Configure Internet Explorer Security Settings

Setting State Comment Path
6to4 Relay Name Not configured No

\Network\TCPIP Settings\IPv6 Transition
Technologies
6to4 Relay Name Resolution Interval
Not configured No
\Network\TCPIP S
ettings\IPv6 Transition Technologies
6to4 State
Not configured No
Technologies
Access data sources across domains
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet
Zone
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet
Zone
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Mac
hine Zone
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricte
d Sites Zone
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted S
ites Zone
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
Action on server disconnect
Not configured No
\Network\Offline Files
Activate Shutdown Event Tracker System State Data feature
Not configured
No
\System
ActiveX installation policy for sites in Trusted zones Not configured No
\Windows Components\ActiveX Installer Service
Add a specific list of search providers to the user's search provider list
Not configured No
\Windows Components\Internet Explorer
Add primary intranet search location
Not configured No
\Windows Compone
nts\Search
Add Printer wizard - Network scan page (Managed network)
Not configured
No
\Printers
Add Printer wizard - Network scan page (Unmanaged network)
Not configured
No
\Printers
Add secondary intranet search locations Not configured No
\Windows Compone
nts\Search
Add the Administrators security group to roaming user profiles Not configured
No
\System\User Profiles
Add-on List
Not configured No
\Windows Components\Internet Explorer\Se
curity Features\Add-on Management
Admin-approved behaviors
Not configured No
\Windows Components\Inte
rnet Explorer\Security Features\Binary Behavior Security Restriction
Administratively assigned offline files Not configured No
\Network\Offline
Files
All Processes Not configured No
\Windows Components\Internet Explorer\Ap
plication Compatibility\Enable cut, copy or paste operations from the clipboard
if URLACTION_SCRIPT_PASTE is set to Prompt

curity Features\Binary Behavior Security Restriction
curity Features\Consistent Mime Handling
curity Features\Information Bar
curity Features\Local Machine Zone Lockdown Security
curity Features\Mime Sniffing Safety Feature
curity Features\MK Protocol Security Restriction
curity Features\Network Protocol Lockdown
curity Features\Object Caching Protection
curity Features\Protection From Zone Elevation
curity Features\Restrict ActiveX Install
curity Features\Restrict File Download
curity Features\Scripted Window Security Restrictions
All Removable Storage classes: Deny all access Not configured No
\System\
Removable Storage Access
All Removable Storage: Allow direct access in remote sessions Not configured
No
\System\Removable Storage Access
Allow .rdp files from unknown publishers
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Connection Client
Allow .rdp files from valid publishers and user's default .rdp settings Not conf
igured No
\Windows Components\Remote Desktop Services\Remote Desktop Conne
ction Client
Allow access to BitLocker-protected fixed data drives from earlier versions of W
indows Not configured No
\Windows Components\BitLocker Drive Encryption\F
ixed Data Drives
Allow access to BitLocker-protected removable data drives from earlier versions
of Windows
Not configured No
\Windows Components\BitLocker Drive Encr
yption\Removable Data Drives
Allow active content from CDs to run on user machines Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
Allow active content over restricted protocols to access my computer
Not conf
igured No
\Windows Components\Internet Explorer\Internet Control Panel\Sec
urity Page\Internet Zone
Not conf
igured No
urity Page\Intranet Zone
Not conf
igured No
urity Page\Local Machine Zone
Not conf
igured No
urity Page\Restricted Sites Zone
Not conf
igured No
urity Page\Trusted Sites Zone
Allow active scripting Not configured No
\Windows Components\Internet Exp
lorer\Internet Control Panel\Security Page\Internet Zone
lorer\Internet Control Panel\Security Page\Intranet Zone

lorer\Internet Control Panel\Security Page\Local Machine Zone
lorer\Internet Control Panel\Security Page\Locked-Down Internet Zone
lorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone
lorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone
lorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone
lorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone
lorer\Internet Control Panel\Security Page\Restricted Sites Zone
lorer\Internet Control Panel\Security Page\Trusted Sites Zone
Allow admin to install from Remote Desktop Services session
Not configured
No
\Windows Components\Windows Installer
Allow administrators to override Device Installation Restriction policies
Not configured No
\System\Device Installation\Device Installation Restrict
ions
Allow Applications to Prevent Automatic Sleep (On Battery)
Not configured
No
\System\Power Management\Sleep Settings
Allow Applications to Prevent Automatic Sleep (Plugged In)
Not configured
No
Allow audio and video playback redirection
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resou
rce Redirection
Allow audio recording redirection
Not configured No
\Windows Compone
nts\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redi
rection
Allow automatic configuration of listeners
Not configured No
\Windows
Components\Windows Remote Management (WinRM)\WinRM Service
Allow Automatic Sleep with Open Network Files (On Battery)
Not configured
No
Allow Automatic Sleep with Open Network Files (Plugged In)
Not configured
No
Allow Automatic Updates immediate installation Not configured No
\Windows
Components\Windows Update
Allow Basic authentication
Not configured No
\Windows Components\Wind
ows Remote Management (WinRM)\WinRM Client
Allow Basic authentication
Not configured No
ows Remote Management (WinRM)\WinRM Service
Allow binary and script behaviors
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
hine Zone
Not configured No
\Windows Compone
d Sites Zone
Not configured No
\Windows Compone
ites Zone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Allow BITS Peercaching Not configured No
\Network\Background Intelligent
Transfer Service (BITS)
Allow certificates with no extended key usage certificate attribute
Not conf
igured No
\Windows Components\Smart Card
Allow Corporate redirection of Customer Experience Improvement uploads Not conf
igured No
\Windows Components\Windows Customer Experience Improvement Prog
ram
Allow CredSSP authentication
Not configured No
Allow CredSSP authentication
Not configured No
Allow Cross-Forest User Policy and Roaming User Profiles
Not configured
No
\System\Group Policy
Allow cryptography algorithms compatible with Windows NT 4.0
Not configured
No
\System\Net Logon
Allow cut, copy or paste operations from the clipboard via script
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
urity Page\Locked-Down Internet Zone
Not conf
igured No
urity Page\Locked-Down Intranet Zone
Not conf
igured No
urity Page\Locked-Down Local Machine Zone
Not conf
igured No
urity Page\Locked-Down Restricted Sites Zone
Not conf
igured No
urity Page\Locked-Down Trusted Sites Zone
Not conf
igured No
Not conf
igured No
Allow Delegating Default Credentials
Not configured No
\System\Credenti
als Delegation
Allow Delegating Default Credentials with NTLM-only Server Authentication
Not configured No
\System\Credentials Delegation
Allow Delegating Fresh Credentials
Not configured No
\System\Credenti
als Delegation
Allow Delegating Fresh Credentials with NTLM-only Server Authentication Not conf
igured No
Allow Delegating Saved Credentials
Not configured No
\System\Credenti
als Delegation
Allow Delegating Saved Credentials with NTLM-only Server Authentication Not conf
igured No
Allow Distributed Link Tracking clients to use domain resources Not configured
No
\System
Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries
Not conf
igured No
\Network\DNS Client
Allow domain users to log on using biometrics Not configured No
\Windows
Components\Biometrics
Allow drag and drop or copy and paste files
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine
Zone
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down I
nternet Zone
Not configured No
\Windows
ntranet Zone
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down L
ocal Machine Zone
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down R
estricted Sites Zone
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down T
rusted Sites Zone
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Si
tes Zone
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites
Zone
Allow ECC certificates to be used for logon and authentication Not configured
No
Allow enhanced PINs for startup Not configured No
\Windows Components\BitL
ocker Drive Encryption\Operating System Drives
Allow Enhanced Storage certificate provisioning Not configured No
\System\
Enhanced Storage Access
Allow file downloads
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No

Not configured No
Not configured No
Allow font downloads
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Allow indexing of encrypted files
Not configured No
\Windows Compone
nts\Search
Allow Install On Demand (except Internet Explorer)
Not configured No
Allow Install On Demand (Internet Explorer)
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Advanced Page
Allow installation of desktop items
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
hine Zone
Not configured No
\Windows Compone
d Sites Zone
Not configured No
\Windows Compone
ites Zone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Allow installation of devices that match any of these device IDs
Not conf
igured No
\System\Device Installation\Device Installation Restrictions
Allow installation of devices using drivers that match these device setup classe
s
Not configured No
\System\Device Installation\Device Installation
Restrictions
Allow Integrated Unblock screen to be displayed at the time of logon
Not conf
igured No
Allow local activation security check exemptions
Not configured No
\System\Distributed COM\Application Compatibility Settings
Allow logon scripts when NetBIOS or WINS is disabled
Not configured No
\System\Scripts
Allow META REFRESH
Not configured No
Allow META REFRESH
Not configured No
Allow META REFRESH
Not configured No
Allow META REFRESH
Not configured No
Allow META REFRESH
Not configured No
Allow META REFRESH
Not configured No
Allow META REFRESH
Not configured No
Allow META REFRESH
Not configured No
Allow META REFRESH
Not configured No
Allow META REFRESH
Not configured No
Allow non-administrators to install drivers for these device setup classes
Not configured No
\System\Driver Installation
Allow non-administrators to receive update notifications
Not configured
No
\Windows Components\Windows Update
Allow only system backup
Not configured No
\Windows Components\Back
up\Server
Allow only USB root hub connected Enhanced Storage devices
Not configured
No
\System\Enhanced Storage Access
Allow only Vista or later connections Not configured No
\System\Remote A
ssistance
Allow OpenSearch queries in Windows Explorer
Not configured No
\Windows
Not configured No
\Windows
Not configured No
\Windows
Zone
Not configured No
\Windows
nternet Zone
Not configured No
\Windows
ntranet Zone
Not configured No
\Windows
ocal Machine Zone
Not configured No
\Windows
Not configured No
\Windows
rusted Sites Zone
Not configured No
\Windows

tes Zone
Not configured No
\Windows
Zone
Allow or Disallow use of the Offline Files feature
Not configured No
Allow previewing and custom thumbnails of OpenSearch query results in Windows Ex
plorer Not configured No
\Windows Components\Internet Explorer\Internet C
ontrol Panel\Security Page\Internet Zone
ontrol Panel\Security Page\Intranet Zone
ontrol Panel\Security Page\Local Machine Zone
ontrol Panel\Security Page\Locked-Down Internet Zone
ontrol Panel\Security Page\Locked-Down Intranet Zone
ontrol Panel\Security Page\Locked-Down Local Machine Zone
ontrol Panel\Security Page\Locked-Down Restricted Sites Zone
ontrol Panel\Security Page\Locked-Down Trusted Sites Zone
ontrol Panel\Security Page\Restricted Sites Zone
ontrol Panel\Security Page\Trusted Sites Zone
Allow Print Spooler to accept client connections
Not configured No
\Printers
Allow printers to be published Not configured No
\Printers
Allow pruning of published printers
Not configured No
\Printers
Allow remote access to the Plug and Play interface
Not configured No
\System\Device Installation
Allow Remote Shell Access
Not configured No
ows Remote Shell
Allow restore of system to default state
Not configured No
\System\
Recovery
Allow scripting of Internet Explorer web browser control
Not configured
No
\Windows Components\Internet Explorer\Internet Control Panel\Security Pa
ge\Internet Zone
Not configured
No
ge\Intranet Zone
Not configured
No
ge\Local Machine Zone
Not configured
No
ge\Locked-Down Internet Zone
Not configured
No
ge\Locked-Down Intranet Zone
Not configured
No
ge\Locked-Down Local Machine Zone
Not configured
No
ge\Locked-Down Restricted Sites Zone
Not configured
No
ge\Locked-Down Trusted Sites Zone
Not configured
No
ge\Restricted Sites Zone
Not configured
No
ge\Trusted Sites Zone
Allow script-initiated windows without size or position constraints
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Allow Scriptlets
Not configured No
Allow Scriptlets
Not configured No
Allow Scriptlets
Not configured No
Allow Scriptlets
Not configured No
Allow Scriptlets
Not configured No
Allow Scriptlets
Not configured No
Allow Scriptlets
Not configured No

