or not errors in general applications are included when error reporting is enabled. When this setting is enabled, The 'Default' dro
This setting specifies the applications that are always included in error reporting. When this setting is enabled, You can create a list of applications that are a
This setting controls error reporting for errors in general applications when error reporting is enabled. The Default dropdown list allows you to choose whethe
This setting controls whether or not errors in the operating system are included when error reporting is enabled. When this setting is enabled, error reporting
This setting controls whether or not unplanned shutdown events can be reported when error reporting is enabled. When this setting is enabled, error reportin
Determines when Windows File Protection scans protected files. This setting directs Windows File Protection to enumerate and scan all system files for chang
Hides the file scan progress window. This window provides status information to sophisticated users, but it might confuse novices. If you enable this setting,
Specifies the maximum amount of disk space that can be used for the Windows File Protection file cache. Windows File Protection adds protected files to the
Specifies an alternate location for the Windows File Protection cache. To enable this setting, enter the fully qualified local path to the new location in the Cach
Determines whether the RPC Runtime maintains RPC state information for the system, and how much information it maintains. Basic state information, whic
Directs the RPC Runtime to generate extended error information when an error occurs. Extended error information includes the local time that the error occu
Directs the RPC Runtime to ignore delegation failures if delegation was asked for. Windows Server 2003 family includes a new delegation model - constraine
Directs the RPC Runtime to assume the specified timeout as the idle connection timeout even if the IIS server running the RPC HTTP proxy is configured with
If you enable this setting, it directs the RPC Runtime on an RPC server to restrict unauthenticated RPC clients connecting to RPC servers running on a mach
Enabling this setting directs RPC Clients that need to communicate with the Endpoint Mapper Service to authenticate as long as the RPC call for which the en
Specifies a set of parameters for all time providers installed on your system. There are two sets of parameters: clock discipline parameters, which control how
Specifies whether the Windows NTP Client is enabled. Enabling the Windows NTP Client allows your computer to synchronize its computer clock with other N
Specifies whether the Windows NTP Client synchronizes time from the domain hierarchy or a manually configured NTP server. Specifies whether the client ca
Specifies whether the Windows NTP Server is enabled. Enabling the Windows NTP Server allows your computer to service NTP requests from other machine
Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. If this setting is enabled, all of the the policy settings
Specifies whether the tasks Publish this file to the Web, Publish this folder to the Web, and Publish the selected items to the Web, are available from File and
Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards. These wizards allow users to select from
Specifies whether the Order Prints Online task is available from Picture Tasks in Windows folders. The Order Prints Online Wizard is used to download a list
Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used. With the Customer Ex
Specifies whether to show the Did you know? section of Help and Support Center. This content is dynamically updated when users who are connected to the
Specifies whether users can perform a Microsoft Knowledge Base search from the Help and Support Center. The Knowledge Base is an online source of tec
Controls whether or not errors are reported to Microsoft. Error Reporting is used to report information about a system or application that has failed or has sto
Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association. When a user opens a file that h
Specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs). If you enable this setting, t
Specifies whether Events.asp hyperlinks are available for events within the Event Viewer application. The Event Viewer normally makes all HTTP(S) URLs in
Specifies whether to automatically update root certificates using the Windows Update Web site. Typically, a certificate is used when you use a secure Web s
Specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration. If you enable this setting, it blocks users from connectin
Specifies whether Search Companion should automatically download content updates during local and Internet searches. When the user searches the local
Specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intranet as well as the Internet. No
Specifies whether to allow this client to download print driver packages over HTTP. To set up HTTP printing, non-inbox drivers need to be downloaded over H
This policy specifies whether Windows searches Windows Update for device drivers when no local drivers for a device are present. If you enable this setting,
This setting allows you to remove access to Windows Update. If you enable this setting, all Windows Update features are removed. This includes blocking ac
Specifies whether Windows Movie Maker automatically downloads codecs. Windows Movie Maker can be configured so that codecs are downloaded automa
Specifies whether links to Web sites are available in Windows Movie Maker. These links include the Windows Movie Maker on the Web and Privacy Statemen
Specifies whether users can send a final movie to a video hosting provider on the Web by choosing The Web saving option in the Save Movie Wizard of Wind
Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet. Note: This setting only h
Allows you to specify that local computer administrators can supplement the Define Activation Security Check exemptions list. If you enable this policy setting
Allows you to view and change a list of DCOM server application ids (appids) which are exempted from the DCOM Activation security check. DCOM uses two
Allows configuration of components of the operating system used by a client computer to connect to a network. This includes DNS settings and Offline Files.
The Peer Name Resolution Protocol (PNRP) allows for distributed resolution of a name to an IPV6 address and port number.
Specifies the primary Domain Name System (DNS) suffix for all affected computers. The primary DNS suffix is used in DNS name registration and DNS name
Determines if dynamic update is enabled. Computers configured for dynamic update automatically register and update their DNS resource records with a DN
Determines the DNS suffixes to attach to an unqualified single-label name before submission of a DNS query for that name. An unqualified single-label name
Determines whether the DNS client performs primary DNS suffix devolution in a name resolution process. When a user submits a query for a single-label nam
Determines whether the registration of PTR resource records is enabled for the computers to which this policy is applied. By default, DNS clients configured
Specifies the Registration Refresh Interval of A and PTR resource records for computers to which this setting is applied. This setting may be applied to compu
Determines whether a DNS client that attempts to register its A resource record should overwrite an existing A resource record or records containing conflictin
Defines the DNS servers to which a computer sends queries when it attempts to resolve names. Warning: The list of the DNS servers defined in this setting s
Specifies a connection-specific DNS suffix. This setting supersedes the connection-specific DNS suffixes set on the computers to which this setting is applied
Determines if a computer performing dynamic registration may register A and PTR resource records with a concatenation of its Computer Name and a conne
Specifies the value for the Time-To-Live (TTL) field in A and PTR resource records registered by the computers to which this setting is applied. To specify the
Specifies whether the computers to which this setting is applied use secure dynamic update or standard dynamic update for registration of DNS records. To
Specifies whether the computers to which this setting is applied may send dynamic updates to the zones named with a single label name, also known as top-
Determines whether the Offline Files feature is enabled. This setting also disables the Enable Offline Files option on the Offline Files tab. This prevents users
Prevents users from enabling, disabling, or changing the configuration of Offline Files. This setting removes the Offline Files tab from the Folder Options dialo
Determines whether offline files are fully synchronized when users log on. This setting also disables the Synchronize all offline files before logging on option
Determines whether offline files are fully synchronized when users log off. This setting also disables the Synchronize all offline files before logging off option
Determines whether offline files are synchonized before a computer is suspended. If you enable this setting, offline files will be synchronized whenever the c
Limits the percentage of the computer's disk space that can be used to store automatically cached offline files. This setting also disables the Amount of disk s
Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This setting also disables the W
Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the default response, a user-specifi
Prevents users from making network files and folders available offline. This setting removes the Make Available Offline option from the File menu and from a
Disables the Offline Files folder. This setting disables the View Files button on the Offline Files tab. As a result, users cannot use the Offline Files folder to vie
Lists types of files that cannot be used offline. This setting lets you exclude certain types of files from automatic and manual caching for offline use. The syste
This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified files and folders are available offli
Hides or displays reminder balloons, and prevents users from changing the setting. Reminder balloons appear above the Offline Files icon in the notification
Determines how often reminder balloon updates appear. If you enable this setting, you can select how often reminder balloons updates apppear and also pre
Determines how long the first reminder balloon for a network status change is displayed. Reminder balloons appear when the user's connection to a network
Determines how long updated reminder balloons are displayed. Reminder balloons appear when the user's connection to a network file is lost or reconnecte
Deletes local copies of the user's offline files when the user logs off. This setting specifies that automatically and manually cached offline files are retained on
Determines which events the Offline Files feature records in the event log. Offline Files records events in the Application log in Event Viewer when it detects
Makes subfolders available offline whenever their parent folder is made available offline. This setting automatically extends the make available offline setting
This setting determines whether offline files are encrypted. Offline files reside on a user's hard drive, not the network, and they are stored in a local cache on
This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' option. If you enable this policy sett
Configures the threshold value at which Offline Files considers a network connection to be slow. Any network speed below this value is considered to be slow
Determines whether administrators can enable and configure the Internet Connection Sharing (ICS) feature of an Internet connection and if the ICS service c
Prohibits use of Internet Connection Firewall on your DNS domain network. Determines whether users can enable the Internet Connection Firewall feature o
Determines whether a user can install and configure the Network Bridge. Important: This settings is location aware. It only applies when a computer is conne
If you want to use IEEE 802.1x machine authentication, configure this setting. If you enable this setting, it configures the Certificate Authority to be used on th
Turns on Windows Firewall, which replaces Internet Connection Firewall on all computers that are running Windows XP Service Pack 2. If you enable this po
Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewall policy settings that allow su
Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception lists: one is defined by Gr
Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows Firewall uses two program
Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and Windows Management Instr
Allows file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445. If you enable this policy setting, Win
Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP messages to determine the
Allows this computer to receive Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389. If you enable this policy setting, Windows Fir
Allows this computer to receive unsolicited Plug and Play messages sent by network devices, such as routers with built-in firewalls. To do this, Windows Firew
Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the program to the program exceptio
Allows Windows Firewall to record information about the unsolicited incoming messages that it receives. If you enable this policy setting, Windows Firewall w
Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages. If you enable this policy setting, and this computer
Allows you to view and change the port exceptions list defined by Group Policy. Windows Firewall uses two port exception lists: one is defined by Group Polic
Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firewall uses two port exception
Turns on Windows Firewall, which replaces Internet Connection Firewall on all computers that are running Windows XP Service Pack 2. If you enable this po
Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewall policy settings that allow su
Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception lists: one is defined by Gr
Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows Firewall uses two program
Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and Windows Management Instr
Allows file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445. If you enable this policy setting, Win
Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP messages to determine the
Allows this computer to receive Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389. If you enable this policy setting, Windows Fir
Allows this computer to receive unsolicited Plug and Play messages sent by network devices, such as routers with built-in firewalls. To do this, Windows Firew
Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the program to the program exceptio
Allows Windows Firewall to record information about the unsolicited incoming messages that it receives. If you enable this policy setting, Windows Firewall w
Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages. If you enable this policy setting, and this computer
Allows you to view and change the port exceptions list defined by Group Policy. Windows Firewall uses two port exception lists: one is defined by Group Polic
Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firewall uses two port exception
Allows unsolicited incoming messages from specified systems that authenticate using the IPSec transport. If you enable this policy setting, you must type a s
Determines the percentage of connection bandwidth that the system can reserve. This value limits the combined bandwidth reservations of all programs runn
Specifies the maximum number of outstanding packets permitted on the system. When the number of outstanding packets reaches this limit, the Packet Sche
Determines the smallest unit of time that the Packet Scheduler uses when scheduling packets for transmission. The Packet Scheduler cannot schedule packe
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (ServiceTypeBestEffort). The Pa
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type (ServiceTypeControlledLoa
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type (ServiceTypeNetworkContr
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (ServiceTypeQualitative). The Pa
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (ServiceTypeBestEffort). The Pa
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type (ServiceTypeControlledLoa
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type (ServiceTypeNetworkContr
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (ServiceTypeQualitative). The Pa
Specifies an alternate link layer (Layer-2) priority value for packets that do not conform to the flow specification. The Packet Scheduler inserts the correspond
Specifies an alternate link layer (Layer-2) priority value for packets with the Best Effort service type (ServiceTypeBestEffort). The Packet Scheduler inserts the
Specifies an alternate link layer (Layer-2) priority value for packets with the Controlled Load service type (ServiceTypeControlledLoad). The Packet Schedule
Specifies an alternate link layer (Layer-2) priority value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The Packet Scheduler inserts
Specifies an alternate link layer (Layer-2) priority value for packets with the Network Control service type (ServiceTypeNetworkControl). The Packet Schedule
Specifies an alternate link layer (Layer-2) priority value for packets with the Qualitative service type (ServiceTypeQualitative). The Packet Scheduler inserts th
Configures a list of the communities defined to the Simple Network Management Protocol (SNMP) service. SNMP is a protocol designed to give a user the ca
This setting determines the permitted list of hosts that can submit a query to the Simple Network Management (SNMP) agent running on the client computer.
This setting allows Trap configuration for the Simple Network Management Protocol (SNMP) agent. Simple Network Management Protocol is a protocol desig
Limits the network bandwidth that BITS uses for background transfers (this policy does not affect foreground transfers). Specify a limit to use during a specifi
The number of days a pending BITS job can remain inactive before being considered abandoned by the requestor. Once a job is determined to be abandone
Allows you to configure how often a Distributed File System (DFS) client attempts to discover domain controllers on their network. By default, a DFS client att
Determines whether the computer's shared printers can be published in Active Directory. If you enable this setting or do not configure it, users can use the Li
Determines whether the domain controller can prune (delete from Active Directory) the printers published by this computer. By default, the pruning service on
Determines whether the Add Printer Wizard automatically publishes the computer's shared printers in Active Directory. If you enable this setting or do not con
Directs the system to periodically verify that the printers published by this computer still appear in Active Directory. This setting also specifies how often the s
Specifies the default location criteria used when searching for printers. This setting is a component of the Location Tracking feature of Windows printers. To u
Adds a customized Web page link to the Printers folder. By default, the Printers folder includes a link to the Microsoft Support Web page called Get help with
Specifies how often the pruning service on a domain controller contacts computers to verify that their printers are operational. The pruning service periodical
Sets the priority of the pruning thread. The pruning thread, which runs only on domain controllers, deletes printer objects from Active Directory if the printer th
Specifies how many times the pruning service on a domain controller repeats its attempt to contact a computer before pruning the computer's printers. The p
Determines whether printers using kernel-mode drivers may be installed on the local computer. Kernel-mode drivers have access to system-wide memory, a
Specifies whether or not to log events when the pruning service on a domain controller attempts to contact a computer before pruning the computer's printers
Enables the physical Location Tracking support feature of Windows printers. Location tracking lets you design a location scheme for your enterprise and ass
Announces the presence of shared printers to print browse master servers for the domain. On domains with Active Directory, shared printer resources are av
Determines whether the system prunes (deletes from Active Directory) printers that are not automatically republished. This setting applies to printers running
This policy controls whether the print spooler will accept client connections. When the policy is unconfigured, the spooler will not accept client connections u
Determines whether Internet printing is activated on this server. Internet printing lets you display printers on Web pages so the printers can be viewed, mana
This policy controls the state of the application compatibility engine in the system. The engine is part of the loader and looks through a compatibility databas
This policy controls the state of the Program Compatibility Wizard. When enabled, this policy disables the start page of the wizard in the Help and Support Ce
This policy controls the visibility of the Program Compatibility property page shell extension. This shell extension is visible on the property context-menu of an
The Application Help features blocks known incompatible applications and displays a dialog to the end-user regarding the problem. This dialog may include l
Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running on this computer. This setting affects the launching of 16-bit applications in th
This is the URL that will be passed to the Description area in the Event Properties dialog box. Change this value if you want to use a different Web server to h
This is the program that will be invoked when the user clicks the events.asp link.
This specifies the command line parameters that will be passed to the events.asp program
When you enable this setting, it will prevent Internet Information Services (IIS) from being installed, and you will not be able to install Windows components or
Specifies whether the Security Center is turned on or off on users' computers that are joined to an Active Directory domain. When the Security Center is turne
Prevents users from viewing and changing the properties of an existing task. This setting removes the Properties item from the File menu in Scheduled Task
Prevents users from starting and stopping tasks manually. This setting removes the Run and End Task items from the context menu that appears when you r
Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder. This setting disables the Cut, Copy, Paste, and
Prevents users from creating new tasks. This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also, the system does not resp
Prevents users from deleting tasks from the Scheduled Tasks folder. This setting removes the Delete command from the Edit menu in the Scheduled Tasks f
This setting removes the Open advanced properties for this task when I click Finish checkbox from the last page of the Scheduled Task Wizard. This policy is
Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for existing tasks. This setting remov
Specifies whether persistent connections are allowed. After a terminal server client loses the connection to a terminal server, the session on the terminal ser
Specifies whether to allow Remote Desktop Connection clients to automatically reconnect to Terminal Services sessions if their network link is temporarily los
Specifies whether to restrict users to a single remote Terminal Services session. If the status is set to Enabled, users who log on remotely via Terminal Serv
Specifies whether desktop wallpaper is displayed to remote clients connecting via Terminal Services. You can use this setting to enforce the removal of wall
Specifies whether to allow an administrator attempting to connect to the console of a server to log off an administrator currently logged on to the console. The
Specifies whether to allow the client computer to redirect its time zone settings to the Terminal Services session. By default, the session time zone is the sam
Specifies whether to prevent the sharing of clipboard contents (clipboard redirection) between a remote computer and a client computer during a Terminal Se
Specifies whether to prevent the mapping of smart card devices (smart card device redirection) in a Terminal Services session. The client computer must be
Specifies whether users can choose where to play the remote computer's audio output during a Terminal Services session (audio redirection). Users can us
Specifies whether to prevent the redirection of data to client COM ports from the remote computer in a Terminal Services session. You can use this setting t
Specifies whether to prevent the mapping of client printers in Terminal Services sessions. You can use this setting to prevent users from redirecting print job
Specifies whether to prevent the redirection of data to client LPT ports during a Terminal Services session. You can use this setting to prevent users from m
Specifies whether to prevent the mapping of client drives in a Terminal Services session (drive redirection). By default, Terminal Services maps client drives
Specifies whether the client default printer is automatically set as the default printer in a Terminal Services session. By default, Terminal Services automatica
Specifies the Terminal Server fallback printer driver behavior. By default, Terminal Server fallback printer driver is disabled. If the Terminal Server does not h
Specifies whether Terminal Services always prompts the client for a password upon connection. You can use this setting to enforce a password prompt for u
Specifies whether to enforce an encryption level for all data sent between the client and the server during the Terminal Services session. If the status is set t
Specifies whether a Terminal Server requires secure RPC communication with all clients or allows unsecured communication. You can use this setting to stre
Specifies whether Terminal Services limits the number of simultaneous connections to the server. You can use this setting to restrict the number of remote s
Specifies the maximum color resolution (color depth) for Terminal Services connections. You can use this setting to set a limit on the color depth of any conn
Specifies whether to allow users to connect remotely using Terminal Services. You can use this setting to configure Terminal Services remote access for the
Specifies whether to disable the administrator rights to customize security permissions in the Terminal Services Configuration tool (tscc.msc). You can use t
Specifies whether to remove the Windows Security item from the Settings menu on Terminal Services clients. You can use this setting to prevent inexperienc
Specifies whether to remove the Disconnect option from the Shut Down Windows dialog box on Terminal Services clients. You can use this setting to preven
This policy setting determines whether the desktop is always displayed after a client connects to a remote computer or an initial program can run. It can be us
Specifies the terminal servers and license servers to which a Terminal Server License Server offers licenses. You can use this setting to control which server
Specifies how a License Server distributes license upgrades to terminal servers running Windows 2000. A License Server attempts to provide the most appr
Specifies whether to prevent Terminal Services from creating session-specific temporary folders. You can use this setting to disable the creation of separate
Specifies whether Terminal Services retains a user's per-session temporary folders at logoff. You can use this setting to maintain a user's session-specific te
Controls whether passwords can be saved on this computer from Terminal Services clients. If you enable this setting the password saving checkbox in Term
Specifies how client devices are directed when reconnecting to an existing terminal server session. If the status is set to Enabled, client devices attempt to re
Specifies whether Terminal Services uses a Session Directory for tracking user sessions, allowing a group of terminal servers to locate and connect a user ba
Specifies whether to configure a server as a Session Directory Server for Terminal Services sessions on your network. A Session Directory Server directs in
Specifies the Cluster Name for the terminal server, associating it with other servers in the same logical group. If the status is set to Enabled, you can specify
Specifies a time limit for disconnected Terminal Services sessions. You can use this setting to specify the maximum amount of time that a disconnected ses
Specifies a time limit for active Terminal Services sessions. You can use this setting to specify the maximum amount of time a Terminal Services session ca
Specifies a time limit for active but idle Terminal Services sessions. You can use this setting to specify the maximum amount of time that an active session c
Specifies whether to allow users to reconnect to a disconnected Terminal Services session using a computer other than the original client computer. You ca
Specifies whether to terminate a timed-out Terminal Services session instead of disconnecting it. You can use this setting to direct Terminal Services to term
Specifies whether Terminal Services uses the specified network path for roaming user profiles. You can use this setting to specify a network share where the
Determines whether terminal servers must first attempt to locate Terminal Server license servers that are specified in this setting before attempting to locate o
Determines the type of Terminal Server client access license (CAL) a device or user requires to connect to this Terminal Server. Per User licensing mode: Ea
Displays tooltips to the Administrator upon login if there are any licensing issues with the Terminal Server. Not configured: If this setting is not configured, the
Specifies whether Terminal Services uses the specified network share or local directory path as the root of the user's home directory for a Terminal Services
Specifies the level of remote control permitted in a Terminal Services session. Remote control can be established with or without the session user's permissio
Configures Terminal Services to run a specified program automatically upon connection. You can use this setting to specify a program to run automatically w
This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applica
Disables or restricts the use of Windows Installer. This setting can prevent users from installing software on their systems or permit users to install only those
Directs Windows Installer to use system permissions when it installs any program on the system. This setting extends elevated privileges to all programs. Th
Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation. This setting prevents Windows
Prevents users from searching for installation files when they add features or components to an installed program. This setting disables the Browse button be
Prevents users from using Windows Installer to install patches. Patches are updates or upgrades that replace only those program files that have changed. Be
Allows Web-based programs to install software on the computer without notifying the user. By default, when a script hosted by an Internet browser tries to ins
Permits users to change installation options that typically are available only to system administrators. This setting bypasses some of the security features of W
Allows users to search for installation files during privileged installations. This setting enables the Browse button in the Use feature from dialog box. As a resu
Allows users to install programs from removable media, such as floppy disks and CD-ROMs, during privileged installations. This setting permits all users to in
Allows users to upgrade programs during privileged installations. This setting permits all users to install patches, even when the installation program is runnin
Allows Terminal Services administrators to install and configure programs remotely. By default, system administrators can install programs only when system
Saves copies of transform files in a secure location on the local computer. Transform files consist of instructions to modify or customize a program during ins
Specifies the types of events that Windows Installer records in its transaction log for each installation. The log, Msi.log, appears in the Temp directory of the s
This setting allows you to configure user installs. To configure this setting, set it to enabled and use the drop-down list to select the behavior you want. If this
System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. By default, the Wind
This setting controls the ability for users or administrators to remove Windows Installer based updates. This setting should be used if you need to maintain a
This setting causes the Windows Installer to enforce strict rules for component upgrades - setting this may cause some updates to fail. If you enable this polic
This setting controls the ability of non-administrators to install updates that have been digitally signed by the application vendor. Non-administrator updates p
This policy controls the percentage of disk space available to the Windows Installer baseline file cache. The Windows Installer uses the baseline file cache to
Allows you to disable Windows Messenger. If you enable this setting, Windows Messenger will not run. If you disable or do not configure this setting, Window
Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this setting to stop Windows Messen
Prevents Windows Media Digital Rights Management (DRM) from accessing the Internet (or intranet). When enabled, Windows Media DRM is prevented from
Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of the Windows XP operating system that can be used to capture, edit,
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Windows dialog box. If you enabl
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choice in the Shut Down Windows di
Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden. This setting is designed for use with redirect
Prevents users from connecting to the Windows Update Web site. This setting blocks user access to the Windows Update Web site at http://windowsupdate.
Removes items in the All Users profile from the Programs menu on the Start menu. By default, the Programs menu contains items from the All Users profile a
Removes the My Documents icon from the Start menu and its submenus. This setting only removes the icon. It does not prevent the user from using other m
Removes the Documents menu from the Start menu. The Documents menu contains links to the nonprogram files that users have most recently opened. It a
Prevents Control Panel, Printers, and Network Connections from running. This setting removes the Control Panel, Printers, and Network and Connection fold
Prevents users from running Network Connections. This setting prevents the Network Connections folder from opening. This setting also removes Network C
Prevents users from adding the Favorites menu to the Start menu or classic Start menu. If you enable this setting, the Display Favorites item does not appea
Removes the Search item from the Start menu, and disables some Windows Explorer search elements. This setting removes the Search item from the Start
Removes the Help command from the Start menu. This setting only affects the Start menu. It does not remove the Help menu from Windows Explorer and do
Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager. If you enable this setting, the following changes occur: (
Removes the My Pictures icon from the Start Menu.
Removes the My Music icon from the Start Menu.
Removes the My Network Places icon from the Start Menu.
Adds the Log Off <username> item to the Start menu and prevents users from removing it. If you enable this setting, the Log Off <username> item appears i
Removes the Log Off <username> item from the Start menu and prevents users from restoring it. If you enable this setting, the Log Off <username> item doe
Prevents users from shutting down or restarting Windows. This setting removes the Shut Down option from the Start menu and disables the Shut Down butto
Prevents users from using the drag-and-drop method to reorder or remove items on the Start menu. Also, it removes context menus from the Start menu. If y
Removes the Taskbar and Start Menu item from Settings on the Start menu. This setting also prevents the user from opening the Taskbar Properties dialog b
Hides the menus that appear when you right-click the taskbar and items on the taskbar, such as the Start button, the clock, and the taskbar buttons. This sett
Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents. If you enable this setting, the sy
Clear history of recently opened documents on exit. If you enable this setting, the system deletes shortcuts to recently used document files when the user log
Disables personalized menus. Windows personalizes long menus by moving recently used items to the top of the menu and hiding items that have not been
Disables user tracking. This setting prevents the system from tracking the programs users run, the paths they navigate, and the documents they open. The s
Lets users run a 16-bit program in a dedicated (not shared) Virtual DOS Machine (VDM) process. All DOS and 16-bit programs run on Windows 2000 Profes
Prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut. By default, when the system cannot find the target file
Prevents the system from using NTFS tracking features to resolve a shortcut. By default, when the system cannot find the target file for a shortcut (.lnk), it se
Displays Start menu shortcuts to partially installed programs in gray text. This setting makes it easier for users to distinguish between programs that are fully
This setting effects the taskbar buttons used to switch between running programs. Taskbar grouping consolidates similar applications when there is no room
This setting effects the notification area, also called the system tray. The notification area is located in the task bar, generally at the bottom of the screen, and
This setting effects the taskbar, which is used to switch between running applications. The taskbar includes the Start button, list of currently running tasks, an
This setting effects the presentation of the Start menu. The classic Start menu in Windows 2000 Professional allows users to begin common tasks, while the
Hides pop-up text on the Start menu and in the notification area. When you hold the cursor over an item on the Start menu or in the notification area, the sys
If you enable this setting, the Pinned Programs list is removed from the Start menu, and the Internet and Email checkboxes are removed from the simple Star
If you enable this setting, the frequently used programs list is removed from the Start menu. If you disable this setting or do not configure it, the frequently use
If you enable this setting, the All Programs item is removed from the simple Start menu. If you disable this setting or do not configure it, the All Programs item
If you enable this setting, the Undock PC button is removed from the simple Start Menu, and your PC cannot be undocked. If you disable this setting or do no
Remove user name from Start Menu
Prevents the clock in the system notification area from being displayed. If you enable this setting, the clock will not be displayed in the system notification are
This setting affects the notification area (previously called the system tray) on the taskbar. Description: The notification area is located at the far right end of t
This setting affects the taskbar. The taskbar includes the Start button, buttons for currently running tasks, custom toolbars, the notification area, and the syste
Removes the Set Program Access and Defaults icon from the Start menu. Clicking the Set Program Access and Defaults icon from the Start menu opens Ad
Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, My Computer, and My Network Place
Removes most occurrences of the My Documents icon. This setting removes the My Documents icon from the desktop, from Windows Explorer, from progra
This setting hides My Computer from the desktop and from the new Start menu. It also hides links to My Computer in the Web view of all Explorer windows, a
Removes most occurrences of the Recycle Bin icon. This setting removes the Recycle Bin icon from the desktop, from Windows Explorer, from programs tha
This setting hides Properties for the context menu on My Documents. If you enable this setting, the Properties option will not be present when the user right-c
This setting hides Properties on the context menu for My Computer. If you enable this setting, the Properties option will not be present when the user right-cli
Removes the Properties option from the Recycle Bin context menu. If you enable this setting, the Properties option will not be present when the user right-cli
Removes the My Network Places icon from the desktop. This setting only affects the desktop icon. It does not prevent users from connecting to the network o
Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar. This setting does not prevent the user from starting Inte
Remote shared folders are not added to My Network Places whenever you open a document in the shared folder. If you disable this setting or do not configu
Prevents users from changing the path to the My Documents folder. By default, a user can change the location of the My Documents folder by typing a new p
Prevents users from manipulating desktop toolbars. If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag
Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars. This setting does not preve
Prevents users from saving certain changes to the desktop. If you enable this setting, users can change the desktop, but some changes, such as the position
Prevents users from using the Desktop Cleanup Wizard. If you enable this setting, the Desktop Cleanup wizard does not automatically run on a users workst
Enables Active Desktop and prevents users from disabling it. This setting prevents users from trying to enable or disable Active Desktop while a policy contro
Disables Active Desktop and prevents users from enabling it. This setting prevents users from trying to enable or disable Active Desktop while a policy contro
Removes Active Desktop content and prevents users from adding Active Desktop content. This setting removes all Active Desktop items from the desktop. I
Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration. This is a comprehensive setting that locks down th
Prevents users from adding Web content to their Active Desktop. This setting removes the New button from Web tab in Display in Control Panel. As a result,
Prevents users from deleting Web content from their Active Desktop. This setting removes the Delete button from the Web tab in Display in Control Panel. As
Prevents users from changing the properties of Web content items on their Active Desktop. This setting disables the Properties button on the Web tab in Disp
Prevents users from removing Web content from their Active Desktop. In Active Desktop, you can add items to the desktop but close them so they are not dis
Adds and deletes specified Web content items. You can use the Add box in this setting to add particular Web-based items or shortcuts to users' desktops. Us
Specifies the desktop background (wallpaper) displayed on all users' desktops. This setting lets you specify the wallpaper on users' desktops and prevents u
Permits only bitmap images for wallpaper. This setting limits the desktop background (wallpaper) to bitmap (.bmp) files. If users select files with other image fo
Specifies the maximum number of objects the system displays in response to a command to browse or search Active Directory. This setting affects all browse
Displays the filter bar above the results of an Active Directory search. The filter bar consists of buttons for applying additional filters to search results. If you e
Hides the Active Directory folder in My Network Places. The Active Directory folder displays Active Directory objects in a browse window. If you enable this s
Disables all Control Panel programs. This setting prevents Control.exe, the program file for Control Panel, from starting. As a result, users cannot start Contr
Hides specified Control Panel items and folders. This setting removes Control Panel items (such as Display) and folders (such as Fonts) from the Control Pa
Hides all Control Panel items and folders except those specified in this setting. This setting removes all Control Panel items (such as Network) and folders (s
This setting affects the visual style and presentation of the Control Panel. It allows you to disable the new style of Control Panel, which is task-based, and use
Prevents users from using Add or Remove Programs. This setting removes Add or Remove Programs from Control Panel and removes the Add or Remove P
Removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page. The
Removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page. The Add New
Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or change the associated pa
Removes the Set Program Access and Defaults button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page
Removes the Add a program from CD-ROM or floppy disk section from the Add New Programs page. This prevents users from using Add or Remove Program
Removes the Add programs from Microsoft section from the Add New Programs page. This setting prevents users from using Add or Remove Programs to co
Prevents users from viewing or installing published programs. This setting removes the Add programs from your network section from the Add New Program
Prevents users from using Add or Remove Programs to configure installed services. This setting removes the Set up services section of the Add/Remove Wi
Removes links to the Support Info dialog box from programs on the Change or Remove Programs page. Programs listed on the Change or Remove Program
Specifies the category of programs that appears when users open the Add New Programs page. If you enable this setting, only the programs in the category
Disables Display in Control Panel. If you enable this setting, Display in Control Panel does not run. When users try to start Display, a message appears expla
Removes the Desktop tab from Display in Control Panel. This setting prevents users from using Control Panel to change the pattern and wallpaper on the de
Prevents users from adding or changing the background design of the desktop. By default, users can use the Desktop tab of Display in Control Panel to add
Removes the Appearance and Themes tabs from Display in Control Panel. When this setting is enabled, it removes the desktop color selection option from t
Removes the Settings tab from Display in Control Panel. This setting prevents users from using Control Panel to add, configure, or change the display setting
Removes the Screen Saver tab from Display in Control Panel. This setting prevents users from using Control Panel to add, configure, or change the screen s
Enables desktop screen savers. If you disable this setting, screen savers do not run. Also, this setting disables the Screen Saver section of the Screen Saver
Specifies the screen saver for the user's desktop. If you enable this setting, the system displays the specified screen saver on the user's desktop. Also, this s
Determines whether screen savers used on the computer are password protected. If you enable this setting, all screen savers are password protected. If you
Specifies how much user idle time must elapse before the screen saver is launched. When configured, this idle time can be set from a minimum of 1 second
This setting effects the Themes tab that controls the overall appearance of windows. It is accessed through the Display icon in Control Panel. Using the optio
Prevents users from changing the visual style of the windows and buttons displayed on their screens. When enabled, this setting disables the Windows and b
Prevents users from changing the size of the font in the windows and buttons displayed on their screens. If this setting is enabled, the Font size drop-down lis
This setting forces the theme color to be the default color scheme. If you enable this setting, a user cannot change the color scheme of the current desktop th
This setting allows you to load a specific visual style file by entering the path (location) of the visual style file. This can be a local computer visual style (Luna.
Adds a link to an Internet or intranet Web page to the Add Printer Wizard. You can use this setting to direct users to a Web page from which they can install p
Allows users to use the Add Printer Wizard to search the network for shared printers. If you enable this setting or do not configure it, when users choose to a
Specifies the Active Directory location where searches for printers begin. The Add Printer Wizard gives users the option of searching Active Directory for a sh
This policy setting restricts the servers that a client can connect to for point and print. The policy setting applies only to non Print Administrators clients, and o
Prevents users from using familiar methods to add local and network printers. This setting removes the Add Printer option from the Start menu. (To find the A
Prevents users from deleting local and network printers. If a user tries to delete a printer, such as by using the Delete option in Printers in Control Panel, a m
This setting restricts users to the specified language by disabling the menus and dialog box controls in the Regional and Language Options Control Panel. If t
Determines whether the user can publish shared folders in Active Directory. If you enable this setting or do not configure it, users can use the Publish in Activ
Determines whether the user can publish DFS roots in Active Directory. If you enable this setting or do not configure it, users can use the Publish in Active D
Prevents users from enabling, disabling, or changing the configuration of Offline Files. This setting removes the Offline Files tab from the Folder Options dialo
Determines whether offline files are fully synchronized when users log on. This setting also disables the Synchronize all offline files before logging on option
Determines whether offline files are fully synchronized when users log off. This setting also disables the Synchronize all offline files before logging off option
Determines whether offline files are synchonized before a computer is suspended. If you enable this setting, offline files will be synchronized whenever the c
Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This setting also disables the W
Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the default response, a user-specifi
Prevents users from making network files and folders available offline. This setting removes the Make Available Offline option from the File menu and from a
Disables the Offline Files folder. This setting disables the View Files button on the Offline Files tab. As a result, users cannot use the Offline Files folder to vie
This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified files and folders are available offli
Hides or displays reminder balloons, and prevents users from changing the setting. Reminder balloons appear above the Offline Files icon in the notification
Determines how often reminder balloon updates appear. If you enable this setting, you can select how often reminder balloons updates apppear and also pre
Determines how long the first reminder balloon for a network status change is displayed. Reminder balloons appear when the user's connection to a network
Determines how long updated reminder balloons are displayed. Reminder balloons appear when the user's connection to a network file is lost or reconnecte
Determines which events the Offline Files feature records in the event log. Offline Files records events in the Application log in Event Viewer when it detects
This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' option. If you enable this policy sett
All redirected shell folders, such as My Documents, Desktop, Start Menu, and Application Data, are available offline by default. This setting allows you to chan
Determines whether users can rename LAN or all user remote access connections. If you enable this setting, the Rename option is enabled for all users. Use
Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN connection. This setting
Determines whether users can view and change the properties of components used by a private or all-user remote access connection. This setting determine
Determines whether users can configure advanced TCP/IP settings. If you enable this setting (and enable the Enable Network Connections settings for Adm
Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators. The Advanced Settings item l
Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has no effect on nonadmin
Determines whether users can change the properties of a LAN connection. This setting determines whether the Properties menu item is enabled, and thus, w
Determines whether administrators can enable and disable the components used by LAN connections. If you enable this setting (and enable the Enable Netw
Determines whether a user can view and change the properties of remote access connections that are available to all users of the computer. To create an al