Allow Scriptlets
Not configured No
Allow Scriptlets
Not configured No
Allow Scriptlets
Not configured No
Allow signature keys valid for Logon
Not configured No
\Windows Compone
nts\Smart Card
Allow signed updates from an intranet Microsoft update service location
Not configured No
Allow software to run or install even if the signature is invalid
Not conf
igured No
\Windows Components\Internet Explorer\Internet Control Panel\Adv
anced Page
Allow Standby States (S1-S3) When Sleeping (On Battery) Not configured No
Allow Standby States (S1-S3) When Sleeping (Plugged In) Not configured No
Allow status bar updates via script
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
hine Zone
Not configured No
\Windows Compone
d Sites Zone
Not configured No
\Windows Compone
ites Zone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Allow the use of biometrics
Not configured No
\Windows Components\Biom
etrics
Allow third-party browser extensions
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Advanced Page
Allow time invalid certificates Not configured No
\Windows Components\Smar
t Card
Allow time zone redirection
Not configured No
\Windows Components\Remo
te Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
Allow unencrypted traffic
Not configured No
Allow unencrypted traffic
Not configured No
Allow use of diacritics Not configured No
\Windows Components\Search
Allow user name hint
Not configured No
Allow users to connect remotely using Remote Desktop Services Not configured
No
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\
Connections
Allow users to log on using biometrics Not configured No

\Windows Compone
nts\Biometrics
Allow video and animation on a Web page that uses a legacy media player Not conf
igured No
igured No
igured No
igured No
igured No
igured No
igured No
igured No
igured No
igured No
Allow websites to open windows without address or status bars Not configured
No
ge\Internet Zone
No
ge\Intranet Zone
No
No
No
No
No
No
No
No
Allow websites to prompt for information using scripted windows Not configured
No
ge\Internet Zone
No
ge\Intranet Zone
No
No
No
No
No
No
No
No
Always install with elevated privileges Not configured No
\Windows Compone
nts\Windows Installer
Always prompt for password upon connection
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Security
Always render print jobs on the server Not configured No
\Printers
Always show desktop on connection
Not configured No
\Windows Compone
nts\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environme
nt
Always use classic logon
Not configured No
\System\Logon
Always use custom logon background
Not configured No
\System\Logon
Always use local ADM files for Group Policy Object Editor
Not configured
No
Always wait for the network at computer startup and logon
Not configured
No
\System\Logon
Apply policy to removable media Not configured No
\System\Disk Quotas
Apply the default user logon picture to all users
Not configured No
\Control Panel\User Accounts
Approved Installation Sites for ActiveX Controls
Not configured No
\Windows Components\ActiveX Installer Service
Assign a default domain for logon
Not configured No
\System\Logon
Not configured No
At logoff, delete local copy of user s offline files
Auto-hide the Toolbars Not configured No
lorer\Toolbars
Automated Site Coverage by the DC Locator DNS SRV Records
Not configured
No
\System\Net Logon\DC Locator DNS Records
Automatic prompting for ActiveX controls
Not configured No
\Windows

Not configured No
\Windows
Not configured No
\Windows
Zone
Not configured No
\Windows
nternet Zone
Not configured No
\Windows
ntranet Zone
Not configured No
\Windows
ocal Machine Zone
Not configured No
\Windows
Not configured No
\Windows
rusted Sites Zone
Not configured No
\Windows
tes Zone
Not configured No
\Windows
Zone
Automatic prompting for file downloads Not configured No
\Windows Compone
\Windows Compone
\Windows Compone
\Windows Compone
Zone
\Windows Compone
Zone
\Windows Compone
hine Zone
\Windows Compone
d Sites Zone
\Windows Compone
ites Zone
\Windows Compone
\Windows Compone
Automatic reconnection Not configured No
\Windows Components\Remote Deskt
op Services\Remote Desktop Session Host\Connections
Automatic Updates detection frequency Not configured No
\Windows Compone
nts\Windows Update
Automatically check for Internet Explorer updates
Not configured No
Automatically publish new printers in Active Directory Not configured No
\Printers
Background upload of a roaming user profile's registry file while user is logged
on
Not configured No
Backup log automatically when full
Not configured No
\Windows Compone
nts\Event Log Service\Application
Not configured No
\Windows Compone
nts\Event Log Service\Security
Not configured No
\Windows Compone
nts\Event Log Service\Setup
Not configured No
\Windows Compone
nts\Event Log Service\System
Baseline file cache maximum size
Not configured No
\Windows Compone
Best effort service type
Not configured No
\Network\QoS Packet Sche
duler\DSCP value of conforming packets
Not configured No
duler\DSCP value of non-conforming packets
Not configured No
duler\Layer-2 priority value
Cache transforms in secure location on workstation
Not configured No
CD and DVD: Deny execute access Not configured No
\System\Removable Storag
e Access
CD and DVD: Deny read access
Not configured No
e Access
CD and DVD: Deny write access Not configured No
e Access
Check for New Signatures Before Scheduled Scans Not configured No
\Windows
Components\Windows Defender
Check for server certificate revocation Not configured No
\Windows Compone
Check for signatures on downloaded programs
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Advanced Page
Check published state Not configured No
\Printers
Choose default folder for recovery password
Not configured No
\Windows
Components\BitLocker Drive Encryption
Choose drive encryption method and cipher strength
Not configured No
\Windows Components\BitLocker Drive Encryption
Choose how BitLocker-protected fixed drives can be recovered
Not configured
No
\Windows Components\BitLocker Drive Encryption\Fixed Data Drives
Choose how BitLocker-protected operating system drives can be recovered Not conf
igured No
\Windows Components\BitLocker Drive Encryption\Operating System
Drives
Choose how BitLocker-protected removable drives can be recovered
Not conf
igured No
\Windows Components\BitLocker Drive Encryption\Removable Data Dr
ives
Choose how users can recover BitLocker-protected drives (Windows Server 2008 and
Windows Vista) Not configured No
\Windows Components\BitLocker Drive Encr
yption
Communities
Not configured No
\Network\SNMP
Computer location
Not configured No
\Printers
Configuration of wireless settings using Windows Connect Now
Not configured
No
\Network\Windows Connect Now
Configure Automatic Updates
Not configured No
ows Update
Configure Background Sync
Not configured No
Configure BranchCache for network files Not configured No
\Network\BranchC
ache
Configure Corporate Windows Error Reporting
Not configured No
\Windows
Components\Windows Error Reporting\Advanced Error Reporting Settings
Configure Corrupted File Recovery Behavior
Not configured No
\System\
Troubleshooting and Diagnostics\Corrupted File Recovery
Configure Default consent

Not configured No
ows Error Reporting\Consent
Configure Delete Browsing History on exit
Not configured No
\Windows
Components\Internet Explorer\Delete Browsing History
Configure device installation time-out Not configured No
\System\Device I
nstallation
Configure Error Reporting
Not configured No
ows Error Reporting
Configure keep-alive connection interval
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Connections
Configure list of Enhanced Storage devices usable on your computer
Not conf
igured No
Configure list of IEEE 1667 silos usable on your computer
Not configured
No
Configure Microsoft SpyNet Reporting
Not configured No
\Windows Compone
nts\Windows Defender
Configure minimum PIN length for startup
Not configured No
\Windows
Components\BitLocker Drive Encryption\Operating System Drives
Configure MSI Corrupted File Recovery Behavior Not configured No
\System\
Troubleshooting and Diagnostics\MSI Corrupted File Recovery
Configure new tab page default behavior Not configured No
\Windows Compone
nts\Internet Explorer
Configure RD Connection Broker farm name
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\RD Connection Br
oker
Configure RD Connection Broker server name
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\RD Connection Br
oker
Configure Reliability WMI Providers
Not configured No
\Windows Compone
nts\Windows Reliability Analysis
Configure Report Archive
Not configured No
ows Error Reporting\Advanced Error Reporting Settings
Configure Report Queue Not configured No
\Windows Components\Windows Erro
r Reporting\Advanced Error Reporting Settings
Configure root certificate clean up
Not configured No
\Windows Compone
nts\Smart Card
Configure Scenario Execution Level
Not configured No
\System\Troubles
hooting and Diagnostics\Fault Tolerant Heap
Not configured No
\System\Troubles
hooting and Diagnostics\Windows Boot Performance Diagnostics
Not configured No
\System\Troubles
hooting and Diagnostics\Windows Memory Leak Diagnosis
Not configured No
\System\Troubles
hooting and Diagnostics\Windows Resource Exhaustion Detection and Resolution
Not configured No
\System\Troubles
hooting and Diagnostics\Windows Shutdown Performance Diagnostics
Not configured No
\System\Troubles
hooting and Diagnostics\Windows Standby/Resume Performance Diagnostics
Not configured No
\System\Troubles
hooting and Diagnostics\Windows System Responsiveness Performance Diagnostics
Configure Scheduled Maintenance Behavior
Not configured No
\System\
Troubleshooting and Diagnostics\Scheduled Maintenance
Configure Security Policy for Scripted Diagnostics
Not configured No
\System\Troubleshooting and Diagnostics\Scripted Diagnostics
Configure server authentication for client
Not configured No
\Windows
Configure Slow link speed
Not configured No
Configure slow-link mode
Not configured No
Configure the list of blocked TPM commands
Not configured No
\System\
Trusted Platform Module Services
Configure the server address, refresh interval, and issuer certificate authority
of a target Subscription Manager
Not configured No
\Windows Compone
nts\Event Forwarding
Configure TPM platform validation profile
Not configured No
\Windows
Configure use of passwords for fixed data drives
Not configured No
Configure use of passwords for removable data drives
Not configured No
\Windows Components\BitLocker Drive Encryption\Removable Data Drives
Configure use of smart cards on fixed data drives
Not configured No
Configure use of smart cards on removable data drives Not configured No
\Windows Components\BitLocker Drive Encryption\Removable Data Drives
Configure Windows NTP Client
Not configured No
\System\Windows Time Ser
vice\Time Providers
Connection-Specific DNS Suffix Not configured No
\Network\DNS Client
Contact PDC on logon failure
Not configured No
\System\Net Logon
Control rich previews for attachments Not configured No
\Windows Compone
nts\Search
Control use of BitLocker on removable drives
Not configured No
\Windows
Components\BitLocker Drive Encryption\Removable Data Drives
Controlled load service type
Not configured No
Not configured No
Not configured No
Corporate DNS Probe Host Address
Not configured No
\Network\Network
Connectivity Status Indicator
Corporate DNS Probe Host Name Not configured No
\Network\Network Connect
ivity Status Indicator
Corporate Site Prefix List
Not configured No
Corporate Website Probe URL
Not configured No
Critical Battery Notification Action
Not configured No
\System\Power Ma
nagement\Notification Settings
Critical Battery Notification Level
Not configured No
\System\Power Ma
Custom Classes: Deny read access
Not configured No
\System\Removabl
e Storage Access
Custom Classes: Deny write access
Not configured No
\System\Removabl
e Storage Access
Custom support URL in the Printers folder's left pane Not configured No
\Printers
Customize Command Labels
Not configured No
rnet Explorer\Toolbars
Customize consent settings
Not configured No
Customize User Agent String
Not configured No
rnet Explorer
Customize Warning Messages
Not configured No
\System\Remote Assistanc
e
DC Locator DNS records not registered by the DCs
Not configured No
Default application reporting settings Not configured No
\Windows Compone
nts\Windows Error Reporting\Advanced Error Reporting Settings
Default behavior for AutoRun
Not configured No
\Windows Components\Auto
Play Policies
Default cache size
Not configured No
Default excluded paths Not configured No