Determines whether users can view and change the properties of their private remote access connections. Private connections are those that are available o
Determines whether users can delete remote access connections. If you enable this setting (and enable the Enable Network Connections settings for Admin
Determines whether users can delete all user remote access connections. To create an all-user remote access connection, on the Connection Availability pa
Determines whether users can connect and disconnect remote access connections. If you enable this setting (and enable the Enable Network Connections s
Determines whether users can enable/disable LAN connections. If you enable this setting, the Enable and Disable options for LAN connections are available
Determines whether users can use the New Connection Wizard, which creates new network connections. If you enable this setting (and enable the Enable N
Determines whether nonadministrators can rename a LAN connection. If you enable this setting, the Rename option is enabled for LAN connections. Nonadm
Determines whether nonadministrators can rename all-user remote access connections. To create an all-user connection, on the Connection Availability pag
Determines whether users can rename their private remote access connections. Private connections are those that are available only to one user. To create
Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled. The Remote Access Preferenc
Determines whether users can view the status for an active connection. Connection status is available from the connection status taskbar icon or from the St
Determines whether settings that existed in Windows 2000 Server family will apply to Administrators. The set of Network Connections group settings that exi
This policy setting allows you to manage whether notifications are shown to the user when a DHCP-configured connection is unable to retrieve an IP address
Supresses the welcome screen. This setting hides the welcome screen that is displayed on Windows 2000 Professional and Windows XP Professional each
Determines how programs interpret two-digit years. This setting specifies the largest two-digit year interpreted as being preceded by 20. All numbers less tha
This setting configures the location that Windows searches for drivers when a new piece of hardware is found. By default, Windows searches the following p
Determines how the system responds when a user tries to install device driver files that are not digitally signed. This setting establishes the least secure resp
Specifies an alternate user interface for Windows 2000. The Explorer program (%systemdrive%\program files\internet explorer\iExplorer.exe) creates the fam
Prevents users from running the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd and .bat) can run on the comp
Disables the Windows registry editor Regedit.exe. If this setting is enabled and the user tries to start a registry editor, a message appears explaining that a se
Limits the Windows programs that users have permission to run on the computer. If you enable this setting, users can only run programs that you add to the
Prevents Windows from running the programs you specify in this setting. If you enable this setting, users cannot run programs that you add to the list of disal
Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the m
Allows you to restrict programs from being run from online Help. If you enable this setting, you can prevent programs that you specify from being allowed to b
Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. Many Windows programs, s
This setting controls automatic updates to a user's computer. Whenever a user connects to the Internet, Windows searches for updates available for the soft
Restores the definitions of the %HOMESHARE% and %HOMEPATH% environment variables to those used in Windows NT 4.0 and earlier. If you enable this
Sets the maximum size of each user profile and determines the system's response when a user profile reaches the maximum size. If you disable this setting
Lets you add to the list of folders excluded from the user's roaming profile. This setting lets you exclude folders that are normally included in the user's profile
Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and creates the desktop. If you enabl
Hides the instructions in logon scripts written for Windows NT 4.0 and earlier. Logon scripts are batch files of instructions that run when the user logs on. By d
Displays the instructions in logon scripts as they run. Logon scripts are batch files of instructions that run when the user logs on. By default, the system does
Displays the instructions in logoff scripts as they run. Logoff scripts are batch files of instructions that run when the user logs off. By default, the system does
Prevents users from starting Task Manager (Taskmgr.exe). If this setting is enabled and users try to start Task Manager, a message appears explaining that
Prevents users from locking the system. While locked, the desktop is hidden and the system cannot be used. Only the user who locked the system or the sys
Prevents users from changing their Windows password on demand. This setting disables the Change Password button on the Windows Security dialog box (
Prevents the user from logging off. This setting does not let the user log off the system by using any method, including programs run from the command line,
Specifies additional programs or documents that Windows starts automatically when a user logs on to the system. To use this setting, click Show, click Add,
Ignores customized run-once lists. You can create a customized list of additional programs and documents that are started automatically the next time the sy
Ignores the customized run list. You can create a customized list of additional programs and documents that the system starts automatically when it runs on
Specifies how often Group Policy for users is updated while the computer is in use (in the background). This setting specifies a background update rate only f
Defines a slow connection for purposes of applying and updating Group Policy. If the rate at which data is transferred from the domain controller providing a
Determines which domain controller the Group Policy Object Editor snap-in uses. -- Use the Primary Domain Controller indicates that the Group Policy Obje
Creates new Group Policy object links in the disabled state. This setting creates all new Group Policy object links in the disabled state by default. After you co
Sets the default display name for new Group Policy objects. This setting allows you to specify the default name for new Group Policy objects created from po
Prevents administrators from viewing or using Group Policy preferences. A Group Policy administration (.adm) file can contain both true settings and prefere
Prevents the system from updating the Administrative Templates source files automatically when you open the Group Policy Object Editor. Administrators ma
This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged on users can view their own Resulta
This settings allows you to configure client computers to always lock when resuming from a hibernate or suspend. If you enable this setting, the client compu
Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. If this setting is enabled, all of the the policy settings
Specifies whether the tasks Publish this file to the Web, Publish this folder to the Web, and Publish the selected items to the Web, are available from File and
Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards. These wizards allow users to select from
Specifies whether the Order Prints Online task is available from Picture Tasks in Windows folders. The Order Prints Online Wizard is used to download a list
Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used. With the Customer Ex
Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association. When a user opens a file that h
Specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intranet as well as the Internet. No
Specifies whether to allow this client to download print driver packages over HTTP. To set up HTTP printing, non-inbox drivers need to be downloaded over H
Specifies whether Windows Movie Maker automatically downloads codecs. Windows Movie Maker can be configured so that codecs are downloaded automa
Specifies whether links to Web sites are available in Windows Movie Maker. These links include the Windows Movie Maker on the Web and Privacy Statemen
Specifies whether users can send a final movie to a video hosting provider on the Web by choosing The Web saving option in the Save Movie Wizard of Wind
Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet. Note: This setting only h
Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running for all users. This setting affects the launching of 16-bit applications in the ope
This policy setting allows you to manage the default risk level for file types. To fully customize the risk level for file attachments, you may also need to configu
This policy setting allows you to configure the list of high risk file types. If the file attachment is in the list of high risk file types and is from the restricted zone, W
This policy setting allows you to configure the list of moderate risk file types. If the attachment is in the list of moderate risk file types and is from the restricted
This policy setting allows you to configure the list of low risk file types. If the attachment is in the list of low risk file types, Windows will not prompt the user bef
This policy setting allows you to configure the logic that Windows uses to determine the risk for file attachments. Preferring the file handler instructs Windows
This policy setting allows you to manage whether Windows marks file attachments with information about their zone of origin (i.e. restricted, Internet, intranet,
This policy setting allows you to manage whether users can manually remove the zone information from saved file attachments by clicking the Unblock button
This policy setting allows you to manage the behavior for notifying registered antivirus programs. If multiple programs are registered, they will all be notified. I
This setting allows you to remove the Active Desktop and Web view features. If you enable this setting, it will disable the Active Desktop and Web view. Also,
Removes the Folder Options item from all Windows Explorer menus and removes the Folder Options item from Control Panel. As a result, users cannot use t
Removes the File menu from My Computer and Windows Explorer. This setting does not prevent users from using other methods to perform tasks available
Prevents users from using Windows Explorer or My Network Places to map or disconnect network drives. If you enable this setting, the system removes the M
Removes the Search button from the Windows Explorer toolbar. This setting removes the Search button from the Standard Buttons toolbar that appears in W
Removes shortcut menus from the desktop and Windows Explorer. Shortcut menus appear when you right-click an item. If you enable this setting, menus do
Removes the Manage item from the Windows Explorer context menu. This context menu appears when you right-click Windows Explorer or My Computer. T
This setting is designed to ensure that shell extensions can operate on a per-user basis. If you enable this setting, Windows is directed to only run those shell
Determines whether Windows traces shortcuts back to their sources when it cannot find the target on the user's system. Shortcut files typically include an ab
Removes the icons representing selected hard drives from My Computer and Windows Explorer. Also, the drive letters representing the selected drives do no
Prevents users from using My Computer to gain access to the content of selected drives. If you enable this setting, users can browse the directory structure o
Removes the Hardware tab. This setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. It also remove
Removes the DFS tab from Windows Explorer. This setting removes the DFS tab from Windows Explorer and from other programs that use the Windows Ex
Removes the Security tab from Windows Explorer. If you enable this setting, users opening the Properties dialog box for all file system objects, including fold
Prevents users from selecting the option to animate the movement of windows, menus, and lists. If you enable this setting, the Use transition effects for menu
Disables the Hide keyboard navigation indicators until I use the ALT key option in Display in Control Panel. When this Display Properties option is selected, t
Removes computers in the user's workgroup and domain from lists of network resources in Windows Explorer and My Network Places. If you enable this sett
Removes all computers outside of the user's workgroup or local domain from lists of network resources in Windows Explorer and My Network Places. If you e
Determines how many shortcuts the system can display in the Documents menu on the Start menu. The Documents menu contains shortcuts to the nonprog
Prevents users from submitting alternate logon credentials to install a program. This setting suppresses the Install Program As Other User dialog box for loca
Prompts users for alternate logon credentials during network-based installations. This setting displays the Install Program As Other User dialog box even wh
Windows Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC. If you enable this setting, all features in the
When a file or folder is deleted in Windows Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setting, you can change this behavior.
Allows you to have Windows Explorer display a confirmation dialog whenever a file is deleted or moved to the Recycle Bin. If you enable this setting, a confi
Limits the percentage of a volume's disk space that can be used to store deleted files. If you enable this setting, the user has a maximum amount of disk spa
Removes the Shared Documents folder from My Computer. When a Windows client in is a workgroup, a Shared Documents icon appears in the Windows Ex
This settings controls whether the thumbnail views are cached. If you enable this setting, thumbnail views are not cached. If you disable or do not configure
Turn off Windows+X hotkeys. Keyboards with a Windows key provide users with shortcuts to common shell features. For example, pressing the keyboard se
This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applica
Configures the list of items displayed in the Places Bar in the Windows File/Open dialog. If enable this setting you can specify from 1 to 5 items to be displaye
Removes the shortcut bar from the Open dialog box. This setting, and others in this folder, lets you remove new features added in Windows 2000 Profession
Removes the Back button from the Open dialog box. This setting, and others in this folder, lets you remove new features added in Windows 2000 Profession
Removes the list of most recently used files from the Open dialog box. If you disable this setting or do not configure it, the File name field includes a drop-dow
Prevents users from entering author mode. This setting prevents users from opening the Microsoft Management Console (MMC) in author mode, explicitly op
Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins. -- If you enable this setting, all snap-ins are prohibited, ex
Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is
Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory Sites and Services snap
Prevents users from viewing and changing the properties of an existing task. This setting removes the Properties item from the File menu in Scheduled Task
Prevents users from starting and stopping tasks manually. This setting removes the Run and End Task items from the context menu that appears when you r
Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder. This setting disables the Cut, Copy, Paste, and
Prevents users from creating new tasks. This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also, the system does not resp
Prevents users from deleting tasks from the Scheduled Tasks folder. This setting removes the Delete command from the Edit menu in the Scheduled Tasks f
This setting removes the Open advanced properties for this task when I click Finish checkbox from the last page of the Scheduled Task Wizard. This policy is
Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for existing tasks. This setting remov
Configures Terminal Services to run a specified program automatically upon connection. You can use this setting to specify a program to run automatically w
Controls whether a user can save passwords using a Terminal Services client. If you enable this setting the password saving checkbox in Terminal Services
Specifies a time limit for disconnected Terminal Services sessions. You can use this setting to specify the maximum amount of time that a disconnected ses
Specifies a time limit for active Terminal Services sessions. You can use this setting to specify the maximum amount of time a Terminal Services session ca
Specifies a time limit for active but idle Terminal Services sessions. You can use this setting to specify the maximum amount of time that an active session c
Specifies whether to allow users to reconnect to a disconnected Terminal Services session using a computer other than the original client computer. You ca
Specifies whether to terminate a timed-out Terminal Services session instead of disconnecting it. You can use this setting to direct Terminal Services to term
Specifies the level of remote control permitted in a Terminal Services session. Remote control can be established with or without the session user's permissio
Directs Windows Installer to use system permissions when it installs any program on the system. This setting extends elevated privileges to all programs. Th
Specifies the order in which Windows Installer searches for installation files. By default, the Windows Installer searches the network first, then removable me
Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation. This setting prevents Windows
Prevents users from installing programs from removable media. If a user tries to install a program from removable media, such as CD-ROMs, floppy disks, an
Allows you to disable Windows Messenger. If you enable this setting, Windows Messenger will not run. If you disable or do not configure this setting, Window
Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this setting to stop Windows Messen
This setting allows you to remove access to Windows Update. If you enable this setting, all Windows Update features are removed. This includes blocking ac
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Windows dialog box. If you enabl
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choice in the Shut Down Windows di
Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of the Windows XP operating system that can be used to capture, edit,
Registry Settings
HKLM\Software\Policies\Microsoft\Windows\System!HelpQualifiedRootDir
HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\MYS!DisableShowAtLogon
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReasonOn, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReason
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!SnapShot
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampEnabled, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampInterval
HKLM\Software\Policies\Microsoft\Windows NT\Setup!SourcePath
HKLM\Software\Policies\Microsoft\Windows NT\Setup!ServicePackSourcePath
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStatusMessages
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!VerboseStatus
HKLM\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoEncryptOnMove
HKLM\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKLM\Software\Policies\Microsoft\Windows\System!DLT_AllowDomainMode
HKLM\Software\Policies\Microsoft\Windows NT!DontPowerOffAfterShutdown
HKLM\Software\Policies\Microsoft\Windows\System!CompatibleRUPSecurity
HKLM\Software\Policies\Microsoft\Windows\System!DeleteRoamingCache
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkDetectEnabled
HKLM\Software\Policies\Microsoft\Windows\System!UserProfileMinTransferRate, HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkTimeOut
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkProfileDefault
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkUIEnabled
HKLM\Software\Policies\Microsoft\Windows\System!ProfileDlgTimeOut
HKLM\Software\Policies\Microsoft\Windows\System!ProfileErrorAction
HKLM\Software\Policies\Microsoft\Windows\System!ProfileUnloadTimeout
HKLM\Software\Policies\Microsoft\Windows\System!AddAdminGroupToRUP
HKLM\Software\Policies\Microsoft\Windows\System!ReadOnlyProfile
HKLM\Software\Policies\Microsoft\Windows\System!LocalProfile
HKLM\Software\Policies\Microsoft\Windows\System!LeaveAppMgmtData
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunStartupScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideStartupScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideShutdownScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxGPOScriptWait
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonType
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run!{1,2,3,...}
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRun
HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon!SyncForegroundPolicy
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enable
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enforce
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Limit, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LimitUnits, HKLM\Software\Polic
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverLimit
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverThreshold
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ApplyToRemovableMedia
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ExpectedDialupDelay
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteName
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NegativeCachePeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryInitialPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryMaximumPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryQuitTime
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NonBackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ScavengeInterval
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AvoidPdcOnWan
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!dbFlag
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!MaximumLogFileSize
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveSysvolShareAccess
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveScriptsShareAccess
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!UseDynamicDns
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsAvoidRegisterRecords
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsRefreshInterval
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvWeight
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvPriority
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsTtl
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AutoSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!GcSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NdncSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowSingleLabelDnsDomain
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableBkGndGroupPolicy
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeDC, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTi
HKLM\Software\Policies\Microsoft\Windows\System!UserPolicyMode
HKLM\Software\Policies\Microsoft\Windows\System!AllowX-ForestPolicy-and-RUP
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKLM\Software\Policies\Microsoft\Windows\System!RSoPLogging
HKLM\Software\Policies\Microsoft\Windows\System!DenyUsersFromMachGP
HKLM\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy, HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoSlowLink, HKLM\Software\Policies\Microsoft\W
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoSlowLink, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoSlowLink, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoSlowLink, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPolicy, HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoSlowLink, HKLM\Software\Policies\Microsoft\Windo
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoSlowLink, HKLM\Software\Policies\Microsoft\W
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoSlowLink, HKLM\Software\Policies\Microsoft\W
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoSlowLink, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\Group Policy!OnlyUseLocalAdminFiles
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowToGetHelp, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllow
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowUnsolicited, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllow
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableSR
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableConfig
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!ShowUI, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWAllowHeadless, HK
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoExternalURL, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNo
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!AllOrNone, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeMicrosoftApps, H
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\InclusionList
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\ExclusionList
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeKernelFaults
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeShutdownErrs
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcScan
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcShowProgress
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcQuota
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SFCDllCacheDir
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!StateInformation
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInformation, HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInfoExceptions
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\IgnoreDelegationFailure!IgnoreDelegationFailure
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!MinimumConnectionTimeout
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!RestrictRemoteClients
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!EnableAuthEpResolution
HKLM\Software\Policies\Microsoft\W32Time\Config!FrequencyCorrectRate, HKLM\Software\Policies\Microsoft\W32Time\Config!HoldPeriod, HKLM\Software\
HKLM\Software\Policies\Microsoft\W32time\TimeProviders\NtpClient!Enabled
HKLM\Software\Policies\Microsoft\W32time\Parameters!NtpServer, HKLM\Software\Policies\Microsoft\W32time\Parameters!Type, HKLM\Software\Policies\M
HKLM\Software\Policies\Microsoft\W32Time\TimeProviders\NtpServer!Enabled
HKLM\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPub
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks
HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate
HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration
HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!AllowLocalActivationSecurityCheckExemptionList
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!ListBox_Support_ActivationSecurityCheckExemptionList
HKLM\Software\policies\Microsoft\Peernet!Disabled
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!SeedServer, HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DontIncludeMicrosoftS
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!SeedServer
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!SeedServer
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!DisableMulticastBootstrap
HKLM\Software\Policies\Microsoft\System\DNSClient!NV PrimaryDnsSuffix
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationEnabled
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!SearchList
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UseDomainNameDevolution
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterReverseLookup
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationRefreshInterval
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationOverwritesInConflict
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!NameServer
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AdapterDomainName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterAdapterName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationTtl
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateSecurityLevel
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateTopLevelDomainZones
HKLM\
HKLM\Software\Policies\Microsoft\Windows\NetCache!Enabled
HKLM\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend
HKLM\Software\Policies\Microsoft\Windows\NetCache!DefCacheSize
HKLM\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoMakeAvailableOffline
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoCacheViewer
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!ExcludeExtensions
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!NoReminders
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderFreqMinutes
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!InitialBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!PurgeAtLogoff, HKLM\Software\Policies\Microsoft\Windows\NetCache\Assign
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EventLoggingLevel
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!AlwaysPinSubFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EncryptCache
HKLM\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList
HKLM\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList!SlowLinkSpeed
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_ShowSharedAccessUI
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_PersonalFirewallConfig
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowNetBridge_NLA
HKLM\Software\Policies\Microsoft\Windows\Network Connections\8021X!8021XCARootHash
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!EnableFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\Mic
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFir
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFi
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!EnableFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\M
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsF
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsF
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\ICFv4!BypassFirewall
HKLM\Software\Policies\Microsoft\Windows\Psched!NonBestEffortLimit
HKLM\Software\Policies\Microsoft\Windows\Psched!MaxOutstandingSends
HKLM\Software\Policies\Microsoft\Windows\Psched!TimerResolution
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNonConforming
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeQualitative
HKLM\Software\Policies\SNMP\Parameters\ValidCommunities!{1,2,3,...}
HKLM\Software\Policies\SNMP\Parameters\PermittedManagers!{1,2,3,...}
HKLM\Software\Policies\SNMP\Parameters\TrapConfiguration\public!{1,2,3,...}
HKLM\Software\Policies\Microsoft\Windows\BITS!EnableBITSMaxBandwidth, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTransferRateOnSchedul
HKLM\Software\Policies\Microsoft\Windows\BITS!JobInactivityTimeout
HKLM\Software\Policies\Microsoft\System\DFSClient!DfsDcNameDelay
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PublishPrinters
HKLM\Software\Policies\Microsoft\Windows NT\Printers!Immortal
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Auto Publishing
HKLM\Software\Policies\Microsoft\Windows NT\Printers!VerifyPublishedState
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocation
HKLM\Software\Policies\Microsoft\Windows NT\Printers!SupportLink
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningInterval
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningPriority
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetries
HKLM\Software\Policies\Microsoft\Windows NT\Printers!KMPrintersAreBlocked
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetryLog
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocationSupport
HKLM\Software\Policies\Microsoft\Windows NT\Printers!ServerThread
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruneDownlevel
HKLM\Software\Policies\Microsoft\Windows NT\Printers!RegisterSpoolerRemoteRpcEndPoint
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPrinting
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableEngine
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableWizard
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePropPage
HKLM\Software\Policies\Microsoft\Windows\AppCompat!LogAppHelpEvents
HKLM\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionURL
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgram
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgramCommandLineParameters
HKLM\Software\Policies\Microsoft\Windows NT\IIS!PreventIISInstall
HKLM\Software\Policies\Microsoft\Windows NT\Security Center!SecurityCenterInDomain
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!KeepAliveEnable, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Servic
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableAutoReconnect
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fSingleSessionPerUser
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fNoRemoteDesktopWallpaper
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableForcibleLogoff
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableTimeZoneRedirection
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableClip
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableSmartCard
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCam
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCcm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCpm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableLPT
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCdm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fForceClientLptDef
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPolicyFallbackPrintDriver, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Termina
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPromptForPassword
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MinEncryptionLevel
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEncryptRPCTraffic
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxInstanceCount
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!ColorDepth
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDenyTSConnections, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Se
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fWritableTSCCPermTab
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNTSecurity
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDisconnect
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!fTurnOffSingleAppMode
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fSecureLicensing
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fPreventLicenseUpgrade
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!PerSessionTempDir
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!DeleteTempDirsOnExit
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryExposeServerIP
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryActive
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryLocation
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryClusterName
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime VALUE 0, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFProfilePath
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicenseServers
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicensingMode
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Te
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirUNC, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Servic
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!W
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableMSI
HKLM\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatch
HKLM\Software\Policies\Microsoft\Windows\Installer!SafeForScripting
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableUserControl
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownMedia
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownPatch
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableAdminTSRemote
HKLM\Software\Policies\Microsoft\Windows\Installer!TransformsSecure
HKLM\Software\Policies\Microsoft\Windows\Installer!Logging
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableUserInstalls
HKLM\Software\Policies\Microsoft\Windows\Installer!LimitSystemRestoreCheckpointing
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatchUninstall
HKLM\Software\Policies\Microsoft\Windows\Installer!EnforceUpgradeComponentRules
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLUAPatching
HKLM\Software\Policies\Microsoft\Windows\Installer!MaxPatchCacheSize
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKLM\Software\Policies\Microsoft\WMDRM!DisableOnline
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuSubFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWindowsUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCommonGroups
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetworkConnections
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFavoritesMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFind
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMHelp
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyPictures
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyMusic
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuNetworkPlaces
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceStartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!StartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoClose
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsHistory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentDocsOnExit
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Intellimenus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInstrumentation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MemCheckBoxInRunDlg
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveSearch
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveTrack
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!GreyMSIAds
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTaskGrouping
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoTrayNotify
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LockTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSimpleStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMBalloonTip
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuPinnedList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMFUprogramsList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMorePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuEjectPC
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserNameInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideClock
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayItemsDisplay
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarsOnTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMConfigurePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{450D8FBA-AD25-11D0-98A8-0800361B1103}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{645FF040-5081-101B-9F08-00AA002F954E}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyComputer
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesRecycleBin
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetIcon
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisablePersonalDirChange
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCloseDragDropBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMovingBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSaveSettings
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktopCleanupWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceActiveDesktopOn
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktopChanges
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoAddingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDeletingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoEditingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoClosingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Add, HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpaper, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpap
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoHTMLWallPaper
HKCU\Software\Policies\Microsoft\Windows\Directory UI!QueryLimit
HKCU\Software\Policies\Microsoft\Windows\Directory UI!EnableFilter
HKCU\Software\Policies\Microsoft\Windows\Directory UI!HideDirectoryFolder
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disal
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Restri
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl!ForceClassicControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddRemovePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoRemovePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoWindowsSetupPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoChooseProgramsPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromCDorFloppy
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromInternet
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoSupportInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!DefaultCategory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispCPL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispBackgroundPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoChangingWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispAppearancePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispSettingsPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispScrSavPage
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveActive
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!SCRNSAVE.EXE
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaverIsSecure
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveTimeOut
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThemesTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoVisualStyleChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoSizeChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoColorChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!SetVisualStyle
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Printers Page URL
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Downlevel Browse
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Default Search Scope
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!Restricted, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!InF
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!NoAddPrinter
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!NoDeletePrinter
HKCU\Software\Policies\Microsoft\Control Panel\Desktop!MultiUILanguageID
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishSharedFolders
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishDfsRoots
HKCU\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend
HKCU\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoMakeAvailableOffline
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoCacheViewer
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!NoReminders
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderFreqMinutes
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!InitialBalloonTimeoutSeconds
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderBalloonTimeoutSeconds
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EventLoggingLevel
HKCU\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList
HKCU\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList!DisableFRAdminPin
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowAdvancedTCPIPConfig
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AdvancedSettings
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AddRemoveComponents
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_ChangeBindState
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasAllUserProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasMyProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteAllUserConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_NewConnectionWizard
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameLanConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameAllUserRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameMyRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DialupPrefs
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_Statistics
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_EnableAdminProhibits
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_IpStateChecking
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax!1
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchFloppies, HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchC
HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing!BehaviorOnFailedVerify
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Shell
HKCU\Software\Policies\Microsoft\Windows\System!DisableCMD
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableRegistryTools
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Restr
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disa
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKCU\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKCU\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ConnectHomeDirToRoot
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!EnableProfileQuota, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKCU\Software\Policies\Microsoft\Windows\System!ExcludeProfileDirs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLegacyLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogoffScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableTaskMgr
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableLockWorkstation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableChangePassword
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoLogoff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run!{1,2,3,...}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRunOnce
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRun
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DCOption
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!NewGPOLinksDisabled
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!GPODisplayName
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!ShowPoliciesOnly
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DisableAutoADMUpdate
HKCU\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKCU\Software\Policies\Microsoft\Windows\System\Power!PromptPasswordOnResume
HKCU\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPub
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKCU\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!ModRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!LowRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!UseTrustedHandlers
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!SaveZoneInformation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!HideZoneInfoOnProperties
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!ScanWithAntiVirus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClassicShell
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFolderOptions
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFileMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetConnectDisconnect
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoShellSearchButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoManageMyComputerVerb
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!EnforceShellExtensionSecurity
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LinkResolveIgnoreLinkInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDrives
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewOnDrive
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoHardwareTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDFSTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSecurityTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeAnimation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeKeyboardNavigationIndicators
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoComputersNearMe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoEntireNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!MaxRecentDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoRunasInstallPrompt
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!PromptRunasInstallNetPath
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoCDBurning
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoRecycleFiles
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!ConfirmFileDelete
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!RecycleBinSize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoSharedDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoThumbnailCache
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoWinKeys
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place0, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoPlacesBar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoBackButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoFileMru
HKCU\Software\Policies\Microsoft\MMC!RestrictAuthorMode
HKCU\Software\Policies\Microsoft\MMC!RestrictToPermittedSnapins
HKCU\Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C96401CF-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{de751566-4cc6-11d1-8ca0-00c04fc297eb}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A994E107-6854-4F3D-917C-E6F01670F6D3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{23DC5869-BD9F-46fd-AADD-1F869BA64FC3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{43668E21-2636-11D1-A1CE-0080C88593A5}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FF5903A8-78D6-11D1-92F6-006097B01056}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{18BA7139-D98B-43c2-94DA-2604E34E175D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{57C596D0-9370-40C0-BA0D-AB491B63255D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C96401D1-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3D5D035E-7721-4B83-A645-6C07A3D403B7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{45ac8c63-23e2-11d1-a696-00c04fd58bc3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F83C-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1F5EEC01-1214-4D94-80C5-4BDCD2014DDD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3F276EB4-70EE-11D1-8A0F-00C04FB93753}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE450B-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{9EC88934-C774-11d1-87F4-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{394C052E-B830-11D0-9A86-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B708457E-DB61-4C55-A92F-0D4B5E9B1224}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2E19B602-48EB-11d2-83CA-00104BCA42CF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6E8E0081-19CD-11D1-AD91-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5880CD5C-8EC0-11d1-9570-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{243E20B0-48ED-11D2-97DA-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DAB1A262-4FD7-11D1-842C-00C04FB6C218}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-11d0-bb77-00aa00a1eab7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7AF60DD3-4979-11D1-8A6C-00C04FC33566}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F3621F1-23C6-11D1-AD97-00AA00B88E5A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E12BBB5D-D59D-4E61-947A-301D25AE8C23}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D70A2BEA-A63E-11D1-A7D4-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6DC3804B-7212-458D-ADB0-9A07E2AE1FA2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957D-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FC715823-C5FB-11D1-9EEF-00A0C90347FF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3060E8CE-7020-11D2-842D-00C04FA372D4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66650-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B6664F-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{942A8E4F-A261-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2DA6AA7F-8C88-4194-A558-0D36E7FD3E64}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AE-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AF-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{c40d66a0-e90c-46c6-aa3b-473e38c72bf2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{d524927d-6c08-46bf-86af-391534d779d3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{fe883157-cebd-4570-b7a2-e4fe06abe626}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7E45546F-6D52-4D10-B702-9C2E67232E62}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1BC972D6-555C-4FF7-BE2C-C584021A0A6A}!Restrict_Run
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!W
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime VALUE 0, HKCU\SOFTWARE\Policies\Microsoft\Windows NT
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKCU\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKCU\Software\Policies\Microsoft\Windows\Installer!SearchOrder
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableMedia
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate!DisableWindowsUpdateAccess
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
NT\Reliability!ShutdownReasonUI
NT\Reliability!TimeStampInterval
s\System!SlowLinkTimeOut
LimitUnits, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Threshold, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ThresholdUnits