Default indexed paths Not configured No
Default quota limit and warning level Not configured No
\System\Disk Quo
tas
Define Activation Security Check exemptions
Not configured No
\System\
Distributed COM\Application Compatibility Settings
Define host name-to-Kerberos realm mappings
Not configured No
\System\
Kerberos
Define interoperable Kerberos V5 realm settings Not configured No
\System\
Kerberos
Delay Restart for scheduled installations
Not configured No
\Windows
Components\Windows Update
Delete cached copies of roaming profiles
Not configured No
\System\
User Profiles
Delete data from devices running Microsoft firmware when a user logs off from th
e computer.
Not configured No
\Windows Components\Windows SideShow
Delete user profiles older than a specified number of days on system restart
Not configured No
Deny all add-ons unless specifically allowed in the Add-on List Not configured
No
\Windows Components\Internet Explorer\Security Features\Add-on Managemen
t
Deny Delegating Default Credentials
Not configured No
\System\Credenti
als Delegation
Deny Delegating Fresh Credentials
Not configured No
\System\Credenti
als Delegation
Deny Delegating Saved Credentials
Not configured No
\System\Credenti
als Delegation
Deny logoff of an administrator logged in to the console session
Not conf
igured No
\Windows Components\Remote Desktop Services\Remote Desktop Sessi
on Host\Connections
Deny write access to fixed drives not protected by BitLocker
Not configured
No
Deny write access to removable drives not protected by BitLocker
Not conf
igured No
\Windows Components\BitLocker Drive Encryption\Removable Data Dr
ives
Deploy default Accelerators
Not configured No
rnet Explorer\Accelerators
Deploy non-default Accelerators Not configured No
rnet Explorer\Accelerators
Detect application failures caused by deprecated COM objects
Not configured
No
\System\Troubleshooting and Diagnostics\Application Compatibility Diagno
stics
Detect application failures caused by deprecated Windows DLLs Not configured
No
stics
Detect application install failures
Not configured No
\System\Troubles
hooting and Diagnostics\Application Compatibility Diagnostics
Detect application installers that need to be run as administrator
Not conf
igured No
\System\Troubleshooting and Diagnostics\Application Compatibilit
y Diagnostics
Detect applications unable to launch installers under UAC
Not configured
No
stics
Diagnostics: Configure scenario execution level Not configured No
\System\
Troubleshooting and Diagnostics
Diagnostics: Configure scenario retention
Not configured No
\System\
Troubleshooting and Diagnostics
Directory pruning interval
Not configured No
\Printers
Directory pruning priority
Not configured No
\Printers
Directory pruning retry Not configured No
\Printers
Disable "Configuring History" Not configured No

rnet Explorer\Delete Browsing History
Disable .NET Framework Setup
Not configured No
rnet Explorer\Internet Control Panel\Security Page\Internet Zone
Not configured No
rnet Explorer\Internet Control Panel\Security Page\Intranet Zone
Not configured No
rnet Explorer\Internet Control Panel\Security Page\Local Machine Zone
Not configured No
rnet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone
Not configured No
rnet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone
Not configured No
rnet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zon
e
Not configured No
rnet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites
Zone
Not configured No
rnet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zon
e
Not configured No
rnet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
Not configured No
rnet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
Disable Automatic Install of Internet Explorer components
Not configured
No
Disable binding directly to IPropertySetStorage without intermediate layers.
Not configured No
\Windows Components\Windows Explorer
Disable changing Automatic Configuration settings
Not configured No
Disable changing connection settings
Not configured No
\Windows Compone
Disable changing proxy settings Not configured No
rnet Explorer
Disable delete notifications on all volumes
Not configured No
\System\
Filesystem
Disable IE security prompt for Windows Installer scripts
Not configured
No
Disable indexer backoff Not configured No
Disable Logging Not configured No
\Windows Components\Windows Error Report
ing
Disable logging via package settings
Not configured No
\Windows Compone
Disable or enable software Secure Attention Sequence
Not configured No
\Windows Components\Windows Logon Options
Disable password strength validation for Peer Grouping Not configured No
\Network\Microsoft Peer-to-Peer Networking Services
Disable Periodic Check for Internet Explorer software updates Not configured
No
Disable Per-User Installation of ActiveX Controls
Not configured No
Disable remote Desktop Sharing Not configured No
\Windows Components\NetM
eeting
Disable showing the splash screen
Not configured No
\Windows Compone
Disable software update shell notifications on program launch Not configured
No
Disable text prediction Not configured No
\Windows Components\Tablet PC\In
put Panel
Disable the Advanced page

Not configured No
rnet Explorer\Internet Control Panel
Disable the Connections page
Not configured No
Disable the Content page
Not configured No
Disable the General page
Not configured No
Disable the Privacy page
Not configured No
Disable the Programs page
Not configured No
Disable the Security page
Not configured No
Disable toolbars and extensions when InPrivate Browsing starts Not configured
No
\Windows Components\Internet Explorer\InPrivate
Disable Windows Error Reporting Not configured No
ows Error Reporting
Disable Windows Installer
Not configured No
ows Installer
Disallow changing of geographic location
Not configured No
\System\
Locale Services
Disallow Digest authentication Not configured No
Disallow installation of printers using kernel-mode drivers
Not configured
No
\Printers
Disallow Interactive Users from generating Resultant Set of Policy data Not conf
igured No
Disallow Kerberos authentication
Not configured No
\Windows Compone
nts\Windows Remote Management (WinRM)\WinRM Client
Disallow Kerberos authentication
Not configured No
\Windows Compone
nts\Windows Remote Management (WinRM)\WinRM Service
Disallow locally attached storage as backup target
Not configured No
\Windows Components\Backup\Server
Disallow Negotiate authentication
Not configured No
\Windows Compone
nts\Windows Remote Management (WinRM)\WinRM Client
Disallow Negotiate authentication
Not configured No
\Windows Compone
Disallow network as backup target
Not configured No
\Windows Compone
nts\Backup\Server
Disallow optical media as backup target Not configured No
\Windows Compone
nts\Backup\Server
Disallow run-once backups
Not configured No
up\Server
Disallow selection of Custom Locales
Not configured No
\System\Locale S
ervices
Disallow user override of locale settings
Not configured No
\System\
Locale Services
Disk Diagnostic: Configure custom alert text
Not configured No
\System\
Troubleshooting and Diagnostics\Disk Diagnostic
Disk Diagnostic: Configure execution level
Not configured No
\System\
Troubleshooting and Diagnostics\Disk Diagnostic
Disk Quota policy processing
Not configured No
Display a custom message title when device installation is prevented by a policy
setting
Not configured No
\System\Device Installation\Device Insta
llation Restrictions
Display a custom message when installation is prevented by a policy setting
Not configured No
\System\Device Installation\Device Installation Restrict
ions
Display Error Notification
Not configured No
ows Error Reporting

Display information about previous logons during user logon
Not configured
No
Display mixed content Not configured No
Display Shutdown Event Tracker Not configured No
\System
Display string when smart card is blocked
Not configured No
\Windows
Components\Smart Card
DNS Servers
Not configured No
\Network\DNS Client
DNS Suffix Search List Not configured No
\Network\DNS Client
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Win
dows dialog box Not configured No
Do not allow adding new targets via manual configuration
Not configured
No
\System\iSCSI\iSCSI Target Discovery
Do not allow additional session logins Not configured No
\System\iSCSI\Ge
neral iSCSI
Do not allow changes to initiator CHAP secret Not configured No
\System\
iSCSI\iSCSI Security
Do not allow changes to initiator iqn name
Not configured No
\System\
iSCSI\General iSCSI
Do not allow client printer redirection Not configured No
\Windows Compone
nts\Remote Desktop Services\Remote Desktop Session Host\Printer Redirection
Do not allow clipboard redirection
Not configured No
\Windows Compone
rection
Do not allow color changes
Not configured No
\Windows Components\Desk
top Window Manager\Window Frame Coloring
Do not allow COM port redirection
Not configured No
\Windows Compone
rection
Do not allow compression on all NTFS volumes
Not configured No
\System\
Filesystem\NTFS
Do not allow connections without IPSec Not configured No
\System\iSCSI\iS
CSI Security
Do not allow desktop composition
Not configured No
\Windows Compone
nts\Desktop Window Manager
Do not allow Digital Locker to run
Not configured No
\Windows Compone
nts\Digital Locker
Do not allow drive redirection Not configured No
Do not allow encryption on all NTFS volumes
Not configured No
\System\
Filesystem\NTFS
Do not allow Flip3D invocation Not configured No

top Window Manager
Do not allow Inkball to run
Not configured No
\Windows Components\Tabl
et PC\Accessories
Do not allow local administrators to customize permissions
Not configured
No
Security
Do not allow LPT port redirection
Not configured No
\Windows Compone
rection
Do not allow manual configuration of discovered targets Not configured No
Do not allow manual configuration of iSNS servers
Not configured No
Do not allow manual configuration of target portals
Not configured No
Do not allow non-Enhanced Storage removable devices
Not configured No
Do not allow password authentication of Enhanced Storage devices
Not conf
igured No
Do not allow passwords to be saved
Not configured No
\Windows Compone
nts\Remote Desktop Services\Remote Desktop Connection Client
Do not allow printing to Journal Note Writer
Not configured No
\Windows
Components\Tablet PC\Accessories
Do not allow resetting Internet Explorer settings
Not configured No
Do not allow sessions without mutual CHAP
Not configured No
\System\
Do not allow sessions without one way CHAP
Not configured No
\System\
Do not allow smart card device redirection
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resou
rce Redirection
Do not allow Snipping Tool to run
Not configured No
\Windows Compone
nts\Tablet PC\Accessories
Do not allow Sound Recorder to run
Not configured No
\Windows Compone
nts\Sound Recorder
Do not allow supported Plug and Play device redirection Not configured No
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device a
nd Resource Redirection
Do not allow the BITS client to use Windows Branch Cache
Not configured
No
\Network\Background Intelligent Transfer Service (BITS)
Do not allow the computer to act as a BITS Peercaching client Not configured
No
Do not allow the computer to act as a BITS Peercaching server Not configured
No
Do not allow users to enable or disable add-ons Not configured No
\Windows
Components\Internet Explorer
Do not allow web search Not configured No
Do not allow window animations Not configured No
top Window Manager
Do not allow Windows Journal to be run Not configured No
\Windows Compone
nts\Tablet PC\Accessories
Do not allow Windows Media Center to run
Not configured No
\Windows
Components\Windows Media Center
Do not allow Windows Messenger to be run
Not configured No
\Windows
Components\Windows Messenger
Do not automatically encrypt files moved to encrypted folders Not configured
No
\System
Do not automatically start Windows Messenger initially Not configured No
\Windows Components\Windows Messenger

Do not check for user ownership of Roaming Profile Folders
Not configured
No
Do not collect InPrivate Filtering data Not configured No
\Windows Compone
nts\Internet Explorer\InPrivate
Do not delete temp folder upon exit
Not configured No
\Windows Compone
nts\Remote Desktop Services\Remote Desktop Session Host\Temporary folders
Do not detect slow network connections Not configured No
\System\User Pro
files
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialo
g box Not configured No
Do not forcefully unload the users registry at user logoff
Not configured
No
Do not log users on with temporary profiles
Not configured No
\System\
User Profiles
Do not process incoming mailslot messages used for domain controller location ba
sed on NetBIOS domain names
Not configured No
\System\Net Logon\DC Loc
ator DNS Records
Do not process the legacy run list
Not configured No
\System\Logon
Do not process the run once list
Not configured No
\System\Logon
Do not prompt for client certificate selection when no certificates or only one
certificate exists.
Not configured No
certificate exists.
Not configured No
certificate exists.
Not configured No
certificate exists.
Not configured No
certificate exists.
Not configured No
certificate exists.
Not configured No
certificate exists.
Not configured No
certificate exists.
Not configured No
certificate exists.
Not configured No
certificate exists.
Not configured No
Do not save encrypted pages to disk
Not configured No
\Windows Compone
Do not send a Windows error report when a generic driver is installed on a devic
e
Not configured No
Do not send additional data
Not configured No
ows Error Reporting
Do not set default client printer to be default printer in a session
Not conf
igured No
on Host\Printer Redirection
Do Not Show First Use Dialog Boxes
Not configured No
\Windows Compone
nts\Windows Media Player

Do not show the "local access only" network icon
Not configured No
\Network\Network Connections
Do not turn off system power after a Windows system shutdown has occurred.
Not configured No
\System
Do not use temporary folders per session
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Temporary folder
s
Domain Controller Address Type Returned Not configured No
\System\Net Logo
n\DC Locator DNS Records
Domain Location Determination URL
Not configured No
\Network\Network
Connectivity Status Indicator
Don't display the Getting Started welcome screen at logon
Not configured
No
\System\Logon
Don't set the always do this checkbox Not configured No
\Windows Compone
nts\AutoPlay Policies
Download missing COM components Not configured No
\System
Download signed ActiveX controls
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
hine Zone
Not configured No
\Windows Compone
d Sites Zone
Not configured No
\Windows Compone
ites Zone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Download unsigned ActiveX controls
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
hine Zone
Not configured No
\Windows Compone
d Sites Zone

Not configured No
\Windows Compone
ites Zone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Dynamic Registration of the DC Locator DNS Records
Not configured No
Dynamic Update Not configured No
\Network\DNS Client
EFS recovery policy processing Not configured No
Empty Temporary Internet Files folder when browser is closed
Not configured
No
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Pa
ge
Enable client-side targeting
Not configured No
ows Update
Enable disk quotas
Not configured No
\System\Disk Quotas
Enable indexing of online delegate mailboxes
Not configured No
\Windows
Components\Search
Enable indexing uncached Exchange folders
Not configured No
\Windows
Components\Search
Enable Native XMLHttpRequest Support
Not configured No
\Windows Compone
nts\Internet Explorer\Security Features\AJAX
Enable NTFS pagefile encryption Not configured No
\System\Filesystem\NTFS
Enable Persistent Time Stamp
Not configured No
\System
Enable throttling for online mail indexing
Not configured No
\Windows
Components\Search
Enable Transparent Caching
Not configured No
Enable user control over installs
Not configured No
\Windows Compone
Enable user to browse for source while elevated Not configured No
\Windows
Components\Windows Installer
Enable user to patch elevated products Not configured No
\Windows Compone
Enable user to use media source while elevated Not configured No
\Windows
Enable Windows NTP Client
Not configured No
vice\Time Providers
Enable Windows NTP Server
Not configured No
vice\Time Providers
Enable/Disable PerfTrack
Not configured No
\System\Troubleshooting
and Diagnostics\Windows Performance PerfTrack
Enabling Windows Update Power Management to automatically wake up the system to
install scheduled updates
Not configured No
ows Update
Encrypt the Offline Files cache Not configured No
Enforce disk quota limit
Not configured No
\System\Disk Quotas
Enforce Full Screen Mode
Not configured No
rnet Explorer
Enforce Removal of Remote Desktop Wallpaper
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session E
nvironment
Enforce upgrade component rules Not configured No
ows Installer
Enumerate administrator accounts on elevation Not configured No
\Windows
Components\Credential User Interface
Event logging level
Not configured No
Events.asp program
Not configured No
\Windows Components\Event Viewer
Events.asp program command line parameters
Not configured No
\Windows
Components\Event Viewer
Events.asp URL Not configured No