System!GroupPolicyRefreshTimeOffset
ws\System!GroupPolicyRefreshTimeOffsetDC
licy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges

M\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windows\Gr
ftware\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoGPOListChanges
\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoGPOListChanges
M\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windows\Group
licy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoGPOListChanges
oftware\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windows\Group Policy
LM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windows\G
M\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windows\Gr
ftware\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windows\Group Policy
ows NT\Terminal Services!fAllowFullControl, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!MaxTicketExpiry, HKLM\Software\policies\Microsoft\Windows

ows NT\Terminal Services!fAllowUnsolicitedFullControl
rting\DW!DWAllowHeadless, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWAllowHeadless
ealth\ErrorReporting\DW!DWNoFileCollection, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoSecondLevelCollection, HKLM\Software\Policies\Micro
porting!IncludeMicrosoftApps, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeWindowsApps
c!ExtErrorInfoExceptions
nfig!HoldPeriod, HKLM\Software\Policies\Microsoft\W32Time\Config!LargePhaseOffset, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxAllowedPhaseOffset, HKLM\

Type, HKLM\Software\Policies\Microsoft\W32time\Parameters!CrossSiteSyncFlags, HKLM\Software\Policies\Microsoft\W32time\Parameters!ResolvePeerBackoffMinutes, HK
Version\Policies\Explorer!NoPublishingWizard, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKLM\Software\Microsoft\Windows\Cu
v6-Global!DontIncludeMicrosoftSeedServer
osoft\Windows\NetCache\AssignedOfflineFolders!PurgeOnlyAutoCacheAtLogoff
Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!RemoteAddresses
olicies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!RemoteAddresses
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundSourceQuench, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall
E\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!RemoteAddresses
RE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!RemoteAddresses
icies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogDrop
\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!RemoteAddresses
Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!RemoteAddresses
e, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundSourceQuench, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew
RE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!RemoteAddresses
ARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!RemoteAddresses
olicies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!Log
TS!MaxTransferRateOnSchedule, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBandwidthValidFrom, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBandw
oft\Windows NT\Terminal Services!KeepAliveInterval

s\Microsoft\Windows NT\Terminal Services!FallbackPrintDriverType
crosoft\Windows NT\Terminal Services!fDenyTSConnections
\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime
olicies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip

oft\Windows NT\Terminal Services!WFHomeDir, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirDrive
Windows NT\Terminal Services!WorkDirectory

t\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Delete
Version\Policies\System!WallpaperStyle
ntVersion\Policies\Explorer\DisallowCpl!{1,2,3,...}
tVersion\Policies\Explorer\RestrictCpl!{1,2,3,...}
ws NT\Printers\PointAndPrint!InForest, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!TrustedServers, HKCU\Software\Policies\Microsoft\Windows NT

ws\DriverSearching!DontSearchCD, HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate
ntVersion\Policies\Explorer\RestrictRun!{1,2,3,...}
entVersion\Policies\Explorer\DisallowRun!{1,2,3,...}
\CurrentVersion\Policies\System!ProfileQuotaMessage, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxProfileSize, HKCU\Software\Microsoft\Wind

System!GroupPolicyRefreshTimeOffset
Version\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKCU\Software\Microsoft\Windows\Cu

s\CurrentVersion\Policies\comdlg32\Placesbar!Place1, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place2, HKCU\Software\Microsoft\W
Windows NT\Terminal Services!WorkDirectory, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fInheritInitialProgram
E\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

T\DiskQuota!ThresholdUnits
KLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoGPOListChanges
M\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoGPOListChanges
ware\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoGPOListChanges
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoGPOListChanges
KLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoGPOListChanges
are\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoGPOListChanges
, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!MaxTicketExpiryUnits, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fUseMailto
evelCollection, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!ForceQueueMode, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWFileTreeR
Time\Config!MaxAllowedPhaseOffset, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxNegPhaseCorrection, HKLM\Software\Policies\Microsoft\W32Time\Config!Max

\Parameters!ResolvePeerBackoffMinutes, HKLM\Software\Policies\Microsoft\W32time\Parameters!ResolvePeerBackoffMaxTimes, HKLM\Software\Policies\Microsoft\W32tim
vices, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP, HKLM\Softwar

FTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
dowsFirewall\DomainProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSuccessfulConnections, HKLM
SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSe
WindowsFirewall\StandardProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogSuccessfulConnections, H
Policies\Microsoft\Windows\BITS!MaxBandwidthValidTo, HKLM\Software\Policies\Microsoft\Windows\BITS!UseSystemMaximum, HKLM\Software\Policies\Microsoft\Window
KCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!ServerList
xProfileSize, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!IncludeRegInProQuota, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
vices, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP, HKCU\Softwa
acesbar!Place2, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place3, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdl
ndows NT\Terminal Services!fUseMailto
ft\PCHealth\ErrorReporting\DW!DWFileTreeRoot, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWReporteeName
ware\Policies\Microsoft\W32Time\Config!MaxPosPhaseCorrection, HKLM\Software\Policies\Microsoft\W32Time\Config!PhaseCorrectRate, HKLM\Software\Policies\Microsof

es, HKLM\Software\Policies\Microsoft\W32time\Parameters!SpecialPollInterval, HKLM\Software\Policies\Microsoft\W32time\Parameters!EventLogFlags
osoft\Messenger\Client!CEIP, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch, HK