\Windows Components\Event Viewer
Exclude credential providers
Not configured No
\System\Logon
Exclude files from being cached
Not configured No
\Network\Offline
Files
Execute print drivers in isolated processes
Not configured No
\Printer
s
Expected dial-up delay on logon Not configured No
\System\Net Logon
Extend Point and Print connection to search Windows Update
Not configured
No
\Printers
Files not cached
Not configured No
Filter duplicate logon certificates
Not configured No
\Windows Compone
nts\Smart Card
Final DC Discovery Retry Setting for Background Callers Not configured No
\System\Net Logon
Floppy Drives: Deny execute access
Not configured No
\System\Removabl
e Storage Access
Floppy Drives: Deny read access Not configured No
e Access
Floppy Drives: Deny write access
Not configured No
\System\Removabl
e Storage Access
Folder Redirection policy processing
Not configured No
\System\Group Po
licy
For tablet pen input, don t show the Input Panel icon Not configured No
\Windows Components\Tablet PC\Input Panel
For touch input, don t show the Input Panel icon
Not configured No
\Windows
Components\Tablet PC\Input Panel
Force Rediscovery Interval
Not configured No
\System\Net Logon\DC Loc
ator DNS Records
Force selected system UI language to overwrite the user UI language
Not conf
igured No
\Control Panel\Regional and Language Options
Force the reading of all certificates from the smart card
Not configured
No
ForwarderResourceUsage Not configured No
\Windows Components\Event Forwar
ding
Global Configuration Settings Not configured No
vice
Group Policy refresh interval for computers
Not configured No
\System\
Group Policy
Group Policy refresh interval for domain controllers
Not configured No
Group Policy slow link detection
Not configured No
\System\Group Po
licy
Guaranteed service type Not configured No
\Network\QoS Packet Scheduler\DS
CP value of conforming packets
\Network\QoS Packet Scheduler\DS
CP value of non-conforming packets
\Network\QoS Packet Scheduler\La
yer-2 priority value
Hash Publication for BranchCache
Not configured No
\Network\Lanman
Server
Hide Advanced Properties Checkbox in Add Scheduled Task Wizard Not configured
No
\Windows Components\Task Scheduler
Hide entry points for Fast User Switching
Not configured No
\System\
Logon
Hide notifications about RD Licensing problems that affect the RD Session Host s
erver Not configured No
\Windows Components\Remote Desktop Services\Remo
te Desktop Session Host\Licensing
Hide previous versions list for local files
Not configured No
\Windows
Components\Windows Explorer\Previous Versions
Hide previous versions list for remote files
Not configured No
\Windows

Hide previous versions of files on backup location
Not configured No
\Windows Components\Windows Explorer\Previous Versions
Hide Property Pages
Not configured No
\Windows Components\Task Schedul
er
Hide the Command Bar
Not configured No
lorer\Toolbars
Hide the file scan progress window
Not configured No
\System\Windows
File Protection
Hide the Status Bar
Not configured No
lorer\Toolbars
Ignore custom consent settings Not configured No
Ignore Delegation Failure
Not configured No
\System\Remote Procedure
Call
Ignore the default list of blocked TPM commands Not configured No
\System\
Ignore the local list of blocked TPM commands Not configured No
\System\
Include local directory path when uploading files to a server Not configured
No
ge\Internet Zone
No
ge\Intranet Zone
No
No
No
No
No
No
No
No
Include rarely used Chinese, Kanji, or Hanja characters Not configured No
Include updated Web site lists from Microsoft Not configured No
\Windows
Components\Internet Explorer\Compatibility View
Indexer data location Not configured No
Initial DC Discovery Retry Setting for Background Callers
Not configured
No
\System\Net Logon
Initial reminder balloon lifetime
Not configured No
\Network\Offline
Files
Initialize and script ActiveX controls not marked as safe
Not configured
No
ge\Internet Zone
Not configured
No
ge\Intranet Zone
Not configured
No
Not configured
No
Not configured
No
Not configured
No
Not configured
No
Not configured
No
Not configured
No
Not configured
No
InPrivate Filtering Threshold Not configured No
rnet Explorer\InPrivate
Internet Explorer Maintenance policy processing Not configured No
\System\
Group Policy
Internet Explorer Processes
Not configured No
rnet Explorer\Application Compatibility\Enable cut, copy or paste operations fro
m the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt
Not configured No
rnet Explorer\Security Features\Binary Behavior Security Restriction
Not configured No
rnet Explorer\Security Features\Consistent Mime Handling
Not configured No
rnet Explorer\Security Features\Information Bar
Not configured No
rnet Explorer\Security Features\Local Machine Zone Lockdown Security
Not configured No
rnet Explorer\Security Features\Mime Sniffing Safety Feature
Not configured No
rnet Explorer\Security Features\MK Protocol Security Restriction
Not configured No
rnet Explorer\Security Features\Network Protocol Lockdown
Not configured No
rnet Explorer\Security Features\Object Caching Protection
Not configured No
rnet Explorer\Security Features\Protection From Zone Elevation
Not configured No
rnet Explorer\Security Features\Restrict ActiveX Install
Not configured No
rnet Explorer\Security Features\Restrict File Download
Not configured No
rnet Explorer\Security Features\Scripted Window Security Restrictions
Internet Zone Restricted Protocols
Not configured No
\Windows Compone
nts\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Pro

tocols Per Security Zone
Internet Zone Template Not configured No
lorer\Internet Control Panel\Security Page
Intranet Sites: Include all local (intranet) sites not listed in other zones
Not configured No
\Windows Components\Internet Explorer\Internet Control P
anel\Security Page
Intranet Sites: Include all network paths (UNCs)
Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page
Intranet Sites: Include all sites that bypass the proxy server Not configured
No
ge
Intranet Zone Restricted Protocols
Not configured No
\Windows Compone
Intranet Zone Template Not configured No
lorer\Internet Control Panel\Security Page
IP Security policy processing Not configured No
IP-HTTPS State Not configured No
Technologies
ISATAP Router Name
Not configured No
\Network\TCPIP Settings\IPv6 Tra
nsition Technologies
ISATAP State
Not configured No
Technologies
Java permissions
Not configured No
Java permissions
Not configured No
Java permissions
Not configured No
Java permissions
Not configured No
Java permissions
Not configured No
Java permissions
Not configured No
Java permissions
Not configured No
Java permissions
Not configured No
Java permissions
Not configured No
Java permissions
Not configured No
Join RD Connection Broker
Not configured No
te Desktop Services\Remote Desktop Session Host\RD Connection Broker
Launching applications and files in an IFRAME Not configured No
\Windows
\Windows
\Windows
Zone
\Windows
nternet Zone
\Windows
ntranet Zone
\Windows

ocal Machine Zone
\Windows
\Windows
rusted Sites Zone
\Windows
tes Zone
\Windows
Zone
Launching programs and unsafe files
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
hine Zone
Not configured No
\Windows Compone
d Sites Zone
Not configured No
\Windows Compone
ites Zone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Leave Windows Installer and Group Policy Software Installation Data
Not conf
igured No
License server security group Not configured No
te Desktop Services\RD Licensing
Limit audio playback quality
Not configured No
Limit disk space used by offline files Not configured No
\Network\Offline
Files
Limit maximum color depth
Not configured No
te Desktop Services\Remote Desktop Session Host\Remote Session Environment
Limit maximum display resolution
Not configured No
\Windows Compone
nt
Limit maximum number of monitors
Not configured No
\Windows Compone
nt
Limit number of connections
Not configured No
te Desktop Services\Remote Desktop Session Host\Connections
Limit outstanding packets
Not configured No
duler
Limit reservable bandwidth
Not configured No
duler
Limit the age of files in the BITS Peercache
Not configured No
\Network
\Background Intelligent Transfer Service (BITS)
Limit the BITS Peercache size Not configured No
\Network\Background Inte
lligent Transfer Service (BITS)
Limit the maximum BITS job download time
Not configured No
\Network
\Background Intelligent Transfer Service (BITS)
Limit the maximum network bandwidth for BITS background transfers
Not conf
igured No
Limit the maximum network bandwidth used for Peercaching
Not configured
No
Limit the maximum number of BITS jobs for each user
Not configured No
Limit the maximum number of BITS jobs for this computer Not configured No
Limit the maximum number of files allowed in a BITS job Not configured No
Limit the maximum number of ranges that can be added to the file in a BITS job
Not configured No
Limit the size of the entire roaming user profile cache Not configured No
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Profiles
Limit Windows File Protection cache size
Not configured No
\System\
Windows File Protection
List of applications to always report errors for
Not configured No
\Windows Components\Windows Error Reporting\Advanced Error Reporting Settings
List of applications to be excluded
Not configured No
\Windows Compone
List of applications to never report errors for Not configured No
\Windows
Components\Windows Error Reporting\Advanced Error Reporting Settings
Local Machine Zone Restricted Protocols Not configured No
\Windows Compone
Local Machine Zone Template
Not configured No
rnet Explorer\Internet Control Panel\Security Page
Location of the DCs hosting a domain with single label DNS name Not configured
No
Lock all Toolbars
Not configured No
lorer\Toolbars
Lock Enhanced Storage when the computer is locked
Not configured No
Locked-Down Internet Zone Template
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel\Security Page
Locked-Down Intranet Zone Template
Not configured No
\Windows Compone
Locked-Down Local Machine Zone Template Not configured No
\Windows Compone
Locked-Down Restricted Sites Zone Template
Not configured No
\Windows
Components\Internet Explorer\Internet Control Panel\Security Page
Locked-Down Trusted Sites Zone Template Not configured No
\Windows Compone
Log Access
Not configured No
\Windows Components\Event Log Service\Ap
plication
Log Access
Not configured No
\Windows Components\Event Log Service\Se
curity
Log Access
Not configured No
tup
Log Access
Not configured No
\Windows Components\Event Log Service\Sy
stem
Log directory pruning retry events
Not configured No
\Printers
Log event when quota limit exceeded
Not configured No
\System\Disk Quo
tas
Log event when quota warning level exceeded
Not configured No
\System\
Disk Quotas
Log File Debug Output Level
Not configured No
\System\Net Logon
Log File Path Not configured No
\Windows Components\Event Log Service\Ap
plication
curity
tup
\Windows Components\Event Log Service\Sy
stem
Logging Not configured No
Logon options Not configured No
\Windows Components\Internet Explorer\In
ternet Control Panel\Security Page\Internet Zone
ternet Control Panel\Security Page\Intranet Zone
ternet Control Panel\Security Page\Local Machine Zone
ternet Control Panel\Security Page\Locked-Down Internet Zone
ternet Control Panel\Security Page\Locked-Down Intranet Zone
ternet Control Panel\Security Page\Locked-Down Local Machine Zone
ternet Control Panel\Security Page\Locked-Down Restricted Sites Zone
ternet Control Panel\Security Page\Locked-Down Trusted Sites Zone
ternet Control Panel\Security Page\Restricted Sites Zone
ternet Control Panel\Security Page\Trusted Sites Zone
Loose XAML files
Not configured No
Loose XAML files
Not configured No
Loose XAML files
Not configured No
Loose XAML files
Not configured No
Loose XAML files
Not configured No
Loose XAML files
Not configured No
Loose XAML files
Not configured No
Loose XAML files
Not configured No
Loose XAML files
Not configured No
Loose XAML files
Not configured No
Low Battery Notification Action Not configured No
\System\Power Management
\Notification Settings
Low Battery Notification Level Not configured No
\Notification Settings
Make Parental Controls control panel visible on a Domain
Not configured
No
\Windows Components\Parental Controls
Make proxy settings per-machine (rather than per-user) Not configured No