WindowsFirewall\DomainProfile\IcmpSettings!AllowInboundEchoRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInboundR
e\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogFilePath, HKLM\SOFTWARE\Policies\Microsoft\W
soft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundEchoRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowIn
Profile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogFilePath, HKLM\SOFTWARE\Policies\Micro

m, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTransferRateOffSchedule
soft\Windows\CurrentVersion\Policies\System!WarnUser, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!WarnUserTimeout
rosoft\Messenger\Client!CEIP, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKCU\Software\Policies\Microsoft\Windows NT\Pr
osoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place4
orrectRate, HKLM\Software\Policies\Microsoft\W32Time\Config!PollAdjustFactor, HKLM\Software\Policies\Microsoft\W32Time\Config!SpikeWatchPeriod, HKLM\Software\Pol
ameters!EventLogFlags
oft\PCHealth\HelpSvc!MicrosoftKBSearch, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies

all\DomainProfile\IcmpSettings!AllowInboundRouterRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundTimeExceed
ath, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogFileSize
Firewall\StandardProfile\IcmpSettings!AllowInboundRouterRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundTim
gFilePath, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogFileSize
WarnUserTimeout
U\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKCU\Softwar
onfig!SpikeWatchPeriod, HKLM\Software\Policies\Microsoft\W32Time\Config!UpdateInterval, HKLM\Software\Policies\Microsoft\W32Time\Config!AnnounceFlags, HKLM\Sof
re\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW, HKLM\S
ofile\IcmpSettings!AllowOutboundTimeExceeded, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundParameterProblem, HK
ndardProfile\IcmpSettings!AllowOutboundTimeExceeded, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundParameterPro
rs!DisableWebPnPDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, H
W32Time\Config!AnnounceFlags, HKLM\Software\Policies\Microsoft\W32Time\Config!EventLogFlags, HKLM\Software\Policies\Microsoft\W32Time\Config!LocalClockDisper
et Connection Wizard!ExitOnMSICW, HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks, HKLM\SOFTWARE\Policies\Microsoft\SystemCertifica
ttings!AllowOutboundParameterProblem, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInboundTimestampRequest, HKLM\SOFT
e\IcmpSettings!AllowOutboundParameterProblem, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundTimestampRequest, H
s\Microsoft\WindowsMovieMaker!WebHelp, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish, HKCU\Software\Microsoft\Windows\CurrentVersion\Policie
Microsoft\W32Time\Config!LocalClockDispersion, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxPollInterval, HKLM\Software\Policies\Microsoft\W32Time\Config!M
OFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration,
llowInboundTimestampRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInboundMaskRequest, HKLM\SOFTWARE\Policie
pSettings!AllowInboundTimestampRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundMaskRequest, HKLM\SOFTW

are\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKCU\S
oftware\Policies\Microsoft\W32Time\Config!MinPollInterval
\Registration Wizard Control!NoRegistration, HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates, HKLM\Software\Policies\Microsoft\Windows N
undMaskRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundPacketTooBig
s!AllowInboundMaskRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundPacketTooBig
n\Policies\Explorer!NoWebServices, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKCU\Software\Policies\Microsoft\Messen
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKLM\So
oundPacketTooBig
d, HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKCU\Software\Pol
Printers!DisableWebPnPDownload, HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate, HKLM\Software\Policies\Microsoft\Windows\W
rer!NoInternetOpenWith, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWeb
KLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKLM
s\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKCU\Software\Policies\Microsoft\Wi
WindowsMovieMaker!CodecDownload, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebPubl
wnload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
ies\Microsoft\WindowsMovieMaker!WebPublish, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKLM\Software\Microsoft\Windo
ker!WebPublish
hingWizard, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoO
ndows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP, HKLM\Software\Policies\Microsoft\PCHealth\Help
M\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch, HKLM\Software\Policies\Microsoft\PC
Search, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HK
on\Policies\Explorer!NoInternetOpenWith, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\Inter
M\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW, HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks, HKLM\S
wer!MicrosoftEventVwrDisableLinks, HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate, HKLM\Software\Policies\Microsoft\Window
e, HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration, HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates
earchCompanion!DisableContentFileUpdates, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKLM\Software\Policies\Microsoft\Windows NT
KLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate,
riverSearching!DontSearchWindowsUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess, HKLM\Software\Policies\Microsoft
ateAccess, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKLM\Software\Pol
Computer/User Node
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
USER
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
MACHINE
Policy Path
Administrative Templates\Windows Components\Internet Explorer
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
Administrative Templates\Windows Components\Internet Explorer\Offline Pages
Administrative Templates\Windows Components\Internet Explorer\Browser menus
Administrative Templates\Windows Components\Internet Explorer\Toolbars
Administrative Templates\Windows Components\Internet Explorer\Persistence Behavior
Administrative Templates\Windows Components\Internet Explorer\Administrator Approved Controls
Administrative Templates\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction
Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction
Administrative Templates\Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security
Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling
Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature
Administrative Templates\Windows Components\Internet Explorer\Security Features\Object Caching Protection
Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions
Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation
Administrative Templates\Windows Components\Internet Explorer\Security Features\Information Bar
Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install
Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download
Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management
Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown
Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protocols Per Security Zone
Full Policy Name
Search: Disable Search Customization
Search: Disable Find Files via F3 within the browser
Disable external branding of Internet Explorer
Disable importing and exporting of favorites
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Locked-Down Local Machine Zone Template
Locked-Down Internet Zone Template
Locked-Down Intranet Zone Template
Locked-Down Trusted Sites Zone Template
Locked-Down Restricted Sites Zone Template
Disable changing Advanced page settings
Disable changing home page settings
Use Automatic Detection for dial-up connections
Disable caching of Auto-Proxy scripts
Display error message on proxy script download failure
Disable changing Temporary Internet files settings
Disable changing history settings
Disable changing color settings
Disable changing link color settings
Disable changing font settings
Disable changing language settings
Disable changing accessibility settings
Disable Internet Connection wizard
Disable changing connection settings
Disable changing proxy settings
Disable changing Automatic Configuration settings
Pop-up allow list
Disable changing ratings settings
Disable changing certificate settings
Disable changing Profile Assistant settings
Disable AutoComplete for forms
Do not allow AutoComplete to save passwords
Disable changing Messaging settings
Disable changing Calendar and Contact settings
Disable the Reset Web Settings feature
Disable changing default browser check
Identity Manager: Prevent users from using Identities
Configure Outlook Express
Disable adding channels
Disable removing channels
Disable adding schedules for offline pages
Disable editing schedules for offline pages
Disable removing schedules for offline pages
Disable offline page hit logging
Disable all scheduled offline pages
Disable channel user interface completely
Disable downloading of site subscription content
Disable editing and creating of schedule groups
Subscription Limits
File menu: Disable Save As... menu option
File menu: Disable New menu option
File menu: Disable Open menu option
File menu: Disable Save As Web Page Complete
File menu: Disable closing the browser and Explorer windows
View menu: Disable Source menu option
View menu: Disable Full Screen menu option
Hide Favorites menu
Tools menu: Disable Internet Options... menu option
Help menu: Remove 'Tip of the Day' menu option
Help menu: Remove 'For Netscape Users' menu option
Help menu: Remove 'Tour' menu option
Help menu: Remove 'Send Feedback' menu option
Disable Context menu
Disable Open in New Window menu option
Disable Save this program to disk option
Disable customizing browser toolbar buttons
Disable customizing browser toolbars
Configure Toolbar Buttons
File size limits for Local Machine zone
File size limits for Intranet zone
File size limits for Trusted Sites zone
File size limits for Internet zone
File size limits for Restricted Sites zone
Media Player
Menu Controls
Microsoft Agent
Microsoft Chat
Microsoft Survey Control
Shockwave Flash
NetShow File Transfer Control
DHTML Edit Control
Microsoft Scriptlet Component
Carpoint
Investor
MSNBC
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Add-on List
Process List
All Processes
Process List
All Processes
Security Zones: Use only machine settings
Security Zones: Do not allow users to change policies
Security Zones: Do not allow users to add/delete sites
Make proxy settings per-machine (rather than per-user)
Disable Automatic Install of Internet Explorer components
Disable Periodic Check for Internet Explorer software updates
Disable software update shell notifications on program launch
Disable showing the splash screen
Pop-up allow list
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Java permissions
Allow META REFRESH
Use Pop-up Blocker
Logon options
Locked-Down Local Machine Zone Template
Locked-Down Internet Zone Template
Locked-Down Intranet Zone Template
Locked-Down Trusted Sites Zone Template
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Add-on List
Process List
All Processes
Process List
All Processes
Supported on
at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1

Help/Explain Text
Makes the Customize button in the Search Assistant appear dimmed. The Search Assistant is a tool that appears in the Search bar to help users search the
Disables using the F3 key to search in Internet Explorer and Windows Explorer. If you enable this policy, the search functionality of the F3 key is disabled. Us
Prevents branding of Internet programs, such as customization of Internet Explorer and Outlook Express logos and title bars, by another party. If you enable
Prevents users from exporting or importing favorite links by using the Import/Export Wizard. If you enable this policy, the Import/Export Wizard cannot import
Removes the General tab from the interface in the Internet Options dialog box. If you enable this policy, users are unable to see and change settings for the
Removes the Security tab from the interface in the Internet Options dialog box. If you enable this policy, it prevents users from seeing and changing settings
Removes the Content tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing rating
Removes the Connections tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing c
Removes the Programs tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing def
Removes the Privacy tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing defau
Removes the Advanced tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing adv
This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. Th
This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explore
This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone. If you enable this policy, users can d
This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially w
This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with paramete
This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone. If you enable this policy setting
This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script. If you enable this policy setting, scrip
This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link c
This policy setting allows you to manage whether pages of the zone may download HTML fonts. If you enable this policy setting, HTML fonts can be downloa
This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Cus
This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or A
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Intranet Zone can run active content such as script
This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download
This policy setting manages whether users will be automatically prompted for ActiveX control installations. If you enable this policy setting, users will receive
This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the Web page uses the Meta Refre
This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars. If you enable this p
This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality for HTML elements to which
This policy setting allows you to manage whether users can display nonsecure items and manage whether users receive a security information message to d
This policy setting allows you to manage whether users are prompted to select a certificate when no certificate or only one certificate exists. If you enable this
This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. If you enable this policy setting,
This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this option are: If you enable this poli
This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages
This policy setting allows you to manage the opening of sub-frames and access of applications across different domains. If you enable this policy setting, use
This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by In
This policy setting allows you to manage software channel permissions. If you enable this policy setting, you can choose the following options from the drop-
This policy setting allows you to manage whether data on HTML forms on pages in the zone may be submitted. Forms sent with SSL (Secure Sockets Layer)
This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are no
This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page s
This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone. If you enable th
This policy setting allows you to manage whether script code on pages in the zone is run. If you enable this policy setting, script code on pages in the zone c
This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region. If you en
This policy setting allows you to manage whether applets are exposed to scripts within the zone. If you enable this policy setting, scripts can access applets a
This policy setting allows you to manage settings for logon options. If you enable this policy setting, you can choose from the following logon options. Anony
This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone. If you enable this
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone can run active content such as
This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated securi
This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone. If you en
This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone. If you enable this policy setting, site
This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone. If you enable this policy setting, all network pa
This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Mediu
This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer is set to do this, the checks
This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts) that can installed by Internet
This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Explorer components) that are reg
This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, such as toolbars. Browser hel
This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generally only animated GIF files are
This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound files such as MIDI files are aff
This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embedded video files are affected
This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run. If you enable this policy set
This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the s
This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificates are revoked when they hav
This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies
This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) information such as passwords an
This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder after all browser windows are c
Prevents users from changing settings on the Advanced tab in the Internet Options dialog box. If you enable this policy, users are prevented from changing a
Prevents users from changing the home page of the browser. The home page is the first page that appears when users start the browser. If you enable this p
Specifies that Automatic Detection will be used to configure dial-up settings for users. Automatic Detection uses a DHCP (Dynamic Host Configuration Protoc
Prevents automatic proxy scripts, which interact with a server to automatically configure users' proxy settings, from being stored in the users' cache. If you en
Specifies that error messages will be displayed to users if problems occur with proxy scripts. If you enable this policy, error messages will be displayed when
Prevents users from changing the browser cache settings, such as the location and amount of disk space to use for the Temporary Internet Files folder. If yo
Prevents users from changing the history settings for the browser. If you enable this policy, the settings in the History area on the General tab in the Internet
Prevents users from changing the default Web page colors. If you enable this policy, the color settings for Web pages appear dimmed. The settings are locat
Prevents users from changing the colors of links on Web pages. If you enable this policy, the color settings for links appear dimmed. The settings are located
Prevents users from changing font settings. If you enable this policy, the Font button on the General tab in the Internet Options dialog box appears dimmed.
Prevents users from changing language settings. If you enable this policy, the Languages button on the General tab in the Internet Options dialog box appea
Prevents users from changing accessibility settings. If you enable this policy, the Accessibility button on the General tab in the Internet Options dialog box ap
Prevents users from running the Internet Connection Wizard. If you enable this policy, the Setup button on the Connections tab in the Internet Options dialog
Prevents users from changing dial-up settings. If you enable this policy, the Settings button on the Connections tab in the Internet Options dialog box appear
Prevents users from changing proxy settings. If you enable this policy, the proxy settings appear dimmed. These settings are in the Proxy Server area of the
Prevents users from changing automatic configuration settings. Automatic configuration is a process that administrators can use to update browser settings p
This policy setting allows you to manage pop-up management functionality in Internet Explorer. If you enable this policy setting, the Control Panel information
This policy setting allows you to manage a list of web sites that will be allowed to open pop-up windows regardless of the Internet Explorer process's Pop-Up
Prevents users from changing ratings that help control the type of Internet content that can be viewed. If you enable this policy, the settings in the Content Ad
Prevents users from changing certificate settings in Internet Explorer. Certificates are used to verify the identity of software publishers. If you enable this polic
Prevents users from changing Profile Assistant settings. If you enable this policy, the My Profile button appears dimmed in the Personal Information area on
Prevents Microsoft Internet Explorer from automatically completing forms, such as filling in a name or a password that the user has entered previously on a W
Disables automatic completion of user names and passwords in forms on Web pages, and prevents users from being prompted to save passwords. If you en
Prevents users from changing the default programs for messaging tasks. If you enable this policy, the E-mail, Newsgroups, and Internet Call options in the In
Prevents users from changing the default programs for managing schedules and contacts. If you enable this policy, the Calendar and Contact check boxes a
Prevents users from restoring default settings for home and search pages. If you enable this policy, the Reset Web Settings button on the Programs tab in th
Prevents Microsoft Internet Explorer from checking to see whether it is the default browser. If you enable this policy, the Internet Explorer Should Check to Se
This policy setting allows you to manage the crash detection feature of add-on Management. If you enable this policy setting, a crash in Internet Explorer will
This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager. If you enable this policy setting, u
Prevents users from configuring unique identities by using Identity Manager. Identity Manager enables users to create multiple accounts, such as e-mail acco
Allows Administrators to enable and disable the ability for Outlook Express users to save or open attachments that can potentially contain a virus. If you chec
Prevents users from adding channels to Internet Explorer. Channels are Web sites that are updated automatically on your computer, according to a schedule
Prevents users from disabling channel synchronization in Microsoft Internet Explorer. Channels are Web sites that are automatically updated on your compu
Prevents users from specifying that Web pages can be downloaded for viewing offline. When users make Web pages available for offline viewing, they can vi
Prevents users from editing an existing schedule for downloading Web pages for offline viewing. When users make Web pages available for offline viewing,
Prevents users from clearing the preconfigured settings for Web pages to be downloaded for offline viewing. When users make Web pages available for offli
Prevents channel providers from recording information about when their channel pages are viewed by users who are working offline. If you enable this policy
Disables existing schedules for downloading Web pages for offline viewing. When users make Web pages available for offline viewing, they can view conten
Prevents users from viewing the Channel bar interface. Channels are Web sites that are automatically updated on their computer according to a schedule spe
Prevents content from being downloaded from Web sites that users have subscribed to. When users make Web pages available for offline viewing, they can
Prevents users from adding, editing, or removing schedules for offline viewing of Web pages and groups of Web pages that users have subscribed to. A sub
Restricts the amount of information downloaded for offline viewing. If you enable this policy, you can set limits to the size and number of pages that users can
Prevents users from saving Web pages from the browser File menu to their hard disk or to a network share. If you enable this policy, the Save As command
Prevents users from opening a new browser window from the File menu. If this policy is enabled, users cannot open a new browser window by clicking the F
Prevents users from opening a file or Web page from the File menu in Internet Explorer. If you enable this policy, the Open dialog box will not appear when u
Prevents users from saving the complete contents that are displayed on or run from a Web page, including the graphics, scripts, linked files, and other eleme
Prevents users from closing Microsoft Internet Explorer and Windows Explorer. If you enable this policy, the Close command on the File menu will appear dim
Prevents users from viewing the HTML source of Web pages by clicking the Source command on the View menu. If you enable this policy, the Source comm
Prevents users from displaying the browser in full-screen (kiosk) mode, without the standard toolbar. If you enable this policy, the Full Screen command on th
Prevents users from adding, removing, or editing the list of Favorite links. The Favorites list is a way to store popular links for future use. If you enable this po
Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer. If you enable this policy, users cannot chang
Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet Explorer. If you enable this policy, the Tip of the Day command is r
Prevents users from displaying tips for users who are switching from Netscape. If you enable this policy, the For Netscape Users command is removed from
Prevents users from running the Internet Explorer Tour from the Help menu in Internet Explorer. If you enable this policy, the Tour command is removed from
Prevents users from sending feedback to Microsoft by clicking the Send Feedback command on the Help menu. If you enable this policy, the Send Feedback
Prevents the shortcut menu from appearing when users click the right mouse button while using the browser. If you enable this policy, the shortcut menu will
Prevents using the shortcut menu to open a link in a new browser window. If you enable this policy, users cannot point to a link, click the right mouse button,
Prevents users from saving a program or file that Microsoft Internet Explorer has downloaded to the hard disk. If you enable this policy, users cannot save a
Prevents users from determining which buttons appear on the Microsoft Internet Explorer and Windows Explorer standard toolbars. If you enable this policy,
Prevents users from determining which toolbars are displayed in Microsoft Internet Explorer and Windows Explorer. If you enable this policy, the list of toolba
Specifies which buttons will be displayed on the standard toolbar in Microsoft Internet Explorer. If you enable this policy, you can specify whether or not each
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Computer security zone. If you enable this polic
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Intranet security zone. If you enable this policy,
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Trusted Sites security zone. If you enable this policy,
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Internet security zone. If you enable this policy, you c
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Restricted Sites security zone. If you enable this polic
Designates the Media Player ActiveX control as administrator-approved. This control is used for playing sounds, videos, and other media. If you enable this
Designates a set of Microsoft ActiveX controls used to manipulate pop-up menus in the browser as administrator-approved. If you enable this policy, these co
Designates the Microsoft Agent ActiveX control as administrator-approved. Microsoft Agent is a set of software services that supports the presentation of soft
Designates the Microsoft Chat ActiveX control as administrator-approved. This control is used by Web authors to build text-based and graphical-based Chat
Designates the Microsoft Network (MSN) Carpoint automatic pricing control as administrator-approved. This control enables enhanced pricing functionality o
Designates a set of Microsoft Network (MSN) Investor controls as administrator-approved. These controls enable users to view updated lists of stocks on the
Designates a set of MSNBC controls as administrator-approved. These controls enable enhanced browsing of news reports on the MSNBC Web site. If you
Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to which they are attached. T
For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved behaviors. This list may be con
The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on the MK protocol will fail.
Internet Explorer places zone restrictions on each Web page it opens, which are dependent upon the location of the Web page (Internet, Intranet, Local Mach
Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received through a Web server. This
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. If you enable
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. This policy s
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a new domain. If you enable
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a new domain. This policy se
Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictions security feature restricts
Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (Internet, Intranet, Local M
This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code installs are restricted. By d
This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code installs are restricted. By default, th
This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer processes when file or code
This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this policy setting, prompting for Acti
This policy setting enables applications hosting the Web Browser Control to block automatic prompting of ActiveX control installation. If you enable this policy
This policy setting enables blocking of file download prompts that are not user initiated. If you enable this policy setting, file download prompts that are not us
This policy setting enables applications hosting the Web Browser Control to block automatic prompting of file downloads that are not user initiated. If you ena
This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denied. By default, the 'Add-on List'
This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. This list can be used with the 'Deny all add-ons unless
This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered into Add-on Manager) or po
This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on Manager) or policy settin
Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manner.
Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manner. This policy setting con
For each zone, the Network Protocol Lockdown security restriction may be configured to prevent active content obtained through restricted protocols from run
Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same security level. If you enable this po
Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level. If you enable this policy, the Custo
Prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same security level. If you enable this pol
Applies proxy settings to all users of the same computer. If you enable this policy, users cannot set user-specific proxy settings. They must use the zones cre
Prevents Internet Explorer from automatically installing components. If you enable this policy, it prevents Internet Explorer from downloading a component wh
Prevents Internet Explorer from checking whether a new version of the browser is available. If you enable this policy, it prevents Internet Explorer from check
Specifies that programs using the Microsoft Software Distribution Channel will not notify users when they install new components. The Software Distribution C
Prevents the Internet Explorer splash screen from appearing when users start the browser. If you enable this policy, the splash screen, which displays the pr
This policy setting allows you to manage the crash detection feature of add-on Management. If you enable this policy setting, a crash in Internet Explorer will
This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager. If you enable this policy setting, u
This policy setting allows you to manage pop-up management functionality in Internet Explorer. If you enable this policy setting, the Control Panel information
This policy setting allows you to manage a list of web sites that will be allowed to open pop-up windows regardless of the Internet Explorer process's Pop-Up
Removes the General tab from the interface in the Internet Options dialog box. If you enable this policy, users are unable to see and change settings for the
Removes the Security tab from the interface in the Internet Options dialog box. If you enable this policy, it prevents users from seeing and changing settings
Removes the Content tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing rating
Removes the Connections tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing c
Removes the Programs tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing def
Removes the Privacy tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing defau
Removes the Advanced tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing adv
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone can run active content such as
This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated securi
This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone. If you en
This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone. If you enable this policy setting, site
This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone. If you enable this policy setting, all network pa
This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer is set to do this, the checks
This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts) that can installed by Internet
This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Explorer components) that are reg
This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, such as toolbars. Browser hel
This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generally only animated GIF files are
This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound files such as MIDI files are aff
This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embedded video files are affected
This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run. If you enable this policy set
This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the s
This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificates are revoked when they hav
This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies
This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) information such as passwords an
This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder after all browser windows are c
For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved behaviors. This list may be con
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. This policy s
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a new domain. This policy se
This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code installs are restricted. By d
This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code installs are restricted. By default, th
This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer processes when file or code
This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this policy setting, prompting for Acti
This policy setting enables blocking of file download prompts that are not user initiated. If you enable this policy setting, file download prompts that are not us
This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denied. By default, the 'Add-on List'
This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. This list can be used with the 'Deny all add-ons unless
This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered into Add-on Manager) or po
This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on Manager) or policy settin
Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manner.
Registry Settings
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchCustomization
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFindFiles
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExternalBranding
HKCU\Software\Policies\Microsoft\Internet Explorer!DisableImportExportFavorites
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKCU\Software\Policies\Microsoft\Wi
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKCU\Software\Policies\Microsoft\Wi
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKCU\Software\Policies\M
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKCU\Software\Polici
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKCU\Software\Po
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTemplat
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKCU\Software\
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKCU\Software\
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKCU
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, H
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOC
HKCU\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!CheckExeSignatures
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Advanced
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!HomePage
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DialupAutodetect
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnableAutoProxyResultCache
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisplayScriptDownloadFailureUI
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Cache
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!History
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Colors
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!links
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Fonts
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Languages
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Accessibility
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Connwiz Admin Lock
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Connection Settings
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Proxy
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Autoconfig
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Ratings
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Certificates
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Profiles
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!FormSuggest
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!FormSuggest Passwords
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Messaging
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!CalendarContact
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!ResetWebSettings
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Check_If_Default
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Identities!Locked Down
HKCU\Software\Microsoft\Outlook Express!BlockExeAttachments
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelLogging
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoScheduledUpdates
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelUI
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSubscriptionContent
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingScheduleGroups
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionSize, HKCU\Software\Policies\Microsoft\Internet Explorer\Infode
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserSaveAs
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileNew
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileOpen
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserSaveWebComplete
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserClose
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoViewSource
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoTheaterMode
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoFavorites
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserOptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTipOfTheDay
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemNetscapeHelp
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTutorial
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemSendFeedback
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserContextMenu
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoOpeninNewWnd
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoSelectDownloadDir
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarCustomize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoBandCustomize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!SpecifyDefaultButtons, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Exp
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{05589FA1-C356-11CE-BF01-00AA0055595A}, HKCU\Softwa
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{275E2FE0-7486-11D0-89D6-00A0C90C9B67}, HKCU\Softwa
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D45FD31B-5C6E-11D1-9EC1-00C04FD7081F}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D6526FE0-E651-11CF-99CB-00C04FD64497}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{BD1F006E-174F-11D2-95C0-00C04F9A8CFA}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{26F24A93-1DA2-11D0-A334-00AA004A5FC5}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2D360201-FFF5-11D1-8D03-00A0C959BC0A}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{AE24FDAE-03C6-11D1-8B76-0080C744F389}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{DED22F57-FEE2-11D0-953B-00C04FD9152D}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{9276B91A-E780-11d2-8A8D-00C04FA31D93}, HKCU\Softwa
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2FF18E10-DE11-11D1-8161-00A0C90DD90C}
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Ex
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies\Micro
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Software\Policies\M
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsoft\Intern
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft\Interne
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Microsoft\Inte
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies\Micros
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Microsoft\Inte
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft\Interne
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\Policies\Mi
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Policies\Mic
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies\Micros
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_HKLM_only
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_options_edit
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_zones_map_edit
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ProxySettingsPerUser
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoUpdateCheck
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMSAppLogo5ChannelNotify
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSplash
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKLM\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKLM\Software\Policies\M
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKLM\Software\Polici
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKLM\Software\Po
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTemplat
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKLM\Software\
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKLM\Software\
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKLM
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, H
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOC
HKLM\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!CheckExeSignatures
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Ex
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies\Micros
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Software\Policies\M
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsoft\Intern
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft\Interne
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Microsoft\Inte
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies\Micros
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microsoft\Inter
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft\Interne
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\Micros
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett
U\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett
plate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKCU\Software\Policies\Microsoft\Windows\Curren
Template, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!Restricted Sites, HKCU\Software\Policies\Microsoft\Windo
oneTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!Local Machine Zone, HKCU\Software\Policies\Mic
MachineZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!Locked-Down Loc
downTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-Down Internet, HKCU\Software\Policies\M
downTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-Down Intranet, HKCU\Software\Policies\M
sZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!Locked-Down Trusted Sites, HKC
dSitesZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!Locked-Down Restricted S
gs!LOCALMACHINE_CD_UNLOCK
Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionCount, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MinUpdateInterval, H
ows\CurrentVersion\Policies\Explorer!Btn_Back, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Forward, HKCU\Software\Microsoft\Windows\Curr

xplorer\Persistence\0!DocumentLimit
-00AA0055595A}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{22D6F312-B0F6-11D0-94AB-0080C74C7E95}
00A0C90C9B67}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{7823A620-9DD9-11CF-A662-00AA00C066D2}, HKCU\Sof
1-00C04FD7081F}
-00C04FD64497}
-00C04F9A8CFA}
8-444553540000}
-00AA004A5FC5}
-00A0C959BC0A}
6-0080C744F389}
B-00C04FD9152D}
00C04FA31D93}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{52ADE293-85E8-11D2-BB22-00104B0EA281}
-00A0C90DD90C}
are\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\
), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKCU\Software\Policies\Microsoft\Internet E
ved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Feat
oftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Featur