MaxConcurrentUsers
Not configured No
\Windows Components\Windows Remo
te Shell
Maximum DC Discovery Retry Interval Setting for Background Callers
Not conf
igured No
\System\Net Logon
Maximum Log File Size Not configured No
\System\Net Logon
Maximum Log Size (KB) Not configured No
\Windows Components\Event Log Se
rvice\Application
rvice\Security
rvice\Setup
rvice\System
Maximum number of connections per server (HTTP 1.0)
Not configured No
\Windows Components\Internet Explorer\Security Features\AJAX
Maximum number of connections per server (HTTP 1.1)
Not configured No
\Windows Components\Internet Explorer\Security Features\AJAX
Maximum retries to unload and update user profile
Not configured No
Maximum wait time for Group Policy scripts
Not configured No
\System\
Scripts
Microsoft Support Diagnostic Tool: Configure execution level
Not configured
No
\System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Too
l
Microsoft Support Diagnostic Tool: Restrict tool download
Not configured
No
\System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Too
l
Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with S
upport Provider Not configured No
\System\Troubleshooting and Diagnostics\
Microsoft Support Diagnostic Tool
Minimum Idle Connection Timeout for RPC/HTTP connections
Not configured
No
\System\Remote Procedure Call
Navigate windows and frames across different domains
Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Inter
net Zone
Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intra
net Zone
Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local
Machine Zone
Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locke
d-Down Internet Zone
Not configured No
d-Down Intranet Zone
Not configured No
d-Down Local Machine Zone
Not configured No
d-Down Restricted Sites Zone
Not configured No
d-Down Trusted Sites Zone
Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restr
icted Sites Zone

Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trust
ed Sites Zone
Negative DC Discovery Cache Setting
Not configured No
\System\Net Logo
n
Netlogon share compatibility
Not configured No
\System\Net Logon
Network control service type
Not configured No
Not configured No
Not configured No
Network Projector Port Setting Not configured No
\Windows Components\Netw
ork Projector
No auto-restart with logged on users for scheduled automatic updates installatio
ns
Not configured No
Non-conforming packets Not configured No
\Network\QoS Packet Scheduler\La
yer-2 priority value
Non-default server disconnect actions Not configured No
\Network\Offline
Files
Notify blocked drivers Not configured No
\System\Troubleshooting and Diag
nostics\Application Compatibility Diagnostics
Notify user of successful smart card driver installation
Not configured
No
Offer Remote Assistance Not configured No
\System\Remote Assistance
Only allow approved domains to use ActiveX controls without prompt
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Only allow local user profiles Not configured No
Only use Package Point and print
Not configured No
\Printers
Only use the ActiveX Installer Service for installation of ActiveX Controls
Not configured No
Open files based on content, not file extension Not configured No
\Windows

\Windows
\Windows
Zone
\Windows
nternet Zone
\Windows
ntranet Zone
\Windows
ocal Machine Zone
\Windows
\Windows
rusted Sites Zone
\Windows
tes Zone
\Windows
Zone
Optimize visual experience for Remote Desktop Services sessions
Not conf
igured No
on Host\Remote Session Environment
Override print driver execution compatibility setting reported by print driver
Not configured No
\Printers
Override the More Gadgets link Not configured No
top Gadgets
Package Point and print - Approved servers
Not configured No
\Printer
s
Permitted Managers
Not configured No
\Network\SNMP
Play animations in web pages
Not configured No
rnet Explorer\Internet Control Panel\Advanced Page
Play sounds in web pages
Not configured No
Play videos in web pages
Not configured No
Point and Print Restrictions
Not configured No
\Printers
Pop-up allow list
Not configured No
lorer
Positive Periodic DC Cache Refresh for Background Callers
Not configured
No
\System\Net Logon
Positive Periodic DC Cache Refresh for Non-Background Callers Not configured
No
\System\Net Logon
Pre-populate printer search location text
Not configured No
\Printer
s
Prevent "Fix settings" functionality
Not configured No
\Windows Compone
Prevent access to 16-bit applications Not configured No
\Windows Compone
nts\Application Compatibility
Prevent adding UNC locations to index from Control Panel
Not configured
No
Prevent adding user-specified locations to the All Locations menu
Not conf
igured No
Prevent Automatic Updates

Not configured No
ows Media Player
Prevent automatically adding shared folders to the index
Not configured
No
Prevent Back-ESC mapping
Not configured No
et PC\Hardware Buttons
Prevent backing up to local disks
Not configured No
\Windows Compone
nts\Backup\Client
Prevent backing up to network location Not configured No
\Windows Compone
nts\Backup\Client
Prevent backing up to optical media (CD/DVD)
Not configured No
\Windows
Components\Backup\Client
Prevent Bypassing SmartScreen Filter Warnings Not configured No
\Windows
Prevent clients from querying the index remotely
Not configured No
Prevent creation of a system restore point during device activity that would nor
mally prompt creation of a restore point
Not configured No
\System\
Device Installation
Prevent customization of indexed locations in Control Panel
Not configured
No
Prevent Deleting Cookies
Not configured No
Prevent Deleting Favorites Site Data
Not configured No
\Windows Compone
nts\Internet Explorer\Delete Browsing History
Prevent Deleting Form Data
Not configured No
Prevent Deleting InPrivate Filtering data
Not configured No
\Windows
Prevent Deleting Passwords
Not configured No
Prevent Deleting Temporary Internet Files
Not configured No
\Windows
Prevent Deleting Web sites that the User has Visited
Not configured No
\Windows Components\Internet Explorer\Delete Browsing History
Prevent Desktop Shortcut Creation
Not configured No
\Windows Compone
nts\Windows Media Player
Prevent device metadata retrieval from the Internet
Not configured No
Prevent display of the user interface for critical errors
Not configured
No
\Windows Components\Windows Error Reporting
Prevent displaying advanced indexing options in Control Panel Not configured
No
Prevent flicks Not configured No
\Windows Components\Tablet PC\Pen UX Beh
aviors
Prevent Flicks Learning Mode
Not configured No
et PC\Pen Flicks Learning
Prevent ignoring certificate errors
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel
Prevent IIS installation
Not configured No
rnet Information Services
Prevent indexing certain paths Not configured No
\Windows Components\Sear
ch
Prevent indexing e-mail attachments
Not configured No
\Windows Compone
nts\Search
Prevent indexing files in offline files cache Not configured No
\Windows
Components\Search
Prevent indexing Microsoft Office Outlook
Not configured No
\Windows
Components\Search
Prevent indexing of certain file types Not configured No
\Windows Compone
nts\Search
Prevent indexing public folders Not configured No
\Windows Components\Sear
ch
Prevent indexing when running on battery power to conserve energy
Not conf
igured No
Prevent Input Panel tab from appearing Not configured No
\Windows Compone
nts\Tablet PC\Input Panel
Prevent installation of devices not described by other policy settings Not conf
igured No
Prevent installation of devices that match any of these device IDs
Not conf
igured No
Prevent installation of devices using drivers that match these device setup clas
ses
Not configured No
Restrictions
Prevent installation of removable devices
Not configured No
\System\
Device Installation\Device Installation Restrictions
Prevent Internet Explorer Search box from displaying
Not configured No
Prevent launch an application Not configured No
Prevent license upgrade Not configured No
\Windows Components\Remote Deskt
op Services\RD Licensing
Prevent Media Sharing Not configured No
\Windows Components\Windows Medi
a Player
Prevent memory overwrite on restart
Not configured No
\Windows Compone
nts\BitLocker Drive Encryption
Prevent participation in the Customer Experience Improvement Program
Not conf
igured No
Prevent performance of First Run Customize settings
Not configured No
Prevent plaintext PINs from being returned by Credential Manager
Not conf
igured No
Prevent press and hold Not configured No
\Windows Components\Tablet PC\Ha
rdware Buttons
Prevent Quick Launch Toolbar Shortcut Creation Not configured No
\Windows
Components\Windows Media Player
Prevent redirection of devices that match any of these device Ids
Not conf
igured No
\System\Device Redirection\Device Redirection Restrictions
Prevent redirection of USB devices
Not configured No
\System\Device R
edirection\Device Redirection Restrictions
Prevent restoring local previous versions
Not configured No
\Windows
Prevent restoring previous versions from backups
Not configured No
\Windows Components\Windows Explorer\Previous Versions
Prevent restoring remote previous versions
Not configured No
\Windows
Prevent Roaming Profile changes from propagating to the server Not configured
No
Prevent setting of the code download path for each machine
Not configured
No
\Windows Components\Internet Explorer\Corporate Settings\Code Download
Prevent Task Run or End Not configured No
er
Prevent the computer from joining a homegroup Not configured No
\Windows
Components\HomeGroup
Prevent the configuration of cipher strength update information URLs
Not conf
igured No
\Windows Components\Internet Explorer\Internet Settings\Componen
t Updates\Help Menu > About Internet Explorer
Prevent the deletion of temporary Internet files and cookies
Not configured
No
Prevent the user from running the Backup Status and Configuration program
Not configured No
\Windows Components\Backup\Client
Prevent unwanted iFilters and protocol handlers Not configured No
\Windows
Components\Search
Prevent use of Offline Files folder
Not configured No
\Network\Offline
Files
Prevent Video Smoothing Not configured No
\Windows Components\Windows Medi
a Player
Prevent Windows Anytime Upgrade from running. Not configured No
\Windows
Components\Windows Anytime Upgrade
Prevent Windows from sending an error report when a device driver requests addit
ional software during installation
Not configured No
\System\Device I
nstallation
Prevent Windows Media DRM Internet Access
Not configured No
\Windows
Components\Windows Media Digital Rights Management
Preview pane location Not configured No
Primary DNS Suffix
Not configured No
\Network\DNS Client
Primary DNS Suffix Devolution Not configured No
\Network\DNS Client
Primary DNS Suffix Devolution Level
Not configured No
\Network\DNS Cli
ent
Printer browsing
Not configured No
\Printers
Prioritize all digitally signed drivers equally during the driver ranking and se
lection process Not configured No
Priority Set in the DC Locator DNS SRV Records Not configured No
\System\
Net Logon\DC Locator DNS Records
Process List
Not configured No
\Windows Components\Internet Explorer\Ap
plication Compatibility\Enable cut, copy or paste operations from the clipboard
if URLACTION_SCRIPT_PASTE is set to Prompt
Process List
Not configured No
Process List
Not configured No
curity Features\Binary Behavior Security Restriction
Process List
Not configured No
curity Features\Consistent Mime Handling
Process List
Not configured No
curity Features\Information Bar
Process List
Not configured No
curity Features\Local Machine Zone Lockdown Security
Process List
Not configured No
curity Features\Mime Sniffing Safety Feature
Process List
Not configured No
curity Features\MK Protocol Security Restriction
Process List
Not configured No
curity Features\Network Protocol Lockdown
Process List
Not configured No
curity Features\Object Caching Protection
Process List
Not configured No
curity Features\Protection From Zone Elevation
Process List
Not configured No
curity Features\Restrict ActiveX Install
Process List
Not configured No
curity Features\Restrict File Download
Process List
Not configured No
curity Features\Scripted Window Security Restrictions
Prohibit Access of the Windows Connect Now wizards
Not configured No
\Network\Windows Connect Now
Prohibit Browse Not configured No
\Windows Components\Task Scheduler
Prohibit Drag-and-Drop Not configured No
er
Prohibit Flyweight Patching
Not configured No
ows Installer
Prohibit installation and configuration of Network Bridge on your DNS domain net
work
Not configured No
Prohibit installing or uninstalling color profiles
Not configured No
\Windows Components\Windows Color System
Prohibit 'Make Available Offline' for these file and folders
Not configured
No
Prohibit New Task Creation
Not configured No
\Windows Components\Task
Scheduler
Prohibit non-administrators from applying vendor signed updates Not configured
No
Prohibit patching
Not configured No
\Windows Components\Windows Inst
aller
Prohibit removal of updates
Not configured No
ows Installer
Prohibit rollback
Not configured No
aller
Prohibit Task Deletion Not configured No
er
Prohibit use of Internet Connection Firewall on your DNS domain network Not conf
igured No
Prohibit use of Internet Connection Sharing on your DNS domain network Not conf
igured No
Prohibit Use of Restart Manager Not configured No
ows Installer
Prohibit user configuration of Offline Files
Not configured No
\Network
\Offline Files
Prohibit User Installs Not configured No
aller
Prompt for credentials on the client computer Not configured No
\Windows
Prompt user when a slow network connection is detected Not configured No
Propagation of extended error information
Not configured No
\System\
Remote Procedure Call
Provide the unique identifiers for your organization
Not configured No
Prune printers that are not automatically republished Not configured No
\Printers
Qualitative service type
Not configured No
Not configured No
Not configured No
Reduce Display Brightness (On Battery) Not configured No
\System\Power Ma
nagement\Video and Display Settings
Reduce Display Brightness (Plugged In) Not configured No
\System\Power Ma
Refresh Interval of the DC Locator DNS Records Not configured No
\System\
Register DNS records with connection-specific DNS suffix
Not configured
No
\Network\DNS Client
Register PTR Records
Not configured No
\Network\DNS Client
Registration Refresh Interval Not configured No
\Network\DNS Client
Registry policy processing
Not configured No
Reminder balloon frequency
Not configured No
Reminder balloon lifetime
Not configured No
Removable Disks: Deny execute access
Not configured No
\System\Removabl
e Storage Access
Removable Disks: Deny read access
Not configured No
\System\Removabl
e Storage Access
Removable Disks: Deny write access
Not configured No
\System\Removabl
e Storage Access
Remove "Disconnect" option from Shut Down dialog
Not configured No
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote S
ession Environment
Remove Boot / Shutdown / Logon / Logoff status messages Not configured No
\System
Remove browse dialog box for new source Not configured No
\Windows Compone
Remove 'Make Available Offline' Not configured No
Remove Program Compatibility Property Page
Not configured No
\Windows
Components\Application Compatibility
Remove users ability to invoke machine policy refresh Not configured No
Remove Windows Security item from Start menu
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session E
nvironment
Replace Addresses In Conflicts Not configured No
\Network\DNS Client
Report operating system errors Not configured No
ows Error Reporting\Advanced Error Reporting Settings
Report unplanned shutdown events
Not configured No
\Windows Compone
Report when logon server was not available during user logon
Not configured
No
Re-prompt for restart with scheduled installations
Not configured No
Require a Password When a Computer Wakes (On Battery) Not configured No
Require a Password When a Computer Wakes (Plugged In) Not configured No
Require a PIN to access data on devices running Microsoft firmware
Not conf
igured No
\Windows Components\Windows SideShow
Require additional authentication at startup
Not configured No
\Windows
Require additional authentication at startup (Windows Server 2008 and Windows Vi
sta)
Not configured No
\Windows Components\BitLocker Drive Encryption\O
perating System Drives
Require domain users to elevate when setting a network's location
Not conf
igured No
Require secure RPC communication
Not configured No
\Windows Compone
nts\Remote Desktop Services\Remote Desktop Session Host\Security
Require strict KDC validation Not configured No
\System\Kerberos
Require strict target SPN match on remote procedure calls
Not configured
No
\System\Kerberos
Require trusted path for credential entry.
Not configured No
\Windows
Components\Credential User Interface
Require use of specific security layer for remote (RDP) connections
Not conf
igured No
on Host\Security
Require user authentication for remote connections by using Network Level Authen
tication
Not configured No
\Windows Components\Remote Desktop Servi
ces\Remote Desktop Session Host\Security
Reschedule Automatic Updates scheduled installations
Not configured No
Reserve Battery Notification Level
Not configured No
\System\Power Ma
Restrict changing the default search provider Not configured No
\Windows
Restrict Internet communication Not configured No
\System\Internet Communi
cation Management
Restrict potentially unsafe HTML Help functions to specified folders
Not conf
igured No
\System
Restrict Remote Desktop Services users to a single Remote Desktop Services sessi
on
Not configured No
\Windows Components\Remote Desktop Services\Remo
te Desktop Session Host\Connections
Restrict search providers to a specific list of providers
Not configured
No
Restrict system locales Not configured No
\System\Locale Services
Restrict these programs from being launched from Help Not configured No
\System
Restrict unpacking and installation of gadgets that are not digitally signed.
Not configured No
\Windows Components\Desktop Gadgets
Restrict user locales Not configured No
\System\Locale Services
Restricted Sites Zone Restricted Protocols
Not configured No
\Windows
Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restri
cted Protocols Per Security Zone
Restricted Sites Zone Template Not configured No
Restrictions for Unauthenticated RPC clients
Not configured No
\System\
Restricts the UI language Windows uses for all logged users
Not configured
No
\Control Panel\Regional and Language Options
Retain old events
Not configured No
rvice\Application
Retain old events
Not configured No
rvice\Security
Retain old events
Not configured No
rvice\Setup
Retain old events
Not configured No
rvice\System
Reverse the subject name stored in a certificate when displaying
Not conf
igured No
Route all traffic through the internal network Not configured No
\Network
\Network Connections
RPC Endpoint Mapper Client Authentication
Not configured No
\System\
RPC Troubleshooting State Information Not configured No
\System\Remote P
rocedure Call
Run .NET Framework-reliant components not signed with Authenticode
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No
Not conf
igured No

Not conf
igured No
Not conf
igured No
Not conf
igured No
Run .NET Framework-reliant components signed with Authenticode Not configured
No
ge\Internet Zone
No
ge\Intranet Zone
No
No
No
No
No
No
No
No
Run ActiveX controls and plugins
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
Zone
Not configured No
\Windows Compone
hine Zone
Not configured No
\Windows Compone
d Sites Zone
Not configured No
\Windows Compone
ites Zone

Not configured No
\Windows Compone
Not configured No
\Windows Compone
Run logon scripts synchronously Not configured No
\System\Scripts
Run shutdown scripts visible
Not configured No
\System\Scripts
Run startup scripts asynchronously
Not configured No
\System\Scripts
Run startup scripts visible
Not configured No
\System\Scripts
Run these programs at user logon
Not configured No
\System\Logon
Run Windows PowerShell scripts first at computer startup, shutdown
Not conf
igured No
\System\Scripts
Run Windows PowerShell scripts first at user logon, logoff
Not configured
No
\System\Scripts
Scavenge Interval
Not configured No
\System\Net Logon
Script ActiveX controls marked safe for scripting
Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Inter
net Zone
Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intra
net Zone
Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local
Machine Zone
Not configured No
d-Down Internet Zone
Not configured No
d-Down Intranet Zone
Not configured No
d-Down Local Machine Zone
Not configured No
d-Down Restricted Sites Zone
Not configured No
d-Down Trusted Sites Zone
Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restr
icted Sites Zone
Not configured No
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trust
ed Sites Zone
Scripting of Java applets
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
e
Not configured No
Zone

Not configured No
e
Not configured No
Not configured No
Scripts policy processing
Not configured No
Security policy processing
Not configured No
Security Zones: Do not allow users to add/delete sites Not configured No
Security Zones: Do not allow users to change policies Not configured No
Security Zones: Use only machine settings
Not configured No
\Windows
Select an Active Power Plan
Not configured No
Select the Lid Switch Action (On Battery)
Not configured No
\System\
Power Management\Button Settings
Select the Lid Switch Action (Plugged In)
Not configured No
\System\
Select the Power Button Action (On Battery)
Not configured No
\System\
Select the Power Button Action (Plugged In)
Not configured No
\System\
Select the Sleep Button Action (On Battery)
Not configured No
\System\
Select the Sleep Button Action (Plugged In)
Not configured No
\System\
Select the Start Menu Power Button Action (On Battery) Not configured No
\System\Power Management\Button Settings
Select the Start Menu Power Button Action (Plugged In) Not configured No
\System\Power Management\Button Settings
Selectively allow the evaluation of a symbolic link
Not configured No
\System\Filesystem
Send internationalized domain names
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Control Panel
Server Authentication Certificate Template
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Security
Set a support web page link
Not configured No
ows Explorer
Set BranchCache Distributed Cache mode Not configured No
\Network\BranchC
ache
Set BranchCache Hosted Cache mode
Not configured No
\Network\BranchC
ache
Set client connection encryption level Not configured No
\Windows Compone
nts\Remote Desktop Services\Remote Desktop Session Host\Security
Set compression algorithm for RDP data Not configured No
\Windows Compone
nt
Set large or small icon view in desktop search results Not configured No
Set location of Stop and Refresh buttons
Not configured No
\Windows
Components\Internet Explorer\Toolbars
Set maximum wait time for the network if a user has a roaming user profile or re
mote home directory
Not configured No
Set path for Remote Desktop Services Roaming User Profile
Not configured
No
Profiles
Set percentage of disk space used for client computer cache
Not configured
No
\Network\BranchCache
Set PNRP cloud to resolve only Not configured No

\Network\Microsoft Peerto-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds
\Network\Microsoft Peerto-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
\Network\Microsoft Peerto-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
Set Remote Desktop Services User Home Directory Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Profiles
Set roaming profile path for all users logging onto this computer
Not conf
igured No
Set rules for remote control of Remote Desktop Services user sessions Not conf
igured No
on Host\Connections
Set tab process growth Not configured No
lorer
Set the Email IDs to which notifications are to be sent Not configured No
\Windows Components\Windows System Resource Manager
Set the Remote Desktop licensing mode Not configured No
\Windows Compone
nts\Remote Desktop Services\Remote Desktop Session Host\Licensing
Set the Seed Server
Not configured No
\Network\Microsoft Peer-to-Peer
Networking Services\Peer Name Resolution Protocol\Global Clouds
Set the Seed Server
Not configured No
Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
Set the Seed Server
Not configured No
Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
Set the SMTP Server used to send notifications Not configured No
\Windows
Components\Windows System Resource Manager
Set the Time interval in minutes for logging accounting data
Not configured
No
\Windows Components\Windows System Resource Manager
Set time limit for active but idle Remote Desktop Services sessions
Not conf
igured No
on Host\Session Time Limits
Set time limit for active Remote Desktop Services sessions
Not configured
No
Session Time Limits
Set time limit for disconnected sessions
Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Lim
its
Set timer resolution
Not configured No
\Network\QoS Packet Scheduler
Set up a maintenance schedule to limit the maximum network bandwidth used for BI
TS background transfers Not configured No
Set up a work schedule to limit the maximum network bandwidth used for BITS back
ground transfers
Not configured No
Set Windows File Protection scanning
Not configured No
\System\Windows
File Protection
Sets how often a DFS Client discovers DC's
Not configured No
\Network
Short name creation options
Not configured No
\System\Filesystem\NTFS
Site Name
Not configured No
\System\Net Logon
Site to Zone Assignment List
Not configured No
Sites Covered by the Application Directory Partition Locator DNS SRV Records
Not configured No
Sites Covered by the DC Locator DNS SRV Records Not configured No
\System\
Sites Covered by the GC Locator DNS SRV Records Not configured No
\System\
Slow network connection timeout for user profiles
Not configured No
Software channel permissions

Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
e
Not configured No
Zone
Not configured No
e
Not configured No
Not configured No
Software Installation policy processing Not configured No
\System\Group Po
licy
Solicited Remote Assistance
Not configured No
e
Specify a Custom Active Power Plan
Not configured No
\System\Power Ma
nagement
Specify a default color Not configured No
\Windows Components\Desktop Wind
ow Manager\Window Frame Coloring
Specify channel binding token hardening level Not configured No
\Windows
Components\Windows Remote Management (WinRM)\WinRM Service
Specify idle Timeout
Not configured No
te Shell
Specify intranet Microsoft update service location
Not configured No
Specify maximum amount of memory in MB per Shell
Not configured No
\Windows Components\Windows Remote Shell
Specify maximum number of processes per Shell Not configured No
\Windows
Components\Windows Remote Shell
Specify maximum number of remote shells per user
Not configured No
\Windows Components\Windows Remote Shell
Specify RD Session Host server fallback printer driver behavior Not configured
No
Printer Redirection
Specify search order for device driver source locations Not configured No
Specify SHA1 thumbprints of certificates representing trusted .rdp publishers
Not configured No
\Windows Components\Remote Desktop Services\Remote Deskt
op Connection Client
Specify Shell Timeout Not configured No
te Shell
Specify the Display Dim Brightness (On Battery) Not configured No
\System\
Power Management\Video and Display Settings
Specify the Display Dim Brightness (Plugged In) Not configured No
\System\
Specify the System Hibernate Timeout (On Battery)
Not configured No
Specify the System Hibernate Timeout (Plugged In)
Not configured No