U\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\F
, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet E
\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Fe
oftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Featur
ed), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKCU\Software\Policies\Microsoft\Int
ed), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKCU\Software\Policies\Microsoft\Inte
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Ex

M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti
M\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti
plate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKLM\Software\Policies\Microsoft\Windows\Curren
Template, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!Restricted Sites, HKLM\Software\Policies\Microsoft\Windo
oneTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!Local Machine Zone, HKLM\Software\Policies\Mic
MachineZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!Locked-Down Loc
downTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-Down Internet, HKLM\Software\Policies\M
downTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-Down Intranet, HKLM\Software\Policies\M
sZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!Locked-Down Trusted Sites, HKLM
SitesZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!Locked-Down Restricted S
s!LOCALMACHINE_CD_UNLOCK
re\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\F
, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKLM\Software\Policies\Microsoft\Internet E
ved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\I
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Feat
oftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Feature
\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\F
, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet E
\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Fe
oftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Feature
ed), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKLM\Software\Policies\Microsoft\Int
ed), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKLM\Software\Policies\Microsoft\Inter
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Ex

es, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Machine Zone, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
Settings\Template Policies!Locked-Down Local Machine Zone, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1001, HKCU
ed-Down Internet, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKCU\Software\Policies\Microsoft\Windows\Curre
ed-Down Intranet, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKCU\Software\Policies\Microsoft\Windows\Curre
te Policies!Locked-Down Trusted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1001, HKCU\Software\Policies\Mic
Template Policies!Locked-Down Restricted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1001, HKCU\Software\Po
nfodelivery\Restrictions!MinUpdateInterval, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UpdateExcludeBegin, HKCU\Software\Policies\Micro
ard, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Stop, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Refresh, HKC
F6-11D0-94AB-0080C74C7E95}
D9-11CF-A662-00AA00C066D2}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{F5131C24-E56D-11CF-B78A-4445535400
E8-11D2-BB22-00104B0EA281}
rosoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEH
, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet E
orer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe, HKCU\Software\Policies\Micros
Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureContro
icies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FE

re\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC
, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet E
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureCo
icies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FE
er.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe, HKCU\Software\Policies\Microsoft\
r.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe, HKCU\Software\Policies\Microsoft\In
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Exp

rosoft\Windows\CurrentVersion\Internet Settings\Zones\3!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1004, HKLM\Software
rosoft\Windows\CurrentVersion\Internet Settings\Zones\1!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1004, HKLM\Software
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1
es, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Machine Zone, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
Settings\Template Policies!Locked-Down Local Machine Zone, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1001, HKLM
ed-Down Internet, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKLM\Software\Policies\Microsoft\Windows\Curren
ed-Down Intranet, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKLM\Software\Policies\Microsoft\Windows\Curren
te Policies!Locked-Down Trusted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1001, HKLM\Software\Policies\Micr
Template Policies!Locked-Down Restricted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1001, HKLM\Software\Po
osoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEH
, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet E
orer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe, HKLM\Software\Policies\Micros
Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureContro
icies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FE
re\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Ex
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureCo
icies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FE
er.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe, HKLM\Software\Policies\Microsoft\
r.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe, HKLM\Software\Policies\Microsoft\Int
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Exp

oft\Windows\CurrentVersion\Internet Settings\Zones\4!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1200, HKCU\Software\Po
net Settings\Lockdown_Zones\0!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1004, HKCU\Software\Policies\Micro
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
_Zones\2!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1004, HKCU\Software\Policies\Microsoft\Windows\Current
Lockdown_Zones\4!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1004, HKCU\Software\Policies\Microsoft\Window
ExcludeBegin, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UpdateExcludeEnd, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodeliv
Version\Policies\Explorer!Btn_Refresh, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Home, HKCU\Software\Microsoft\Windows\CurrentVersion
s!{F5131C24-E56D-11CF-B78A-444553540000}
xplorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explore
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies\Microsoft\Internet Ex
iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Software\Policies\Mic
crosoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE
soft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MI

es\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FE
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Exp
s\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEA
soft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SE
plore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\Policies\Microso
ore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Policies\Microsoft\In
KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explor

rnet Settings\Zones\3!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1200, HKLM\Software\Policies\Microsoft\Windows\Curren
rnet Settings\Zones\1!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1200, HKLM\Software\Policies\Microsoft\Windows\Curren
licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1200, HKLM\
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
Lockdown_Zones\4!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1004, HKLM\Software\Policies\Microsoft\Window
xplorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explore
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies\Microsoft\Internet Exp
explore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Software\Policies\Micr
crosoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE
soft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MI
es\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FE
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Exp
s\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEA
soft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SE
plore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\Policies\Microsof
re.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Policies\Microsoft\In
KLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explore

et Settings\Zones\4!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
ersion\Internet Settings\Zones\0!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1201, HKCU\Software\Policies\Microsoft\Window
Zones\0!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentV
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!
\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxWebcrawlLevels
\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Search, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Favorites, HKCU\Softw
atureControl\FEATURE_BEHAVIORS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Exp
WN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKCU\Software\Policies\
ernet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_
Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFF

soft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE
KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Exp
ft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_Z
Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYB
Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKCU\Software\Policies\Micro
served), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKCU\Software\Policies\Microsof
U\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explore

Zones\2!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
t Settings\Zones\4!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVe
rsion\Internet Settings\Zones\0!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1201, HKLM\Software\Policies\Microsoft\Window
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
4, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
tureControl\FEATURE_BEHAVIORS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe
KLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Exp
WN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKLM\Software\Policies\M
rnet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_H
Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFF
oft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_
KLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Expl
t\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_Z
Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBA
Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKLM\Software\Policies\Micro
served), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKLM\Software\Policies\Microsoft
M\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer

icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1402, HKCU\
ftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!140
ies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
Policies\Explorer!Btn_Favorites, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_History, HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
ATURE_BEHAVIORS!iexplore.exe
KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe
OWN!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe
orer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe
Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe
net Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe
KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe
et Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe
Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe
L!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe
plorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe
U\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe
tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1402
1, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
ersion\Internet Settings\Lockdown_Zones\3!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1400, HKLM\Software\Po
ersion\Internet Settings\Lockdown_Zones\1!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1400, HKLM\Software\Po
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!140
ATURE_BEHAVIORS!iexplore.exe
KLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe
OWN!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe
orer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe
ain\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe
net Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe
KLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe
t Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe
ain\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe
!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe
plorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe
\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe
oft\Windows\CurrentVersion\Internet Settings\Zones\0!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1405, HKCU\Software\Po
\Lockdown_Zones\3!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1402, HKCU\Software\Policies\Microsoft\Window
\Lockdown_Zones\1!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1402, HKCU\Software\Policies\Microsoft\Window
rsion\Internet Settings\Lockdown_Zones\2!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKCU\Software\Pol
CurrentVersion\Internet Settings\Lockdown_Zones\4!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1402, HKCU\So
are\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Folders, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Fullscreen, HKCU\Software\
CKDOWN!iexplore.exe
ALL!iexplore.exe
CurrentVersion\Internet Settings\Zones\4!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1405, HKLM\Software\Policies\Microsof
ft\Windows\CurrentVersion\Internet Settings\Zones\0!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1405, HKLM\Software\Polic
t\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1402
sion\Internet Settings\Lockdown_Zones\2!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKLM\Software\Polic
urrentVersion\Internet Settings\Lockdown_Zones\4!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1402, HKLM\Sof
CKDOWN!iexplore.exe
licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1407, HKCU\
licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1407, HKCU\
nes\4!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
t Settings\Zones\0!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
sion\Internet Settings\Lockdown_Zones\0!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1405, HKCU\Software\Polic
Settings\Lockdown_Zones\4!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1405, HKCU\Software\Policies\Microsof
es\Explorer!Btn_Fullscreen, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Tools, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Exp
nes\4!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
ckdown_Zones\2!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1405, HKLM\Software\Policies\Microsoft\Windows\
Settings\Lockdown_Zones\4!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1405, HKLM\Software\Policies\Microsoft\
ft\Windows\CurrentVersion\Internet Settings\Zones\2!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1601, HKCU\Software\Poli
es\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1601, HKCU\Sof
, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
es\4!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersi
crosoft\Windows\CurrentVersion\Policies\Explorer!Btn_MailNews, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Size, HKCU\Software\Microsoft\W
\Windows\CurrentVersion\Internet Settings\Zones\2!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1601, HKLM\Software\Polic
s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1601, HKLM\Softw
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1601
es\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
es\4!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
on\Internet Settings\Zones\4!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1604, HKCU\Software\Policies\Microsoft\Windows\C
es\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zo
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Loc
xplorer!Btn_Size, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Print, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_E
n\Internet Settings\Zones\4!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1604, HKLM\Software\Policies\Microsoft\Windows\Cu
urrentVersion\Internet Settings\Zones\0!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1604, HKLM\Software\Policies\Microsoft
CurrentVersion\Internet Settings\Lockdown_Zones\3!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1601, HKLM\Sof
s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zon
re\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lock
ft\Windows\CurrentVersion\Internet Settings\Zones\3!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1607, HKCU\Software\Pol
ft\Windows\CurrentVersion\Internet Settings\Zones\1!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1607, HKCU\Software\Pol
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon
nes\0!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\Lockdown_Zones\3!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1604, HKCU\Software\Policies\Microso
urrentVersion\Internet Settings\Lockdown_Zones\2!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1604, HKCU\Soft
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1604, H
ndows\CurrentVersion\Policies\Explorer!Btn_Edit, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Discussions, HKCU\Software\Microsoft\Windows
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1607,
KLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone
es\0!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
Settings\Lockdown_Zones\3!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1604, HKLM\Software\Policies\Microsoft
rrentVersion\Internet Settings\Lockdown_Zones\2!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1604, HKLM\Softw
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1604, HK
urrentVersion\Internet Settings\Zones\2!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1608, HKCU\Software\Policies\Microsof
Windows\CurrentVersion\Internet Settings\Zones\4!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1608, HKCU\Software\Policie
ettings\Lockdown_Zones\2!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1606, HKCU\Software\Policies\Microsoft\
\Internet Settings\Lockdown_Zones\4!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1606, HKCU\Software\Policies
ussions, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Cut, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Copy, HKC
rrentVersion\Internet Settings\Zones\2!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1608, HKLM\Software\Policies\Microsoft\W
ndows\CurrentVersion\Internet Settings\Zones\4!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1608, HKLM\Software\Policies\M
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1608, HKLM\Softw
ttings\Lockdown_Zones\2!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1606, HKLM\Software\Policies\Microsoft\W
nternet Settings\Lockdown_Zones\4!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1606, HKLM\Software\Policies\M
ttings\Zones\4!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio
n\Internet Settings\Zones\0!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1609, HKCU\Software\Policies\Microsoft\Windows\C
ttings\Lockdown_Zones\0!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1607, HKCU\Software\Policies\Microsoft\W
s\2!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio
own_Zones\4!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1607, HKCU\Software\Policies\Microsoft\Windows\Cur
rentVersion\Policies\Explorer!Btn_Copy, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Paste, HKCU\Software\Microsoft\Windows\CurrentVersion
ngs\Zones\4!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I
Internet Settings\Zones\0!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1609, HKLM\Software\Policies\Microsoft\Windows\Cur
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lock
\2!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\
wn_Zones\4!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1607, HKLM\Software\Policies\Microsoft\Windows\Curre
CurrentVersion\Internet Settings\Zones\3!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1802, HKCU\Software\Policies\Microsof
CurrentVersion\Internet Settings\Zones\1!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1802, HKCU\Software\Policies\Microsof
s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1802, HKCU\Softw
re\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1802, H
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon
\0!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion
re\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lock
CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set
\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Encoding
LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
0!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1609, H
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdo
n\Internet Settings\Zones\2!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1803, HKCU\Software\Policies\Microsoft\Windows\Cu
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd
n\Internet Settings\Lockdown_Zones\3!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1800, HKCU\Software\Policies
n\Internet Settings\Lockdown_Zones\1!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1800, HKCU\Software\Policies
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1800, H
crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\
nternet Settings\Zones\2!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1803, HKLM\Software\Policies\Microsoft\Windows\Curr
dows\CurrentVersion\Internet Settings\Zones\0!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1803, HKLM\Software\Policies\M
dows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1800, HKL
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone
dows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1802, HK
nternet Settings\Lockdown_Zones\2!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1802, HKCU\Software\Policies\M
tVersion\Internet Settings\Lockdown_Zones\4!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1802, HKCU\Software
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
ngs\Zones\0!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
ows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1802, HKLM
ernet Settings\Lockdown_Zones\2!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1802, HKLM\Software\Policies\Mic
n\Internet Settings\Zones\3!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A00, HKCU\Software\Policies\Microsoft\Windows\C
n\Internet Settings\Zones\1!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A00, HKCU\Software\Policies\Microsoft\Windows\C
ndows\CurrentVersion\Internet Settings\Zones\2!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1A00, HKCU\Software\Policies
crosoft\Windows\CurrentVersion\Internet Settings\Zones\4!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1A00, HKCU\Softwar
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A00, H
ternet Settings\Lockdown_Zones\0!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1803, HKCU\Software\Policies\M
CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
wn_Zones\2!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1803, HKCU\Software\Policies\Microsoft\Windows\Curre
nternet Settings\Zones\3!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A00, HKLM\Software\Policies\Microsoft\Windows\Curr
nternet Settings\Zones\1!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A00, HKLM\Software\Policies\Microsoft\Windows\Curr
ows\CurrentVersion\Internet Settings\Zones\2!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1A00, HKLM\Software\Policies\M
osoft\Windows\CurrentVersion\Internet Settings\Zones\4!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1A00, HKLM\Software\P
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A00, HKL
rnet Settings\Lockdown_Zones\0!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1803, HKLM\Software\Policies\Micr
n_Zones\2!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1803, HKLM\Software\Policies\Microsoft\Windows\Current
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon
ings\Zones\2!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion
ternet Settings\Zones\4!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1A04, HKCU\Software\Policies\Microsoft\Windows\Curre
entVersion\Internet Settings\Zones\0!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A04, HKCU\Software\Policies\Microsoft\W
n_Zones\0!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1804, HKCU\Software\Policies\Microsoft\Windows\Curren
icrosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones
icrosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
gs\Zones\2!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
net Settings\Zones\4!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1A04, HKLM\Software\Policies\Microsoft\Windows\Current
Version\Internet Settings\Zones\0!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A04, HKLM\Software\Policies\Microsoft\Wind
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
indows\CurrentVersion\Internet Settings\Zones\3!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05, HKCU\Software\Policie
indows\CurrentVersion\Internet Settings\Zones\1!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1E05, HKCU\Software\Policie
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1E05, H
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
0!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
ntVersion\Internet Settings\Lockdown_Zones\3!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HKCU\Softwar
ntVersion\Internet Settings\Lockdown_Zones\1!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HKCU\Softwar
rosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2
dows\CurrentVersion\Internet Settings\Zones\3!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05, HKLM\Software\Policies\M
dows\CurrentVersion\Internet Settings\Zones\1!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1E05, HKLM\Software\Policies\M
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1E05, HKL
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1
A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Version\Internet Settings\Lockdown_Zones\3!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HKLM\Software\P
Version\Internet Settings\Lockdown_Zones\1!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HKLM\Software\P
soft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A
ttings\Zones\3!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio
ttings\Zones\1!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio
entVersion\Internet Settings\Zones\2!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2000, HKCU\Software\Policies\Microsoft\W
ows\CurrentVersion\Internet Settings\Zones\4!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2000, HKCU\Software\Policies\M
icrosoft\Windows\CurrentVersion\Internet Settings\Zones\0!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2000, HKCU\Softwar
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!
gs\Lockdown_Zones\3!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04, HKCU\Software\Policies\Microsoft\Win
gs\Lockdown_Zones\1!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A04, HKCU\Software\Policies\Microsoft\Win
Version\Internet Settings\Lockdown_Zones\2!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKCU\Software\
ws\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A04, HKCU
gs\Zones\3!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
gs\Zones\1!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
Version\Internet Settings\Zones\2!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2000, HKLM\Software\Policies\Microsoft\Wind
s\CurrentVersion\Internet Settings\Zones\4!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2000, HKLM\Software\Policies\Micro
osoft\Windows\CurrentVersion\Internet Settings\Zones\0!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2000, HKLM\Software\P
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A
\Lockdown_Zones\3!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04, HKLM\Software\Policies\Microsoft\Windo
\Lockdown_Zones\1!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A04, HKLM\Software\Policies\Microsoft\Windo
rsion\Internet Settings\Lockdown_Zones\2!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKLM\Software\Po
CurrentVersion\Internet Settings\Lockdown_Zones\4!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A04, HKLM\So
gs\Zones\4!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
Version\Internet Settings\Lockdown_Zones\0!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1C00, HKCU\Software\P
1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
s\Lockdown_Zones\2!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00, HKCU\Software\Policies\Microsoft\Wind
et Settings\Lockdown_Zones\4!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1C00, HKCU\Software\Policies\Micro
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2004, HKL
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2004, HKL
Zones\4!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
sion\Internet Settings\Lockdown_Zones\0!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1C00, HKLM\Software\Pol
04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
ockdown_Zones\2!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00, HKLM\Software\Policies\Microsoft\Window
Settings\Lockdown_Zones\4!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1C00, HKLM\Software\Policies\Microso
crosoft\Windows\CurrentVersion\Internet Settings\Zones\2!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2100, HKCU\Softwar
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2100, HKC
\Lockdown_Zones\0!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1E05, HKCU\Software\Policies\Microsoft\Windo
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
Zones\4!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentV
Version\Internet Settings\Zones\3!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2100, HKLM\Software\Policies\Microsoft\Wind
Version\Internet Settings\Zones\1!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2100, HKLM\Software\Policies\Microsoft\Wind
soft\Windows\CurrentVersion\Internet Settings\Zones\2!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2100, HKLM\Software\P
ockdown_Zones\0!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1E05, HKLM\Software\Policies\Microsoft\Windows
icies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
icies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
0, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
nes\4!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVers
ernet Settings\Zones\2!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2101, HKCU\Software\Policies\Microsoft\Windows\Curre
Version\Internet Settings\Zones\4!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2101, HKCU\Software\Policies\Microsoft\Wind
ows\CurrentVersion\Internet Settings\Zones\0!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2101, HKCU\Software\Policies\Mi
ows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2001, HKC
ows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2001, HKC
et Settings\Zones\2!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2101, HKLM\Software\Policies\Microsoft\Windows\CurrentV
101, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
gs\Zones\0!2101, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Int
icies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
ws\CurrentVersion\Internet Settings\Lockdown_Zones\2!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2004, HKCU\
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2004,
soft\Windows\CurrentVersion\Internet Settings\Zones\4!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2201, HKCU\Software\P
s\CurrentVersion\Internet Settings\Lockdown_Zones\0!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2100, HKCU\S
sion\Internet Settings\Lockdown_Zones\4!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2100, HKCU\Software\Polic
CurrentVersion\Internet Settings\Zones\2!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2201, HKLM\Software\Policies\Microso
ies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2201, HKLM\So
urrentVersion\Internet Settings\Lockdown_Zones\0!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2100, HKLM\Softw
nes\3!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVers
n\Internet Settings\Lockdown_Zones\4!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2100, HKLM\Software\Policies
s\Zones\2!2201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2300, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
et Settings\Zones\4!2201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2300, HKCU\Software\Policies\Microsoft\Windows\CurrentV
Version\Internet Settings\Zones\0!2201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2300, HKCU\Software\Policies\Microsoft\Windo
ones\2!2201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2300, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
ettings\Lockdown_Zones\0!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2101, HKLM\Software\Policies\Microsoft\W
own_Zones\4!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2101, HKLM\Software\Policies\Microsoft\Windows\Cur
Computer/User
PolicyNode
USER Administrative Templates\Windows Components\NetMeeting\Application
Disable application Sharing
Sharing
Prevent Sharing Sharing
Prevent Desktop SharingSharing
Prevent Sharing CommandSharingPrompts
Prevent Sharing Explorer
Sharing
windows
Prevent Control Sharing
Prevent Application Sharing
Sharingin true color
USER Administrative Templates\Windows Components\NetMeeting\Audio
Limit the bandwidth
& Video
of Audio and Video
Disable Audio & Video
Disable full duplex
& Video
Audio
Prevent changing & Video
DirectSound Audio setting
Prevent sending&Video
Video
Prevent receiving& Video
Video
USER Administrative Templates\Windows Components\NetMeeting\Options
Hide the General Page
page
Disable the Advanced
PageCalling button
Hide the Security Page
page
Hide the Audio pagePage
Hide the Video pagePage
USER Administrative Templates\Windows Components\NetMeeting
Enable Automatic Configuration
Disable Directory services
Prevent adding Directory servers
Prevent viewing Web directory
Set the intranet support Web page
Set Call Security options
Prevent changing Call placement method
Prevent automatic acceptance of Calls
Allow persisting automatic acceptance of Calls
Prevent sending files
Prevent receiving files
Limit the size of sent files
Disable Chat
Disable NetMeeting 2.x Whiteboard
Disable Whiteboard
MACHINE Administrative Templates\Windows Components\NetMeeting
Disable remote Desktop Sharing
Supported on
at least Windows NetMeeting v3.0
Help/Explain Text
Disables the application sharing feature of NetMeeting completely. Users will not be able to host or view shared applications.
Prevents users from sharing anything themselves. They will still be able to view shared applications/desktops from others.
Prevents users from sharing the whole desktop. They will still be able to share individual applications.
Prevents users from sharing command prompts. This prevents users from inadvertently sharing out applications, since command prompts can be used to lau
Prevents users from sharing Explorer windows. This prevents users from inadvertently sharing out applications, since Explorer windows can be used to launc
Prevents users from allowing others in a conference to control what they have shared. This enforces a read-only mode; the other participants cannot change
Prevents users from sharing applications in true color. True color sharing uses more bandwidth in a conference.
Limits the bandwidth audio and video will consume when in a conference. This setting will guide NetMeeting to choose the right formats and send rate so tha
Disables the audio feature of NetMeeting. Users will not be able to send or receive audio.
Disables full duplex mode audio. Users will not be able to listen to incoming audio while speaking into the microphone. Older audio hardware does not perfo
Prevents user from changing the DirectSound audio setting. DirectSound provides much better audio quality, but older audio hardware may not support it.
Prevents users from sending video if they have the hardware. Users will still be able to receive video from others.
Prevents users from receiving video. Users will still be able to send video provided they have the hardware.
Hides the General page of the Tools Options dialog. Users will not then be able to change personal identification and bandwidth settings.
Disables the Advanced Calling button on the General Options page. Users will not then be able to change the call placement method and the servers used.
Hides the Security page of the Tools Options dialog. Users will not then be able to change call security and authentication settings.
Hides the Audio page of the Tools Options dialog. Users will not then be able to change audio settings.
Hides the Video page of the Tools Options dialog. Users will not then be able to change video settings.
Configures NetMeeting to download settings for users each time it starts. The settings are downloaded from the URL listed in the Configuration URL: text box
Disables the directory feature of NetMeeting. Users will not logon to a directory (ILS) server when NetMeeting starts. Users will also not be able to view or pl
Prevents users from adding directory (ILS) servers to the list of those they can use for placing calls.
Prevents users from viewing directories as Web pages in a browser.
Sets the URL NetMeeting will display when the user chooses the Help Online Support command.
Sets the level of security for both outgoing and incoming NetMeeting calls.
Prevents users from changing the way calls are placed, either directly or via a gatekeeper server.
Prevents users from turning on automatic acceptance of incoming calls. This ensures that others cannot call and connect to NetMeeting when the user is not
Make the automatic acceptance of incoming calls persistent.
Prevents users from sending files to others in a conference.
Prevents users from receiving files from others in a conference.
Limits the size of files users can send to others in a conference.
Disables the Chat feature of NetMeeting.
Disables the 2.x whiteboard feature of NetMeeting. The 2.x whiteboard is available for compatibility with older versions of NetMeeting only. Deployers who d
Disables the T.126 whiteboard feature of NetMeeting.
Disables the remote desktop sharing feature of NetMeeting. Users will not be able to set it up or use it for controlling their computers remotely.
Registry Settings
HKCU\Software\Policies\Microsoft\Conferencing!NoAppSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDesktop
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDosWindows
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingExplorer
HKCU\Software\Policies\Microsoft\Conferencing!NoAllowControl
HKCU\Software\Policies\Microsoft\Conferencing!NoTrueColorSharing
HKCU\Software\Policies\Microsoft\Conferencing!MaximumBandwidth
HKCU\Software\Policies\Microsoft\Conferencing!NoAudio
HKCU\Software\Policies\Microsoft\Conferencing!NoFullDuplex
HKCU\Software\Policies\Microsoft\Conferencing!NoChangeDirectSound
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingVideo
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingVideo
HKCU\Software\Policies\Microsoft\Conferencing!NoGeneralPage
HKCU\Software\Policies\Microsoft\Conferencing!NoAdvancedCalling
HKCU\Software\Policies\Microsoft\Conferencing!NoSecurityPage
HKCU\Software\Policies\Microsoft\Conferencing!NoAudioPage
HKCU\Software\Policies\Microsoft\Conferencing!NoVideoPage
HKCU\Software\Policies\Microsoft\Conferencing!Use AutoConfig, HKCU\Software\Policies\Microsoft\Conferencing!ConfigFile
HKCU\Software\Policies\Microsoft\Conferencing!NoDirectoryServices
HKCU\Software\Policies\Microsoft\Conferencing!NoAddingDirectoryServers
HKCU\Software\Policies\Microsoft\Conferencing!NoWebDirectory
HKCU\Software\Policies\Microsoft\Conferencing!IntranetSupportURL
HKCU\Software\Policies\Microsoft\Conferencing!CallSecurity
HKCU\Software\Policies\Microsoft\Conferencing!NoChangingCallMode
HKCU\Software\Policies\Microsoft\Conferencing!NoAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!PersistAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingFiles
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingFiles
HKCU\Software\Policies\Microsoft\Conferencing!MaxFileSendSize
HKCU\Software\Policies\Microsoft\Conferencing!NoChat
HKCU\Software\Policies\Microsoft\Conferencing!NoOldWhiteBoard
HKCU\Software\Policies\Microsoft\Conferencing!NoNewWhiteBoard
HKLM\Software\Policies\Microsoft\Conferencing!NoRDS
Computer/User
PolicyNode
Configure
Update
Automatic Updates
SpecifyUpdate
intranet Microsoft update service location
Enable Update
client-side targeting
Reschedule
Update Automatic Updates scheduled installations
No auto-restart
Update for scheduled Automatic Updates installations
Automatic
Update
Updates detection frequency
Allow Automatic
Update Updates immediate installation
Delay Restart
Updatefor scheduled installations
Re-prompt
Update
for restart with scheduled installations
Allow non-administrators
Update to receive update notifications
Supported on
Windows Server 2003, XP SP1, 2000 SP3
Help/Explain Text
Specifies whether this computer will receive security updates and other important downloads through the Windows automatic updating service. This setting le
Specifies an intranet server to host updates from the Microsoft Update Web sites. You can then use this update service to automatically update computers on
Specifies the target group name that should be used to receive updates from an intranet Microsoft update service. If the status is set to Enabled, the specifie
Specifies the amount of time for Automatic Updates to wait, following system startup, before proceeding with a scheduled installation that was missed previou
Specifies that to complete a scheduled installation, Automatic Updates will wait for the computer to be restarted by any user who is logged on, instead of caus
Specifies the hours that Windows will use to determine how long to wait before checking for available updates. The exact wait time is determined by using the
Specifies whether Automatic Updates should automatically install certain updates that neither interrupt Windows services nor restart Windows. If the status is
Specifies the amount of time for Automatic Updates to wait before proceeding with a scheduled restart. If the status is set to Enabled, a scheduled restart will
Specifies the amount of time for Automatic Updates to wait before prompting again with a scheduled restart. If the status is set to Enabled, a scheduled resta
Specifies whether, when logged on, non-administrative users will receive update notifications based on the configuration settings for Automatic Updates. If Au
Registry Settings
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AUOptions
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUServer, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUSe
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGroupEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGrou
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RescheduleWaitTimeEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoRebootWithLoggedOnUsers
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!DetectionFrequencyEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AutoInstallMinorUpdates
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootWarningTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpda
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpd
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!ElevateNonAdmins
s\WindowsUpdate\AU!AUOptions, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!ScheduledInstallDay, HKLM\Software\Policies\Microsoft\Windows\Window
\WindowsUpdate\AU!UseWUServer, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!WUServer, HKLM\Software\Policies\Microsoft\Windows\WindowsUpda
ows\WindowsUpdate!TargetGroup
rosoft\Windows\WindowsUpdate\AU!RescheduleWaitTime
osoft\Windows\WindowsUpdate\AU!DetectionFrequency
Microsoft\Windows\WindowsUpdate\AU!RebootWarningTimeout
Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeout
\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!ScheduledInstallTime
re\Policies\Microsoft\Windows\WindowsUpdate\AU!WUStatusServer
Computer/User
PolicyNode
Set andMedia
Lock Player\User
Skin Interface
Do NotMedia
Show Player\User
Anchor Interface
PreventMedia
CodecPlayer\Playback
Download
Hide Network
Media Player\Networking
Tab
Streaming
Media
Media
Player\Networking
Protocols
Configure
Media
HTTP
Player\Networking
Proxy
Configure
Media
MMSPlayer\Networking
Proxy
Configure
Media
Network
Player\Networking
Buffering
Do NotMedia
Show Player
First Use Dialog Boxes
PreventMedia
Desktop
Player
Shortcut Creation
PreventMedia
QuickPlayer
Launch Toolbar Shortcut Creation
PreventMedia
Automatic
PlayerUpdates
PreventMedia
VideoPlayer
Smoothing
PreventMedia
CD and
Player
DVD Media Information Retrieval
PreventMedia
MusicPlayer
File Media Information Retrieval
PreventMedia
RadioPlayer
Station Preset Retrieval
Hide Privacy
Media Tab
Player\User Interface
Hide Security
Media Player\User
Tab Interface
Allow Screen
Media Player\Playback
Saver
Configure
Media
RTSP
Player\Networking
Proxy
Supported on
Windows Media Player for Windows XP and later.
Windows Media Player 9 Series and later.
Help/Explain Text
Enables Windows Media Player to be shown only in skin mode, using a specified skin. This policy displays the Player only in skin mode by using the skin spe
Prevents the anchor window from being displayed when Windows Media Player is in skin mode. This policy hides the anchor window when the Player is in sk
Prevents Windows Media Player from downloading codecs. This policy prevents the Player from automatically downloading codecs to your computer. In add
Hides the Network tab. This policy hides the Network tab in Windows Media Player. The default network settings are used unless the user has previously def
Specifies that the selected protocols are used when receiving streaming media from a server running Windows Media Services. This policy specifies that the
Specifies the HTTP proxy settings for Windows Media Player. This policy specifies the proxy settings for the HTTP protocol. When this policy is enabled, a pr
Specifies the MMS proxy settings for Windows Media Player. This policy specifies the proxy settings for the MMS protocol. When this policy is enabled, a pro
Specifies whether network buffering uses the default or a specified number of seconds. This policy specifies that the default network buffering is used or spe
Do Not Show First Use Dialog Boxes This policy prevents the Privacy Options and Installation Options dialog boxes from being displayed the first time a user
This policy prevents a shortcut icon for the Player from being added to the user's desktop. When this policy is not configured or disabled, users can choose w
This policy prevents a shortcut for the Player from being added to the Quick Launch bar. When this policy is not configured or disabled, the user can choose
Prevents users from being prompted to update Windows Media Player. This policy prevents the Player from being updated and prevents users with administ
Prevents video smoothing from occurring. This policy prevents video smoothing, which can improve video playback on computers with limited resources, from
Prevents media information for CDs and DVDs from being retrieved from the Internet. This policy prevents the Player from automatically obtaining media info
Prevents media information for music files from being retrieved from the Internet. This policy prevents the Player from automatically obtaining media informat
Prevents radio station presets from being retrieved from the Internet. This policy prevents the Player from automatically retrieving radio station presets from t
Hides the Privacy tab. This policy hides the Privacy tab in Windows Media Player. The default privacy settings are used for the options on the Privacy tab unl
Hides the Security tab. This policy hides the Security tab in Windows Media Player. The default security settings for the options on the Security tab are used
Enables a screen saver to interrupt playback. This policy displays a screen saver during playback of digital media according to the options selected on the Sc
Specifies the RTSP proxy settings for Windows Media Player. This policy specifies the proxy settings for the RTSP protocol. When this policy is enabled, a p
Registry Settings
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!SetAndLockSkin, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DefaultSkin
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DoNotShowAnchor
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCodecDownload
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideNetworkTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!WindowsMediaStreamingProtocols, HKCU\Software\Policies\Microsoft\WindowsMediaPla
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HT
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MM
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBufferingPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!BufferingType, HK
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!GroupPrivacyAcceptance
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DesktopShortcut
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!QuickLaunchShortcut
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DisableAutoUpdate
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DontUseFrameInterpolation
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCDDVDMetadataRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventMusicFileMetadataRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventRadioPresetsRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HidePrivacyTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideSecurityTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!EnableScreenSaver
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RT
aPlayer!DefaultSkin
cies\Microsoft\WindowsMediaPlayer\Protocols!Multicast, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!UDP, HKCU\Software\Policies\Microsoft\Windows