Specify the System Sleep Timeout (On Battery) Not configured No
\System\
Power Management\Sleep Settings
Specify the System Sleep Timeout (Plugged In) Not configured No
\System\
Power Management\Sleep Settings
Specify the Unattended Sleep Timeout (On Battery)
Not configured No
Specify the Unattended Sleep Timeout (Plugged In)
Not configured No
Specify Windows File Protection cache location Not configured No
\System\
Windows File Protection
Specify Windows installation file location
Not configured No
\System
Specify Windows Service Pack installation file location Not configured No
\System
SSL Cipher Suite Order Not configured No
\Network\SSL Configuration Setti
ngs
Start a program on connection Not configured No
te Desktop Services\Remote Desktop Session Host\Remote Session Environment
Startup policy processing wait time
Not configured No
\System\Group Po
licy
Stop indexing in the event of limited hard drive space Not configured No
Store BitLocker recovery information in Active Directory Domain Services(Windows
Server 2008 and Windows Vista) Not configured No
\Windows Components\BitL
ocker Drive Encryption
Subfolders always available offline
Not configured No
\Network\Offline
Files
Submit non-encrypted form data Not configured No
e
Zone
e
Switch to the Simplified Chinese (PRC) gestures Not configured No
\Windows
Synchronize all offline files before logging off
Not configured No
Synchronize all offline files when logging on Not configured No
\Network
\Offline Files
Synchronize offline files before suspend
Not configured No
\Network
\Offline Files
Sysvol share compatibility
Not configured No
\System\Net Logon
Tag Windows Customer Experience Improvement data with Study Identifier Not conf
igured No
\Windows Components\Windows Customer Experience Improvement Prog
ram
Tape Drives: Deny execute access
Not configured No
\System\Removabl
e Storage Access
Tape Drives: Deny read access Not configured No
e Access
Tape Drives: Deny write access Not configured No
e Access
Teredo Client Port
Not configured No
Teredo Default Qualified
Not configured No
\Network\TCPIP Settings\
IPv6 Transition Technologies
Teredo Refresh Rate
Not configured No
Teredo Server Name
Not configured No
Teredo State
Not configured No
Technologies
Terminate session when time limits are reached Not configured No
\Windows
Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Lim
its
Time (in seconds) to force reboot
Not configured No
\System\Removabl
e Storage Access
Time (in seconds) to force reboot when required for policy changes to take effec
t
Not configured No
Restrictions
Timeout for dialog boxes
Not configured No
Timeout for fast user switching events Not configured No
\Windows Compone
nts\Biometrics
Timeout for hung logon sessions during shutdown Not configured No
\Windows
Components\Shutdown Options
Timeout for inactive BITS jobs Not configured No
\Network\Background Inte
lligent Transfer Service (BITS)
Traps for public community
Not configured No
\Network\SNMP
Troubleshooting: Allow users to access and run Troubleshooting Wizards Not conf
igured No
\System\Troubleshooting and Diagnostics\Scripted Diagnostics
Troubleshooting: Allow users to access online troubleshooting content on Microso
ft servers from the Troubleshooting Control Panel (via the Windows Online Troubl
eshooting Service - WOTS)
Not configured No
\System\Troubleshooting
and Diagnostics\Scripted Diagnostics
Trusted Hosts Not configured No
\Windows Components\Windows Remote Manag
ement (WinRM)\WinRM Client
Trusted Sites Zone Restricted Protocols Not configured No
\Windows Compone
Trusted Sites Zone Template
Not configured No
Try Next Closest Site Not configured No
\System\Net Logon\DC Locator DNS
Records
TTL Set in the A and PTR records
Not configured No
\Network\DNS Cli
ent
TTL Set in the DC Locator DNS Records Not configured No
\System\Net Logo
n\DC Locator DNS Records
Turn off "Delete Browsing History" functionality
Not configured No
Turn off "Found New Hardware" balloons during device installation
Not conf
igured No
Turn off Accelerators Not configured No
lorer\Accelerators
Turn off access to all Windows Update features Not configured No
\System\
Internet Communication Management\Internet Communication settings

Turn off access to the OEM and Microsoft branding section
Not configured
No
\System\Performance Control Panel
Turn off access to the performance center core section Not configured No
Turn off access to the solutions to performance problems section
Not conf
igured No
Turn off Active Help
Not configured No
\Windows Components\Online Assis
tance
Turn off ActiveX opt-in prompt Not configured No
rnet Explorer
Turn Off Adaptive Display Timeout (On Battery) Not configured No
\System\
Turn Off Adaptive Display Timeout (Plugged In) Not configured No
\System\
Turn off addition and removal of feeds and Web Slices Not configured No
\Windows Components\RSS Feeds
Turn off Application Compatibility Engine
Not configured No
\Windows
Turn off Application Telemetry Not configured No
\Windows Components\Appl
ication Compatibility
Turn off AutoComplete integration with Input Panel
Not configured No
Turn off Automatic Crash Recovery Prompt
Not configured No
\Windows
Turn off automatic learning
Not configured No
et PC\Handwriting personalization
Turn off Automatic Root Certificates Update
Not configured No
\System\
Turn off automatic termination of applications that block or cancel shutdown
Not configured No
\System\Shutdown Options
Turn off automatic wake Not configured No
\Windows Components\Windows Side
Show
Turn off Autoplay
Not configured No
\Windows Components\AutoPlay Pol
icies
Turn off Autoplay for non-volume devices
Not configured No
\Windows
Components\AutoPlay Policies
Turn off background refresh of Group Policy
Not configured No
\System\
Group Policy
Turn off background sync for feeds and Web Slices
Not configured No
Turn Off Boot and Resume Optimizations Not configured No
\System\Disk NV
Cache
Turn Off Cache Power Mode
Not configured No
\System\Disk NV Cache
Turn off changing the URL to be displayed for checking updates to Internet Explo
rer and Internet Tools Not configured No
lorer\Internet Settings\Component Updates\Periodic check for updates to Internet
Explorer and Internet Tools
Turn off ClearType
Not configured No
lorer\Internet Control Panel\Advanced Page
Turn off Compatibility View
Not configured No
rnet Explorer\Compatibility View
Turn off Compatibility View button
Not configured No
\Windows Compone
nts\Internet Explorer\Compatibility View
Turn off Configuration Not configured No
\System\System Restore
Turn off configuration of default behavior of new tab creation Not configured
No
Turn off configuration of tabbed browsing pop-up behavior
Not configured
No
Turn off configuration of window reuse Not configured No
\Windows Compone
Turn off configuring the update check interval (in days)
Not configured
No
\Windows Components\Internet Explorer\Internet Settings\Component Update
s\Periodic check for updates to Internet Explorer and Internet Tools
Turn off Connect to a Network Projector Not configured No
\Windows Compone
nts\Network Projector
Turn off Crash Detection
Not configured No
rnet Explorer
Turn off creation of System Restore Checkpoints Not configured No
\Windows
Turn off Cross Document Messaging
Not configured No
\Windows Compone
Turn off Data Execution Prevention
Not configured No
\Windows Compone
nts\Internet Explorer\Security Features
Turn off Data Execution Prevention for Explorer Not configured No
\Windows
Components\Windows Explorer
Turn off Data Execution Prevention for HTML Help Executible
Not configured
No
\System
Turn off Data URI Support
Not configured No
rnet Explorer\Security Features
Turn off desktop gadgets
Not configured No
top Gadgets
Turn off Developer Tools
Not configured No
Turn off displaying the Internet Explorer Help Menu
Not configured No
Turn off downloading of enclosures
Not configured No
\Windows Compone
nts\RSS Feeds
Turn off downloading of game information
Not configured No
\Windows
Components\Game Explorer
Turn off downloading of print drivers over HTTP Not configured No
\System\
Turn off Encryption Support
Not configured No
Turn off Event Viewer "Events.asp" links
Not configured No
\System\
Turn off Favorites bar Not configured No
lorer
Turn off feed and Web Slices discovery Not configured No
\Windows Compone
nts\RSS Feeds
Turn Off First-Run Opt-In
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
e
Not configured No
Zone
Not configured No
e
Not configured No

Not configured No
Turn off game updates Not configured No
\Windows Components\Game Explore
r
Turn off handwriting personalization data sharing
Not configured No
\System\Internet Communication Management\Internet Communication settings
Turn off handwriting recognition error reporting
Not configured No
\System\Internet Communication Management\Internet Communication settings
Turn off hardware buttons
Not configured No
Turn off heap termination on corruption Not configured No
\Windows Compone
nts\Windows Explorer
Turn off Help and Support Center "Did you know?" content
Not configured
No
\System\Internet Communication Management\Internet Communication setting
s
Turn off Help and Support Center Microsoft Knowledge Base search
Not conf
igured No
\System\Internet Communication Management\Internet Communication
settings
Turn Off Hybrid Sleep (On Battery)
Not configured No
\System\Power Ma
nagement\Sleep Settings
Turn Off Hybrid Sleep (Plugged In)
Not configured No
\System\Power Ma
nagement\Sleep Settings
Turn off InPrivate Browsing
Not configured No
Turn off InPrivate Filtering
Not configured No
Turn off Internet Connection Wizard if URL connection is referring to Microsoft.
com
Not configured No
\System\Internet Communication Management\Intern
et Communication settings
Turn off Internet download for Web publishing and online ordering wizards
Not configured No
\System\Internet Communication Management\Internet Commu
nication settings
Turn off Internet File Association service
Not configured No
\System\
Turn off legacy remote shutdown interface
Not configured No
\Windows
Components\Shutdown Options
Turn off Local Group Policy objects processing Not configured No
\System\
Group Policy
Turn off location
Not configured No
\Windows Components\Location and
Sensors
Turn off location scripting
Not configured No
\Windows Components\Loca
tion and Sensors
Turn Off Low Battery User Notification Not configured No
\System\Power Ma
Turn off Managing Phishing filter
Not configured No
\Windows Compone
Turn off Managing Pop-up Allow list
Not configured No
\Windows Compone
Turn off managing Pop-up filter level Not configured No
\Windows Compone
Turn off Managing SmartScreen Filter
Not configured No
\Windows Compone
Turn off Microsoft Peer-to-Peer Networking Services
Not configured No
\Network\Microsoft Peer-to-Peer Networking Services
Turn off Multicast Bootstrap
Not configured No
Not configured No
Not configured No
\Network\Microsoft Peer-
to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds

Turn off Multicast Name Resolution
Not configured No
\Network\DNS Cli
ent
Turn Off Non Volatile Cache Feature
Not configured No
\System\Disk NV
Cache
Turn off numerical sorting in Windows Explorer Not configured No
\Windows
Components\Windows Explorer
Turn off page zooming functionality
Not configured No
\Windows Compone
Turn off password security in Input Panel
Not configured No
\Windows
Turn off pen feedback Not configured No
\Windows Components\Tablet PC\Cu
rsors
Turn off PNRP cloud creation
Not configured No
Not configured No
Not configured No
\Network\Microsoft Peerto-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
Turn off pop-up management
Not configured No
rnet Explorer
Turn off printing over HTTP
Not configured No
\System\Internet Communi
cation Management\Internet Communication settings
Turn off Problem Steps Recorder Not configured No
Turn off Profile Assistant
Not configured No
Turn off Program Compatibility Assistant
Not configured No
\Windows
Turn off Program Inventory
Not configured No
Turn off Quick Tabs functionality
Not configured No
\Windows Compone
Turn off Real-Time Monitoring Not configured No
ows Defender
Turn off Registration if URL connection is referring to Microsoft.com Not conf
igured No
settings
Turn off reminder balloons
Not configured No
Turn off Reopen Last Browsing Session Not configured No
\Windows Compone
Turn off restore functionality Not configured No
up\Client
Turn off Resultant Set of Policy logging
Not configured No
\System\
Group Policy
Turn off Routinely Taking Action
Not configured No
\Windows Compone
nts\Windows Defender
Turn off Search Companion content file updates Not configured No
\System\
Turn off sensors
Not configured No
\Windows Components\Location and
Sensors
Turn off shell protocol protected mode Not configured No
\Windows Compone
nts\Windows Explorer
Turn Off Solid State Mode
Not configured No
\System\Disk NV Cache
Turn off suggestions for all user-installed providers Not configured No
Turn off SwitchBack Compatibility Engine
Not configured No
\Windows
Turn off System Restore Not configured No
\System\System Restore
Turn off tabbed browsing
Not configured No
rnet Explorer
Turn off Tablet PC Pen Training Not configured No
et PC\Tablet PC Pen Training
Turn off Tablet PC touch input Not configured No
et PC\Touch Input
Turn off the "Order Prints" picture task
Not configured No
\System\
Turn off the "Publish to Web" task for files and folders
Not configured
No
s
Turn off the ability to back up data files
Not configured No
\Windows
Turn off the ability to create a system image Not configured No
\Windows
Turn off the activation of the quick pick menu Not configured No
\Windows
Turn off the auto-complete feature for web addresses
Not configured No
Turn off the communities features
Not configured No
\Windows Compone
nts\Windows Mail
Turn Off the Display (On Battery)
Not configured No
\System\Power Ma
Turn Off the Display (Plugged In)
Not configured No
\System\Power Ma
Turn off the feed list Not configured No
Turn Off the Hard Disk (On Battery)
Not configured No
\System\Power Ma
nagement\Hard Disk Settings
Turn Off the Hard Disk (Plugged In)
Not configured No
\System\Power Ma
nagement\Hard Disk Settings
Turn off the Security Settings Check feature
Not configured No
\Windows
Turn off the Windows Messenger Customer Experience Improvement Program Not conf
igured No
settings
Turn off the XDomainRequest Object
Not configured No
\Windows Compone
Turn off tolerant and Z-shaped scratch-out gestures
Not configured No
Turn off toolbar upgrade tool Not configured No
Turn off Touch Panning Not configured No
\Windows Components\Tablet PC\To
uch Input
Turn off tracking of last play time of games in the Games folder
Not conf
igured No
\Windows Components\Game Explorer
Turn Off user-installed desktop gadgets Not configured No
\Windows Compone
nts\Desktop Gadgets
Turn off Windows Calendar
Not configured No
ows Calendar
Turn off Windows Customer Experience Improvement Program
Not configured
No
s
Turn off Windows Defender
Not configured No
ows Defender
Turn off Windows Error Reporting
Not configured No
\System\Internet
Communication Management\Internet Communication settings
Turn off Windows HotStart
Not configured No
\System\Windows HotStart
Turn off Windows Mail application
Not configured No
\Windows Compone
nts\Windows Mail
Turn off Windows Mobility Center
Not configured No
\Windows Compone
nts\Windows Mobility Center
Turn off Windows Network Connectivity Status Indicator active tests

Not conf
igured No
settings
Turn off Windows presentation settings Not configured No
\Windows Compone
nts\Presentation Settings
Turn off Windows Search AutoComplete
Not configured No
\Windows Compone
nts\Internet Explorer\Internet Settings\AutoComplete
Turn off Windows SideShow
Not configured No
ows SideShow
Turn off Windows Startup Sound Not configured No
\System\Logon
Turn off Windows Update device driver search prompt
Not configured No
\System\Driver Installation
Turn off Windows Update device driver searching Not configured No
\System\
Turn on Accounting for WSRM
Not configured No
ows System Resource Manager
Turn on automatic detection of the intranet
Not configured No
\Windows
Turn on bandwidth optimization Not configured No
e
Turn on Basic feed authentication over HTTP
Not configured No
\Windows
Components\RSS Feeds
Turn on BranchCache
Not configured No
\Network\BranchCache
Turn on Caret Browsing support Not configured No
Turn on certificate propagation from smart card Not configured No
\Windows
Turn On Compatibility HTTP Listener
Not configured No
\Windows Compone
Turn On Compatibility HTTPS Listener
Not configured No
\Windows Compone
Turn on Compatibility Logging Not configured No
rnet Explorer
Turn on Cross-Site Scripting (XSS) Filter
Not configured No
\Windows
Not configured No
\Windows
Not configured No
\Windows
Zone
Not configured No
\Windows
nternet Zone
Not configured No
\Windows
ntranet Zone
Not configured No
\Windows
ocal Machine Zone
Not configured No
\Windows
Not configured No
\Windows
rusted Sites Zone
Not configured No
\Windows
tes Zone
Not configured No
\Windows
Zone
Turn on definition updates through both WSUS and the Microsoft Malware Protectio
n Center
Not configured No
\Windows Components\Windows Defender
Turn on definition updates through both WSUS and Windows Update Not configured
No
\Windows Components\Windows Defender
Turn On Desktop Background Slideshow (On Battery)
Not configured No
\System\Power Management\Video and Display Settings
Turn On Desktop Background Slideshow (Plugged In)
Not configured No
\System\Power Management\Video and Display Settings
Turn on economical application of administratively assigned Offline Files
Not configured No
Turn on Information bar notification for intranet content
Not configured
No
ge
Turn on Internet Explorer 7 Standards Mode
Not configured No
\Windows
Turn on Internet Explorer Standards Mode for Local Intranet
Not configured
No
\Windows Components\Internet Explorer\Compatibility View
Turn on logging Not configured No
tup
Turn on Mapper I/O (LLTDIO) driver
Not configured No
\Network\Link-La
yer Topology Discovery
Turn on menu bar by default
Not configured No
rnet Explorer
Turn on Protected Mode Not configured No
Turn on recommended updates via Automatic Updates
Not configured No
Turn on Responder (RSPNDR) driver
Not configured No
\Network\Link-La
yer Topology Discovery
Turn on root certificate propagation from smart card
Not configured No
Turn on Security Center (Domain PCs only)
Not configured No
\Windows
Components\Security Center
Turn on session logging Not configured No
\System\Remote Assistance
Turn on Smart Card Plug and Play service
Not configured No
\Windows
Turn on Software Notifications Not configured No
ows Update
Turn on the Ability for Applications to Prevent Sleep Transitions (On Battery)
Not configured No
Turn on the Ability for Applications to Prevent Sleep Transitions (Plugged In)
Not configured No
Turn on TPM backup to Active Directory Domain Services Not configured No
\System\Trusted Platform Module Services
Turn on Warn about Certificate Address Mismatch Not configured No
\Windows
Update Security Level Not configured No
\Network\DNS Client
Update Top Level Domain Zones Not configured No
\Network\DNS Client
Use forest search order Not configured No
\System\Kerberos
Use HTTP 1.1
Not configured No
ternet Control Panel\Advanced Page
Use HTTP 1.1 through proxy connections Not configured No
\Windows Compone
Use IP Address Redirection
Not configured No
te Desktop Services\Remote Desktop Session Host\RD Connection Broker
Use large Icons for Command Buttons
Not configured No
\Windows Compone
nts\Internet Explorer\Toolbars
Use localized subfolder names when redirecting Start Menu and My Documents
Not configured No
\System\Folder Redirection
Use mandatory profiles on the RD Session Host server
Not configured No
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Profiles
Use Policy Accelerators Not configured No
lorer\Accelerators
Use Policy List of Internet Explorer 7 sites
Not configured No
\Windows
Use Pop-up Blocker
Not configured No
Use Pop-up Blocker
Not configured No
Use Pop-up Blocker
Not configured No
Use Pop-up Blocker
Not configured No
Use Pop-up Blocker
Not configured No
Use Pop-up Blocker
Not configured No
Use Pop-up Blocker
Not configured No
Use Pop-up Blocker
Not configured No
Use Pop-up Blocker
Not configured No
Use Pop-up Blocker
Not configured No
Use Remote Desktop Easy Print printer driver first
Not configured No
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Printer
Redirection
Use SmartScreen Filter Not configured No

Use the specified Remote Desktop license servers
Not configured No
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Licensin
g
Use UTF-8 for mailto links
Not configured No
User Group Policy loopback processing mode
Not configured No
\System\
Group Policy
Userdata persistence
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Validate smart card certificate usage rule compliance Not configured No
Verbose vs normal status messages
Not configured No
\System
Verify old and new Folder Redirection targets point to the same share before red
irecting
Not configured No
\Windows Components\Windows Explorer
Wait for remote user profile
Not configured No
Web sites in less privileged Web content zones can navigate into this zone
Not configured No
anel\Security Page\Internet Zone
Not configured No
anel\Security Page\Intranet Zone
Not configured No
anel\Security Page\Local Machine Zone
Not configured No
anel\Security Page\Locked-Down Internet Zone
Not configured No
anel\Security Page\Locked-Down Intranet Zone
Not configured No
anel\Security Page\Locked-Down Local Machine Zone
Not configured No
anel\Security Page\Locked-Down Restricted Sites Zone

Not configured No
anel\Security Page\Locked-Down Trusted Sites Zone
Not configured No
anel\Security Page\Restricted Sites Zone
Not configured No
anel\Security Page\Trusted Sites Zone
Web-based printing
Not configured No
\Printers
Weight Set in the DC Locator DNS SRV Records
Not configured No
\System\
Windows Firewall: Allow authenticated IPsec bypass
Not configured No
\Network\Network Connections\Windows Firewall
Windows Firewall: Allow ICMP exceptions Not configured No
\Network\Network
Connections\Windows Firewall\Domain Profile
Windows Firewall: Allow ICMP exceptions Not configured No
\Network\Network
Connections\Windows Firewall\Standard Profile
Windows Firewall: Allow inbound file and printer sharing exception
Not conf
igured No
\Network\Network Connections\Windows Firewall\Domain Profile
Windows Firewall: Allow inbound file and printer sharing exception
Not conf
igured No
\Network\Network Connections\Windows Firewall\Standard Profile
Windows Firewall: Allow inbound remote administration exception
Not conf
igured No
Windows Firewall: Allow inbound remote administration exception
Not conf
igured No
Windows Firewall: Allow inbound Remote Desktop exceptions
Not configured
No
Windows Firewall: Allow inbound Remote Desktop exceptions
Not configured
No
Windows Firewall: Allow inbound UPnP framework exceptions
Not configured
No
Windows Firewall: Allow inbound UPnP framework exceptions
Not configured
No
Windows Firewall: Allow local port exceptions Not configured No
\Network
\Network Connections\Windows Firewall\Domain Profile
Windows Firewall: Allow local port exceptions Not configured No
\Network
\Network Connections\Windows Firewall\Standard Profile
Windows Firewall: Allow local program exceptions
Not configured No
Windows Firewall: Allow local program exceptions
Not configured No
Windows Firewall: Allow logging Not configured No
ions\Windows Firewall\Domain Profile
Windows Firewall: Allow logging Not configured No
ions\Windows Firewall\Standard Profile
Windows Firewall: Define inbound port exceptions
Not configured No
Windows Firewall: Define inbound port exceptions
Not configured No
Windows Firewall: Define inbound program exceptions
Not configured No
Windows Firewall: Define inbound program exceptions
Not configured No
Windows Firewall: Do not allow exceptions
Not configured No
\Network
Windows Firewall: Do not allow exceptions
Not configured No
\Network
Windows Firewall: Prohibit notifications
Not configured No
\Network

Windows Firewall: Prohibit notifications
Not configured No
\Network
Windows Firewall: Prohibit unicast response to multicast or broadcast requests
Not configured No
\Network\Network Connections\Windows Firewall\Domain Pro
file
Windows Firewall: Prohibit unicast response to multicast or broadcast requests
Not configured No
\Network\Network Connections\Windows Firewall\Standard P
rofile
Windows Firewall: Protect all network connections
Not configured No
Windows Firewall: Protect all network connections
Not configured No
Windows Scaling Heuristics State
Not configured No
\Network\TCPIP S
ettings\Parameters
Wired policy processing Not configured No
Wireless policy processing
Not configured No
WPD Devices: Deny read access Not configured No
e Access
WPD Devices: Deny write access Not configured No
e Access
XAML browser applications
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
Not configured No
e
Not configured No
Zone
Not configured No
e
Not configured No
Not configured No
XPS documents Not configured No
ternet Control Panel\Security Page\Internet Zone
ternet Control Panel\Security Page\Intranet Zone
ternet Control Panel\Security Page\Local Machine Zone
ternet Control Panel\Security Page\Locked-Down Internet Zone
ternet Control Panel\Security Page\Locked-Down Intranet Zone
ternet Control Panel\Security Page\Locked-Down Local Machine Zone
ternet Control Panel\Security Page\Locked-Down Restricted Sites Zone
ternet Control Panel\Security Page\Locked-Down Trusted Sites Zone
XPS documents
ternet Control
XPS documents
ternet Control
Not configured No
Panel\Security Page\Restricted Sites Zone
Not configured No
Panel\Security Page\Trusted Sites Zone

Configure Internet Explorer Security Settings

Загружено:

Сведения о документе

Исходное описание:

Оригинальное название

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

Configure Internet Explorer Security Settings

Загружено:

Авторское право:

Доступные форматы

Setting State Comment Path

6to4 Relay Name Not configured No

All Processes Not configured No

Allow active scripting Not configured No

lorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Si

lorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow users to log on using biometrics Not configured No

Automatic prompting for ActiveX controls

Configure Default consent

Default excluded paths Not configured No

Disable "Configuring History" Not configured No

Disable the Advanced page

ows Error Reporting

Do not allow Flip3D invocation Not configured No

\Windows Components\Windows Messenger

nts\Windows Media Player

Download unsigned ActiveX controls

Events.asp URL Not configured No

Components\Windows Explorer\Previous Versions

nts\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Pro

Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down L

\Windows Components\Internet Explorer

Navigate windows and frames across different domains

Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Prevent Automatic Updates

Run .NET Framework-reliant components not signed with Authenticode

Run ActiveX controls and plugins

Scripting of Java applets

Set PNRP cloud to resolve only Not configured No

Software channel permissions

\System\Power Management\Sleep Settings

Internet Communication Management\Internet Communication settings

rnet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds

Turn off Windows Network Connectivity Status Indicator active tests

lorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

anel\Security Page\Locked-Down Restricted Sites Zone

\Network Connections\Windows Firewall\Domain Profile

Вам также может понравиться