ndowsMediaPlayer\Protocols\HTTP!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\Policies\Microsof
dowsMediaPlayer\Protocols\MMS!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!AutodetectProxy, HKCU\Software\Policies\Microsoft\W
sMediaPlayer!BufferingType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!UseDefaultBuffering, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!UseDef
ndowsMediaPlayer\Protocols\RTSP!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!AutodetectProxy, HKCU\Software\Policies\Microso

P, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!UDPPorts, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!TCP, HKCU\Software\Pol
etectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!Us
ectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!UsePr
icies\Microsoft\WindowsMediaPlayer!UseDefaultBuffering, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBuffering
etectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!Us

diaPlayer\Protocols!TCP, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!HTTP
oft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Policies\M
\WindowsMediaPlayer\Protocols\MMS!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!AutodetectProxy, HKCU\Software\Policies\Microso
oft\WindowsMediaPlayer\Protocols\RTSP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!AutodetectProxy, HKCU\Software\Policies\Mi

\HTTP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protoc
detectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS
AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols

olicies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserProxy, HKC
icrosoft\WindowsMediaPlayer\Protocols\MMS!ProxyPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!BypassProxyLocal, HKCU\Software\Polici
ies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!BypassProxyLocal, HKCU\Software

yer\Protocols\HTTP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\Policies\Microsoft\Windo
MS!BypassProxyLocal, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!BypassProxyLocalAddress
ols\RTSP!BypassProxyLocal, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!BypassProxyLocalAddress
xy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyAddr
owsMediaPlayer\Protocols\HTTP!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyPort, HKCU\Software\Policies\Microsoft\Win
yPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!BypassProxyLocal, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP
crosoft\WindowsMediaPlayer\Protocols\HTTP!BypassProxyLocalAddress
This worksheet provides a historical list of policy settings added
Introduced .adm File Computer/User Node
Windows Server 2003 SP1 system MACHINE
Windows Server 2003 SP1 inetres USER
Windows Server 2003 SP1 inetres MACHINE
olicy settings added after the release of Windows Server 2003.
Policy Path
Administrative Templates\Windows Components\Terminal Services\Client/Server data redirection
Administrative Templates\Windows Components\Terminal Services
Full Policy Name Supported on
Terminal Server Fallback Printer Driver Behavior
Always show desktop on connection At least Microsoft Windows Server 2003 with SP1
Use the specified Terminal Server license servers
Set the Terminal Server licensing mode At least Microsoft Windows Server 2003 with SP1
Show Tooltips for Licensing problems on Terminal
At least Microsoft
Server Windows Server 2003 with SP1
Allow Install On Demand (Internet Explorer)at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Allow third-party browser extensions at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Play animations in web pages at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Play sounds in web pages at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Play videos in web pages at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Check for server certificate revocation at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Check for signatures on downloaded programs at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Do not save encrypted pages to disk at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Empty Temporary Internet Files folder when at browser
least Internet
is closed
Explorer v6.0 in Windows 2003 Service Pack 1
Allow Install On Demand (Internet Explorer)at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Allow third-party browser extensions at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Play animations in web pages at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Play sounds in web pages at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Play videos in web pages at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Check for server certificate revocation at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Check for signatures on downloaded programs at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Do not save encrypted pages to disk at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Empty Temporary Internet Files folder when at browser
least Internet
is closed
Explorer v6.0 in Windows 2003 Service Pack 1
Run .NET Framework-reliant components signed at leastwith
Internet
Authenticode
Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Run .NET Framework-reliant components not at least
signed
Internet
with Authenticode
Download signed ActiveX controls at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Download unsigned ActiveX controls at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Initialize and script ActiveX controls not marked
at least
as Internet
safe Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Run ActiveX controls and plugins at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow file downloads at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow font downloads at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Java permissions at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Access data sources across domains at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Automatic prompting for file downloads at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Automatic prompting for ActiveX controls at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow META REFRESH at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow script-initiated windows without size orat position
least Internet
constraints
Allow binary and script behaviors at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Display mixed content at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Do not prompt for client certificate selectionatwhen
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2 or Windows Server 2003 Service Pack 1
Allow drag and drop or copy and paste filesat least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow installation of desktop items at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Launching applications and files in an IFRAME at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Navigate sub-frames across different domains at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Software channel permissions at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Submit non-encrypted form data at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Use Pop-up Blocker at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Userdata persistence at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Web sites in less privileged Web content zonesat least
canInternet
navigateExplorer
into this
v6.0
zone
in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow active scripting at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow paste operations via script at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Scripting of Java applets at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Logon options at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Internet
Authenticode
signed
Internet
with Authenticode
at least
as Internet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
as Internet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
as Internet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
as Internet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
as Internet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
as Internet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
as Internet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Locked-Down Internet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Intranet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Trusted Sites Zone Templateat least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Internet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Intranet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Trusted Sites Zone Templateat least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Help/Explain Text Registry Settings
Specifies the Terminal Server fallback printer
HKLM\SOFTWARE\Policies\Microsoft\Windows
driver behavior. By default, Terminal ServerNT\Terminal
fallback printer
Services!fPolicyFallbackPrintDriver,
driver is disabled. If the TerminalHKLM\SOFTWARE
Server does not h
This policy setting determines whether theHKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!fTurnOffSingleAppMode
desktop is always displayed after a client connects to a remote computer or an initial program can run. It can be us
Determines whether terminal servers must HKLM\SOFTWARE\Policies\Microsoft\Windows
first attempt to locate Terminal Server license NT\Terminal
servers that are
Services!LicenseServers
specified in this setting before attempting to locate o
Determines the type of Terminal Server client
access license (CAL) a device or user requires
NT\Terminal
to connect
Services!LicensingMode
to this Terminal Server. Per User licensing mode: Ea
Displays tooltips to the Administrator upon
login if there are any licensing issues with the Terminal
NT\Terminal Server.
Services!fDisableTerminalServerTooltip,
Not configured: If this setting is not configured,
HKLM\SOFTW the
This policy setting allows you to manage HKCU\Software\Policies\Microsoft\Internet
whether Internet Explorer checks the Internet Explorer\Main!NoUpdateCheck
for newer versions. When Internet Explorer is set to do this, the checks
whether users can automatically downloadExplorer\Main!NoJITSetup
and install Web components (such as fonts) that can installed by Internet
whether users can download and install self-installing
Explorer\Main!NoWebJITSetup
program files (non-Internet Explorer components) that are reg
whether Internet Explorer will launch COM Explorer\Main!Enable
add-ons known as browser Browser helper
Extensions
objects, such as toolbars. Browser hel
whether Internet Explorer will display animated
Explorer\Main!Play_Animations
pictures found in Web content. Generally only animated GIF files are
whether Internet Explorer will play sounds found
Explorer\Main!Play_Background_Sounds
in web content. Generally only sound files such as MIDI files are aff
whether Internet Explorer will display videos Explorer\Main!Display
found in Web content. Inline
Generally
Videosonly embedded video files are affected
This policy setting allows you to manage HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
whether Internet Explorer will check revocation status of servers' certificates.
Settings!CertificateRevocation
Certificates are revoked when they hav
whether Internet Explorer checks for digitalExplorer\Main!CheckExeSignatures
signatures (which identifies the publisher of signed software and verifies
whether Internet Explorer will save encrypted pages that contain secure Settings!DisableCachingOfSSLPages
(HTTPS) information such as passwords an
whether Internet Explorer deletes the contents of the Temporary Internet Settings\Cache!Persistent
Files folder after all browser windows are c
This policy setting allows you to manage HKLM\Software\Policies\Microsoft\Internet
whether Internet Explorer checks the Internet Explorer\Main!NoUpdateCheck
for newer versions. When Internet Explorer is set to do this, the checks
whether users can automatically downloadExplorer\Main!NoJITSetup
and install Web components (such as fonts) that can installed by Internet
whether users can download and install self-installing
Explorer\Main!NoWebJITSetup
program files (non-Internet Explorer components) that are reg
whether Internet Explorer will launch COM Explorer\Main!Enable
add-ons known as browser Browser helper
Extensions
objects, such as toolbars. Browser hel
whether Internet Explorer will display animated
Explorer\Main!Play_Animations
pictures found in Web content. Generally only animated GIF files are
whether Internet Explorer will play sounds Explorer\Main!Play_Background_Sounds
found in web content. Generally only sound files such as MIDI files are aff
whether Internet Explorer will display videos Explorer\Main!Display
found in Web content. Inline
Generally
Videosonly embedded video files are affected
This policy setting allows you to manage HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
whether Internet Explorer will check revocation status of servers' certificates.
Settings!CertificateRevocation
Certificates are revoked when they hav
whether Internet Explorer checks for digitalExplorer\Main!CheckExeSignatures
signatures (which identifies the publisher of signed software and verifies
whether Internet Explorer will save encrypted pages that contain secure Settings!DisableCachingOfSSLPages
(HTTPS) information such as passwords an
whether Internet Explorer deletes the contents of the Temporary Internet Settings\Cache!Persistent
Files folder after all browser windows are c
whether .NET Framework components that are signed with Authenticode Settings\Lockdown_Zones\3!2001
can be executed from Internet Explorer. Th
whether .NET Framework components that are not signed with Authenticode Settings\Lockdown_Zones\3!2004
can be executed from Internet Explore
whether users may download signed ActiveX controls from a page inSettings\Lockdown_Zones\3!1001
the zone. If you enable this policy, users can d
whether users may download unsigned ActiveX controls from the zone. Settings\Lockdown_Zones\3!1004
Such code is potentially harmful, especially w
ActiveX controls not marked as safe. If you enable this policy setting,Settings\Lockdown_Zones\3!1201
ActiveX controls are run, loaded with paramete
whether ActiveX controls and plug-ins can be run on pages from the Settings\Lockdown_Zones\3!1200
specified zone. If you enable this policy setting
whether an ActiveX control marked safe for scripting can interact withSettings\Lockdown_Zones\3!1405
a script. If you enable this policy setting, scrip
whether file downloads are permitted from the zone. This option is determinedSettings\Lockdown_Zones\3!1803
by the zone of the page with the link c
whether pages of the zone may download HTML fonts. If you enableSettings\Lockdown_Zones\3!1604
this policy setting, HTML fonts can be downloa
permissions for Java applets. If you enable this policy setting, you can Settings\Lockdown_Zones\3!1C00
choose options from the drop-down box. Cus
whether Internet Explorer can access data from another security zone Settings\Lockdown_Zones\3!1406
using the Microsoft XML Parser (MSXML) or A
This policy setting determines whether users
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
will be prompted for non user-initiated file downloads. Regardless Settings\Lockdown_Zones\3!2200
of this setting, users will receive file download
This policy setting manages whether users HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
will be automatically prompted for ActiveX control installations. If you Settings\Lockdown_Zones\3!2201
enable this policy setting, users will receive
whether a user's browser can be redirected to another Web page if the Settings\Lockdown_Zones\3!1608
author of the Web page uses the Meta Refre
restrictions on script-initiated pop-up windows and windows that include Settings\Lockdown_Zones\3!2102
the title and status bars. If you enable this p
dynamic binary and script behaviors: components that encapsulate specific Settings\Lockdown_Zones\3!2000
functionality for HTML elements to which
whether users can display nonsecure items and manage whether users Settings\Lockdown_Zones\3!1609
receive a security information message to d
whether users are prompted to select a certificate when no certificateSettings\Lockdown_Zones\3!1A04
or only one certificate exists. If you enable this
whether users can drag files or copy and paste files from a source within Settings\Lockdown_Zones\3!1802
the zone. If you enable this policy setting,
whether users can install Active Desktop items from this zone. The settings Settings\Lockdown_Zones\3!1800
for this option are: If you enable this poli
whether applications may be run and files may be downloaded from Settings\Lockdown_Zones\3!1804
an IFRAME reference in the HTML of the pages
the opening of sub-frames and access of applications across different Settings\Lockdown_Zones\3!1607
domains. If you enable this policy setting, use
MIME sniffing for file promotion from one type to another based on aSettings\Lockdown_Zones\3!2100
MIME sniff. A MIME sniff is the recognition by In
software channel permissions. If you enable this policy setting, you can Settings\Lockdown_Zones\3!1E05
choose the following options from the drop-
whether data on HTML forms on pages in the zone may be submitted. Settings\Lockdown_Zones\3!1601
Forms sent with SSL (Secure Sockets Layer)
whether unwanted pop-up windows appear. Pop-up windows that are Settings\Lockdown_Zones\3!1809
opened when the end user clicks a link are no
the preservation of information in the browser's history, in favorites, in Settings\Lockdown_Zones\3!1606
an XML store, or directly within a Web page s
whether Web sites from less privileged zones, such as Internet sites,Settings\Lockdown_Zones\3!2101
can navigate into this zone. If you enable this
whether script code on pages in the zone is run. If you enable this policy
Settings\Lockdown_Zones\3!1400
setting, script code on pages in the zone c
whether scripts can perform a clipboard operation (for example, cut, Settings\Lockdown_Zones\3!1407
copy, and paste) in a specified region. If you en
whether applets are exposed to scripts within the zone. If you enableSettings\Lockdown_Zones\3!1402
this policy setting, scripts can access applets a
settings for logon options. If you enable this policy setting, you can choose
Settings\Lockdown_Zones\3!1A00
from the following logon options. Anony
ActiveX controls not marked as safe. If you enable this policy setting, Settings\Lockdown_Zones\3!1201
whether file downloads are permitted from the zone. This option is determined
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
This policy setting manages whether usersHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
will be automatically prompted for ActiveX control installations. If you
dynamic binary and script behaviors: components that encapsulate specificSettings\Lockdown_Zones\3!2000
whether users can drag files or copy and paste files from a source withinSettings\Lockdown_Zones\3!1802
whether users can install Active Desktop items from this zone. The settings
the preservation of information in the browser's history, in favorites, in
whether applets are exposed to scripts within the zone. If you enable Settings\Lockdown_Zones\3!1402
This policy setting manages whether usersHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
configure policy settings in this zone consistent with a selected security
Lockdown
level, for
Settings\Template
example, Low, Medium
Policies!InternetZo
Low, Mediu
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet
Lockdown
level, for
Settings\Template
Policies!IntranetZo
Low, Mediu
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted
Siteslevel,
Lockdown
for example,
Settings\Template
Low, MediumPolicies!Trus
Low, Mediu
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted
configure policy settings in this zone consistent with a selected securitySites
level,Lockdown
for example,
Settings\Template
Low, Medium Low,
Policies!R
Mediu
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Lockdown
level, for
Settings\Template
Policies!InternetZo
Low, Mediu
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet
Lockdown
level, for
Settings\Template
Policies!IntranetZo
Low, Mediu
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted
Siteslevel,
Lockdown
for example,
Settings\Template
Low, Medium Policies!Trus
Low, Mediu
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted
configure policy settings in this zone consistent with a selected securitySites
level,
Lockdown
for example,
Settings\Template
Low, Medium Low,
Policies!R
Mediu
ckPrintDriver, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!FallbackPrintDriverType
inalServerTooltip, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip
cateRevocation
eCachingOfSSLPages
eCachingOfSSLPages
own_Zones\3!2001
own_Zones\3!2004
own_Zones\3!1001
own_Zones\3!1004
own_Zones\3!1201
own_Zones\3!1200
own_Zones\3!1405
own_Zones\3!1803
own_Zones\3!1604
own_Zones\3!1C00
own_Zones\3!1406
own_Zones\3!2200
own_Zones\3!2201
own_Zones\3!1608
own_Zones\3!2102
own_Zones\3!2000
own_Zones\3!1609
own_Zones\3!1A04
own_Zones\3!1802
own_Zones\3!1800
own_Zones\3!1804
own_Zones\3!1607
own_Zones\3!2100
own_Zones\3!1E05
own_Zones\3!1601
own_Zones\3!1809
own_Zones\3!1606
own_Zones\3!2101
own_Zones\3!1400
own_Zones\3!1407
own_Zones\3!1402
own_Zones\3!1A00
own_Zones\3!2001
own_Zones\3!2004
own_Zones\3!1001
own_Zones\3!1004
own_Zones\3!1201
own_Zones\3!1200
own_Zones\3!1405
own_Zones\3!1803
own_Zones\3!1604
own_Zones\3!1C00
own_Zones\3!1406
own_Zones\3!2200
own_Zones\3!2201
own_Zones\3!1608
own_Zones\3!2102
own_Zones\3!2000
own_Zones\3!1609
own_Zones\3!1A04
own_Zones\3!1802
own_Zones\3!1800
own_Zones\3!1804
own_Zones\3!1607
own_Zones\3!2100
own_Zones\3!1E05
own_Zones\3!1601
own_Zones\3!1809
own_Zones\3!1606
own_Zones\3!2101
own_Zones\3!1400
own_Zones\3!1407
own_Zones\3!1402
own_Zones\3!1A00
own_Zones\1!2001
own_Zones\1!2004
own_Zones\1!1001
own_Zones\1!1004
own_Zones\1!1201
own_Zones\1!1200
own_Zones\1!1405
own_Zones\1!1803
own_Zones\1!1604
own_Zones\1!1C00
own_Zones\1!1406
own_Zones\1!2200
own_Zones\1!2201
own_Zones\1!1608
own_Zones\1!2102
own_Zones\1!2000
own_Zones\1!1609
own_Zones\1!1A04
own_Zones\1!1802
own_Zones\1!1800
own_Zones\1!1804
own_Zones\1!1607
own_Zones\1!2100
own_Zones\1!1E05
own_Zones\1!1601
own_Zones\1!1809
own_Zones\1!1606
own_Zones\1!2101
own_Zones\1!1400
own_Zones\1!1407
own_Zones\1!1402
own_Zones\1!1A00
own_Zones\1!2001
own_Zones\1!2004
own_Zones\1!1001
own_Zones\1!1004
own_Zones\1!1201
own_Zones\1!1200
own_Zones\1!1405
own_Zones\1!1803
own_Zones\1!1604
own_Zones\1!1C00
own_Zones\1!1406
own_Zones\1!2200
own_Zones\1!2201
own_Zones\1!1608
own_Zones\1!2102
own_Zones\1!2000
own_Zones\1!1609
own_Zones\1!1A04
own_Zones\1!1802
own_Zones\1!1800
own_Zones\1!1804
own_Zones\1!1607
own_Zones\1!2100
own_Zones\1!1E05
own_Zones\1!1601
own_Zones\1!1809
own_Zones\1!1606
own_Zones\1!2101
own_Zones\1!1400
own_Zones\1!1407
own_Zones\1!1402
own_Zones\1!1A00
own_Zones\4!2001
own_Zones\4!2004
own_Zones\4!1001
own_Zones\4!1004
own_Zones\4!1201
own_Zones\4!1200
own_Zones\4!1405
own_Zones\4!1803
own_Zones\4!1604
own_Zones\4!1C00
own_Zones\4!1406
own_Zones\4!2200
own_Zones\4!2201
own_Zones\4!1608
own_Zones\4!2102
own_Zones\4!2000
own_Zones\4!1609
own_Zones\4!1A04
own_Zones\4!1802
own_Zones\4!1800
own_Zones\4!1804
own_Zones\4!1607
own_Zones\4!2100
own_Zones\4!1E05
own_Zones\4!1601
own_Zones\4!1809
own_Zones\4!1606
own_Zones\4!2101
own_Zones\4!1400
own_Zones\4!1407
own_Zones\4!1402
own_Zones\4!1A00
own_Zones\4!2001
own_Zones\4!2004
own_Zones\4!1001
own_Zones\4!1004
own_Zones\4!1201
own_Zones\4!1200
own_Zones\4!1405
own_Zones\4!1803
own_Zones\4!1604
own_Zones\4!1C00
own_Zones\4!1406
own_Zones\4!2200
own_Zones\4!2201
own_Zones\4!1608
own_Zones\4!2102
own_Zones\4!2000
own_Zones\4!1609
own_Zones\4!1A04
own_Zones\4!1802
own_Zones\4!1800
own_Zones\4!1804
own_Zones\4!1607
own_Zones\4!2100
own_Zones\4!1E05
own_Zones\4!1601
own_Zones\4!1809
own_Zones\4!1606
own_Zones\4!2101
own_Zones\4!1400
own_Zones\4!1407
own_Zones\4!1402
own_Zones\4!1A00
own_Zones\2!2001
own_Zones\2!2004
own_Zones\2!1001
own_Zones\2!1004
own_Zones\2!1201
own_Zones\2!1200
own_Zones\2!1405
own_Zones\2!1803
own_Zones\2!1604
own_Zones\2!1C00
own_Zones\2!1406
own_Zones\2!2200
own_Zones\2!2201
own_Zones\2!1608
own_Zones\2!2102
own_Zones\2!2000
own_Zones\2!1609
own_Zones\2!1A04
own_Zones\2!1802
own_Zones\2!1800
own_Zones\2!1804
own_Zones\2!1607
own_Zones\2!2100
own_Zones\2!1E05
own_Zones\2!1601
own_Zones\2!1809
own_Zones\2!1606
own_Zones\2!2101
own_Zones\2!1400
own_Zones\2!1407
own_Zones\2!1402
own_Zones\2!1A00
own_Zones\2!2001
own_Zones\2!2004
own_Zones\2!1001
own_Zones\2!1004
own_Zones\2!1201
own_Zones\2!1200
own_Zones\2!1405
own_Zones\2!1803
own_Zones\2!1604
own_Zones\2!1C00
own_Zones\2!1406
own_Zones\2!2200
own_Zones\2!2201
own_Zones\2!1608
own_Zones\2!2102
own_Zones\2!2000
own_Zones\2!1609
own_Zones\2!1A04
own_Zones\2!1802
own_Zones\2!1800
own_Zones\2!1804
own_Zones\2!1607
own_Zones\2!2100
own_Zones\2!1E05
own_Zones\2!1601
own_Zones\2!1809
own_Zones\2!1606
own_Zones\2!2101
own_Zones\2!1400
own_Zones\2!1407
own_Zones\2!1402
own_Zones\2!1A00
ngs\Template Policies!InternetZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-D
ngs\Template Policies!IntranetZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-D
n Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template P
own Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Tem
ngs\Template Policies!InternetZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-D
ngs\Template Policies!IntranetZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-D
n Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template P
wn Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Tem
ckdown Settings\Template Policies!Locked-Down Internet, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKCU\So
ckdown Settings\Template Policies!Locked-Down Intranet, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKCU\So
Trusted Sites Lockdown Settings\Template Policies!Locked-Down Trusted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zo
sion\Restricted Sites Lockdown Settings\Template Policies!Locked-Down Restricted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lock
ckdown Settings\Template Policies!Locked-Down Internet, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKLM\So
ckdown Settings\Template Policies!Locked-Down Intranet, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKLM\So
Trusted Sites Lockdown Settings\Template Policies!Locked-Down Trusted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zon
sion\Restricted Sites Lockdown Settings\Template Policies!Locked-Down Restricted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lock
indows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1004, H
rrentVersion\Internet Settings\Lockdown_Zones\2!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1004, HKLM\Softw
Internet Settings\Lockdown_Zones\4!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1200, HKCU\Software\Policies\
ttings\Lockdown_Zones\2!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1200, HKLM\Software\Policies\Microsoft\W
wn_Zones\4!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1201, HKCU\Software\Policies\Microsoft\Windows\Curr
\2!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion
CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett
indows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1402, H
indows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1402, H
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1405, HK
dows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1405, HKL
nternet Settings\Lockdown_Zones\2!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1406, HKCU\Software\Policies\M
ernet Settings\Lockdown_Zones\2!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1406, HKLM\Software\Policies\Mi
wn_Zones\2!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKCU\Software\Policies\Microsoft\Windows\Curre
s\Lockdown_Zones\4!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1407, HKCU\Software\Policies\Microsoft\Wind
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti
n_Zones\2!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKLM\Software\Policies\Microsoft\Windows\Curren
rosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
ntVersion\Internet Settings\Lockdown_Zones\3!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1606, HKCU\Software
ntVersion\Internet Settings\Lockdown_Zones\1!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1606, HKCU\Software
s\CurrentVersion\Internet Settings\Lockdown_Zones\4!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1607, HKCU\S
rsion\Internet Settings\Lockdown_Zones\2!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1607, HKLM\Software\Po
CurrentVersion\Internet Settings\Lockdown_Zones\4!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1607, HKLM\So
1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Int
1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Int
\Lockdown_Zones\2!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1608, HKCU\Software\Policies\Microsoft\Windo
Settings\Lockdown_Zones\4!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1608, HKLM\Software\Policies\Microsof
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
8, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
nes\4!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L
\CurrentVersion\Internet Settings\Lockdown_Zones\3!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1802, HKLM\So
\CurrentVersion\Internet Settings\Lockdown_Zones\1!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1802, HKLM\So
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Loc
et Settings\Lockdown_Zones\3!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1803, HKCU\Software\Policies\Micro
et Settings\Lockdown_Zones\1!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1803, HKCU\Software\Policies\Micro
\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1803
Settings\Lockdown_Zones\3!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1803, HKLM\Software\Policies\Microso
Settings\Lockdown_Zones\1!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1803, HKLM\Software\Policies\Microso
urrentVersion\Internet Settings\Lockdown_Zones\2!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1803, HKLM\Soft
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1803, H
Zones\3!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
Zones\1!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
on\Internet Settings\Lockdown_Zones\4!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1804, HKCU\Software\Policie
ettings\Lockdown_Zones\2!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1804, HKLM\Software\Policies\Microsoft\
Internet Settings\Lockdown_Zones\4!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1804, HKLM\Software\Policies\
kdown_Zones\4!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1809, HKCU\Software\Policies\Microsoft\Windows\C
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Loc
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Loc
s\2!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
own_Zones\4!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1809, HKLM\Software\Policies\Microsoft\Windows\Curr
t\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A0
t\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A0
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04,
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A04,
re\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lock
LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett
on\Internet Settings\Lockdown_Zones\3!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00, HKCU\Software\Polic
on\Internet Settings\Lockdown_Zones\1!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1C00, HKCU\Software\Polic
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone
\Internet Settings\Lockdown_Zones\3!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00, HKLM\Software\Policies
\Internet Settings\Lockdown_Zones\1!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1C00, HKLM\Software\Policies
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00, H
crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\
ckdown_Zones\3!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05, HKCU\Software\Policies\Microsoft\Windows\
ckdown_Zones\1!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1E05, HKCU\Software\Policies\Microsoft\Windows\
n\Internet Settings\Lockdown_Zones\2!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1E05, HKCU\Software\Policie
entVersion\Internet Settings\Lockdown_Zones\4!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1E05, HKCU\Softw
own_Zones\3!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05, HKLM\Software\Policies\Microsoft\Windows\Cu
own_Zones\1!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1E05, HKLM\Software\Policies\Microsoft\Windows\Cu
nternet Settings\Lockdown_Zones\2!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1E05, HKLM\Software\Policies\M
tVersion\Internet Settings\Lockdown_Zones\4!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1E05, HKLM\Software
down_Zones\2!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2000, HKCU\Software\Policies\Microsoft\Windows\C
tings\Lockdown_Zones\4!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2000, HKCU\Software\Policies\Microsoft\W
wn_Zones\2!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2000, HKLM\Software\Policies\Microsoft\Windows\Curre
gs\Lockdown_Zones\4!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2000, HKLM\Software\Policies\Microsoft\Wind
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
4!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdo
olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
entVersion\Internet Settings\Lockdown_Zones\2!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2101, HKCU\Softwa
dows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2101, HKC
s\CurrentVersion\Internet Settings\Lockdown_Zones\4!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2101, HKLM\
Computer/User
Policy
Node
Machine Computer Configuration\Windows Settings\Account
Enforce password
Policies\Password
history Policy
Maximum
Policies\Password
password age Policy
Minimum
Policies\Password
password age Policy
Minimum
Policies\Password
password lengthPolicy
Password
Policies\Password
must meet complexity
Policy requirement
Store passwords
Policies\Password
using reversible
Policy encryption for all users in the domain
Account lockout
Policies\Account
duration Lockout Policy
Account
Policies\Account
lockout threshold
Lockout Policy
Reset lockout
Policies\Account
counter after
Lockout Policy
Machine Computer Configuration\Windows Settings\Local
EnforcePolicies\Kerberos
user logon restrictions
Policy
Maximum
Policies\Kerberos
lifetime for service
Policy ticket
Maximum
Policies\Kerberos
lifetime for user
Policy
ticket
Maximum
Policies\Kerberos
lifetime for user
Policy
ticket renewal
Maximum
Policies\Kerberos
tolerance forPolicy
computer clock synchronization
Audit account
Policies\Audit
logon events
Policy
Audit
Policies\Audit
account management
Policy
Audit
Policies\Audit
directory service
Policy
access
Audit
Policies\Audit
logon eventsPolicy
Audit
Policies\Audit
object accessPolicy
Audit
Policies\Audit
policy changePolicy
Audit
Policies\Audit
privilege usePolicy
Audit
Policies\Audit
process tracking
Policy
Audit
Policies\Audit
system eventsPolicy
Access Policies\User
this computer from
Rights
theAssignment
network
Act Policies\User
as part of the Rights
operating
Assignment
system
AddPolicies\User
workstations Rights
to a domain
Assignment
Adjust
Policies\User
memory quotas
RightsforAssignment
a process
Allow
Policies\User
log on locally
Rights Assignment
Allow
Policies\User
log on through
Rights
Terminal
Assignment
Services
Backup
Policies\User
files and directories
Rights Assignment
Bypass
Policies\User
traverse checking
Rights Assignment
Change
Policies\User
the system
Rights
time Assignment
Create
Policies\User
a pagefile Rights Assignment
Create
Policies\User
a token object
Rights Assignment
Create
Policies\User
global objects
Rights Assignment
Create
Policies\User
permanentRights
sharedAssignment
objects
Debug
Policies\User
programs Rights Assignment
DenyPolicies\User
access to this
Rights
computer
Assignment
from the network
DenyPolicies\User
log on as a batch
Rightsjob
Assignment
DenyPolicies\User
log on as a service
Rights Assignment
DenyPolicies\User
log on locally
Rights Assignment
DenyPolicies\User
log on through
Rights
Terminal
Assignment
Services
Enable
Policies\User
computer Rights
and user
Assignment
accounts to be trusted for delegation
Force
Policies\User
shutdown from
Rights
a remote
Assignment
system
Generate
Policies\User
securityRights
audits Assignment
Impersonate
Policies\User
a client
Rights
afterAssignment
authentication
Increase
Policies\User
scheduling
Rights
authority
Assignment
LoadPolicies\User
and unload device
Rights Assignment
drivers
LockPolicies\User
pages in memory
Rights Assignment
LogPolicies\User
on as a batchRights
job Assignment
LogPolicies\User
on as a service
Rights Assignment
LogPolicies\User
on locally Rights Assignment
Manage
Policies\User
auditing and
Rights
security
Assignment
log
Modify
Policies\User
firmware environment
Rights Assignment
values
Perform
Policies\User
volume maintenance
Rights Assignment
tasks
Profile
Policies\User
single process
Rights Assignment
Profile
Policies\User
system performance
Rights Assignment
Remove
Policies\User
computerRights
from docking
Assignment
station
Replace
Policies\User
a processRights
level Assignment
token
Restore
Policies\User
files and directories
Rights Assignment
ShutPolicies\User
down the system
Rights Assignment
Synchronize
Policies\User
directory
Rights
service
Assignment
data
TakePolicies\User
ownership ofRights
files orAssignment
other objects
Accounts:
Policies\Security
Administrator account
Options
status
Accounts:
Policies\Security
Guest account
Options
status
Accounts:
Policies\Security
Limit local Options
account use of blank passwords to console logon only
Accounts:
Policies\Security
Rename administrator
Options account
Accounts:
Policies\Security
Rename guest
Options
account
Audit:
Policies\Security
Audit the accesss
Options
of global system objects
Audit:
Policies\Security
Audit the use ofOptions
Backup and Restore privilege
Audit:
Policies\Security
Shut down system
Options
immediately if unable to log security audits
DCOM:
Policies\Security
Machine AccessOptions
Restrictions in Security Descriptor Definition Language (SDDL) syntax
DCOM:
Policies\Security
Machine LaunchOptions
Restrictions in Security Descriptor Definition Language (SDDL) syntax
Devices:
Policies\Security
Allow undockOptions
without having to log on
Devices:
Policies\Security
Allowed to format
Options
and eject removable media
Devices:
Policies\Security
Prevent users
Options
from installing printer drivers
Devices:
Policies\Security
Restrict CD-ROM
Options
access to locally logged-on user only
Devices:
Policies\Security
Restrict floppy
Options
access to locally logged-on user only
Devices:
Policies\Security
Unsigned driver
Options
installation behavior
Domain
Policies\Security
controller: Allow
Options
server operators to schedule tasks
Domain
Policies\Security
controller: LDAP
Options
server signing requirements
Domain
Policies\Security
controller: Refuse
Options
machine account password changes
Domain
Policies\Security
member: Digitally
Options
encrypt or sign secure channel data (always)
Domain
Policies\Security
member: Digitally
Options
encrypt secure channel data (when possible)
Domain
Policies\Security
member: Digitally
Options
sign secure channel data (when possible)
Domain
Policies\Security
member: Disable
Options
machine account password changes
Domain
Policies\Security
member: Maximum
Optionsmachine account password age
Domain
Policies\Security
member: Require
Options
strong (Windows 2000 or later) session key
Interactive
Policies\Security
logon: Do Options
not display last user name
Interactive
Policies\Security
logon: Do Options
not require CTRL+ALT+DELETE
Interactive
Policies\Security
logon: Message
Optionstext for users attempting to logon
Interactive
Policies\Security
logon: Message
Optionstitle for users attempting to logon
Interactive
Policies\Security
logon: Number
Options
of previous logons to cache (in case domain controller is not available)
Interactive
Policies\Security
logon: Prompt
Options
user to change password before expiration
Interactive
Policies\Security
logon: Require
Options
Domain Controller authentication to unlock workstation
Interactive
Policies\Security
logon: Require
Options
smart card
Interactive
Policies\Security
logon: Smart
Options
card removal behavior
Microsoft
Policies\Security
network client:
Options
Digitally sign communications (always)
Microsoft
Policies\Security
network client:
Options
Digitally sign communications (if server agrees)
Microsoft
Policies\Security
network client:
Options
Send unencrypted password to third-party SMB servers
Microsoft
Policies\Security
network server:
Options
Amount of idle time required before suspending session
Microsoft
Policies\Security
network server:
Options
Digitally sign communications (always)
Microsoft
Policies\Security
network server:
Options
Digitally sign communications (if client agrees)
Microsoft
Policies\Security
network server:
Options
Disconnect clients when logon hours expire
Network
Policies\Security
access: AllowOptions
anonymous SID/Name translation
Network
Policies\Security
access: Do not
Options
allow anonymous enumeration of SAM accounts
Network
Policies\Security
access: Do not
Options
allow anonymous enumeration of SAM accounts and shares
Network
Policies\Security
access: Do not
Options
allow storage of credentials or .NET Passports for network authentication
Network
Policies\Security
access: Let Everyone
Options permissions apply to anonymous users
Network
Policies\Security
access: NamedOptions
Pipes that can be accessed anonymously
Network
Policies\Security
access: Remotely
Options
accessible registry paths
Network
Policies\Security
access: Remotely
Options
accessible registry paths
Network
Policies\Security
access: Remotely
Options
accessible registry paths and subpaths
Network
Policies\Security
access: Restrict
Options
anonymous access to Named Pipes and Shares
Network
Policies\Security
access: Shares
Options
that can be accessed anonymously
Network
Policies\Security
access: Sharing
Options
and security model for local accounts
Network
Policies\Security
security: Do Options
not store LAN Manager hash value on next password change
Network
Policies\Security
security: Force
Options
logoff when logon hours expire
Network
Policies\Security
security: LANOptions
Manager authentication level
Network
Policies\Security
security: LDAP
Options
client signing requirements
Network
Policies\Security
security: Minimum
Optionssession security for NTLM SSP based (including secure RPC) clients
Network
Policies\Security
security: Minimum
Optionssession security for NTLM SSP based (including secure RPC) servers
Recovery
Policies\Security
console: Allow
Options
automatic administrative logon
Recovery
Policies\Security
console: Allow
Options
floppy copy and access to all drives and all folders
Shutdown:
Policies\Security
Allow system
Options
to be shut down without having to log on
Shutdown:
Policies\Security
Clear virtual
Options
memory pagefile
System
Policies\Security
cryptography:Options
Use FIPS compliant algorithms for encryption, hashing, and signing
System
Policies\Security
Cryptography: Options
Force strong key protection for user keys stored on the computer
System
Policies\Security
objects: Default
Options
owner for objects created by members of the Administrators group
System
Policies\Security
objects: Require
Options
case insensitivity for non-Windows subsystems
System
Policies\Security
objects: Strengthen
Optionsdefault permissions of internal system objects (e.g., Symbolic Links)
System
Policies\Security
settings: Optional
Options
subsystems
System
Policies\Security
settings: UseOptions
Certificate Rules on Windows Executables for Software Restriction Policies
Machine Computer Configuration\Windows Settings\Security
Maximum application
Settings\Event
log size
Log
MaximumSettings\Event
security logLog
size
MaximumSettings\Event
system log Log
size
PreventSettings\Event
local guests group
Log from accessing application log
local guests group
Log from accessing security log
local guests group
Log from accessing system log
RetainSettings\Event
application logLog
security log Log
system log Log
Retention
Settings\Event
method for Log
application log
Retention
Settings\Event
method for Log
security log
Retention
Settings\Event
method for Log
system log
Restricted Settings\Restricted
Groups Groups
System Services
Settings\System Services
Registry Settings\Registry
File SystemSettings\File System
Wireless Network
Settings\Wireless
(IEEE 802.11)
Network
Policies(IEEE 802.11) Policies
Encrypting Settings\Public
File System Key Policies
Automatic
Settings\Public
Certificate Request
Key Policies
Settings
TrustedSettings\Public
Root Certification
Key Authorities
Policies
Enterprise
Settings\Public
Trust Key Policies
Autoenrollment
Settings\Public
Settings
Key Policies
Machine Computer Configuration\Windows Settings\Security Settings\Software Restriction Policies
Disallowed
Settings\Software Restriction Policies\Security Levels
Unrestricted
New Certificate
Settings\Software
Rule Restriction Policies\Additional Rules
New Hash
Settings\Software
New Internet
Settings\Software
Zone Rule Restriction Policies\Additional Rules
New Path
Settings\Software
Enforcement
Settings\Software Restriction Policies
Designated
Settings\Software
File Types Restriction Policies
TrustedSettings\Software
Publishers Restriction Policies
Client (Respond
Settings\IP
Only) Security Policies
SecureSettings\IP
Server (Require
Security
Security)
Policies
ServerSettings\IP
(Request Security)
Security Policies
User User Configuration\Windows Settings\Security

Enterprise
Settings\Public
Trust Key Policies
User User Configuration\Windows Settings\SecurityAutoenrollment
Settings\PublicSettings
Key Policies
User User Configuration\Windows Settings\Security Settings\Software Restriction Policies
User User Configuration\Windows Settings\SecurityDisallowed
User User Configuration\Windows Settings\SecurityUnrestricted
User User Configuration\Windows Settings\SecurityNew
Settings\Software
Certificate RuleRestriction Policies\Additional Rules
Settings\Software
Hash Rule Restriction Policies\Additional Rules
Settings\Software
Internet Zone Rule
Restriction Policies\Additional Rules
Settings\Software
Path Rule Restriction Policies\Additional Rules
User User Configuration\Windows Settings\SecurityEnforcement
Settings\Software Restriction Policies
User User Configuration\Windows Settings\SecurityDesignated
Settings\Software
File Types
Restriction Policies
User User Configuration\Windows Settings\SecurityTrusted
Settings\Software
Publishers Restriction Policies
Supported On Registry Settings
Windows XP SP2, Windows Server 2003 Password Policy security settings are not registry keys.
Windows XP SP2, Windows Server 2003 Account Lockout Policy security settings are not registry keys.
Windows XP SP2, Windows Server 2003 Kerberos Policy security settings are not registry keys.
Windows XP SP2, Windows Server 2003 Audit Policy security settings are not registry keys.
Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys
Windows Server 2003 User Rights security settings are not registry keys
Windows XP SP2 User Rights security settings are not registry keys
Windows XP SP2, Windows Server 2003 Not a registry key
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\LimitBlankPasswordUse
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\AuditBaseObjects
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditing
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail
Windows XP SP2, Windows Server 2003 MACHINE\SOFTWARE\policies\Microsoft\windows NT\DCOM\MachineAccessRestriction
Windows XP SP2, Windows Server 2003 MACHINE\SOFTWARE\policies\Microsoft\windows NT\DCOM\MachineLaunchRestriction
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UndockWithoutLogon
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateDASD
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers\AddPrinterDrivers
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateCDRoms
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateFloppies
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Driver Signing\Policy
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\SubmitControl
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrity
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RefusePasswordChange
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SealSecureChannel
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SignSecureChannel
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DisablePasswordChange
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPasswordAge
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireStrongKey
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLastUserName
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCAD
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CachedLogonsCount
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\PasswordExpiryWarning
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ForceUnlockLogon
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ScForceOption
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ScRemoveOption
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\RequireSecuritySignature
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnableSecuritySignature
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnablePlainTextPassword
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoDisconnect
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableForcedLogOff
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\DisableDomainCreds
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionPipes
Windows XP SP2 MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths\Machine
Windows Server 2003 MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths\Machine
Windows Server 2003 MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths\Machine
Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionShares
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionShares
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\ForceGuest
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LDAP\LDAPClientIntegrity
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinClientSec
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SecurityLevel
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SetCommand
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ShutdownWithoutLogon
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management\ClearPageFileAtShutdow
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy
Windows Server 2003 MACHINE\Software\Policies\Microsoft\Cryptography\ForceKeyProtection
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\NoDefaultAdminOwner
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel\ObCaseInsensitive
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode
Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\SubSystems\optional
Windows Server 2003 MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\AuthenticodeEnabled
Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys.
Windows XP SP2, Windows Server 2003 Restricted Groups policy settings are not registry keys.
Windows XP SP2, Windows Server 2003 System Services policy settings are not registry keys.
Windows XP SP2, Windows Server 2003 not a registry key
Windows XP SP2, Windows Server 2003 File System policy settings are not registry keys.
Windows Server 2003 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\ {0ACDD40
Windows XP SP2, Windows Server 2003 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\EFS\Certificates\ for certificates a
Windows Server 2003 HKEY_Local_Machine\Software\Policies\Microsoft\SystemCertificates\ACRS
Windows Server 2003 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\
Windows Server 2003 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Trust\CTLs\
Windows XP SP2, Windows Server 2003 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography\AutoEnrollment
After a software restriction policy is applied, software restriction policies use these registry keys to store thesoftw
Windows XP SP2, Windows Server 2003 Software restriction policies use these registry keys to store thesoftware restriction policy configuration: HKEY_L
Certificate rules for computer software restriction policies are stored in this registry key:
Windows XP SP2, Windows Server 2003 Software restriction policies use these registry keys to store the software restriction policy configuration: HKEY_
Allowed: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPublishers\Certif
Windows XP SP2, Windows Server 2003 Disallowed: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificate
Windows XP SP2, Windows Server 2003
Windows XP SP2, Windows Server 2003 HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Trust\CTLs\

Windows XP SP2, Windows Server 2003 HKEY_CURRENT_USER\Software\Policies\Microsoft\Cryptography\AutoEnrollment
After a software restriction policy is applied, software restriction policies use these registry keys to store the softw
Windows Server 2003 Software restriction policies use these registry keys to store the software restriction policy configuration: HKEY_
Allowed Certificate rules use key: HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\SystemCertificates\
Windows Server 2003 Disallowed Certificate rules use key: HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\SystemCertificat
Notes: For more information about Windows Server 2003 security settings, see the Windows Server 2003 Help on the Microsoft Web site at
For more information about Windows XP security settings, see the Windows XP Help, and search for "Security Settings Descriptions."
For information about security features in Windows XP Service Pack 2, see the "Managing Windows XP Service Pack 2 Features Using Grou
Comments
For information about the set of security technologies included in Windows XP Service Pack 2, see
"Changes to Functionality in Microsoft Windows XP Service Pack 2" on the Microsoft TechNet Web site at http://go.microsoft.com/fwlink/?Lin
ot registry keys.
ot registry keys.
ot registry keys.
Important: Kerberos policies are used for domain user accounts. They determine Kerberos-related settings, such as ticket lifetimes and enforcement. Kerber
See also the Log on locally policy setting in Windows XP SP2, described later in this worksheet.
Important: This setting does not have any effect on Windows 2000 computers that have not been updated to Service Pack 2.
Important: This setting does not have any effect on Windows 2000 computers that have not been updated to Service Pack 2.
Note: Misuse of this privilege, or of the Trusted for Delegation setting, could make the network vulnerable to sophisticated attacks using Trojan horse program
Note: In Windows 2000 Server, Windows 2000 Professional, Windows XP Professional, and the Windows Server 2003 family, the Task Scheduler automatica
Note: See also the corresponding Windows Server 2003 Allow log on locally policy setting, earlier in this worksheet.
Lsa\LimitBlankPasswordUse
Lsa\AuditBaseObjects
Lsa\FullPrivilegeAuditing
Lsa\CrashOnAuditFail
ows NT\DCOM\MachineAccessRestriction
ows NT\DCOM\MachineLaunchRestriction
ntVersion\Policies\System\UndockWithoutLogon
rrentVersion\Winlogon\AllocateDASD
Print\Providers\LanMan Print Services\Servers\AddPrinterDrivers
rrentVersion\Winlogon\AllocateCDRoms
rrentVersion\Winlogon\AllocateFloppies
Lsa\SubmitControl
\NTDS\Parameters\LDAPServerIntegrity
\Netlogon\Parameters\RefusePasswordChange
Important: In order to take advantage of this policy on member workstations and servers, all domain controllers that constitute the member’s domain must be
In order to take advantage of this policy on domain controllers, All domain controllers in the same domain, as well as all trusted domains, must be running Win
\Netlogon\Parameters\SealSecureChannel
\Netlogon\Parameters\SignSecureChannel
\Netlogon\Parameters\DisablePasswordChange
Important: This setting applies to Windows 2000 computers, but it is not available through the Security Configuration Manager tools on these computers.
\Netlogon\Parameters\RequireStrongKey
ntVersion\Policies\System\DontDisplayLastUserName
ntVersion\Policies\System\DisableCAD
ntVersion\Policies\System\LegalNoticeText
ntVersion\Policies\System\LegalNoticeCaption
rrentVersion\Winlogon\CachedLogonsCount
rrentVersion\Winlogon\PasswordExpiryWarning
Important: This setting applies to Windows 2000 computers, but it is not available through the Security Configuration Manager tools on these computers.
Important: This setting will apply to any computers running Windows 2000 through changes in the registry, but the security setting is not viewable through th
rrentVersion\Winlogon\ScRemoveOption
Important: For this policy to take effect on computers running Windows 2000, client-side packet signing must also be enabled. For more information, search
\LanmanWorkstation\Parameters\EnableSecuritySignature
\LanmanWorkstation\Parameters\EnablePlainTextPassword
\LanManServer\Parameters\AutoDisconnect
Important: For this policy to take effect on computers running Windows 2000, server-side packet signing must also be enabled. For more information, search
\LanManServer\Parameters\EnableSecuritySignature
\LanManServer\Parameters\EnableForcedLogOff
Important: This policy has no impact on domain controllers. For more information, search for "Security Settings Descriptions" in the Windows Server 2003 He
Lsa\RestrictAnonymous
Lsa\DisableDomainCreds
Lsa\EveryoneIncludesAnonymous
\LanManServer\Parameters\NullSessionPipes
Important: The Network access: Remotely accessible registry paths security setting that appears on computers running Windows XP corresponds to the
Important: This security setting is not available on earlier versions of Windows. The security setting that appears on computers running Windows XP, Netwo
Important: On Windows XP, this security setting was called "Network access: Remotely accessible registry paths." If you configure this setting on a member
\LanManServer\Parameters\NullSessionShares
\LanManServer\Parameters\NullSessionShares
Important: This setting only affects computers running Windows XP Professional which are not joined to a domain.
This policy will have no impact on computers running Windows 2000. For more information, search for "Security Setting Descriptions" in the Windows Server
Important: Windows 2000 Service Pack 2 (SP2) and above offer compatibility with authentication to previous versions of Windows, such as Microsoft Window
This setting can affect the ability of computers running Windows 2000 Server, Windows 2000 Professional, Windows XP, and the Windows Server 2003 famil
Important: This setting can affect the ability of computers running Windows 2000 Server, Windows 2000 Professional, Windows XP Professional, and the Wi
\LDAP\LDAPClientIntegrity
Warning: This setting will apply to any computers running Windows 2000 through changes in the registry but the security setting will not be viewable through
Warning: This setting will apply to any computers running Windows 2000 through changes in the registry but the security setting will not be viewable through
rrentVersion\Setup\RecoveryConsole\SecurityLevel
rrentVersion\Setup\RecoveryConsole\SetCommand
ntVersion\Policies\System\ShutdownWithoutLogon
Session Manager\Memory Management\ClearPageFileAtShutdown
Lsa\FIPSAlgorithmPolicy
raphy\ForceKeyProtection
Lsa\NoDefaultAdminOwner
Session Manager\Kernel\ObCaseInsensitive
Session Manager\ProtectionMode
Session Manager\SubSystems\optional
s\Safer\CodeIdentifiers\AuthenticodeEnabled
Note: This setting does not appear in the Local Computer Policy object.
Important: Modifying this setting may affect compatibility with clients, services, and applications. For compatibility information about this setting, see the "Eve
Notes: This setting does not appear in the Local Computer Policy object.
This security setting affects only computers running Windows 2000, Windows Server 2003, and Windows XP.
A user must possess the Manage auditing and security log user right to access the security log.
A user must possess the Manage auditing and security log user right to access the security log.
This setting
Note: Group Policydoes
setsnot appearkey
a registry in the Local
which Computer
is checked byPolicy object.user operations. The key is:
EFS during
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\EFS\EfsConfiguration
Windows NT\CurrentVersion\Winlogon\GPExtensions\ {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63} (Domain Controller and Target)
In the case of local computers that are not members of a domain, local policy is not available for disabling EFS. However, a different registry key may be set t
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS\EfsConfiguration
soft\SystemCertificates\ACRS
es\Microsoft\SystemCertificates\Root\Certificates\
es\Microsoft\SystemCertificates\Trust\CTLs\
es\Microsoft\Cryptography\AutoEnrollment
ftware restriction policies use these registry keys to store thesoftware restriction policy configuration: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safe
This setting is a default rule that, if ON, prevents software from running unless a more specific rule allows the software to run. For more information about soft
on policies are stored in this registry key:
A default rule that, when ON, allows all software to run unless a specific disallow rule overrides it. For more information about software restriction policies, sea
RE\Policies\Microsoft\SystemCertificates\TrustedPublishers\Certificates\
WARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\
keys to store the software restriction policy configuration: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer
crosoft\SystemCertificates\Trust\CTLs\
crosoft\Cryptography\AutoEnrollment
ftware restriction policies use these registry keys to store the software restriction policy configuration: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Saf
This setting is a default rule that, if ON, prevents software from running unless a more specific rule allows the software to run. For more information about soft
A default rule that, when ON, allows all software to run unless a specific disallow rule overrides it. For more information about software restriction policies, sea
RENT_USER\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPublishers\Certificates\
URRENT_USER\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\
keys to store the software restriction policy configuration: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows
2003 Help on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=18174, and search for "Security Settings Descriptions."
"Security Settings Descriptions."
XP Service Pack 2 Features Using Group Policy" white paper on the Microsoft TechNet Web site at http://go.microsoft.com/fwlink/?LinkId=31974.
te at http://go.microsoft.com/fwlink/?LinkId=29126.
h as ticket lifetimes and enforcement. Kerberos policies do not exist in Local Computer Policy.
histicated attacks using Trojan horse programs that impersonate incoming clients and use their credentials to gain access to network resources.
2003 family, the Task Scheduler automatically grants this right as necessary.
hat constitute the member’s domain must be running Windows NT 4.0 Service Pack 6 or higher.
as all trusted domains, must be running Windows NT 4.0 Service Pack 6 or higher.
ation Manager tools on these computers.
ation Manager tools on these computers.

he security setting is not viewable through the Security Configuration Manager tool set.
o be enabled. For more information, search for "Security Settings Descriptions" in the Windows Server 2003 Help.
so be enabled. For more information, search for "Security Settings Descriptions" in the Windows Server 2003 Help.
Descriptions" in the Windows Server 2003 Help.
ers running Windows XP corresponds to the Network access: Remotely accessible registry paths and subpaths security policy setting on members of the Windows Serv
on computers running Windows XP, Network access: Remotely accessible registry paths corresponds to the Network access: Remotely accessible registry paths an
s." If you configure this setting on a member of the Windows Server 2003 family that is joined to a domain, this setting is inherited by computers running Windows XP, but will
n.
Setting Descriptions" in the Windows Server 2003 Help.
sions of Windows, such as Microsoft Windows NT 4.0.
ows XP, and the Windows Server 2003 family to communicate with computers running Windows 95 and Windows 98. For more information, search for "Security Setting Desc
ional, Windows XP Professional, and the Windows Server 2003 family to communicate with computers running Windows NT 4.0 and earlier over the network. For example, a
security setting will not be viewable through the Security Configuration Manager tool set. For more information, search for "Security Setting Descriptions" in the Windows Ser
security setting will not be viewable through the Security Configuration Manager tool set. For more information, search for "Security Setting Descriptions" in the Windows Ser
y information about this setting, see the "Event Log: Maximum security log size" section in KB 823659 "Client, service, and program incompatibilities that may occur when you
owever, a different registry key may be set to disable EFS. If the key is set to a DWORD value of 0x01, EFS will be disabled. Registry key:
SOFTWARE\Policies\Microsoft\Windows\Safer and HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows

ware to run. For more information about software restriction policies, search for "Software Restriction Policies Technical Reference" in the Group Policy Collection of the Win
mation about software restriction policies, search for "Software Restriction Policies Technical Reference" in the Group Policy Collection of the Windows Server 2003 Technica
SOFTWARE\Policies\Microsoft\Windows\Safer and HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows

ware to run. For more information about software restriction policies, search for "Software Restriction Policies Technical Reference" in the Group Policy Collection of the Win
mation about software restriction policies, search for "Software Restriction Policies Technical Reference" in the Group Policy Collection of the Windows Server 2003 Technica
ptions."
ink/?LinkId=31974.
n members of the Windows Server 2003 family.
y accessible registry paths and subpaths security option on members of the Windows Server 2003 family.
rs running Windows XP, but will appear as the "Network access: Remotely accessible registry paths" security option.
earch for "Security Setting Descriptions" in the Windows Server 2003 Help.
over the network. For example, at the time of this writing, computers running Windows NT 4.0 SP4 and earlier did not support NTLMv2. Computers running Windows 95 and W
Descriptions" in the Windows Server 2003 Help.

escriptions" in the Windows Server 2003 Help.
bilities that may occur when you modify security settings and user rights assignments" (http://go.microsoft.com/fwlink/?LinkId=35271) at the Microsoft website.
oup Policy Collection of the Windows Server 2003 Technical Reference on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=38997. For more information abou
Windows Server 2003 Technical Reference on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=38997. For more information about using software restriction p
oup Policy Collection of the Windows Server 2003 Technical Reference on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=38997. For more information abou
Windows Server 2003 Technical Reference on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=38997. For more information about using software restriction p
uters running Windows 95 and Windows 98 did not support NTLM. For compatibility information about this setting, see Network security: Lan Manager authentication level (h
Microsoft website.
8997. For more information about using software restriction policies, search for "Software Restriction Policies" in the Windows Server 2003 Help on the Microsoft Web site at
about using software restriction policies, search for "Software Restriction Policies" in the Windows Server 2003 Help on the Microsoft Web site at http://go.microsoft.com/fwlin
8997. For more information about using software restriction policies, search for "Software Restriction Policies" in the Windows Server 2003 Help on the Microsoft Web site at
about using software restriction policies, search for "Software Restriction Policies" in the Windows Server 2003 Help on the Microsoft Web site at http://go.microsoft.com/fwlin
Manager authentication level (http://go.microsoft.com/fwlink/?LinkId=24278) at the Microsoft website.
elp on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=18174.
e at http://go.microsoft.com/fwlink/?LinkId=18174.
elp on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=18174.

Computer/User
Policy
Node
Path
Machine Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy
Machine Computer Configuration\Windows Settings\Security Settings\Account Policies\Account Lockout Policy
Machine Computer Configuration\Windows Settings\Security Settings\Account Policies\Kerberos Policy
Machine Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy
Machine Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
Machine Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
Machine Computer Configuration\Windows Settings\Security Settings\Event Log\Settings for Event Logs
Machine Computer Configuration\Windows Settings\Security Settings\Restricted Groups
Machine Computer Configuration\Windows Settings\Security Settings\System Services
Machine Computer Configuration\Windows Settings\Security Settings\Registry
Machine Computer Configuration\Windows Settings\Security Settings\File System
Machine Computer Configuration\Windows Settings\Security Settings\Public Key Policies
Machine Computer Configuration\Windows Settings\Security Settings\IP Security Policies
User User Configuration\Windows Settings\Security Settings\Public Key Policies
Full Policy Name
Enforce password history
Maximum password age
Minimum password age
Minimum password length
Passwords must meet complexity requirements of the installed password filter
Store password using reversible encryption for all users in the domain
Account lockout duration
Account lockout threshold
Reset account lockout counter after
Enforce user logon restrictions
Maximum lifetime for service ticket
Maximum lifetime for user ticket
Maximum lifetime for user ticket renewal
Maximum tolerance for computer clock synchronization
Audit account logon events
Audit account management
Audit directory service access
Audit logon events
Audit object access
Audit policy change
Audit privilege use
Audit process tracking
Audit system events
Access this computer from the network
Act as part of the operating system
Add workstations to domain
Back up files and directories
Bypas traverse checking
Change the system time
Create a pagefile
Create a token object
Create global objects
Create permanent shared objects
Debug programs
Deny access to this computer from the network
Deny logon as a batch job
Deny logon as a service
Deny logon locally
Enable computer and user accounts to be trusted for delegation
Force shutdown from a remote system
Generate security audits
Impersonate a client after authentication
Increase quotas
Increase scheduling priority
Load and unload device drivers
Lock pages
Log on as a in memory
batch job
Log on as a service
Log on locally
Manage auditing and security log
Modify firmware environment variables
Profile single process
Profile system performance
Remove computer from docking station
Replace a process level token
Restore files and directories
Shut down the system
Synchronize directory service data
Take ownership of files or other objects
Additional restrictions for anonymous connections
Allow server operators to schedule tasks (domain controllers only)
Allow system to be shut down without having to log on
Allowed to eject removable NTFS media
Amount of idle time required before disconnecting a session
Audit the access of global system objects
Audit use of Backup and Restore privilege
Automatically log off users when logon time expires
Automatically log off users when logon time expires (local)
Clear virtual memory pagefile when system shuts down
Digitally sign client communications (always)
Digitally sign client communications (always)
Digitally sign client communications (when possible)
Digitally sign server communications (when possible)
Disable CTRL+ALT+DEL requirement for logon
Do not display last user name in logon screen
LAN Manager authentication level
Message text for users attempting to log on
Message title for users attempting to log on
Number of previous logons to cache (in case domain controller is not available)
Prevent system maintenance of computer account password
Prevent users from installing printer drivers
Prompt user to change password before expiration
Recovery Console: Allow automatic administrative logon
Recovery Console: Allow floppy copy and access to all drives and folders
Rename administrator account
Rename guest account
Restrict CD-ROM access to locally logged-on user only
Secure channel: Digitally encrypt or sign secure channel data (always)
Secure channel: Digitally encrypt secure channel data (when possible)
Secure channel: Digitally sign secure channel data (when possible)
Secure channel: Require strong (Windows 2000 or later) session key
Secure system partition (for RISC platforms only)
Send unencrypted password to connect to third-party SMB servers
Shut down system immediately if unable to log security audits
Smart card removal behavior
Strengthen default permissions of global system objects (e.g. Symbolic links)
Unsigned driver installation behavior
Unsigned non-driver installation behavior
Maximum application log size
Maximum security log size
Maximum system log size
Restrict guest access to application log
Restrict guest access to security log
Restrict guest access to system log
Retain application log
Retain security log
Retain system log
Retention method for application log
Retention method for security log
Retention method for system log
Shut down the computer when the security audit log is full
Restricted Groups
System Services
Registry
File System
Encrypted Data Recovery Agents
Automatic Certificate Request Settings
Trusted Root Certification Authorities
Enterprise Trust
Client (Respond Only)
Secure Server (Require Security)
Server (Request Security)
Enterprise Trust
Registry Settings Comments
Password Policy security settings are not registry keys. For more information about Windows 2000 Security Settings, see th
Password Policy security settings are not registry keys.
Account Lockout Policy security settings are not registry keys.
Kerberos Policy security settings are not registry keys.
Audit Policy security settings are not registry keys.
User Rights security settings are not registry keys
User Rights security settings are not registry keys For more information about User Rights policy settings, see Append
MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous
MACHINE\System\CurrentControlSet\Control\Lsa\SubmitControl
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ShutdownWithoutLogon
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateDASD
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoDisconnect
MACHINE\System\CurrentControlSet\Control\Lsa\AuditBaseObjects
MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditing
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableForcedLogOff
MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management\ClearPageFileAtShutdown
MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters\RequireSecuritySignature
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnableSecuritySignature
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCAD
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLastUserName
MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CachedLogonsCount
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DisablePasswordChange
MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers\AddPrinterDrivers
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\PasswordExpiryWarning
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SecurityLevel
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SetCommand
Not a registry key
Not a registry key
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateCDRoms
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SealSecureChannel
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SignSecureChannel
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireStrongKey
Important: This policy was used with Beta versions of Windows 200
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnablePlainTextPassword
MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ScRemoveOption
MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode
MACHINE\Software\Microsoft\Driver Signing\Policy
MACHINE\Software\Microsoft\Non-Driver Signing\Policy
Event Log security settings are not registry keys.
Restricted Groups policy settings are not registry keys.
System Services policy settings are not registry keys.
Not a registry key
File System policy settings are not registry keys.
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\EFS\Certificates
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ACRS
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Trust\CTLs\
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Trust\CTLs\
ws 2000 Security Settings, see the Windows 2000 Group Policy Reference in the Windows 2000 Server Resource Kit on the Microsoft Web site at http://go.microsoft.com/fwlin
ghts policy settings, see Appendix B of the "Microsoft Windows 2000 Security Hardening Guide" at http://www.microsoft.com/technet/security/prodtech/windows2000/win2khg
th Beta versions of Windows 2000 that ran on RISC platforms. However, the released versions of Windows 2000 do not run on RISC platforms; therefore, this setting has no
/prodtech/windows2000/win2khg/appxb.mspx.
s; therefore, this setting has no effect on Windows 2000.

Policy Settings

Загружено:

Сведения о документе

Оригинальное название

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

Policy Settings

Загружено:

Авторское право:

Доступные форматы

Group Policy Settings Reference

Version 1.3 Windows Server 2003 Service Pack 1

Allow or Disallow use of the Offline Files feature

T\DiskQuota!LimitUnits, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Threshold, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ThresholdUnits

ackgroundPolicy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges

crosoft\Windows NT\Terminal Services!fAllowFullControl, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!MaxTicketExpiry, HKLM\Software\policies\Micros

W32Time\Config!HoldPeriod, HKLM\Software\Policies\Microsoft\W32Time\Config!LargePhaseOffset, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxAllowedPhaseO

ows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKLM\Software\Microsoft\

licies\Microsoft\Windows NT\Terminal Services!KeepAliveInterval

E\Policies\Microsoft\Windows NT\Terminal Services!fDenyTSConnections

SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

FTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip

es\Microsoft\Windows NT\Terminal Services!WorkDirectory

osoft\Windows NT\Printers\PointAndPrint!InForest, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!TrustedServers, HKCU\Software\Policies\Microsoft

soft\Windows\CurrentVersion\Policies\System!ProfileQuotaMessage, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxProfileSize, HKCU\Software\Mi

ows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKCU\Software\Microsoft

SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

crosoft\Windows\CurrentVersion\Policies\Explorer!Btn_Back, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Forward, HKCU\Software\Microsoft\W

L!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKCU\Software\Policies\Micros

OWN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKCU\Software\Policie

ed), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explor

ed), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\

rved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Exp

S!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKCU\Software\Policies\Micros

rved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Exp

ed), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\

ALL!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKCU\Software\Policies\

OAD!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKCU\Software\Policies\M

!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microso

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Fea

L!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKLM\Software\Policies\Micros

OWN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKLM\Software\Policie

ed), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explore

d), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\

rved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Exp

S!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKLM\Software\Policies\Micros

rved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Expl

d), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\

ALL!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKLM\Software\Policies\

AD!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKLM\Software\Policies\M

!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microso

soft\Windows\WindowsUpdate\AU!AUOptions, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!ScheduledInstallDay, HKLM\Software\Policies\Microsoft\Wind

Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!AutodetectProxy, HKCU\Software\Polic

Policy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoGPOListChanges

xTicketExpiry, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!MaxTicketExpiryUnits, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fUs

NoSecondLevelCollection, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!ForceQueueMode, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!D

crosoft\W32Time\Config!MaxAllowedPhaseOffset, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxNegPhaseCorrection, HKLM\Software\Policies\Microsoft\W32Time

r!NoWebServices, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP, H

nch, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardPr

er!Btn_Forward, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Stop, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_R

Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEA

explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe, HKCU\Software\Policies\Micros

KDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe, HKCU\Software\Po

U\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Fe

Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Featu

KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Ma

explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe, HKCU\Software\Policies\Microso

KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Ma

Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Featu

STALL!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe, HKCU\Software\Polici

OAD!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe, HKCU\Software\Policies

xplorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe, HKCU\Software\Policies\Microsoft

Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEA