Group Policy Settings - Windows 2003 SP2

Group Policy Settings Reference
Windows Server 2003 Service Pack 2
This spreadsheet lists the policy settings for computer and user configurations included in the Administrative template (.adm) files delivered w
Windows Server 2003 Service Pack 2. The policy settings included cover Windows Server 2003 with SP2 or earlier service packs, Windows
with SP3 or earlier service packs, and Windows 2000 with SP5 or earlier service packs. These .adm files are used to expose policy settings w
Group Policy objects (GPOs) by using the Group Policy Object Editor (also known as GPEdit).
The Security Settings worksheet includes information about Account Policies (Password Policy, Account Lockout Policy, and Kerberos Policy
Assignment, and Security Options), Event Log, Restricted Groups, System Services, Registry, and File System policy settings. Note: This do
the Security Settings extension (scecli.dll), such as Wireless Network extension, Public Key Policies, or Software Restrction Policies.
Each .adm file is represented by a single worksheet within this spreadsheet. In addition, a worksheet containing all policy settings, called All,
of reference. By using the ADM Parser utility (admx.msi, available from the Microsoft Web site), you can import
custom .adm files into the spreadsheet to reflect your specific environment. For more information, see the ADM Parser utility Help.
You can use the filtering capabilities included in this spreadsheet to view a specific subset of data based on one or a combination of
values available in one or more of the columns. In addition, you can select Custom in the drop-down list of any of the column
headings to add additional filtering criteria within that column. To view a specific subset of data, click the drop-down arrow in the
column heading cells that contain the value, or combination of values, on which you want to filter, and then click the desired value in the
drop-down list. For example, to view a subset of policy settings that are available through the Inetres.adm template and viewed under the
Computer Configuration node, in the All worksheet, click .adm File, click Inetres.adm, and then, in Computer/User Node, click MACHINE.
Legal Notice
The information contained in this document represents the current view of Microsoft Corp. on the issues discussed as of the date of publication.
Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot
guarantee the accuracy of any information presented after the date of publication.
The information contained in this document relates to pre-release software product, which may be substantially modified before its first commercial release.
Accordingly, the information may not accurately describe or reflect the software product when first commercially released.
This document is provided for informational purposes only, and Microsoft makes no warranties, express or implied, with respect to this document or the inform
This is a preliminary document and may be changed substantially prior to final commercial release of the software described herein.
This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, AS TO THE INFORMATION IN THIS D
Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reprod
or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording or otherwise), or for
any purpose, without the express written permission of Microsoft Corp.
Microsoft may have patents, patent applications, trademarks, copyrights or other intellectual property rights covering subject matter in this document.
Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these
patents, trademarks, copyrights or other intellectual property
Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and events depicted herein
no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred
© 2009 Microsoft Corp. All rights reserved.
Microsoft, the Windows logo, Windows, Windows Server, Windows Media, Active Directory and Windows NT are either registered trademarks or trademarks o
The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
.adm File Computer/User
Policy
NodePath
wuau MACHINE Administrative Templates\Windows Components\Windows Update
wmplayer USER Administrative Templates\Windows Components\Windows Media Player
wmplayer USER Administrative Templates\Windows Components\Windows Media Player\Networking
wmplayer USER Administrative Templates\Windows Components\Windows Media Player\Playback
wmplayer USER Administrative Templates\Windows Components\Windows Media Player\Playback
wmplayer USER Administrative Templates\Windows Components\Windows Media Player\User Interface
wmplayer MACHINE Administrative Templates\Windows Components\Windows Media Player
system USER Administrative Templates\Control Panel
system USER Administrative Templates\Control Panel\Add or Remove Programs
system USER Administrative Templates\Control Panel\Display
system USER Administrative Templates\Control Panel\Display\Desktop Themes
system USER Administrative Templates\Control Panel\Printers
system USER Administrative Templates\Control Panel\Regional and Language Options
system USER Administrative Templates\Desktop
system USER Administrative Templates\Desktop\Active Desktop
system USER Administrative Templates\Desktop\Active Directory
system USER Administrative Templates\Network\Network Connections
system USER Administrative Templates\Network\Offline Files
system USER Administrative Templates\Shared Folders
system USER Administrative Templates\Shared Folders
system USER Administrative Templates\Start Menu and Taskbar
system USER Administrative Templates\System
system USER Administrative Templates\System\Ctrl+Alt+Del Options
system USER Administrative Templates\System\Group Policy
system USER Administrative Templates\System\Internet Communication Management
system USER Administrative Templates\System\Internet Communication Management\Internet Communication settings
system USER Administrative Templates\System\Logon
system USER Administrative Templates\System\Power Management
system USER Administrative Templates\System\Scripts
system USER Administrative Templates\System\User Profiles
system USER Administrative Templates\Windows Components\Application Compatibility
system USER Administrative Templates\Windows Components\Attachment Manager
system USER Administrative Templates\Windows Components\Microsoft Management Console
system USER Administrative Templates\Windows Components\Microsoft Management Console
system USER Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins
system USER Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins
system USER Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy
system USER Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Group
system USER Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Resul
system USER Administrative Templates\Windows Components\Task Scheduler
system USER Administrative Templates\Windows Components\Terminal Services
system USER Administrative Templates\Windows Components\Terminal Services
system USER Administrative Templates\Windows Components\Terminal Services\Client
system USER Administrative Templates\Windows Components\Terminal Services\Sessions
system USER Administrative Templates\Windows Components\Windows Explorer
system USER Administrative Templates\Windows Components\Windows Explorer\Common Open File Dialog
system USER Administrative Templates\Windows Components\Windows Installer
system USER Administrative Templates\Windows Components\Windows Messenger
system USER Administrative Templates\Windows Components\Windows Messenger
system USER Administrative Templates\Windows Components\Windows Movie Maker
system USER Administrative Templates\Windows Components\Windows Update
system MACHINE Administrative Templates\Network
system MACHINE Administrative Templates\Network\Background Intelligent Transfer Service
system MACHINE Administrative Templates\Network\Background Intelligent Transfer Service
system MACHINE Administrative Templates\Network\DNS Client
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
system MACHINE Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
system MACHINE Administrative Templates\Network\Network Connections
system MACHINE Administrative Templates\Network\Network Connections\Windows Firewall
system MACHINE Administrative Templates\Network\Network Connections\Windows Firewall\Domain Profile
system MACHINE Administrative Templates\Network\Network Connections\Windows Firewall\Standard Profile
system MACHINE Administrative Templates\Network\Offline Files
system MACHINE Administrative Templates\Network\QoS Packet Scheduler
system MACHINE Administrative Templates\Network\QoS Packet Scheduler\DSCP value of conforming packets
system MACHINE Administrative Templates\Network\QoS Packet Scheduler\DSCP value of non-conforming packets
system MACHINE Administrative Templates\Network\QoS Packet Scheduler\Layer-2 priority value
system MACHINE Administrative Templates\Network\SNMP
system MACHINE Administrative Templates\Printers
system MACHINE Administrative Templates\System
system MACHINE Administrative Templates\System\Disk Quotas
system MACHINE Administrative Templates\System\Distributed COM\Application Compatibility Settings
system MACHINE Administrative Templates\System\Distributed COM\Application Compatibility Settings
system MACHINE Administrative Templates\System\Error Reporting
system MACHINE Administrative Templates\System\Error Reporting
system MACHINE Administrative Templates\System\Error Reporting\Advanced Error Reporting settings
system MACHINE Administrative Templates\System\Group Policy
system MACHINE Administrative Templates\System\Internet Communication Management
system MACHINE Administrative Templates\System\Internet Communication Management\Internet Communication settings
system MACHINE Administrative Templates\System\Logon
system MACHINE Administrative Templates\System\Net Logon
system MACHINE Administrative Templates\System\Net Logon\DC Locator DNS Records
system MACHINE Administrative Templates\System\Remote Assistance
system MACHINE Administrative Templates\System\Remote Assistance
system MACHINE Administrative Templates\System\Remote Procedure Call
system MACHINE Administrative Templates\System\Scripts
system MACHINE Administrative Templates\System\System Restore
system MACHINE Administrative Templates\System\System Restore
system MACHINE Administrative Templates\System\User Profiles
system MACHINE Administrative Templates\System\Windows File Protection
system MACHINE Administrative Templates\System\Windows Time Service
system MACHINE Administrative Templates\System\Windows Time Service\Time Providers
system MACHINE Administrative Templates\Windows Components\Application Compatibility
system MACHINE Administrative Templates\Windows Components\Event Viewer
system MACHINE Administrative Templates\Windows Components\Internet Information Services
system MACHINE Administrative Templates\Windows Components\Security Center
system MACHINE Administrative Templates\Windows Components\Task Scheduler
system MACHINE Administrative Templates\Windows Components\Terminal Services
system MACHINE Administrative Templates\Windows Components\Terminal Services\Client
system MACHINE Administrative Templates\Windows Components\Terminal Services\Client/Server data redirection
system MACHINE Administrative Templates\Windows Components\Terminal Services\Encryption and Security
system MACHINE Administrative Templates\Windows Components\Terminal Services\Encryption and Security
system MACHINE Administrative Templates\Windows Components\Terminal Services\Encryption and Security\RPC Security Policy
system MACHINE Administrative Templates\Windows Components\Terminal Services\Licensing
system MACHINE Administrative Templates\Windows Components\Terminal Services\Licensing
system MACHINE Administrative Templates\Windows Components\Terminal Services\Session Directory
system MACHINE Administrative Templates\Windows Components\Terminal Services\Sessions
system MACHINE Administrative Templates\Windows Components\Terminal Services\Temporary folders
system MACHINE Administrative Templates\Windows Components\Terminal Services\Temporary folders
system MACHINE Administrative Templates\Windows Components\Windows Explorer
system MACHINE Administrative Templates\Windows Components\Windows Installer
system MACHINE Administrative Templates\Windows Components\Windows Media Digital Rights Management
system MACHINE Administrative Templates\Windows Components\Windows Messenger
system MACHINE Administrative Templates\Windows Components\Windows Messenger
system MACHINE Administrative Templates\Windows Components\Windows Movie Maker
system MACHINE Administrative Templates\Windows Components\Windows Update
system MACHINE Administrative Templates\Windows Components\Windows Update
inetres USER Administrative Templates\Windows Components\Internet Explorer
inetres USER Administrative Templates\Windows Components\Internet Explorer\Administrator Approved Controls
inetres USER Administrative Templates\Windows Components\Internet Explorer\Browser menus
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machin
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Si
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-DownIntranet Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
inetres USER Administrative Templates\Windows Components\Internet Explorer\Offline Pages
inetres USER Administrative Templates\Windows Components\Internet Explorer\Persistence Behavior
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Information Bar
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protoco
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Object Caching Protection
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download
inetres USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions
inetres USER Administrative Templates\Windows Components\Internet Explorer\Toolbars
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machin
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Si
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-DownIntranet Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Information Bar
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protoco
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Object Caching Protection
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download
inetres MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions
conf USER Administrative Templates\Windows Components\NetMeeting
conf USER Administrative Templates\Windows Components\NetMeeting\Application Sharing
conf USER Administrative Templates\Windows Components\NetMeeting\Audio & Video
conf USER Administrative Templates\Windows Components\NetMeeting\Options Page
conf MACHINE Administrative Templates\Windows Components\NetMeeting
Full Policy Name
Allow Automatic Updates immediate installation
Allow non-administrators to receive update notifications
Automatic Updates detection frequency
Configure Automatic Updates
Delay Restart for scheduled installations
Enable client-side targeting
No auto-restart for scheduled Automatic Updates installations
Re-prompt for restart with scheduled installations
Reschedule Automatic Updates scheduled installations
Specify intranet Microsoft update service location
Prevent CD and DVD Media Information Retrieval
Prevent Music File Media Information Retrieval
Prevent Radio Station Preset Retrieval
Configure HTTP Proxy
Configure MMS Proxy
Configure Network Buffering
Configure RTSP Proxy
Hide Network Tab
Streaming Media Protocols
Allow Screen Saver
Prevent Codec Download
Do Not Show Anchor
Hide Privacy Tab
Hide Security Tab
Set and Lock Skin
Do Not Show First Use Dialog Boxes
Prevent Automatic Updates
Prevent Desktop Shortcut Creation
Prevent Quick Launch Toolbar Shortcut Creation
Prevent Video Smoothing
Force classic Control Panel Style
Hide specified Control Panel applets
Prohibit access to the Control Panel
Show only specified Control Panel applets
Go directly to Components Wizard
Hide Add New Programs page
Hide Add/Remove Windows Components page
Hide Change or Remove Programs page
Hide the Add a program from CD-ROM or floppy disk option
Hide the Add programs from Microsoft option
Hide the Add programs from your network option
Hide the Set Program Access and Defaults page
Remove Add or Remove Programs
Remove Support Information
Specify default category for Add New Programs
Hide Appearance and Themes tab
Hide Desktop tab
Hide Screen Saver tab
Hide Settings tab
Password protect the screen saver
Prevent changing wallpaper
Remove Display in Control Panel
Screen Saver
Screen Saver executable name
Screen Saver timeout
Load a specific visual style file or force Windows Classic
Prevent selection of windows and buttons styles
Prohibit selection of font size
Prohibit Theme color selection
Remove Theme option
Browse a common web site to find printers
Browse the network to find printers
Default Active Directory path when searching for printers
Point and Print Restrictions
Prevent addition of printers
Prevent deletion of printers
Restrict selection of Windows menus and dialogs language
Do not add shares of recently opened documents to My Network Places
Don't save settings at exit
Hide and disable all items on the desktop
Hide Internet Explorer icon on desktop
Hide My Network Places icon on desktop
Prevent adding, dragging, dropping and closing the Taskbar's toolbars
Prohibit adjusting desktop toolbars
Prohibit user from changing My Documents path
Remove My Computer icon on the desktop
Remove My Documents icon on the desktop
Remove Properties from the My Computer context menu
Remove Properties from the My Documents context menu
Remove Properties from the Recycle Bin context menu
Remove Recycle Bin icon from desktop
Remove the Desktop Cleanup Wizard
Active Desktop Wallpaper
Add/Delete items
Allow only bitmapped wallpaper
Disable Active Desktop
Disable all items
Enable Active Desktop
Prohibit adding items
Prohibit changes
Prohibit closing items
Prohibit deleting items
Prohibit editing items
Enable filter in Find dialog box
Hide Active Directory folder
Maximum size of Active Directory searches
Ability to change properties of an all user remote access connection
Ability to delete all user remote access connections
Ability to Enable/Disable a LAN connection
Ability to rename all user remote access connections
Ability to rename LAN connections
Ability to rename LAN connections or remote access connections available to all users
Enable Windows 2000 Network Connections settings for Administrators
Prohibit access to properties of a LAN connection
Prohibit access to properties of components of a LAN connection
Prohibit access to properties of components of a remote access connection
Prohibit access to the Advanced Settings item on the Advanced menu
Prohibit access to the New Connection Wizard
Prohibit access to the Remote Access Preferences item on the Advanced menu
Prohibit adding and removing components for a LAN or remote access connection
Prohibit changing properties of a private remote access connection
Prohibit connecting and disconnecting a remote access connection
Prohibit deletion of remote access connections
Prohibit Enabling/Disabling components of a LAN connection
Prohibit renaming private remote access connections
Prohibit TCP/IP advanced configuration
Prohibit viewing of status for an active connection
Turn off notifications when a connection has only limited or no connectivity
Action on server disconnect
Administratively assigned offline files
Do not automatically make redirected folders available offline
Event logging level
Initial reminder balloon lifetime
Non-default server disconnect actions
Prevent use of Offline Files folder
Prohibit 'Make Available Offline' for these file and folders
Prohibit user configuration of Offline Files
Reminder balloon frequency
Reminder balloon lifetime
Remove 'Make Available Offline'
Synchronize all offline files before logging off
Synchronize all offline files when logging on
Synchronize offline files before suspend
Turn off reminder balloons
Allow DFS roots to be published
Allow shared folders to be published
Add Logoff to the Start Menu
Add Run in Separate Memory Space check box to Run dialog box
Clear history of recently opened documents on exit
Do not display any custom toolbars in the taskbar
Do not keep history of recently opened documents
Do not use the search-based method when resolving shell shortcuts
Do not use the tracking-based method when resolving shell shortcuts
Force classic Start Menu
Gray unavailable Windows Installer programs Start Menu shortcuts
Hide the notification area
Lock the Taskbar
Prevent changes to Taskbar and Start Menu Settings
Prevent grouping of taskbar items
Remove access to the context menus for the taskbar
Remove All Programs list from the Start menu
Remove and prevent access to the Shut Down command
Remove Balloon Tips on Start Menu items
Remove Clock from the system notification area
Remove common program groups from Start Menu
Remove Documents menu from Start Menu
Remove Drag-and-drop context menus on the Start Menu
Remove Favorites menu from Start Menu
Remove frequent programs list from the Start Menu
Remove Help menu from Start Menu
Remove links and access to Windows Update
Remove Logoff on the Start Menu
Remove My Documents icon from Start Menu
Remove My Music icon from Start Menu
Remove My Network Places icon from Start Menu
Remove My Pictures icon from Start Menu
Remove Network Connections from Start Menu
Remove pinned programs list from the Start Menu
Remove programs on Settings menu
Remove Run menu from Start Menu
Remove Search menu from Start Menu
Remove Set Program Access and Defaults from Start menu
Remove the Undock PC button from the Start Menu
Remove user name from Start Menu
Remove user's folders from the Start Menu
Turn off notification area cleanup
Turn off personalized menus
Turn off user tracking
Century interpretation for Year 2000
Code signing for device drivers
Configure driver search locations
Custom user interface
Don't display the Getting Started welcome screen at logon
Don't run specified Windows applications
Download missing COM components
Prevent access to registry editing tools
Prevent access to the command prompt
Restrict these programs from being launched from Help
Run only allowed Windows applications
Turn off Autoplay
Turn off Windows Update device driver search prompt
Windows Automatic Updates
Remove Change Password
Remove Lock Computer
Remove Logoff
Remove Task Manager
Create new Group Policy object links disabled by default
Default name for new Group Policy objects
Disallow Interactive Users from generating Resultant Set of Policy data
Enforce Show Policies Only
Group Policy domain controller selection
Group Policy refresh interval for users
Group Policy slow link detection
Turn off automatic update of ADM files
Restrict Internet communication
Turn off downloading of print drivers over HTTP
Turn off Internet download for Web publishing and online ordering wizards
Turn off Internet File Association service
Turn off printing over HTTP
Turn off the Order Prints picture task
Turn off the Publish to Web task for files and folders
Turn off the Windows Messenger Customer Experience Improvement Program
Turn off Windows Movie Maker automatic codec downloads
Turn off Windows Movie Maker online Web links
Turn off Windows Movie Maker saving to online video hosting provider
Do not process the legacy run list
Do not process the run once list
Run these programs at user logon
Prompt for password on resume from hibernate / suspend
Run legacy logon scripts hidden
Run logoff scripts visible
Run logon scripts synchronously
Run logon scripts visible
Connect home directory to root of the share
Exclude directories in roaming profile
Limit profile size
Prevent access to 16-bit applications
Default risk level for file attachments
Do not preserve zone information in file attachments
Hide mechanisms to remove zone information
Inclusion list for high risk file types
Inclusion list for low file types
Inclusion list for moderate risk file types
Notify antivirus programs when opening attachments
Trust logic for file attachments
Restrict the user from entering author mode
Restrict users to the explicitly permitted list of snap-ins
.Net Framework Configuration
Active Directory Domains and Trusts
Active Directory Sites and Services
Active Directory Users and Computers
ActiveX Control
ADSI Edit
Certificate Templates
Certificates
Certification Authority
Component Services
Computer Management
Device Manager
Disk Defragmenter
Disk Management
Distributed File System
Event Viewer
FAX Service
FrontPage Server Extensions
Indexing Service
Internet Authentication Service (IAS)
Internet Information Services
IP Security Monitor
IP Security Policy Management
Link to Web Address
Local Users and Groups
Performance Logs and Alerts
QoS Admission Control
Remote Desktops
Removable Storage Management
Routing and Remote Access
Security Configuration and Analysis
Security Templates
Services
Shared Folders
System Information
Telephony
Terminal Services Configuration
Wireless Monitor
WMI Control
AppleTalk Routing
Authorization Manager
Certification Authority Policy Settings
Connection Sharing (NAT)
DCOM Configuration Extension
Device Manager
DHCP Relay Management
Event Viewer
Extended View (Web View)
IAS Logging
IGMP Routing
IP Routing
IPX RIP Routing
IPX Routing
IPX SAP Routing
Logical and Mapped Drives
OSPF Routing
Public Key Policies
RAS Dialin - User Node
Remote Access
Removable Storage
RIP Routing
Routing
Send Console Message
Service Dependencies
Shared Folders Ext
SMTP Protocol
SNMP
System Properties
Group Policy Management
Group Policy Object Editor
Group Policy tab for Active Directory Tools
Resultant Set of Policy snap-in
Administrative Templates (Computers)
Administrative Templates (Users)
Folder Redirection
Internet Explorer Maintenance
Remote Installation Services
Scripts (Logon/Logoff)
Scripts (Startup/Shutdown)
Security Settings
Software Installation (Computers)
Software Installation (Users)
Wireless Network (IEEE 802.11) Policies
Administrative Templates (Computers)
Administrative Templates (Users)
Folder Redirection
Security Settings
Software Installation (Computers)
Software Installation (Users)
Hide Advanced Properties Checkbox in Add Scheduled Task Wizard
Hide Property Pages
Prevent Task Run or End
Prohibit Browse
Prohibit Drag-and-Drop
Prohibit New Task Creation
Prohibit Task Deletion
Sets rules for remote control of Terminal Services user sessions
Start a program on connection
Do not allow passwords to be saved
Allow reconnection from original client only
Set time limit for disconnected sessions
Sets a time limit for active but idle Terminal Services sessions
Sets a time limit for active Terminal Services sessions
Terminate session when time limits are reached
Allow only per user or approved shell extensions
Display confirmation dialog when deleting files
Do not move deleted files to the Recycle Bin
Do not request alternate credentials
Do not track Shell shortcuts during roaming
Hide these specified drives in My Computer
Hides the Manage item on the Windows Explorer context menu
Maximum allowed Recycle Bin size
Maximum number of recent documents
No Computers Near Me in My Network Places
No Entire Network in My Network Places
Prevent access to drives from My Computer
Remove CD Burning features
Remove DFS tab
Remove File menu from Windows Explorer
Remove Hardware tab
Remove Map Network Drive and Disconnect Network Drive
Remove Search button from Windows Explorer
Remove Security tab
Remove Shared Documents from My Computer
Remove UI to change keyboard navigation indicator setting
Remove UI to change menu animation setting
Remove Windows Explorer's default context menu
Removes the Folder Options menu item from the Tools menu
Request credentials for network installations
Turn off caching of thumbnail pictures
Turn off shell protocol protected mode
Turn off Windows+X hotkeys
Turn on Classic Shell
Hide the common dialog back button
Hide the common dialog places bar
Hide the dropdown list of recent files
Items displayed in Places Bar
Always install with elevated privileges
Prevent removable media source for any install
Prohibit rollback
Search order
Do not allow Windows Messenger to be run
Do not automatically start Windows Messenger initially
Do not allow Windows Movie Maker to run
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box
Remove access to use all Windows Update features
Sets how often a DFS Client discovers DC's
Maximum network bandwidth that BITS uses
Timeout (days) for inactive jobs
Connection-Specific DNS Suffix
DNS Servers
DNS Suffix Search List
Dynamic Update
Primary DNS Suffix
Primary DNS Suffix Devolution
Register DNS records with connection-specific DNS suffix
Register PTR Records
Registration Refresh Interval
Replace Addresses In Conflicts
TTL Set in the A and PTR records
Update Security Level
Update Top Level Domain Zones
Turn off Microsoft Peer-to-Peer Networking Services

Set the Seed Server
Turn off Multicast Bootstrap
Set the Seed Server
Set the Seed Server
IEEE 802.1x Certificate Authority for Machine Authentication
Prohibit installation and configuration of Network Bridge on your DNS domain network
Prohibit use of Internet Connection Firewall on your DNS domain network
Prohibit use of Internet Connection Sharing on your DNS domain network
Windows Firewall: Allow authenticated IPSec bypass
Windows Firewall: Allow file and printer sharing exception
Windows Firewall: Allow ICMP exceptions
Windows Firewall: Allow local port exceptions
Windows Firewall: Allow local program exceptions
Windows Firewall: Allow logging
Windows Firewall: Allow remote administration exception
Windows Firewall: Allow Remote Desktop exception
Windows Firewall: Allow UPnP framework exception
Windows Firewall: Define port exceptions
Windows Firewall: Define program exceptions
Windows Firewall: Do not allow exceptions
Windows Firewall: Prohibit notifications
Windows Firewall: Prohibit unicast response to multicast or broadcast requests
Windows Firewall: Protect all network connections
Windows Firewall: Allow file and printer sharing exception
Windows Firewall: Allow ICMP exceptions
Windows Firewall: Allow logging
Windows Firewall: Allow remote administration exception
Windows Firewall: Allow UPnP framework exception
Windows Firewall: Define port exceptions
Windows Firewall: Define program exceptions
Windows Firewall: Do not allow exceptions
Windows Firewall: Prohibit notifications
Windows Firewall: Prohibit unicast response to multicast or broadcast requests
Administratively assigned offline files
Allow or Disallow use of the Offline Files feature
At logoff, delete local copy of user’s offline files
Configure Slow link speed
Default cache size
Encrypt the Offline Files cache
Event logging level
Files not cached
Initial reminder balloon lifetime
Non-default server disconnect actions
Prevent use of Offline Files folder
Prohibit 'Make Available Offline' for these file and folders
Prohibit user configuration of Offline Files
Remove 'Make Available Offline'
Subfolders always available offline
Synchronize all offline files before logging off
Synchronize all offline files when logging on
Synchronize offline files before suspend
Limit outstanding packets
Limit reservable bandwidth
Set timer resolution
Best effort service type
Controlled load service type
Guaranteed service type
Network control service type
Qualitative service type
Non-conforming packets
Communities
Permitted Managers
Traps for public community
Allow Print Spooler to accept client connections
Allow printers to be published
Allow pruning of published printers
Automatically publish new printers in Active Directory
Check published state
Computer location
Custom support URL in the Printers folder's left pane
Directory pruning interval
Directory pruning priority
Directory pruning retry
Disallow installation of printers using kernel-mode drivers
Log directory pruning retry events
Pre-populate printer search location text
Printer browsing
Prune printers that are not automatically republished
Web-based printing
Activate Shutdown Event Tracker System State Data feature
Allow Distributed Link Tracking clients to use domain resources
Display Shutdown Event Tracker
Do not automatically encrypt files moved to encrypted folders
Do not display Manage Your Server page at logon
Do not turn off system power after a Windows system shutdown has occurred.
Download missing COM components
Enable Persistent Time Stamp
Remove Boot / Shutdown / Logon / Logoff status messages
Restrict potentially unsafe HTML Help functions to specified folders
Restrict these programs from being launched from Help
Specify Windows installation file location
Specify Windows Service Pack installation file location
Turn off Autoplay
Turn off Windows Update device driver search prompt
Verbose vs normal status messages
Apply policy to removable media
Default quota limit and warning level
Enable disk quotas
Enforce disk quota limit
Log event when quota limit exceeded
Log event when quota warning level exceeded
Allow local activation security check exemptions
Define Activation Security Check exemptions
Configure Error Reporting
Display Error Notification
Default application reporting settings
List of applications to always report errors for
List of applications to never report errors for
Report operating system errors
Report unplanned shutdown events
Allow Cross-Forest User Policy and Roaming User Profiles
Always use local ADM files for Group Policy Object Editor
Disallow Interactive Users from generating Resultant Set of Policy data
Disk Quota policy processing
EFS recovery policy processing
Folder Redirection policy processing
Group Policy refresh interval for computers
Group Policy refresh interval for domain controllers
Group Policy slow link detection
Internet Explorer Maintenance policy processing
IP Security policy processing
Registry policy processing
Remove users ability to invoke machine policy refresh
Scripts policy processing
Security policy processing
Software Installation policy processing
Turn off background refresh of Group Policy
Turn off Resultant Set of Policy logging
User Group Policy loopback processing mode
Wireless policy processing
Turn off access to all Windows Update features
Turn off Automatic Root Certificates Update
Turn off Event Viewer Events.asp links
Turn off Help and Support Center Did you know? content
Turn off Help and Support Center Microsoft Knowledge Base search
Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com
Turn off Internet download for Web publishing and online ordering wizards
Turn off Internet File Association service
Turn off printing over HTTP
Turn off Registration if URL connection is referring to Microsoft.com
Turn off Search Companion content file updates
Turn off the Order Prints picture task
Turn off the Publish to Web task for files and folders
Turn off the Windows Messenger Customer Experience Improvement Program
Turn off Windows Error Reporting
Turn off Windows Movie Maker automatic codec downloads
Turn off Windows Movie Maker online Web links
Turn off Windows Movie Maker saving to online video hosting provider
Turn off Windows Update device driver searching
Always use classic logon
Always wait for the network at computer startup and logon
Do not process the legacy run list
Do not process the run once list
Don't display the Getting Started welcome screen at logon
Run these programs at user logon
Contact PDC on logon failure
Expected dial-up delay on logon
Final DC Discovery Retry Setting for Background Callers
Initial DC Discovery Retry Setting for Background Callers
Log File Debug Output Level
Maximum DC Discovery Retry Interval Setting for Background Callers
Maximum Log File Size
Negative DC Discovery Cache Setting
Netlogon share compatibility
Positive Periodic DC Cache Refresh for Background Callers
Positive Periodic DC Cache Refresh for Non-Background Callers
Scavenge Interval
Site Name
Sysvol share compatibility
Automated Site Coverage by the DC Locator DNS SRV Records
DC Locator DNS records not registered by the DCs
Dynamic Registration of the DC Locator DNS Records
Location of the DCs hosting a domain with single label DNS name
Priority Set in the DC Locator DNS SRV Records
Refresh Interval of the DC Locator DNS Records
Sites Covered by the Application Directory Partition Locator DNS SRV Records
Sites Covered by the DC Locator DNS SRV Records
Sites Covered by the GC Locator DNS SRV Records
TTL Set in the DC Locator DNS Records
Weight Set in the DC Locator DNS SRV Records
Offer Remote Assistance
Solicited Remote Assistance
Ignore Delegation Failure
Minimum Idle Connection Timeout for RPC/HTTP connections
Propagation of extended error information
Restrictions for Unauthenticated RPC clients
RPC Endpoint Mapper Client Authentication
RPC Troubleshooting State Information
Maximum wait time for Group Policy scripts
Run logon scripts synchronously
Run shutdown scripts visible
Run startup scripts asynchronously
Run startup scripts visible
Turn off Configuration
Turn off System Restore
Add the Administrators security group to roaming user profiles
Delete cached copies of roaming profiles
Do not check for user ownership of Roaming Profile Folders
Do not detect slow network connections
Leave Windows Installer and Group Policy Software Installation Data
Log users off when roaming profile fails
Maximum retries to unload and update user profile
Only allow local user profiles
Prevent Roaming Profile changes from propagating to the server
Prompt user when slow link is detected
Slow network connection timeout for user profiles
Timeout for dialog boxes
Wait for remote user profile
Hide the file scan progress window
Limit Windows File Protection cache size
Set Windows File Protection scanning
Specify Windows File Protection cache location
Global Configuration Settings
Configure Windows NTP Client
Enable Windows NTP Client
Enable Windows NTP Server
Prevent access to 16-bit applications
Remove Program Compatibility Property Page
Turn Off Application Compatibility Engine
Turn Off Program Compatibility Wizard
Turn On Application Help Log Events
Events.asp program
Events.asp program command line parameters
Events.asp URL
Prevent IIS installation
Turn on Security Center (Domain PCs only)
Hide Advanced Properties Checkbox in Add Scheduled Task Wizard
Hide Property Pages
Prevent Task Run or End
Prohibit Browse
Prohibit New Task Creation
Prohibit Task Deletion
Allow users to connect remotely using Terminal Services
Always show desktop on connection
Automatic reconnection
Deny log off of an administrator logged in to the console session
Do not allow local administrators to customize permissions
Enforce Removal of Remote Desktop Wallpaper
Keep-Alive Connections
Limit maximum color depth
Limit number of connections
Remove Disconnect option from Shut Down dialog
Remove Windows Security item from Start menu
Restrict Terminal Services users to a single remote session
Set path for TS Roaming Profiles
Set the Terminal Server licensing mode
Sets rules for remote control of Terminal Services user sessions
Show Tooltips for Licensing problems on Terminal Server
Start a program on connection
TS User Home Directory
Use the specified Terminal Server license servers
Do not allow passwords to be saved
Allow audio redirection
Allow Time Zone Redirection
Do not allow client printer redirection
Do not allow clipboard redirection
Do not allow COM port redirection
Do not allow drive redirection
Do not allow LPT port redirection
Do not allow smart card device redirection
Do not set default client printer to be default printer in a session
Terminal Server Fallback Printer Driver Behavior
Always prompt client for password upon connection
Set client connection encryption level
Secure Server (Require Security)
License Server Security Group
Prevent License Upgrade
Join Session Directory
Session Directory Cluster Name
Session Directory Server
Terminal Server IP Address Redirection
Allow reconnection from original client only
Set time limit for disconnected sessions
Sets a time limit for active but idle Terminal Services sessions
Sets a time limit for active Terminal Services sessions
Terminate session when time limits are reached
Do not delete temp folder upon exit
Do not use temp folders per session
Turn off shell protocol protected mode
Allow admin to install from Terminal Services session
Always install with elevated privileges
Baseline file cache maximum size
Cache transforms in secure location on workstation
Disable IE security prompt for Windows Installer scripts
Disable Windows Installer
Enable user control over installs
Enable user to browse for source while elevated
Enable user to patch elevated products
Enable user to use media source while elevated
Enforce upgrade component rules
Logging
Prohibit non-administrators from applying vendor signed updates
Prohibit patching
Prohibit removal of updates
Prohibit rollback
Prohibit User Installs
Remove browse dialog box for new source
Turn off creation of System Restore Checkpoints
Prevent Windows Media DRM Internet Access
Do not allow Windows Messenger to be run
Do not automatically start Windows Messenger initially
Do not allow Windows Movie Maker to run
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box
Configure Outlook Express
Disable AutoComplete for forms
Disable caching of Auto-Proxy scripts
Disable changing accessibility settings
Disable changing Advanced page settings
Disable changing Automatic Configuration settings
Disable changing Calendar and Contact settings
Disable changing certificate settings
Disable changing color settings
Disable changing connection settings
Disable changing default browser check
Disable changing font settings
Disable changing history settings
Disable changing home page settings
Disable changing language settings
Disable changing link color settings
Disable changing Messaging settings
Disable changing Profile Assistant settings
Disable changing proxy settings
Disable changing ratings settings
Disable changing Temporary Internet files settings
Disable external branding of Internet Explorer
Disable importing and exporting of favorites
Disable Internet Connection wizard
Disable the Reset Web Settings feature
Display error message on proxy script download failure
Do not allow AutoComplete to save passwords
Do not allow users to enable or disable add-ons
Identity Manager: Prevent users from using Identities
Pop-up allow list
Search: Disable Find Files via F3 within the browser
Search: Disable Search Customization
Turn off Crash Detection
Turn off pop-up management
Use Automatic Detection for dial-up connections
Carpoint
DHTML Edit Control
Investor
Media Player
Menu Controls
Microsoft Agent
Microsoft Chat
Microsoft Scriptlet Component
Microsoft Survey Control
MSNBC
NetShow File Transfer Control
Shockwave Flash
Disable Context menu
Disable Open in New Window menu option
Disable Save this program to disk option
File menu: Disable closing the browser and Explorer windows
File menu: Disable New menu option
File menu: Disable Open menu option
File menu: Disable Save As Web Page Complete
File menu: Disable Save As... menu option
Help menu: Remove 'For Netscape Users' menu option
Help menu: Remove 'Send Feedback' menu option
Help menu: Remove 'Tip of the Day' menu option
Help menu: Remove 'Tour' menu option
Hide Favorites menu
Tools menu: Disable Internet Options... menu option
View menu: Disable Full Screen menu option
View menu: Disable Source menu option
Disable the Advanced page
Disable the Connections page
Disable the Content page
Disable the General page
Disable the Privacy page
Disable the Programs page
Disable the Security page
Allow active content from CDs to run on user machines
Allow Install On Demand (except Internet Explorer)
Allow Install On Demand (Internet Explorer)
Allow software to run or install even if the signature is invalid
Allow third-party browser extensions
Automatically check for Internet Explorer updates
Check for server certificate revocation
Check for signatures on downloaded programs
Do not save encrypted pages to disk
Empty Temporary Internet Files folder when browser is closed
Play animations in web pages
Play sounds in web pages
Play videos in web pages
Internet Zone Template
Intranet Sites: Include all local (intranet) sites not listed in other zones
Intranet Sites: Include all network paths (UNCs)
Intranet Sites: Include all sites that bypass the proxy server
Intranet Zone Template
Local Machine Zone Template
Restricted Sites Zone Template
Site to Zone Assignment List
Trusted Sites Zone Template
omponents\Internet Explorer\Internet Control Panel\Security Page
Access data sources across domains
Allow active content over restricted protocols to access my computer
Allow active scripting
Allow binary and script behaviors
Allow drag and drop or copy and paste files
Allow file downloads
Allow font downloads
Allow installation of desktop items
Allow META REFRESH
Allow paste operations via script
Allow script-initiated windows without size or position constraints
Allow Scriptlets
Automatic prompting for ActiveX controls
Automatic prompting for file downloads
Display mixed content
Do not prompt for client certificate selection when no certificates or only one certificate exists.
Download signed ActiveX controls
Download unsigned ActiveX controls
Initialize and script ActiveX controls not marked as safe
Java permissions
Launching applications and files in an IFRAME
Logon options
Navigate sub-frames across different domains
Open files based on content, not file extension
Run .NET Framework-reliant components not signed with Authenticode
Run .NET Framework-reliant components signed with Authenticode
Run ActiveX controls and plugins
Script ActiveX controls marked safe for scripting
Scripting of Java applets
Software channel permissions
Submit non-encrypted form data
Use Pop-up Blocker
Userdata persistence
Web sites in less privileged Web content zones can navigate into this zone
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow Scriptlets
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Disable adding channels
Disable adding schedules for offline pages
Disable all scheduled offline pages
Disable channel user interface completely
Disable downloading of site subscription content
Disable editing and creating of schedule groups
Disable editing schedules for offline pages
Disable offline page hit logging
Disable removing channels
Disable removing schedules for offline pages
Subscription Limits
File size limits for Internet zone
File size limits for Intranet zone
File size limits for Local Machine zone
File size limits for Restricted Sites zone
File size limits for Trusted Sites zone
Add-on List
All Processes
Deny all add-ons unless specifically allowed in the Add-on List
Process List
Admin-approved behaviors
All Processes
Internet Explorer Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
Internet Zone Restricted Protocols
Intranet Zone Restricted Protocols
Local Machine Zone Restricted Protocols
Restricted Sites Zone Restricted Protocols
Trusted Sites Zone Restricted Protocols
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
Configure Toolbar Buttons
Disable customizing browser toolbar buttons
Disable customizing browser toolbars
Disable Automatic Install of Internet Explorer components
Disable Periodic Check for Internet Explorer software updates
Disable showing the splash screen
Disable software update shell notifications on program launch
Make proxy settings per-machine (rather than per-user)
Pop-up allow list
Security Zones: Do not allow users to add/delete sites
Security Zones: Do not allow users to change policies
Security Zones: Use only machine settings
Turn off Crash Detection
Turn off pop-up management
Disable the Advanced page
Disable the Connections page
Disable the Content page
Disable the General page
Disable the Privacy page
Disable the Programs page
Disable the Security page
Allow active content from CDs to run on user machines
Allow Install On Demand (Internet Explorer)
Allow software to run or install even if the signature is invalid
Allow third-party browser extensions
Check for server certificate revocation
Check for signatures on downloaded programs
Do not save encrypted pages to disk
Empty Temporary Internet Files folder when browser is closed
Play animations in web pages
Play sounds in web pages
Play videos in web pages
Internet Zone Template
Intranet Sites: Include all local (intranet) sites not listed in other zones
Intranet Sites: Include all network paths (UNCs)
Intranet Zone Template
Local Machine Zone Template
Restricted Sites Zone Template
Site to Zone Assignment List
Trusted Sites Zone Template
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow Scriptlets
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Allow META REFRESH
Allow Scriptlets
Java permissions
Logon options
Use Pop-up Blocker
Add-on List
All Processes
Deny all add-ons unless specifically allowed in the Add-on List
Process List
Admin-approved behaviors
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
Internet Zone Restricted Protocols
Intranet Zone Restricted Protocols
Local Machine Zone Restricted Protocols
Restricted Sites Zone Restricted Protocols
Trusted Sites Zone Restricted Protocols
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
All Processes
Process List
Allow persisting automatic acceptance of Calls
Disable Chat
Disable Directory services
Disable NetMeeting 2.x Whiteboard
Disable Whiteboard
Enable Automatic Configuration
Limit the size of sent files
Prevent adding Directory servers
Prevent automatic acceptance of Calls
Prevent changing Call placement method
Prevent receiving files
Prevent sending files
Prevent viewing Web directory
Set Call Security options
Set the intranet support Web page
Disable application Sharing
Prevent Application Sharing in true color
Prevent Control
Prevent Desktop Sharing
Prevent Sharing
Prevent Sharing Command Prompts
Prevent Sharing Explorer windows
Disable Audio
Disable full duplex Audio
Limit the bandwidth of Audio and Video
Prevent changing DirectSound Audio setting
Prevent receiving Video
Prevent sending Video
Disable the Advanced Calling button
Hide the Audio page
Hide the General page
Hide the Security page
Hide the Video page
Disable remote Desktop Sharing
Supported on Help/Explain Text
Windows Server 2003, XP SP1, 2000 SP3 Specifies whether Automatic Updates should automatically install certain updates that neith
Windows Server 2003, XP SP1, 2000 SP3 Specifies whether, when logged on, non-administrative users will receive update notificatio
Windows Server 2003, XP SP1, 2000 SP3 Specifies the hours that Windows will use to determine how long to wait before checking fo
Windows Server 2003, XP SP1, 2000 SP3 Specifies whether this computer will receive security updates and other important downloa
Windows Server 2003, XP SP1, 2000 SP3 Specifies the amount of time for Automatic Updates to wait before proceeding with a sched
Windows Server 2003, XP SP1, 2000 SP3 Specifies the target group name that should be used to receive updates from an intranet M
Windows Server 2003, XP SP1, 2000 SP3 Specifies that to complete a scheduled installation, Automatic Updates will wait for the com
Windows Server 2003, XP SP1, 2000 SP3 Specifies the amount of time for Automatic Updates to wait before prompting again with a s
Windows Server 2003, XP SP1, 2000 SP3 Specifies the amount of time for Automatic Updates to wait, following system startup, befor
Windows Server 2003, XP SP1, 2000 SP3 Specifies an intranet server to host updates from the Microsoft Update Web sites. You can
Windows Media Player 9 Series and later. Prevents media information for CDs and DVDs from being retrieved from the Internet. This
Windows Media Player 9 Series and later. Prevents media information for music files from being retrieved from the Internet. This poli
Windows Media Player 9 Series and later. Prevents radio station presets from being retrieved from the Internet. This policy prevents
Windows Media Player for Windows XP and later. Specifies the HTTP proxy settings for Windows Media Player. This policy specifies the pro
Windows Media Player for Windows XP and later. Specifies the MMS proxy settings for Windows Media Player. This policy specifies the prox
Windows Media Player for Windows XP and later. Specifies whether network buffering uses the default or a specified number of seconds. Th
Windows Media Player 9 Series and later. Specifies the RTSP proxy settings for Windows Media Player. This policy specifies the pro
Windows Media Player for Windows XP and later. Hides the Network tab. This policy hides the Network tab in Windows Media Player. The d
Windows Media Player for Windows XP and later. Specifies that the selected protocols are used when receiving streaming media from a serv
Windows Media Player 9 Series and later. Enables a screen saver to interrupt playback. This policy displays a screen saver during p
Windows Media Player for Windows XP and later. Prevents Windows Media Player from downloading codecs. This policy prevents the Playe
Windows Media Player for Windows XP and later. Prevents the anchor window from being displayed when Windows Media Player is in skin m
Windows Media Player 9 Series and later. Hides the Privacy tab. This policy hides the Privacy tab in Windows Media Player. The def
Windows Media Player 9 Series and later. Hides the Security tab. This policy hides the Security tab in Windows Media Player. The d
Windows Media Player for Windows XP and later. Enables Windows Media Player to be shown only in skin mode, using a specified skin. Thi
Windows Media Player 9 Series and later. Do Not Show First Use Dialog Boxes This policy prevents the Privacy Options and Installa
Windows Media Player 9 Series and later. Prevents users from being prompted to update Windows Media Player. This policy preven
Windows Media Player 9 Series and later. This policy prevents a shortcut icon for the Player from being added to the user's desktop.
Windows Media Player 9 Series and later. This policy prevents a shortcut for the Player from being added to the Quick Launch bar. W
Windows Media Player 9 Series and later. Prevents video smoothing from occurring. This policy prevents video smoothing, which ca
At least Microsoft Windows XP Professional or Windows Server 2003This
family
setting affects the visual style and presentation of the Control Panel. It allows you to d
At least Microsoft Windows 2000 Hides specified Control Panel items and folders. This setting removes Control Panel items
At least Microsoft Windows 2000 Disables all Control Panel programs. This setting prevents Control.exe, the program file fo
At least Microsoft Windows 2000 Hides all Control Panel items and folders except those specified in this setting. This setting
At least Microsoft Windows 2000 Prevents users from using Add or Remove Programs to configure installed services. This
At least Microsoft Windows 2000 Removes the Add New Programs button from the Add or Remove Programs bar. As a resu
At least Microsoft Windows 2000 Removes the Add/Remove Windows Components button from the Add or Remove Program
At least Microsoft Windows 2000 Removes the Change or Remove Programs button from the Add or Remove Programs bar
At least Microsoft Windows 2000 Removes the Add a program from CD-ROM or floppy disk section from the Add New Progr
At least Microsoft Windows 2000 Removes the Add programs from Microsoft section from the Add New Programs page. Thi
At least Microsoft Windows 2000 Prevents users from viewing or installing published programs. This setting removes the Ad
At least Microsoft Windows 2000 Service Pack 3 or Microsoft Windows
Removes
XP Professional
the Set Program
ServiceAccess
Pack 1and Defaults button from the Add or Remove Programs
At least Microsoft Windows 2000 Prevents users from using Add or Remove Programs. This setting removes Add or Remov
At least Microsoft Windows 2000 Removes links to the Support Info dialog box from programs on the Change or Remove Pr
At least Microsoft Windows 2000 Specifies the category of programs that appears when users open the Add New Programs
At least Microsoft Windows 2000 Removes the Appearance and Themes tabs from Display in Control Panel. When this sett
At least Microsoft Windows 2000 Removes the Desktop tab from Display in Control Panel. This setting prevents users from
At least Microsoft Windows 2000 Removes the Screen Saver tab from Display in Control Panel. This setting prevents users
At least Microsoft Windows 2000 Removes the Settings tab from Display in Control Panel. This setting prevents users from
At least Microsoft Windows 2000 Service Pack 1 Determines whether screen savers used on the computer are password protected. If you e
At least Microsoft Windows 2000 Prevents users from adding or changing the background design of the desktop. By default
At least Microsoft Windows 2000 Disables Display in Control Panel. If you enable this setting, Display in Control Panel does
At least Microsoft Windows 2000 Service Pack 1 Enables desktop screen savers. If you disable this setting, screen savers do not run. Also,
At least Microsoft Windows 2000 Service Pack 1 Specifies the screen saver for the user's desktop. If you enable this setting, the system dis
At least Microsoft Windows 2000 Service Pack 1 Specifies how much user idle time must elapse before the screen saver is launched. When
family
setting allows you to load a specific visual style file by entering the path (location) of th
At least Microsoft Windows XP Professional or Windows Server 2003Prevents
family users from changing the visual style of the windows and buttons displayed on the
family users from changing the size of the font in the windows and buttons displayed on
family
setting forces the theme color to be the default color scheme. If you enable this settin
family
setting effects the Themes tab that controls the overall appearance of windows. It is a
At least Microsoft Windows 2000 Adds a link to an Internet or intranet Web page to the Add Printer Wizard. You can use thi
At least Microsoft Windows 2000 Allows users to use the Add Printer Wizard to search the network for shared printers. If yo
At least Microsoft Windows 2000 Specifies the Active Directory location where searches for printers begin. The Add Printer
At least Microsoft Windows XP Professional with SP1 or Windows Server
This policy
2003setting
family restricts the servers that a client can connect to for point and print. The p
At least Microsoft Windows 2000 Prevents users from using familiar methods to add local and network printers. This setting
At least Microsoft Windows 2000 Prevents users from deleting local and network printers. If a user tries to delete a printer, s
At least Microsoft Windows 2000 This setting restricts users to the specified language by disabling the menus and dialog box
At least Microsoft Windows 2000 Remote shared folders are not added to My Network Places whenever you open a docume
At least Microsoft Windows 2000 Prevents users from saving certain changes to the desktop. If you enable this setting, user
At least Microsoft Windows 2000 Removes icons, shortcuts, and other default and user-defined items from the desktop, inclu
At least Microsoft Windows 2000 Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on th
At least Microsoft Windows 2000 Removes the My Network Places icon from the desktop. This setting only affects the desk
At least Microsoft Windows 2000 Prevents users from manipulating desktop toolbars. If you enable this setting, users canno
At least Microsoft Windows 2000 Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition
At least Microsoft Windows 2000 Prevents users from changing the path to the My Documents folder. By default, a user can
At least Microsoft Windows XP Professional or Windows Server 2003
This
family
setting hides My Computer from the desktop and from the new Start menu. It also hide
At least Microsoft Windows 2000 Removes most occurrences of the My Documents icon. This setting removes the My Docu
At least Microsoft Windows 2000 Service Pack 3 This setting hides Properties on the context menu for My Computer. If you enable this sett
At least Microsoft Windows 2000 Service Pack 3 This setting hides Properties for the context menu on My Documents. If you enable this se
Removes
family the Properties option from the Recycle Bin context menu. If you enable this setti
Removes
family most occurrences of the Recycle Bin icon. This setting removes the Recycle Bin
Prevents
family users from using the Desktop Cleanup Wizard. If you enable this setting, the Des
At least Microsoft Windows 2000 Specifies the desktop background (wallpaper) displayed on all users' desktops. This settin
At least Microsoft Windows 2000 Adds and deletes specified Web content items. You can use the Add box in this setting to
At least Microsoft Windows 2000 Permits only bitmap images for wallpaper. This setting limits the desktop background (wallp
At least Microsoft Windows 2000 Disables Active Desktop and prevents users from enabling it. This setting prevents users f
At least Microsoft Windows 2000 Removes Active Desktop content and prevents users from adding Active Desktop content.
At least Microsoft Windows 2000 Enables Active Desktop and prevents users from disabling it. This setting prevents users f
At least Microsoft Windows 2000 Prevents users from adding Web content to their Active Desktop. This setting removes the
At least Microsoft Windows 2000 Prevents the user from enabling or disabling Active Desktop or changing the Active Deskto
At least Microsoft Windows 2000 Prevents users from removing Web content from their Active Desktop. In Active Desktop,
At least Microsoft Windows 2000 Prevents users from deleting Web content from their Active Desktop. This setting removes
At least Microsoft Windows 2000 Prevents users from changing the properties of Web content items on their Active Desktop
At least Microsoft Windows 2000 Displays the filter bar above the results of an Active Directory search. The filter bar consist
Only works on Microsoft Windows 2000 Hides the Active Directory folder in My Network Places. The Active Directory folder display
At least Microsoft Windows 2000 Specifies the maximum number of objects the system displays in response to a command
At least Microsoft Windows 2000 Service Pack 1 Determines whether a user can view and change the properties of remote access connecti
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can delete all user remote access connections. To create an al
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can enable/disable LAN connections. If you enable this setting,
Determines
family whether nonadministrators can rename all-user remote access connections. T
Determines
family whether nonadministrators can rename a LAN connection. If you enable this s
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can rename LAN or all user remote access connections. If you
Determines
family whether settings that existed in Windows 2000 Server family will apply to Adm
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can change the properties of a LAN connection. This setting de
At least Microsoft Windows 2000 Service Pack 1 Determines whether Administrators and Network Configuration Operators can change the
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can view and change the properties of components used by a p
At least Microsoft Windows 2000 Service Pack 1 Determines whether the Advanced Settings item on the Advanced menu in Network Conne
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can use the New Connection Wizard, which creates new netwo
At least Microsoft Windows 2000 Service Pack 1 Determines whether the Remote Acccess Preferences item on the Advanced menu in Netw
At least Microsoft Windows 2000 Service Pack 1 Determines whether administrators can add and remove network components for a LAN or
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can view and change the properties of their private remote acce
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can connect and disconnect remote access connections. If you
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can delete remote access connections. If you enable this settin
At least Microsoft Windows 2000 Service Pack 1 Determines whether administrators can enable and disable the components used by LAN c
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can rename their private remote access connections. Private c
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can configure advanced TCP/IP settings. If you enable this sett
At least Microsoft Windows 2000 Service Pack 1 Determines whether users can view the status for an active connection. Connection status
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage whether notifications are shown to the user when
At least Microsoft Windows 2000 Determines whether network files remain available if the computer is suddenly disconnecte
At least Microsoft Windows 2000 This policy setting lists network files and folders that are always available for offline use. Th
Allfamily
redirected shell folders, such as My Documents, Desktop, Start Menu, and Application D
At least Microsoft Windows 2000 Determines which events the Offline Files feature records in the event log. Offline Files rec
At least Microsoft Windows 2000 Determines how long the first reminder balloon for a network status change is displayed. R
At least Microsoft Windows 2000 Determines how computers respond when they are disconnected from particular offline file
At least Microsoft Windows 2000 Disables the Offline Files folder. This setting disables the View Files button on the Offline F
This
family
policy setting allows you to manage a list of files or folders for which you wish to prohi
At least Microsoft Windows 2000 Prevents users from enabling, disabling, or changing the configuration of Offline Files. Thi
At least Microsoft Windows 2000 Determines how often reminder balloon updates appear. If you enable this setting, you can
At least Microsoft Windows 2000 Determines how long updated reminder balloons are displayed. Reminder balloons appea
At least Microsoft Windows 2000 Prevents users from making network files and folders available offline. This setting remove
At least Microsoft Windows 2000 Determines whether offline files are fully synchronized when users log off. This setting also
At least Microsoft Windows 2000 Determines whether offline files are fully synchronized when users log on. This setting also
At least Microsoft Windows 2000 Determines whether offline files are synchonized before a computer is suspended. If you e
At least Microsoft Windows 2000 Hides or displays reminder balloons, and prevents users from changing the setting. Remin
At least Microsoft Windows XP Professional or Windows Server 2003Determines
family whether the user can publish DFS roots in Active Directory. If you enable this
family whether the user can publish shared folders in Active Directory. If you enable
At least Microsoft Windows 2000 Adds the Log Off <username> item to the Start menu and prevents users from removing it.
At least Microsoft Windows 2000 Lets users run a 16-bit program in a dedicated (not shared) Virtual DOS Machine (VDM) pr
At least Microsoft Windows 2000 Clear history of recently opened documents on exit. If you enable this setting, the system d
family
setting affects the taskbar. The taskbar includes the Start button, buttons for currently
At least Microsoft Windows 2000 Prevents the operating system and installed programs from creating and displaying shortcu
At least Microsoft Windows 2000 Prevents the system from conducting a comprehensive search of the target drive to resolve
At least Microsoft Windows 2000 Prevents the system from using NTFS tracking features to resolve a shortcut. By default, w
family
setting effects the presentation of the Start menu. The classic Start menu in Windows
At least Microsoft Windows 2000 Displays Start menu shortcuts to partially installed programs in gray text. This setting mak
family
setting affects the notification area (previously called the system tray) on the taskbar.
family
setting effects the taskbar, which is used to switch between running applications. The
At least Microsoft Windows 2000 Removes the Taskbar and Start Menu item from Settings on the Start menu. This setting a
family
setting effects the taskbar buttons used to switch between running programs. Taskba
At least Microsoft Windows 2000 Hides the menus that appear when you right-click the taskbar and items on the taskbar, su
At least Microsoft Windows XP Professional or Windows Server 2003If you
family
enable this setting, the All Programs item is removed from the simple Start menu. If
At least Microsoft Windows 2000 Prevents users from shutting down or restarting Windows. This setting removes the Shut D
At least Microsoft Windows XP Professional or Windows Server 2003Hides
family
pop-up text on the Start menu and in the notification area. When you hold the curso
family the clock in the system notification area from being displayed. If you enable this
At least Microsoft Windows 2000 Removes items in the All Users profile from the Programs menu on the Start menu. By de
At least Microsoft Windows 2000 Removes the Documents menu from the Start menu. The Documents menu contains links
At least Microsoft Windows 2000 Prevents users from using the drag-and-drop method to reorder or remove items on the St
At least Microsoft Windows 2000 Prevents users from adding the Favorites menu to the Start menu or classic Start menu. If
family
enable this setting, the frequently used programs list is removed from the Start menu
At least Microsoft Windows 2000 Removes the Help command from the Start menu. This setting only affects the Start menu
At least Microsoft Windows 2000 Prevents users from connecting to the Windows Update Web site. This setting blocks user
At least Microsoft Windows 2000 Removes the Log Off <username> item from the Start menu and prevents users from resto
At least Microsoft Windows 2000 Removes the My Documents icon from the Start menu and its submenus. This setting only
At least Microsoft Windows XP Professional or Windows Server 2003Removes
family the My Music icon from the Start Menu.
family the My Network Places icon from the Start Menu.
family the My Pictures icon from the Start Menu.
At least Microsoft Windows 2000 Prevents users from running Network Connections. This setting prevents the Network Con
family
enable this setting, the Pinned Programs list is removed from the Start menu, and th
At least Microsoft Windows 2000 Prevents Control Panel, Printers, and Network Connections from running. This setting rem
At least Microsoft Windows 2000 Allows you to remove the Run command from the Start menu, Internet Explorer, and Task
At least Microsoft Windows 2000 Removes the Search item from the Start menu, and disables some Windows Explorer sear
At least Microsoft Windows 2000 Service Pack 3 or Microsoft Windows
Removes
XP Professional
the Set Program
ServiceAccess
Pack 1and Defaults icon from the Start menu. Clicking the Se
family
enable this setting, the Undock PC button is removed from the simple Start Menu, an
At least Microsoft Windows XP Professional or Windows Server 2003Remove
family user name from Start Menu
At least Microsoft Windows 2000 Hides all folders on the user-specific (top) section of the Start menu. Other items appear, b
family
setting effects the notification area, also called the system tray. The notification area
At least Microsoft Windows 2000 Disables personalized menus. Windows personalizes long menus by moving recently used
At least Microsoft Windows 2000 Disables user tracking. This setting prevents the system from tracking the programs users
At least Microsoft Windows 2000 Determines how programs interpret two-digit years. This setting specifies the largest two-d
At least Microsoft Windows 2000 Determines how the system responds when a user tries to install device driver files that are
family
setting configures the location that Windows searches for drivers when a new piece o
At least Microsoft Windows 2000 Specifies an alternate user interface for Windows 2000. The Explorer program (%systemd
Only works on Microsoft Windows 2000 Supresses the welcome screen. This setting hides the welcome screen that is displayed o
At least Microsoft Windows 2000 Prevents Windows from running the programs you specify in this setting. If you enable this
At least Microsoft Windows 2000 Directs the system to search Active Directory for missing Component Object Model (COM)
At least Microsoft Windows 2000 Disables the Windows registry editor Regedit.exe. If this setting is enabled and the user tri
At least Microsoft Windows 2000 Prevents users from running the interactive command prompt, Cmd.exe. This setting also d
At least Microsoft Windows XP Professional or Windows Server 2003Allows
familyyou to restrict programs from being run from online Help. If you enable this setting,
At least Microsoft Windows 2000 Limits the Windows programs that users have permission to run on the computer. If you en
At least Microsoft Windows 2000 Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you insert
At least Microsoft Windows XP Professional with SP2 Specifies whether the administrator will be prompted about going to Windows Update to se
Only works on Microsoft Windows XP Professional This setting controls automatic updates to a user's computer. Whenever a user connects t
At least Microsoft Windows 2000 Prevents users from changing their Windows password on demand. This setting disables
At least Microsoft Windows 2000 Prevents users from locking the system. While locked, the desktop is hidden and the syste
At least Microsoft Windows 2000 Prevents the user from logging off. This setting does not let the user log off the system by
At least Microsoft Windows 2000 Prevents users from starting Task Manager (Taskmgr.exe). If this setting is enabled and u
At least Microsoft Windows 2000 Creates new Group Policy object links in the disabled state. This setting creates all new G
At least Microsoft Windows 2000 Sets the default display name for new Group Policy objects. This setting allows you to spe
This
family
setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. B
At least Microsoft Windows 2000 Prevents administrators from viewing or using Group Policy preferences. A Group Policy a
At least Microsoft Windows 2000 Determines which domain controller the Group Policy Object Editor snap-in uses. -- Use t
At least Microsoft Windows 2000 Specifies how often Group Policy for users is updated while the computer is in use (in the b
At least Microsoft Windows 2000 Defines a slow connection for purposes of applying and updating Group Policy. If the rate
At least Microsoft Windows 2000 Prevents the system from updating the Administrative Templates source files automatically
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows can access the Internet to accomplish tasks that require Intern
At least Microsoft Windows XP Professional with SP2 Specifies whether to allow this client to download print driver packages over HTTP. To set
Specifies
2003 whether
family Windows should download a list of providers for the Web publishing and
Specifies
family whether to use the Microsoft Web service for finding an application to open a file
At least Microsoft Windows XP Professional with SP2 Specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a
Specifies
2003 whether
family the Order Prints Online task is available from Picture Tasks in Windows
Specifies
2003 whether
family the tasks Publish this file to the Web, Publish this folder to the Web, and
Specifies
2003 whether
family Windows Messenger collects anonymous information about how Window
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows Movie Maker automatically downloads codecs. Windows Mov
At least Microsoft Windows XP Professional with SP2 Specifies whether links to Web sites are available in Windows Movie Maker. These links in
At least Microsoft Windows XP Professional with SP2 Specifies whether users can send a final movie to a video hosting provider on the Web by
At least Microsoft Windows 2000 Ignores the customized run list. You can create a customized list of additional programs an
At least Microsoft Windows 2000 Ignores customized run-once lists. You can create a customized list of additional programs
At least Microsoft Windows 2000 Specifies additional programs or documents that Windows starts automatically when a use
This
family
settings allows you to configure client computers to always lock when resuming from a
At least Microsoft Windows 2000 Hides the instructions in logon scripts written for Windows NT 4.0 and earlier. Logon script
At least Microsoft Windows 2000 Displays the instructions in logoff scripts as they run. Logoff scripts are batch files of instru
At least Microsoft Windows 2000 Directs the system to wait for the logon scripts to finish running before it starts the Window
At least Microsoft Windows 2000 Displays the instructions in logon scripts as they run. Logon scripts are batch files of instru
At least Microsoft Windows 2000 Restores the definitions of the %HOMESHARE% and %HOMEPATH% environment variab
At least Microsoft Windows 2000 Lets you add to the list of folders excluded from the user's roaming profile. This setting lets
At least Microsoft Windows 2000 Sets the maximum size of each user profile and determines the system's response when a
Specifies
2003 whether
family to prevent the MS-DOS subsystem (ntvdm.exe) from running for all user
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage the default risk level for file types. To fully custom
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage whether Windows marks file attachments with info
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage whether users can manually remove the zone info
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the list of high risk file types. If the file attachmen
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the list of low risk file types. If the attachment is i
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the list of moderate risk file types. If the attachm
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage the behavior for notifying registered antivirus prog
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the logic that Windows uses to determine the ris
At least Microsoft Windows 2000 Prevents users from entering author mode. This setting prevents users from opening the M
At least Microsoft Windows 2000 Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) sn
At least Microsoft Windows 2000 Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted.
Permits
familyor prohibits use of this snap-in. If you enable this setting, the snap-in is permitted.
Permits
At least Microsoft Windows Server 2003 Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted.
Permits
Permits
Permits
Permits
Permits
Permits
Permits
2003
or prohibits
family use of this snap-in. If you enable this setting, the snap-in is permitted.
At least Microsoft Windows 2000 Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory
Permits
Permits
Permits
Permits
Permits
Permits
Permits
Permits
Permits
Permits
At least Microsoft Windows 2000 This setting removes the Open advanced properties for this task when I click Finish checkb
At least Microsoft Windows 2000 Prevents users from viewing and changing the properties of an existing task. This setting r
At least Microsoft Windows 2000 Prevents users from starting and stopping tasks manually. This setting removes the Run a
At least Microsoft Windows 2000 Limits newly scheduled to items on the user's Start menu, and prevents the user from chan
At least Microsoft Windows 2000 Prevents users from adding or removing tasks by moving or copying programs in the Sche
At least Microsoft Windows 2000 Prevents users from creating new tasks. This setting removes the Add Scheduled Task ite
At least Microsoft Windows 2000 Prevents users from deleting tasks from the Scheduled Tasks folder. This setting removes
At least Microsoft Windows XP Terminal Services Specifies the level of remote control permitted in a Terminal Services session. Remote con
At least Microsoft Windows XP Terminal Services Configures Terminal Services to run a specified program automatically upon connection. Y
Controls
2003whether
familyawith
userSP1
can save passwords using a Terminal Services client. If you enab
At least Microsoft Windows XP Terminal Services Specifies whether to allow users to reconnect to a disconnected Terminal Services session
At least Microsoft Windows XP Terminal Services Specifies a time limit for disconnected Terminal Services sessions. You can use this settin
At least Microsoft Windows XP Terminal Services Specifies a time limit for active but idle Terminal Services sessions. You can use this setti
At least Microsoft Windows XP Terminal Services Specifies a time limit for active Terminal Services sessions. You can use this setting to sp
At least Microsoft Windows XP Terminal Services Specifies whether to terminate a timed-out Terminal Services session instead of disconnec
At least Microsoft Windows 2000 This setting is designed to ensure that shell extensions can operate on a per-user basis. If
Allows
familyyou to have Windows Explorer display a confirmation dialog whenever a file is dele
When
family
a file or folder is deleted in Windows Explorer, a copy of the file or folder is placed in
At least Microsoft Windows 2000 Prevents users from submitting alternate logon credentials to install a program. This settin
At least Microsoft Windows 2000 Determines whether Windows traces shortcuts back to their sources when it cannot find th
At least Microsoft Windows 2000 Removes the icons representing selected hard drives from My Computer and Windows Ex
At least Microsoft Windows 2000 Removes the Manage item from the Windows Explorer context menu. This context menu a
Limits
family
the percentage of a volume's disk space that can be used to store deleted files. If yo
At least Microsoft Windows 2000 Determines how many shortcuts the system can display in the Documents menu on the Sta
At least Microsoft Windows 2000 Removes computers in the user's workgroup and domain from lists of network resources in
At least Microsoft Windows 2000 Removes all computers outside of the user's workgroup or local domain from lists of netwo
At least Microsoft Windows 2000 Prevents users from using My Computer to gain access to the content of selected drives. I
Windows
family Explorer allows you to create and modify re-writable CDs if you have a CD writer
At least Microsoft Windows 2000 Removes the DFS tab from Windows Explorer. This setting removes the DFS tab from Wi
At least Microsoft Windows 2000 Removes the File menu from My Computer and Windows Explorer. This setting does not p
At least Microsoft Windows 2000 Removes the Hardware tab. This setting removes the Hardware tab from Mouse, Keyboar
At least Microsoft Windows 2000 Prevents users from using Windows Explorer or My Network Places to map or disconnect n
At least Microsoft Windows 2000 Removes the Search button from the Windows Explorer toolbar. This setting removes the
Removes
family the Security tab from Windows Explorer. If you enable this setting, users openin
Only works on Microsoft Windows XP Professional Removes the Shared Documents folder from My Computer. When a Windows client in is a
At least Microsoft Windows 2000 Disables the Hide keyboard navigation indicators until I use the ALT key option in Display i
At least Microsoft Windows 2000 Prevents users from selecting the option to animate the movement of windows, menus, an
At least Microsoft Windows 2000 Removes shortcut menus from the desktop and Windows Explorer. Shortcut menus appea
At least Microsoft Windows 2000 Removes the Folder Options item from all Windows Explorer menus and removes the Fold
At least Microsoft Windows 2000 Prompts users for alternate logon credentials during network-based installations. This sett
This
family
settings controls whether the thumbnail views are cached. If you enable this setting, t
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the amount of functionality that the shell protoco
At least Microsoft Windows Server 2003 Turn off Windows+X hotkeys. Keyboards with a Windows key provide users with shortcuts
At least Microsoft Windows 2000 This setting allows you to remove the Active Desktop and Web view features. If you enable
At least Microsoft Windows 2000 Removes the Back button from the Open dialog box. This setting, and others in this folder
At least Microsoft Windows 2000 Removes the shortcut bar from the Open dialog box. This setting, and others in this folder
At least Microsoft Windows 2000 Removes the list of most recently used files from the Open dialog box. If you disable this s
Configures
family the list of items displayed in the Places Bar in the Windows File/Open dialog. If
At least Microsoft Windows 2000 Directs Windows Installer to use system permissions when it installs any program on the sy
At least Microsoft Windows 2000 Prevents users from installing programs from removable media. If a user tries to install a p
At least Microsoft Windows 2000 Prohibits Windows Installer from generating and saving the files it needs to reverse an inte
At least Microsoft Windows 2000 Specifies the order in which Windows Installer searches for installation files. By default, th
Allows
familyyou to disable Windows Messenger. If you enable this setting, Windows Messenge
Windows
family Messenger is automatically loaded and running when a user logs on to a Window
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of th
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to manage whether the 'Install Updates and Shut Down' optio
This
family
setting allows you to remove access to Windows Update. If you enable this setting, a
Allows
familyyou to configure how often a Distributed File System (DFS) client attempts to discov
Windows XP SP2 or Windows Server 2003 SP1, or computers with Limits
BITS 2.0
theinstalled.
network bandwidth that BITS uses for background transfers (this policy does not
Windows XP or Windows Server 2003, or computers with BITS 1.5 installed.
The number of days a pending BITS job can remain inactive before being considered aban
Only works on Microsoft Windows XP Professional Specifies a connection-specific DNS suffix. This setting supersedes the connection-specific
Only works on Microsoft Windows XP Professional Defines the DNS servers to which a computer sends queries when it attempts to resolve na
Determines
family the DNS suffixes to attach to an unqualified single-label name before submissi
Determines
family if dynamic update is enabled. Computers configured for dynamic update autom
At least Microsoft Windows 2000 Specifies the primary Domain Name System (DNS) suffix for all affected computers. The p
Determines
family whether the DNS client performs primary DNS suffix devolution in a name reso
Determines
family if a computer performing dynamic registration may register A and PTR resourc
Determines
family whether the registration of PTR resource records is enabled for the computers
Specifies
family the Registration Refresh Interval of A and PTR resource records for computers to
Only works on Microsoft Windows XP Professional Determines whether a DNS client that attempts to register its A resource record should ove
Specifies
family the value for the Time-To-Live (TTL) field in A and PTR resource records register
Specifies
family whether the computers to which this setting is applied use secure dynamic updat
Specifies
family whether the computers to which this setting is applied may send dynamic update
At least Microsoft Windows XP Professional with SP2 Allows configuration of components of the operating system used by a client computer to c
At least Microsoft Windows XP Professional with SP2 The Peer Name Resolution Protocol (PNRP) allows for distributed resolution of a name to
At least Microsoft Windows XP Professional with SP2
If you
family
want to use IEEE 802.1x machine authentication, configure this setting. If you enabl
Determines
family whether a user can install and configure the Network Bridge. Important: This s
Prohibits
family use of Internet Connection Firewall on your DNS domain network. Determines w
At least Microsoft Windows 2000 Service Pack 1 Determines whether administrators can enable and configure the Internet Connection Shar
At least Microsoft Windows XP Professional with SP2 Allows unsolicited incoming messages from specified systems that authenticate using the I
At least Microsoft Windows XP Professional with SP2 Allows file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138
At least Microsoft Windows XP Professional with SP2 Defines the set of Internet Control Message Protocol (ICMP) message types that Windows
At least Microsoft Windows XP Professional with SP2 Allows administrators to use the Windows Firewall component in Control Panel to define a
At least Microsoft Windows XP Professional with SP2 Allows Windows Firewall to record information about the unsolicited incoming messages th
At least Microsoft Windows XP Professional with SP2 Allows remote administration of this computer using administrative tools such as the Micros
At least Microsoft Windows XP Professional with SP2 Allows this computer to receive Remote Desktop requests. To do this, Windows Firewall op
At least Microsoft Windows XP Professional with SP2 Allows this computer to receive unsolicited Plug and Play messages sent by network devic
At least Microsoft Windows XP Professional with SP2 Allows you to view and change the port exceptions list defined by Group Policy. Windows F
At least Microsoft Windows XP Professional with SP2 Allows you to view and change the program exceptions list defined by Group Policy. Windo
At least Microsoft Windows XP Professional with SP2 Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setti
At least Microsoft Windows XP Professional with SP2 Prevents Windows Firewall from displaying notifications to the user when a program reque
At least Microsoft Windows XP Professional with SP2 Prevents this computer from receiving unicast responses to its outgoing multicast or broad
At least Microsoft Windows XP Professional with SP2 Turns on Windows Firewall, which replaces Internet Connection Firewall on all computers t
At least Microsoft Windows XP Professional with SP2 Allows file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138
At least Microsoft Windows XP Professional with SP2 Defines the set of Internet Control Message Protocol (ICMP) message types that Windows
At least Microsoft Windows XP Professional with SP2 Allows Windows Firewall to record information about the unsolicited incoming messages th
At least Microsoft Windows XP Professional with SP2 Allows remote administration of this computer using administrative tools such as the Micros
At least Microsoft Windows XP Professional with SP2 Allows this computer to receive Remote Desktop requests. To do this, Windows Firewall op
At least Microsoft Windows XP Professional with SP2 Allows this computer to receive unsolicited Plug and Play messages sent by network devic
At least Microsoft Windows XP Professional with SP2 Allows you to view and change the port exceptions list defined by Group Policy. Windows F
At least Microsoft Windows XP Professional with SP2 Allows you to view and change the program exceptions list defined by Group Policy. Windo
At least Microsoft Windows XP Professional with SP2 Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setti
At least Microsoft Windows XP Professional with SP2 Prevents Windows Firewall from displaying notifications to the user when a program reque
At least Microsoft Windows XP Professional with SP2 Prevents this computer from receiving unicast responses to its outgoing multicast or broad
At least Microsoft Windows XP Professional with SP2 Turns on Windows Firewall, which replaces Internet Connection Firewall on all computers t
At least Microsoft Windows 2000 Determines whether network files remain available if the computer is suddenly disconnecte
At least Microsoft Windows 2000 This policy setting lists network files and folders that are always available for offline use. Th
At least Microsoft Windows 2000 Determines whether the Offline Files feature is enabled. This setting also disables the Ena
At least Microsoft Windows 2000 Deletes local copies of the user's offline files when the user logs off. This setting specifies
Configures
family the threshold value at which Offline Files considers a network connection to be
At least Microsoft Windows 2000 Limits the percentage of the computer's disk space that can be used to store automatically
At least Microsoft Windows 2000 Service Pack 5, Microsoft Windows
This
XPsetting
Professional
determines
Service
whether
Pack 2offline
or Microsoft
files areWindows
encrypted.
Server
Offline
2003
files
family
reside
Service
on a user's
Pack 1h
At least Microsoft Windows 2000 Determines which events the Offline Files feature records in the event log. Offline Files rec
At least Microsoft Windows 2000 Lists types of files that cannot be used offline. This setting lets you exclude certain types o
At least Microsoft Windows 2000 Determines how long the first reminder balloon for a network status change is displayed. R
At least Microsoft Windows 2000 Determines how computers respond when they are disconnected from particular offline file
At least Microsoft Windows 2000 Disables the Offline Files folder. This setting disables the View Files button on the Offline F
This
family
policy setting allows you to manage a list of files or folders for which you wish to prohi
At least Microsoft Windows 2000 Prevents users from enabling, disabling, or changing the configuration of Offline Files. Thi
At least Microsoft Windows 2000 Determines how often reminder balloon updates appear. If you enable this setting, you can
At least Microsoft Windows 2000 Determines how long updated reminder balloons are displayed. Reminder balloons appea
At least Microsoft Windows 2000 Prevents users from making network files and folders available offline. This setting remove
At least Microsoft Windows 2000 Makes subfolders available offline whenever their parent folder is made available offline. T
At least Microsoft Windows 2000 Determines whether offline files are fully synchronized when users log off. This setting also
At least Microsoft Windows 2000 Determines whether offline files are fully synchronized when users log on. This setting also
At least Microsoft Windows 2000 Determines whether offline files are synchonized before a computer is suspended. If you e
At least Microsoft Windows 2000 Hides or displays reminder balloons, and prevents users from changing the setting. Remin
Specifies
family the maximum number of outstanding packets permitted on the system. When the
Determines
family the percentage of connection bandwidth that the system can reserve. This valu
Determines
family the smallest unit of time that the Packet Scheduler uses when scheduling pack
Specifies
family an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packet
Specifies
Specifies
Specifies
Specifies
Specifies
Specifies
Specifies
Specifies
Specifies
Specifies
family an alternate link layer (Layer-2) priority value for packets with the Best Effort serv
Specifies
family an alternate link layer (Layer-2) priority value for packets with the Controlled Load
Specifies
family an alternate link layer (Layer-2) priority value for packets with the Guaranteed se
Specifies
family an alternate link layer (Layer-2) priority value for packets with the Network Contro
Specifies
family an alternate link layer (Layer-2) priority value for packets that do not conform to t
Specifies
family an alternate link layer (Layer-2) priority value for packets with the Qualitative serv
Configures
family a list of the communities defined to the Simple Network Management Protocol (
This
family
setting determines the permitted list of hosts that can submit a query to the Simple Ne
This
family
setting allows Trap configuration for the Simple Network Management Protocol (SNMP
At least Microsoft Windows Server 2003 This policy controls whether the print spooler will accept client connections. When the po
At least Microsoft Windows 2000 Determines whether the computer's shared printers can be published in Active Directory. I
At least Microsoft Windows 2000 Determines whether the domain controller can prune (delete from Active Directory) the prin
At least Microsoft Windows 2000 Determines whether the Add Printer Wizard automatically publishes the computer's shared
At least Microsoft Windows 2000 Directs the system to periodically verify that the printers published by this computer still app
At least Microsoft Windows 2000 Specifies the default location criteria used when searching for printers. This setting is a co
At least Microsoft Windows 2000 Adds a customized Web page link to the Printers folder. By default, the Printers folder incl
At least Microsoft Windows 2000 Specifies how often the pruning service on a domain controller contacts computers to verify
At least Microsoft Windows 2000 Sets the priority of the pruning thread. The pruning thread, which runs only on domain con
At least Microsoft Windows 2000 Specifies how many times the pruning service on a domain controller repeats its attempt to
Determines
family whether printers using kernel-mode drivers may be installed on the local comp
Specifies
family whether or not to log events when the pruning service on a domain controller atte
At least Microsoft Windows 2000 Enables the physical Location Tracking support feature of Windows printers. Location trac
At least Microsoft Windows 2000 Announces the presence of shared printers to print browse master servers for the domain.
At least Microsoft Windows 2000 Determines whether the system prunes (deletes from Active Directory) printers that are not
Windows 2000 or later, running IIS. Not supported on Windows Server
Determines
2003 whether Internet printing is activated on this server. Internet printing lets you d
At least Microsoft Windows Server 2003 Defines when the Shutdown Event Tracker System State Data feature is activated. The sy
At least Microsoft Windows Server 2003 Specifies that Distributed Link Tracking clients in this domain may use the Distributed LInk
Thefamily
Shutdown Event Tracker can be displayed when you shut down a workstation or serve
At least Microsoft Windows 2000 Prevents Windows Explorer from encrypting files that are moved to an encrypted folder. If
At least Microsoft Windows Server 2003 Specifies whether to turn off the automatic display of the Manage Your Server page. If the
This setting
2003 family
allows you to configure whether power is automatically turned off when Window
At least Microsoft Windows 2000 Directs the system to search Active Directory for missing Component Object Model (COM)
At least Microsoft Windows Server 2003 The Persistent System Timestamp allows the system to detect the time of unexpected shu
At least Microsoft Windows 2000 Suppresses system status messages. If you enable this setting, the system does not displ
At least Internet Explorer 6 Service Pack 1 With this policy, you can restrict certain HTML Help commands to function only in HTML H
Allows
familyyou to restrict programs from being run from online Help. If you enable this setting,
Specifies
family an alternate location for Windows installation files. To enable this setting, and en
Specifies
family an alternate location for Windows Service Pack installation files. To enable this s
At least Microsoft Windows 2000 Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you insert
At least Microsoft Windows XP Professional with SP2 Specifies whether the administrator will be prompted about going to Windows Update to se
At least Microsoft Windows 2000 Directs the system to display highly detailed status messages. If you enable this setting, th
At least Microsoft Windows 2000 Extends the disk quota policies in this folder to NTFS file system volumes on removable m
At least Microsoft Windows 2000 Specifies the default disk quota limit and warning level for new users of the volume. This s
At least Microsoft Windows 2000 Enables and disables disk quota management on all NTFS volumes of the computer, and p
At least Microsoft Windows 2000 Determines whether disk quota limits are enforced and prevents users from changing the s
At least Microsoft Windows 2000 Determines whether the system records an event in the local Application log when users re
At least Microsoft Windows 2000 Determines whether the system records an event in the Application log when users reach t
At least Microsoft Windows XP Professional with SP2 Allows you to specify that local computer administrators can supplement the Define Activat
At least Microsoft Windows XP Professional with SP2 Allows you to view and change a list of DCOM server application ids (appids) which are ex
Configures
family how errors are reported and what information is sent when Error Reporting is e
Usefamily
this setting to control whether or not a user is given the choice to report an error. Whe
This
family
setting controls whether or not errors in general applications are included when error r
This
family
setting specifies the applications that are always included in error reporting. When thi
This
family
setting controls error reporting for errors in general applications when error reporting i
This
family
setting controls whether or not errors in the operating system are included when error
At least Microsoft Windows Server 2003 This setting controls whether or not unplanned shutdown events can be reported when erro
At least Microsoft Windows Server 2003 Allows User based policy processing, Roaming User Profiles and User Object logon scripts
At least Microsoft Windows Server 2003 Always use local ADM files for the Group Policy snap-in. By default, when you edit a Grou
This
family
setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. B
At least Microsoft Windows 2000 Determines when disk quota policies are updated. This setting affects all policies that use
At least Microsoft Windows 2000 Determines when encryption policies are updated. This setting affects all policies that use
At least Microsoft Windows 2000 Determines when folder redirection policies are updated. This setting affects all policies th
At least Microsoft Windows 2000 Specifies how often Group Policy for computers is updated while the computer is in use (in
At least Microsoft Windows 2000 Specifies how often Group Policy is updated on domain controllers while they are running (
At least Microsoft Windows 2000 Defines a slow connection for purposes of applying and updating Group Policy. If the rate
At least Microsoft Windows 2000 Determines when Internet Explorer Maintenance policies are updated. This setting affects
At least Microsoft Windows 2000 Determines when IP security policies are updated. This setting affects all policies that use
At least Microsoft Windows 2000 Determines when registry policies are updated. This setting affects all policies in the Admi
This
family
setting allows you to control a user's ability to invoke a computer policy refresh. If you
At least Microsoft Windows 2000 Determines when policies that assign shared scripts are updated. This setting affects all p
At least Microsoft Windows 2000 Determines when security policies are updated. This setting affects all policies that use the
At least Microsoft Windows 2000 Determines when software installation policies are updated. This setting affects all policies
At least Microsoft Windows 2000 Prevents Group Policy from being updated while the computer is in use. This setting applie
This
family
setting allows you to enable or disable Resultant Set of Policy (RSoP) logging on a cli
At least Microsoft Windows 2000 Applies alternate user settings when a user logs on to a computer affected by this setting.
At least Microsoft Windows 2000 Determines when policies that assign wireless network settings are updated. This setting a
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows can access the Internet to accomplish tasks that require Intern
This
XPsetting
Professional
allows Service
you to remove
Pack 1 access
or Microsoft
to Windows
WindowsUpdate.
ServerIf2003
you enable
family this setting, a
Specifies
2003whether
family with
to automatically
SP1 update root certificates using the Windows Update Web
Specifies
2003whether
family with
to allow
SP1this client to download print driver packages over HTTP. To set
Specifies
2003whether
family with
Events.asp
SP1 hyperlinks are available for events within the Event Viewer a
Specifies
2003whether
family with
to show
SP1the Did you know? section of Help and Support Center. This co
Specifies
2003whether
family with
usersSP1
can perform a Microsoft Knowledge Base search from the Help an
Specifies
2003whether
family with
the Internet
SP1 Connection Wizard can connect to Microsoft to download a
Specifies
2003whether
family Windows should download a list of providers for the Web publishing and
Specifies
family whether to use the Microsoft Web service for finding an application to open a file
Specifies
2003whether
family with
to allow
SP1printing over HTTP from this client. Printing over HTTP allows a
Specifies
2003whether
family with
the Windows
SP1 Registration Wizard connects to Microsoft.com for online re
Specifies
2003whether
family with
SearchSP1Companion should automatically download content updates duri
Specifies
2003whether
family the Order Prints Online task is available from Picture Tasks in Windows
Specifies
2003whether
family the tasks Publish this file to the Web, Publish this folder to the Web, and
Specifies
2003whether
family Windows Messenger collects anonymous information about how Window
Controls
family whether or not errors are reported to Microsoft. Error Reporting is used to report
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows Movie Maker automatically downloads codecs. Windows Mov
At least Microsoft Windows XP Professional with SP2 Specifies whether links to Web sites are available in Windows Movie Maker. These links in
At least Microsoft Windows XP Professional with SP2 Specifies whether users can send a final movie to a video hosting provider on the Web by
This policy
2003specifies
family withwhether
SP1 Windows searches Windows Update for device drivers when
This
family
setting forces the user to log on to the computer using the classic logon screen. By de
Determines
family whether Windows XP waits for the network during computer startup and user l
At least Microsoft Windows 2000 Ignores the customized run list. You can create a customized list of additional programs an
At least Microsoft Windows 2000 Ignores customized run-once lists. You can create a customized list of additional programs
Only works on Microsoft Windows 2000 Supresses the welcome screen. This setting hides the welcome screen that is displayed o
At least Microsoft Windows 2000 Specifies additional programs or documents that Windows starts automatically when a use
Defines
familywhether a domain controller (DC) should attempt to verify with the PDC the passw
Specifies
family the additional time for the computer to wait for the domain controller’s (DC) respo
When
family
applications performing periodic searches for domain controllers (DC) are unable to
When
family
applications performing periodic searches for domain controllers (DC) are unable to
At least Microsoft Windows Server 2003 Specifies the level of debug output for the Net Logon service. The Net Logon service outp
When
family
applications performing periodic searches for Domain Controllers (DCs) are unable t
At least Microsoft Windows Server 2003 Specifies the maximum size in bytes of the log file netlogon.log in the directory %windir%\d
Specifies
family the amount of time (in seconds) the DC locator remembers that a domain control
At least Microsoft Windows Server 2003 This setting controls whether or not the Netlogon share created by the Net Logon service o
Determines
family when a successful DC cache entry is refreshed. This setting is applied to calle
Determines
family when a successful DC cache entry is refreshed. This setting is applied to calle
Determines
family the interval at which Netlogon performs the following scavenging operations: -
Specifies
family the Active Directory site to which computers belong. An Active Directory site is o
At least Microsoft Windows Server 2003 This setting controls whether or not the Sysvol share created by the Net Logon service on
Determines
family whether domain controllers (DC) will dynamically register DC Locator site-spec
Determines
family which Domain Controller (DC) Locator DNS records are not registered by the N
Determines
family if Dynamic Registration of the domain controller (DC) locator DNS resource rec
Specifies
family whether the computers to which this setting is applied attempt DNS name resolut
Specifies
family the Priority field in the SRV resource records registered by domain controllers (D
Specifies
family the Refresh Interval of the domain controller (DC) Locator DNS resource records
Specifies
family the sites for which the domain controllers (DC) housing application directory parti
Specifies
family the sites for which the domain controllers (DC) register the site-specific DC Locat
Specifies
family the sites for which the global catalogs (GC) should register site-specific GC locat
Specifies
family the value for the Time-To-Live (TTL) field in Net Logon registered SRV resource
Specifies
family the Weight field in the SRV resource records registered by the domain controllers
Specifies
family whether or not a support person or IT administrator (the expert) can offer remote
Specifies
family whether users can solicit another user’s assistance via Remote Assistance. If yo
At least Microsoft Windows Server 2003 Directs the RPC Runtime to ignore delegation failures if delegation was asked for. Window
Directs2003
the RPC
familyRuntime to assume the specified timeout as the idle connection timeout e
Directs
familythe RPC Runtime to generate extended error information when an error occurs. Ex
At least Microsoft Windows XP Professional with SP2 If you enable this setting, it directs the RPC Runtime on an RPC server to restrict unauthen
At least Microsoft Windows XP Professional with SP2 Enabling this setting directs RPC Clients that need to communicate with the Endpoint Map
family whether the RPC Runtime maintains RPC state information for the system, a
At least Microsoft Windows 2000 Determines how long the system waits for scripts applied by Group Policy to run. This sett
At least Microsoft Windows 2000 Directs the system to wait for the logon scripts to finish running before it starts the Window
At least Microsoft Windows 2000 Displays the instructions in shutdown scripts as they run. Shutdown scripts are batch files
At least Microsoft Windows 2000 Lets the system run startup scripts simultaneously. Startup scripts are batch files that run b
At least Microsoft Windows 2000 Displays the instructions in startup scripts as they run. Startup scripts are batch files of ins
Only works on Microsoft Windows XP Professional Allows you to turn off the Configuration Interface for System Restore. System Restore ena
Only works on Microsoft Windows XP Professional Determines whether System Restore is turned on or off. System Restore enables users, in
This
family
setting adds the Administrator security group to the roaming user profile share. Once
At least Microsoft Windows 2000 Determines whether the system saves a copy of a user’s roaming profile on the local comp
This
XPsetting
Professional
disables
Service
the more
Packsecure
1 or Microsoft
default setting
Windowsfor the
Server
user’s
2003
roaming
familyuser profile fold
At least Microsoft Windows 2000 Disables the slow link detection feature. Slow link detection measures the speed of the co
Determines
2003 family
whetherwith
theSP1
system retains a roaming user’s Windows Installer and Group Pol
At least Microsoft Windows 2000 Logs a user off automatically when the system cannot load the user's roaming user profile.
At least Microsoft Windows 2000 Determines how many times the system tries to unload and update the registry portion of a
This
family
setting determines if roaming user profiles are available on a particular computer. By d
This
family
setting determines if the changes a user makes to their roaming profile are merged wi
At least Microsoft Windows 2000 Notifies users when their roaming profile is slow to load. The notice lets users decide wheth
At least Microsoft Windows 2000 Defines a slow connection for roaming user profiles. If the server on which the user's roam
At least Microsoft Windows 2000 Determines how long the system waits for a user response before it uses a default value.
At least Microsoft Windows 2000 Directs the system to wait for the remote copy of the roaming user profile to load, even whe
Hides
family
the file scan progress window. This window provides status information to sophistica
Specifies
family the maximum amount of disk space that can be used for the Windows File Protec
Determines
family when Windows File Protection scans protected files. This setting directs Windo
Specifies
family an alternate location for the Windows File Protection cache. To enable this settin
Specifies
family a set of parameters for all time providers installed on your system. There are two
Specifies
family whether the Windows NTP Client synchronizes time from the domain hierarchy o
Specifies
family whether the Windows NTP Client is enabled. Enabling the Windows NTP Client a
Specifies
family whether the Windows NTP Server is enabled. Enabling the Windows NTP Serve
At least Microsoft Windows Server 2003 Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running on this com
At least Microsoft Windows Server 2003 This policy controls the visibility of the Program Compatibility property page shell extension
At least Microsoft Windows Server 2003 This policy controls the state of the application compatibility engine in the system. The en
At least Microsoft Windows Server 2003 This policy controls the state of the Program Compatibility Wizard. When enabled, this pol
At least Microsoft Windows Server 2003 The Application Help features blocks known incompatible applications and displays a dialo
At least Microsoft Windows XP Professional with SP2 This is the program that will be invoked when the user clicks the events.asp link.
At least Microsoft Windows XP Professional with SP2 This specifies the command line parameters that will be passed to the events.asp program
At least Microsoft Windows XP Professional with SP2 This is the URL that will be passed to the Description area in the Event Properties dialog b
At least Microsoft Windows Server 2003 When you enable this setting, it will prevent Internet Information Services (IIS) from being i
Specifies
family whether the Security Center is turned on or off on users' computers that are joine
At least Microsoft Windows 2000 This setting removes the Open advanced properties for this task when I click Finish checkb
At least Microsoft Windows 2000 Prevents users from viewing and changing the properties of an existing task. This setting r
At least Microsoft Windows 2000 Prevents users from starting and stopping tasks manually. This setting removes the Run a
At least Microsoft Windows 2000 Limits newly scheduled to items on the user's Start menu, and prevents the user from chan
At least Microsoft Windows 2000 Prevents users from adding or removing tasks by moving or copying programs in the Sche
At least Microsoft Windows 2000 Prevents users from creating new tasks. This setting removes the Add Scheduled Task ite
At least Microsoft Windows 2000 Prevents users from deleting tasks from the Scheduled Tasks folder. This setting removes
At least Microsoft Windows XP Terminal Services Specifies whether to allow users to connect remotely using Terminal Services. You can u
At least Microsoft Windows Server 2003 with SP1 This policy setting determines whether the desktop is always displayed after a client conne
At least Microsoft Windows XP Terminal Services Specifies whether to allow Remote Desktop Connection clients to automatically reconnect
At least Microsoft Windows Server 2003 Specifies whether to allow an administrator attempting to connect to the console of a serve
At least Microsoft Windows XP Terminal Services Specifies whether to disable the administrator rights to customize security permissions in th
At least Microsoft Windows XP Terminal Services Specifies whether desktop wallpaper is displayed to remote clients connecting via Termina
At least Microsoft Windows XP Terminal Services Specifies whether persistent connections are allowed. After a terminal server client loses
At least Microsoft Windows XP Terminal Services Specifies the maximum color resolution (color depth) for Terminal Services connections. Y
At least Microsoft Windows XP Terminal Services Specifies whether Terminal Services limits the number of simultaneous connections to the
At least Microsoft Windows 2000 Terminal Services Specifies whether to remove the Disconnect option from the Shut Down Windows dialog bo
At least Microsoft Windows 2000 Terminal Services Specifies whether to remove the Windows Security item from the Settings menu on Termin
At least Microsoft Windows XP Terminal Services Specifies whether to restrict users to a single remote Terminal Services session. If the sta
At least Microsoft Windows XP Terminal Services Specifies whether Terminal Services uses the specified network path for roaming user prof
At least Microsoft Windows Server 2003 with SP1 Determines the type of Terminal Server client access license (CAL) a device or user requir
At least Microsoft Windows XP Terminal Services Specifies the level of remote control permitted in a Terminal Services session. Remote con
At least Microsoft Windows Server 2003 with SP1 Displays tooltips to the Administrator upon login if there are any licensing issues with the T
At least Microsoft Windows XP Terminal Services Configures Terminal Services to run a specified program automatically upon connection. Y
At least Microsoft Windows XP Terminal Services Specifies whether Terminal Services uses the specified network share or local directory pa
At least Microsoft Windows Server 2003 with SP1 Determines whether terminal servers must first attempt to locate Terminal Server license s
Controls
2003
whether
familypasswords
with SP1 can be saved on this computer from Terminal Services clients
At least Microsoft Windows XP Terminal Services Specifies whether users can choose where to play the remote computer's audio output dur
At least Microsoft Windows XP Terminal Services Specifies whether to allow the client computer to redirect its time zone settings to the Term
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the mapping of client printers in Terminal Services sessions.
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the sharing of clipboard contents (clipboard redirection) betwe
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the redirection of data to client COM ports from the remote co
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the mapping of client drives in a Terminal Services session (d
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the redirection of data to client LPT ports during a Terminal S
At least Microsoft Windows XP Terminal Services Specifies whether to prevent the mapping of smart card devices (smart card device redirec
At least Microsoft Windows XP Terminal Services Specifies whether the client default printer is automatically set as the default printer in a Te
At least Microsoft Windows Server 2003 with SP1 Specifies the Terminal Server fallback printer driver behavior. By default, Terminal Server
At least Microsoft Windows XP Terminal Services Specifies whether Terminal Services always prompts the client for a password upon conne
At least Microsoft Windows XP Terminal Services Specifies whether to enforce an encryption level for all data sent between the client and the
At least Microsoft Windows Server 2003 Specifies whether a Terminal Server requires secure RPC communication with all clients o
At least Microsoft Windows XP Terminal Services Specifies the terminal servers and license servers to which a Terminal Server License Serv
At least Microsoft Windows XP Terminal Services Specifies how a License Server distributes license upgrades to terminal servers running W
Microsoft Windows Server 2003, Enterprise Edition Specifies whether Terminal Services uses a Session Directory for tracking user sessions, a
Microsoft Windows Server 2003, Enterprise Edition Specifies the Cluster Name for the terminal server, associating it with other servers in the s
Microsoft Windows Server 2003, Enterprise Edition Specifies whether to configure a server as a Session Directory Server for Terminal Service
Microsoft Windows Server 2003, Enterprise Edition Specifies how client devices are directed when reconnecting to an existing terminal server
At least Microsoft Windows XP Terminal Services Specifies whether to allow users to reconnect to a disconnected Terminal Services session
At least Microsoft Windows XP Terminal Services Specifies a time limit for disconnected Terminal Services sessions. You can use this settin
At least Microsoft Windows XP Terminal Services Specifies a time limit for active but idle Terminal Services sessions. You can use this setti
At least Microsoft Windows XP Terminal Services Specifies a time limit for active Terminal Services sessions. You can use this setting to sp
Specifies whether to terminate a timed-out Terminal Services session instead of disconnec
At least Microsoft Windows XP Terminal Services Specifies whether Terminal Services retains a user's per-session temporary folders at logo
At least Microsoft Windows XP Terminal Services Specifies whether to prevent Terminal Services from creating session-specific temporary fo
At least Microsoft Windows XP Professional with SP2 This policy setting allows you to configure the amount of functionality that the shell protoco
At least Microsoft Windows 2000 Allows Terminal Services administrators to install and configure programs remotely. By de
At least Microsoft Windows 2000 Directs Windows Installer to use system permissions when it installs any program on the sy
Windows Installer v3.0 This policy controls the percentage of disk space available to the Windows Installer baselin
At least Microsoft Windows 2000 Saves copies of transform files in a secure location on the local computer. Transform files
At least Microsoft Windows 2000 Allows Web-based programs to install software on the computer without notifying the user.
At least Microsoft Windows 2000 Disables or restricts the use of Windows Installer. This setting can prevent users from inst
At least Microsoft Windows 2000 Permits users to change installation options that typically are available only to system adm
At least Microsoft Windows 2000 Allows users to search for installation files during privileged installations. This setting enab
At least Microsoft Windows 2000 Allows users to upgrade programs during privileged installations. This setting permits all u
At least Microsoft Windows 2000 Allows users to install programs from removable media, such as floppy disks and CD-ROM
Windows Installer v3.0 This setting causes the Windows Installer to enforce strict rules for component upgrades -
At least Microsoft Windows 2000 Specifies the types of events that Windows Installer records in its transaction log for each i
Windows Installer v3.0 This setting controls the ability of non-administrators to install updates that have been digit
At least Microsoft Windows 2000 Prevents users from using Windows Installer to install patches. Patches are updates or up
Windows Installer v3.0 This setting controls the ability for users or administrators to remove Windows Installer bas
At least Microsoft Windows 2000 Prohibits Windows Installer from generating and saving the files it needs to reverse an inte
Microsoft Windows XP or Windows 2000 with Windows Installer v2.0This setting allows you to configure user installs. To configure this setting, set it to enabled
At least Microsoft Windows 2000 Prevents users from searching for installation files when they add features or components
Only works on Microsoft Windows XP Professional System Restore enables users, in the event of a problem, to restore their computers to a p
At least Microsoft Windows Server 2003 Prevents Windows Media Digital Rights Management (DRM) from accessing the Internet (o
At least Microsoft Windows XP Professional or Windows Server 2003 Allows
familyyou to disable Windows Messenger. If you enable this setting, Windows Messenge
At least Microsoft Windows XP Professional or Windows Server 2003 Windows
family Messenger is automatically loaded and running when a user logs on to a Window
At least Microsoft Windows XP Professional with SP2 Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of th
at least Internet Explorer v6.0 Allows Administrators to enable and disable the ability for Outlook Express users to save o
at least Internet Explorer v5.0 Prevents Microsoft Internet Explorer from automatically completing forms, such as filling in
at least Internet Explorer v5.0 Prevents automatic proxy scripts, which interact with a server to automatically configure us
at least Internet Explorer v5.0 Prevents users from changing accessibility settings. If you enable this policy, the Accessib
at least Internet Explorer v5.0 Prevents users from changing settings on the Advanced tab in the Internet Options dialog b
at least Internet Explorer v5.0 Prevents users from changing automatic configuration settings. Automatic configuration is
at least Internet Explorer v5.0 Prevents users from changing the default programs for managing schedules and contacts.
at least Internet Explorer v5.0 Prevents users from changing certificate settings in Internet Explorer. Certificates are used
at least Internet Explorer v5.0 Prevents users from changing the default Web page colors. If you enable this policy, the c
at least Internet Explorer v5.0 Prevents users from changing dial-up settings. If you enable this policy, the Settings butto
at least Internet Explorer v5.0 Prevents Microsoft Internet Explorer from checking to see whether it is the default browser
at least Internet Explorer v5.0 Prevents users from changing font settings. If you enable this policy, the Font button on th
at least Internet Explorer v5.0 Prevents users from changing the history settings for the browser. If you enable this policy
at least Internet Explorer v5.0 Prevents users from changing the home page of the browser. The home page is the first pa
at least Internet Explorer v5.0 Prevents users from changing language settings. If you enable this policy, the Languages
at least Internet Explorer v5.0 Prevents users from changing the colors of links on Web pages. If you enable this policy, t
at least Internet Explorer v5.0 Prevents users from changing the default programs for messaging tasks. If you enable this
at least Internet Explorer v5.0 Prevents users from changing Profile Assistant settings. If you enable this policy, the My P
at least Internet Explorer v5.0 Prevents users from changing proxy settings. If you enable this policy, the proxy settings a
at least Internet Explorer v5.0 Prevents users from changing ratings that help control the type of Internet content that can
at least Internet Explorer v5.0 Prevents users from changing the browser cache settings, such as the location and amoun
at least Internet Explorer v5.0 Prevents branding of Internet programs, such as customization of Internet Explorer and Ou
at least Internet Explorer v5.0 Prevents users from exporting or importing favorite links by using the Import/Export Wizard
at least Internet Explorer v5.0 Prevents users from running the Internet Connection Wizard. If you enable this policy, the
at least Internet Explorer v5.0 Prevents users from restoring default settings for home and search pages. If you enable th
at least Internet Explorer v5.0 Specifies that error messages will be displayed to users if problems occur with proxy script
at least Internet Explorer v5.0 Disables automatic completion of user names and passwords in forms on Web pages, and
at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows
This policy
Serversetting
2003allows
Service
you
Packto manage
1 whether users have the ability to allow or deny ad
at least Internet Explorer v5.0 Prevents users from configuring unique identities by using Identity Manager. Identity Mana
This policy
Serversetting
2003allows
Service
you
Packto manage
1 a list of web sites that will be allowed to open pop
at least Internet Explorer v5.0 Disables using the F3 key to search in Internet Explorer and Windows Explorer. If you ena
at least Internet Explorer v5.0 Makes the Customize button in the Search Assistant appear dimmed. The Search Assista
This policy
Serversetting
2003allows
Service
you
Packto manage
1 the crash detection feature of add-on Managemen
This policy
Serversetting
2003allows
Service
you
Packto manage
1 pop-up management functionality in Internet Expl
at least Internet Explorer v5.0 Specifies that Automatic Detection will be used to configure dial-up settings for users. Auto
at least Internet Explorer v5.0 Designates the Microsoft Network (MSN) Carpoint automatic pricing control as administrato
at least Internet Explorer v5.0
at least Internet Explorer v5.0 Designates a set of Microsoft Network (MSN) Investor controls as administrator-approved.
at least Internet Explorer v5.0 Designates the Media Player ActiveX control as administrator-approved. This control is us
at least Internet Explorer v5.0 Designates a set of Microsoft ActiveX controls used to manipulate pop-up menus in the bro
at least Internet Explorer v5.0 Designates the Microsoft Agent ActiveX control as administrator-approved. Microsoft Agen
at least Internet Explorer v5.0 Designates the Microsoft Chat ActiveX control as administrator-approved. This control is u
at least Internet Explorer v5.0 Designates a set of MSNBC controls as administrator-approved. These controls enable en
at least Internet Explorer v5.0 Prevents the shortcut menu from appearing when users click the right mouse button while
at least Internet Explorer v5.0 Prevents using the shortcut menu to open a link in a new browser window. If you enable th
at least Internet Explorer v5.0 Prevents users from saving a program or file that Microsoft Internet Explorer has download
at least Internet Explorer v5.0 Prevents users from closing Microsoft Internet Explorer and Windows Explorer. If you ena
at least Internet Explorer v5.0 Prevents users from opening a new browser window from the File menu. If this policy is en
at least Internet Explorer v5.0 Prevents users from opening a file or Web page from the File menu in Internet Explorer. If
at least Internet Explorer v5.0 Prevents users from saving the complete contents that are displayed on or run from a Web
at least Internet Explorer v5.0 Prevents users from saving Web pages from the browser File menu to their hard disk or to
at least Internet Explorer v5.0 Prevents users from displaying tips for users who are switching from Netscape. If you ena
at least Internet Explorer v5.0 Prevents users from sending feedback to Microsoft by clicking the Send Feedback comma
at least Internet Explorer v5.0 Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet E
Prevents users from running the Internet Explorer Tour from the Help menu in Internet Exp
at least Internet Explorer v5.0 Prevents users from adding, removing, or editing the list of Favorite links. The Favorites lis
at least Internet Explorer v5.0 Prevents users from opening the Internet Options dialog box from the Tools menu in Micro
at least Internet Explorer v5.0 Prevents users from displaying the browser in full-screen (kiosk) mode, without the standar
at least Internet Explorer v5.0 Prevents users from viewing the HTML source of Web pages by clicking the Source comm
at least Internet Explorer v5.0 Removes the Advanced tab from the interface in the Internet Options dialog box. If you en
at least Internet Explorer v5.0 Removes the Connections tab from the interface in the Internet Options dialog box. If you
at least Internet Explorer v5.0 Removes the Content tab from the interface in the Internet Options dialog box. If you enab
at least Internet Explorer v5.0 Removes the General tab from the interface in the Internet Options dialog box. If you enab
at least Internet Explorer v5.0 Removes the Privacy tab from the interface in the Internet Options dialog box. If you enab
at least Internet Explorer v5.0 Removes the Programs tab from the interface in the Internet Options dialog box. If you en
at least Internet Explorer v5.0 Removes the Security tab from the interface in the Internet Options dialog box. If you enab
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether users receive a dialog requesting permis
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether users can download and install self-insta
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether users can automatically download and in
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether software, such as ActiveX controls and fi
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will launch COM add-on
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer checks the Internet for
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will check revocation st
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer checks for digital signat
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will save encrypted pag
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer deletes the contents of
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will display animated pi
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will play sounds found i
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will display videos foun
This template
Server 2003
policyService
setting Pack
allows1 you to configure policy settings in this zone consistent w
This policy
Server
setting
2003controls
Servicewhether
Pack 1 local sites which are not explicitly mapped into any Sec
This policy
Server
setting
2003controls
Servicewhether
Pack 1 URLs representing UNCs are mapped into the local Int
This policy
Server
setting
2003controls
Servicewhether
Pack 1 sites which bypass the proxy server are mapped into th
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 a list of sites that you want to associate with a par
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether Internet Explorer can access data from a
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether a resource hosted on an admin-restricted
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether script code on pages in the zone is run.
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 dynamic binary and script behaviors: components
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether users can drag files or copy and paste fil
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether file downloads are permitted from the zon
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether pages of the zone may download HTML
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether users can install Active Desktop items fro
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether a user's browser can be redirected to ano
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether scripts can perform a clipboard operation
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 restrictions on script-initiated pop-up windows and
at least Internet Explorer v6.0 in Windows 2003 Service Pack 2 This policy setting allows you to manage whether scriptlets can be allowed. If you enable th
This policy
Server
setting
2003manages
Service Pack
whether
1 users will be automatically prompted for ActiveX cont
This policy
Server
setting
2003determines
Service Pack whether
1 users will be prompted for non user-initiated file dow
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether users can display nonsecure items and m
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether users are prompted to select a certificate
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether users may download signed ActiveX con
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether users may download unsigned ActiveX c
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 ActiveX controls not marked as safe. If you enab
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 permissions for Java applets. If you enable this p
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether applications may be run and files may be
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 settings for logon options. If you enable this polic
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 the opening of sub-frames and access of applicat
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 MIME sniffing for file promotion from one type to a
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether .NET Framework components that are no
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether .NET Framework components that are si
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether ActiveX controls and plug-ins can be run
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether an ActiveX control marked safe for script
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether applets are exposed to scripts within the
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 software channel permissions. If you enable this
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether data on HTML forms on pages in the zon
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether unwanted pop-up windows appear. Pop-
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 the preservation of information in the browser's hi
This policy
Serversetting
2003allows
Service
you
Pack
to manage
1 whether Web sites from less privileged zones, su
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
at least Internet Explorer v5.0 Prevents users from adding channels to Internet Explorer. Channels are Web sites that ar
at least Internet Explorer v5.0 Prevents users from specifying that Web pages can be downloaded for viewing offline. Wh
at least Internet Explorer v5.0 Disables existing schedules for downloading Web pages for offline viewing. When users m
at least Internet Explorer v5.0 Prevents users from viewing the Channel bar interface. Channels are Web sites that are au
at least Internet Explorer v5.0 Prevents content from being downloaded from Web sites that users have subscribed to. W
at least Internet Explorer v5.0 Prevents users from adding, editing, or removing schedules for offline viewing of Web page
at least Internet Explorer v5.0 Prevents users from editing an existing schedule for downloading Web pages for offline vie
at least Internet Explorer v5.0 Prevents channel providers from recording information about when their channel pages are
at least Internet Explorer v5.0 Prevents users from disabling channel synchronization in Microsoft Internet Explorer. Cha
at least Internet Explorer v5.0 Prevents users from clearing the preconfigured settings for Web pages to be downloaded f
at least Internet Explorer v5.0 Restricts the amount of information downloaded for offline viewing. If you enable this polic
at least Internet Explorer v5.0 Limits the amount of storage that a page or site using the DHTML Persistence behavior ca
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 a list of add-ons to be allowed or denied by Intern
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether processes respect add-on management
This policy
Server
setting
2003allows
Service
you
Pack
to ensure
1 that any Internet Explorer add-ons not listed in the
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether the listed processes respect add-on man
For each
Server
zone,2003
the Binary
Serviceand
PackScripted
1 Behavior security restrictions may be configured to
InternetServer
Explorer
2003contains
Servicedynamic
Pack 1 binary behaviors: components that encapsulate specific
InternetServer
Explorer
2003contains
Servicedynamic
InternetServer
Explorer
2003contains
Servicedynamic
InternetServer
Explorer
2003uses
Service
Multipurpose
Pack 1 Internet Mail Extensions (MIME) data to determine file
InternetServer
Explorer
2003uses
Service
Multipurpose
InternetServer
Explorer
2003uses
Service
Multipurpose
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether the Information Bar is displayed for proce
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether the Information Bar is displayed for Intern
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether the Information Bar is displayed for spec
InternetServer
Explorer
2003places
Service
zone
Pack
restrictions
1 on each Web page it opens, which are dependen
InternetServer
Explorer
2003places
Service
zone
Pack
restrictions
InternetServer
Explorer
2003places
Service
zone
Pack
restrictions
This policy
Server
setting
2003determines
Service Packwhether
1 Internet Explorer MIME sniffing will prevent promoti
This policy
Server
setting
2003determines
Service Packwhether
This policy
Server
setting
2003determines
Service Packwhether
The MK Server
Protocol
2003Security
ServiceRestriction
Pack 1 policy setting reduces attack surface area by prevent
The MK Server
Protocol
2003Security
ServiceRestriction
The MK Server
Protocol
2003Security
ServiceRestriction
InternetServer
Explorer
2003mayService
be configured
Pack 1 to prevent active content obtained through restricted p
WindowsServer
Explorer
2003andService
Internet
Pack Explorer
1 may be configured to prevent active content obtain
InternetServer
Explorer
2003mayService
be configured
For each
Server
zone,2003
the Network
Service Pack
Protocol
1 Lockdown security restriction may be configured to pr
For each
Server
zone,2003
the Network
Service Pack
Protocol
For each
Server
zone,2003
the Network
Service Pack
Protocol
For each
Server
zone,2003
the Network
Service Pack
Protocol
For each
Server
zone,2003
the Network
Service Pack
Protocol
This policy
Server
setting
2003defines
Servicewhether
Pack 1 a reference to an object is accessible when the user na
This policy
Server
setting
2003defines
Servicewhether
This policy
Server
setting
2003defines
Servicewhether
InternetServer
Explorer
2003places
Service
restrictions
Pack 1 on each Web page it opens. The restrictions are depen
InternetServer
Explorer
2003places
Service
restrictions
InternetServer
Explorer
2003places
Service
restrictions
This policy
Server
setting
2003enables
Serviceapplications
Pack 1 hosting the Web Browser Control to block automat
This policy
Server
setting
2003enables
Serviceblocking
Pack 1 of ActiveX control installation prompts for Internet Expl
This policy
Server
setting
2003enables
Serviceapplications
This policy
Server
setting
2003enables
Serviceapplications
This policy
Server
setting
2003enables
Serviceblocking
Pack 1 of file download prompts that are not user initiated. If y
This policy
Server
setting
2003enables
Serviceapplications
InternetServer
Explorer
2003allows
Service
scripts
Pack to 1programmatically open, resize, and reposition windows o
InternetServer
Explorer
2003allows
Service
scripts
InternetServer
Explorer
2003allows
Service
scripts
at least Internet Explorer v5.0 Specifies which buttons will be displayed on the standard toolbar in Microsoft Internet Expl
at least Internet Explorer v5.0 Prevents users from determining which buttons appear on the Microsoft Internet Explorer a
at least Internet Explorer v5.0 Prevents users from determining which toolbars are displayed in Microsoft Internet Explore
at least Internet Explorer v5.0 Prevents Internet Explorer from automatically installing components. If you enable this pol
at least Internet Explorer v5.0 Prevents Internet Explorer from checking whether a new version of the browser is available
at least Internet Explorer v5.0 Prevents the Internet Explorer splash screen from appearing when users start the browser
at least Internet Explorer v5.0 Specifies that programs using the Microsoft Software Distribution Channel will not notify us
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether users have the ability to allow or deny ad
at least Internet Explorer v5.0 Applies proxy settings to all users of the same computer. If you enable this policy, users ca
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 a list of web sites that will be allowed to open pop
at least Internet Explorer v5.0 Prevents users from adding or removing sites from security zones. A security zone is a gro
at least Internet Explorer v5.0 Prevents users from changing security zone settings. A security zone is a group of Web sit
at least Internet Explorer v5.0 Applies security zone information to all users of the same computer. A security zone is a gr
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 the crash detection feature of add-on Managemen
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 pop-up management functionality in Internet Expl
at least Internet Explorer v5.0 Removes the Advanced tab from the interface in the Internet Options dialog box. If you en
at least Internet Explorer v5.0 Removes the Connections tab from the interface in the Internet Options dialog box. If you
at least Internet Explorer v5.0 Removes the Content tab from the interface in the Internet Options dialog box. If you enab
at least Internet Explorer v5.0 Removes the General tab from the interface in the Internet Options dialog box. If you enab
at least Internet Explorer v5.0 Removes the Privacy tab from the interface in the Internet Options dialog box. If you enab
at least Internet Explorer v5.0 Removes the Programs tab from the interface in the Internet Options dialog box. If you en
at least Internet Explorer v5.0 Removes the Security tab from the interface in the Internet Options dialog box. If you enab
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether users receive a dialog requesting permis
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether users can download and install self-insta
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether users can automatically download and in
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 whether software, such as ActiveX controls and fi
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will launch COM add-on
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer checks the Internet for
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will check revocation st
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer checks for digital signat
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will save encrypted pag
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer deletes the contents of
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will display animated pi
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will play sounds found i
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1 This policy setting allows you to manage whether Internet Explorer will display videos foun
This template
Server 2003
policyService
setting Pack
This policy
Server
setting
2003controls
Servicewhether
Pack 1 local sites which are not explicitly mapped into any Sec
This policy
Server
setting
2003controls
Servicewhether
Pack 1 URLs representing UNCs are mapped into the local Int
This policy
Server
setting
2003controls
Servicewhether
Pack 1 sites which bypass the proxy server are mapped into th
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This policy
Server
setting
2003allows
Service you
Pack
to manage
1 a list of sites that you want to associate with a par
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This template
Server 2003
policyService
setting Pack
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003manages
Service Pack
whether
This policy
Server
setting
2003determines
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Server
setting
2003allows
Service you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003manages
Service Pack
whether
This policy
Serversetting
2003determines
Service Pack
whether
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Serversetting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003manages
Service Pack
whether
This policy
Server
setting
2003determines
Service Pack
whether
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 a list of add-ons to be allowed or denied by Intern
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether processes respect add-on management
This policy
Server
setting
2003allows
Service
you
Pack
to ensure
1 that any Internet Explorer add-ons not listed in the
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether the listed processes respect add-on man
For each
Server
zone,2003
the Binary
Serviceand
Pack
Scripted
1 Behavior security restrictions may be configured to
InternetServer
Explorer
2003contains
Servicedynamic
InternetServer
Explorer
2003contains
Servicedynamic
InternetServer
Explorer
2003contains
Servicedynamic
InternetServer
Explorer
2003uses
Service
Multipurpose
InternetServer
Explorer
2003uses
Service
Multipurpose
InternetServer
Explorer
2003uses
Service
Multipurpose
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether the Information Bar is displayed for proce
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether the Information Bar is displayed for Intern
This policy
Server
setting
2003allows
Service
you
Pack
to manage
1 whether the Information Bar is displayed for spec
InternetServer
Explorer
2003places
Service
zone
Pack
restrictions
InternetServer
Explorer
2003places
Service
zone
Pack
restrictions
InternetServer
Explorer
2003places
Service
zone
Pack
restrictions
This policy
Server
setting
2003determines
This policy
Server
setting
2003determines
This policy
Server
setting
2003determines
The MK Server
Protocol
2003Security
ServiceRestriction
The MK Server
Protocol
2003Security
ServiceRestriction
The MK Server
Protocol
2003Security
ServiceRestriction
InternetServer
Explorer
2003mayService
be configured
WindowsServer
Explorer
2003andService
Internet
Pack Explorer
1 may be configured to prevent active content obtain
InternetServer
Explorer
2003mayService
be configured
For each
Server
zone,2003
the Network
Service Pack
Protocol
For each
Server
zone,2003
the Network
Service Pack
Protocol
For each
Server
zone,2003
the Network
Service Pack
Protocol
For each
Server
zone,2003
the Network
Service Pack
Protocol
For each
Server
zone,2003
the Network
Service Pack
Protocol
This policy
Server
setting
2003defines
Servicewhether
This policy
Server
setting
2003defines
Servicewhether
This policy
Server
setting
2003defines
Servicewhether
InternetServer
Explorer
2003places
Service
restrictions
InternetServer
Explorer
2003places
Service
restrictions
InternetServer
Explorer
2003places
Service
restrictions
This policy
Server
setting
2003enables
Serviceapplications
This policy
Server
setting
2003enables
Serviceblocking
Pack 1 of ActiveX control installation prompts for Internet Expl
This policy
Server
setting
2003enables
Serviceapplications
This policy
Server
setting
2003enables
Serviceapplications
This policy
Server
setting
2003enables
Serviceblocking
Pack 1 of file download prompts that are not user initiated. If y
This policy
Server
setting
2003enables
Serviceapplications
InternetServer
Explorer
2003allows
Service
scripts
InternetServer
Explorer
2003allows
Service
scripts
InternetServer
Explorer
2003allows
Service
scripts
at least Windows NetMeeting v3.0 Make the automatic acceptance of incoming calls persistent.
at least Windows NetMeeting v3.0 Disables the Chat feature of NetMeeting.
at least Windows NetMeeting v3.0 Disables the directory feature of NetMeeting. Users will not logon to a directory (ILS) serve
at least Windows NetMeeting v3.0 Disables the 2.x whiteboard feature of NetMeeting. The 2.x whiteboard is available for com
at least Windows NetMeeting v3.0 Disables the T.126 whiteboard feature of NetMeeting.
at least Windows NetMeeting v3.0 Configures NetMeeting to download settings for users each time it starts. The settings are
at least Windows NetMeeting v3.0 Limits the size of files users can send to others in a conference.
at least Windows NetMeeting v3.0 Prevents users from adding directory (ILS) servers to the list of those they can use for plac
at least Windows NetMeeting v3.0 Prevents users from turning on automatic acceptance of incoming calls. This ensures that
at least Windows NetMeeting v3.0 Prevents users from changing the way calls are placed, either directly or via a gatekeeper
at least Windows NetMeeting v3.0 Prevents users from receiving files from others in a conference.
at least Windows NetMeeting v3.0 Prevents users from sending files to others in a conference.
at least Windows NetMeeting v3.0 Prevents users from viewing directories as Web pages in a browser.
at least Windows NetMeeting v3.0 Sets the level of security for both outgoing and incoming NetMeeting calls.
at least Windows NetMeeting v3.0 Sets the URL NetMeeting will display when the user chooses the Help Online Support com
at least Windows NetMeeting v3.0 Disables the application sharing feature of NetMeeting completely. Users will not be able t
at least Windows NetMeeting v3.0 Prevents users from sharing applications in true color. True color sharing uses more band
at least Windows NetMeeting v3.0 Prevents users from allowing others in a conference to control what they have shared. Thi
at least Windows NetMeeting v3.0 Prevents users from sharing the whole desktop. They will still be able to share individual a
at least Windows NetMeeting v3.0 Prevents users from sharing anything themselves. They will still be able to view shared ap
at least Windows NetMeeting v3.0 Prevents users from sharing command prompts. This prevents users from inadvertently sh
at least Windows NetMeeting v3.0 Prevents users from sharing Explorer windows. This prevents users from inadvertently sha
at least Windows NetMeeting v3.0 Disables the audio feature of NetMeeting. Users will not be able to send or receive audio.
at least Windows NetMeeting v3.0 Disables full duplex mode audio. Users will not be able to listen to incoming audio while sp
at least Windows NetMeeting v3.0 Limits the bandwidth audio and video will consume when in a conference. This setting will
at least Windows NetMeeting v3.0 Prevents user from changing the DirectSound audio setting. DirectSound provides much b
at least Windows NetMeeting v3.0 Prevents users from receiving video. Users will still be able to send video provided they ha
at least Windows NetMeeting v3.0 Prevents users from sending video if they have the hardware. Users will still be able to rec
at least Windows NetMeeting v3.0 Disables the Advanced Calling button on the General Options page. Users will not then be
at least Windows NetMeeting v3.0 Hides the Audio page of the Tools Options dialog. Users will not then be able to change au
at least Windows NetMeeting v3.0 Hides the General page of the Tools Options dialog. Users will not then be able to change
at least Windows NetMeeting v3.0 Hides the Security page of the Tools Options dialog. Users will not then be able to change
at least Windows NetMeeting v3.0 Hides the Video page of the Tools Options dialog. Users will not then be able to change vi
Disables the remote desktop sharing feature of NetMeeting. Users will not be able to set it
Registry Settings
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AutoInstallMinorUpdates
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!ElevateNonAdmins
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!DetectionFrequencyEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\A
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AUOptions
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootWarningTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpda
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGroupEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGroup
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoRebootWithLoggedOnUsers
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpd
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RescheduleWaitTimeEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUServer, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUSer
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCDDVDMetadataRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventMusicFileMetadataRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventRadioPresetsRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTT
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBufferingPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!BufferingType, HKC
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTS
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideNetworkTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!WindowsMediaStreamingProtocols, HKCU\Software\Policies\Microsoft\WindowsMediaPlay
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!EnableScreenSaver
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCodecDownload
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DoNotShowAnchor
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HidePrivacyTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideSecurityTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!SetAndLockSkin, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DefaultSkin
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!GroupPrivacyAcceptance
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DisableAutoUpdate
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DesktopShortcut
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!QuickLaunchShortcut
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DontUseFrameInterpolation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl!ForceClassicControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disallo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Restric
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoWindowsSetupPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoRemovePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromCDorFloppy
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromInternet
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoChooseProgramsPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddRemovePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoSupportInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!DefaultCategory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispAppearancePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispBackgroundPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispScrSavPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispSettingsPage
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaverIsSecure
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoChangingWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispCPL
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveActive
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!SCRNSAVE.EXE
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveTimeOut
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!SetVisualStyle
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoVisualStyleChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoSizeChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoColorChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThemesTab
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Printers Page URL
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Downlevel Browse
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Default Search Scope
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!Restricted, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!InFo
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!NoAddPrinter
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!NoDeletePrinter
HKCU\Software\Policies\Microsoft\Control Panel\Desktop!MultiUILanguageID
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSaveSettings
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetIcon
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCloseDragDropBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMovingBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisablePersonalDirChange
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{450D8FBA-AD25-11D0-98A8-0800361B1103}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyComputer
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesRecycleBin
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{645FF040-5081-101B-9F08-00AA002F954E}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktopCleanupWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpaper, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpape
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Add, HKCU\Software\Microsoft\Windows\CurrentVersion\Policie
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoHTMLWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceActiveDesktopOn
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoAddingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktopChanges
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoClosingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDeletingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoEditingComponents
HKCU\Software\Policies\Microsoft\Windows\Directory UI!EnableFilter
HKCU\Software\Policies\Microsoft\Windows\Directory UI!HideDirectoryFolder
HKCU\Software\Policies\Microsoft\Windows\Directory UI!QueryLimit
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasAllUserProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteAllUserConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameAllUserRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameLanConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_EnableAdminProhibits
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AdvancedSettings
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_NewConnectionWizard
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DialupPrefs
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AddRemoveComponents
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasMyProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_ChangeBindState
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameMyRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowAdvancedTCPIPConfig
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_Statistics
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_IpStateChecking
HKCU\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders
HKCU\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList!DisableFRAdminPin
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EventLoggingLevel
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!InitialBalloonTimeoutSeconds
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoCacheViewer
HKCU\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList
HKCU\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderFreqMinutes
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderBalloonTimeoutSeconds
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoMakeAvailableOffline
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!NoReminders
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishDfsRoots
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishSharedFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceStartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MemCheckBoxInRunDlg
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentDocsOnExit
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarsOnTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsHistory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveSearch
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveTrack
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSimpleStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!GreyMSIAds
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayItemsDisplay
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LockTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTaskGrouping
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMorePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoClose
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMBalloonTip
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideClock
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCommonGroups
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFavoritesMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMFUprogramsList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMHelp
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWindowsUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!StartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyMusic
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuNetworkPlaces
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyPictures
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetworkConnections
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuPinnedList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFind
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMConfigurePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuEjectPC
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserNameInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuSubFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoTrayNotify
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Intellimenus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInstrumentation
HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax!1
HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing!BehaviorOnFailedVerify
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchFloppies, HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchC
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Shell
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disal
HKCU\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableRegistryTools
HKCU\Software\Policies\Microsoft\Windows\System!DisableCMD
HKCU\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Restri
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableChangePassword
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableLockWorkstation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoLogoff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableTaskMgr
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!NewGPOLinksDisabled
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!GPODisplayName
HKCU\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!ShowPoliciesOnly
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DCOption
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeO
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DisableAutoADMUpdate
HKCU\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPubl
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard
HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRunOnce
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run!{1,2,3,...}
HKCU\Software\Policies\Microsoft\Windows\System\Power!PromptPasswordOnResume
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLegacyLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogoffScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ConnectHomeDirToRoot
HKCU\Software\Policies\Microsoft\Windows\System!ExcludeProfileDirs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!EnableProfileQuota, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!
HKCU\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!SaveZoneInformation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!HideZoneInfoOnProperties
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!LowRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!ModRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!ScanWithAntiVirus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!UseTrustedHandlers
HKCU\Software\Policies\Microsoft\MMC!RestrictAuthorMode
HKCU\Software\Policies\Microsoft\MMC!RestrictToPermittedSnapins
HKCU\Software\Policies\Microsoft\MMC\{18BA7139-D98B-43c2-94DA-2604E34E175D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C96401CF-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A994E107-6854-4F3D-917C-E6F01670F6D3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{de751566-4cc6-11d1-8ca0-00c04fc297eb}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{58221C67-EA27-11CF-ADCF-00AA00A80033}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{43668E21-2636-11D1-A1CE-0080C88593A5}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FF5903A8-78D6-11D1-92F6-006097B01056}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{57C596D0-9370-40C0-BA0D-AB491B63255D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C96401D1-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3D5D035E-7721-4B83-A645-6C07A3D403B7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{45ac8c63-23e2-11d1-a696-00c04fd58bc3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{23DC5869-BD9F-46fd-AADD-1F869BA64FC3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F83C-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1F5EEC01-1214-4D94-80C5-4BDCD2014DDD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3F276EB4-70EE-11D1-8A0F-00C04FB93753}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE450B-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{9EC88934-C774-11d1-87F4-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4502-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{394C052E-B830-11D0-9A86-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B708457E-DB61-4C55-A92F-0D4B5E9B1224}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2E19B602-48EB-11d2-83CA-00104BCA42CF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90810502-38F1-11D1-9345-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6E8E0081-19CD-11D1-AD91-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5880CD5C-8EC0-11d1-9570-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{243E20B0-48ED-11D2-97DA-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DAB1A262-4FD7-11D1-842C-00C04FB6C218}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-11d0-bb77-00aa00a1eab7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7AF60DD3-4979-11D1-8A6C-00C04FC33566}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F3621F1-23C6-11D1-AD97-00AA00B88E5A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E12BBB5D-D59D-4E61-947A-301D25AE8C23}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D70A2BEA-A63E-11D1-A7D4-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6DC3804B-7212-458D-ADB0-9A07E2AE1FA2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957D-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FC715823-C5FB-11D1-9EEF-00A0C90347FF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3060E8CE-7020-11D2-842D-00C04FA372D4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66650-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B6664F-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{942A8E4F-A261-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2DA6AA7F-8C88-4194-A558-0D36E7FD3E64}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AE-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AF-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{c40d66a0-e90c-46c6-aa3b-473e38c72bf2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{d524927d-6c08-46bf-86af-391534d779d3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66661-4972-11d1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{fe883157-cebd-4570-b7a2-e4fe06abe626}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7E45546F-6D52-4D10-B702-9C2E67232E62}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1BC972D6-555C-4FF7-BE2C-C584021A0A6A}!Restrict_Run
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!W
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime VALUE 0, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!EnforceShellExtensionSecurity
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!ConfirmFileDelete
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoRecycleFiles
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoRunasInstallPrompt
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LinkResolveIgnoreLinkInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDrives
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoManageMyComputerVerb
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!RecycleBinSize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!MaxRecentDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoComputersNearMe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoEntireNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewOnDrive
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoCDBurning
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDFSTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFileMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoHardwareTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetConnectDisconnect
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoShellSearchButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSecurityTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoSharedDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeKeyboardNavigationIndicators
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeAnimation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFolderOptions
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!PromptRunasInstallNetPath
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoThumbnailCache
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoWinKeys
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClassicShell
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoBackButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoPlacesBar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoFileMru
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place0, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg3
HKCU\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableMedia
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKCU\Software\Policies\Microsoft\Windows\Installer!SearchOrder
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate!DisableWindowsUpdateAccess
HKLM\Software\Policies\Microsoft\System\DFSClient!DfsDcNameDelay
HKLM\Software\Policies\Microsoft\Windows\BITS!EnableBITSMaxBandwidth, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTransferRateOnSchedule
HKLM\Software\Policies\Microsoft\Windows\BITS!JobInactivityTimeout
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AdapterDomainName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!NameServer
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!SearchList
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationEnabled
HKLM\Software\Policies\Microsoft\System\DNSClient!NV PrimaryDnsSuffix
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UseDomainNameDevolution
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterAdapterName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterReverseLookup
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationRefreshInterval
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationOverwritesInConflict
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationTtl
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateSecurityLevel
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateTopLevelDomainZones
HKLM\
HKLM\Software\policies\Microsoft\Peernet!Disabled
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!SeedServer, HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DontIncludeMicrosoftSe
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!SeedServer
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!SeedServer
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!DisableMulticastBootstrap
HKLM\Software\Policies\Microsoft\Windows\Network Connections\8021X!8021XCARootHash
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowNetBridge_NLA
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_PersonalFirewallConfig
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_ShowSharedAccessUI
HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\ICFv4!BypassFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewal
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\Mic
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\D
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFire
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFir
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!EnableFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\Mi
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewal
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFi
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsF
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!EnableFirewall
HKLM\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache!Enabled
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!PurgeAtLogoff, HKLM\Software\Policies\Microsoft\Windows\NetCache\Assigne
HKLM\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList!SlowLinkSpeed
HKLM\Software\Policies\Microsoft\Windows\NetCache!DefCacheSize
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EncryptCache
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EventLoggingLevel
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!ExcludeExtensions
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!InitialBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoCacheViewer
HKLM\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList
HKLM\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderFreqMinutes
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoMakeAvailableOffline
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!AlwaysPinSubFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!NoReminders
HKLM\Software\Policies\Microsoft\Windows\Psched!MaxOutstandingSends
HKLM\Software\Policies\Microsoft\Windows\Psched!NonBestEffortLimit
HKLM\Software\Policies\Microsoft\Windows\Psched!TimerResolution
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNonConforming
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeQualitative
HKLM\Software\Policies\SNMP\Parameters\ValidCommunities!{1,2,3,...}
HKLM\Software\Policies\SNMP\Parameters\PermittedManagers!{1,2,3,...}
HKLM\Software\Policies\SNMP\Parameters\TrapConfiguration\public!{1,2,3,...}
HKLM\Software\Policies\Microsoft\Windows NT\Printers!RegisterSpoolerRemoteRpcEndPoint
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PublishPrinters
HKLM\Software\Policies\Microsoft\Windows NT\Printers!Immortal
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Auto Publishing
HKLM\Software\Policies\Microsoft\Windows NT\Printers!VerifyPublishedState
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocation
HKLM\Software\Policies\Microsoft\Windows NT\Printers!SupportLink
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningInterval
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningPriority
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetries
HKLM\Software\Policies\Microsoft\Windows NT\Printers!KMPrintersAreBlocked
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetryLog
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocationSupport
HKLM\Software\Policies\Microsoft\Windows NT\Printers!ServerThread
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruneDownlevel
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPrinting
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!SnapShot
HKLM\Software\Policies\Microsoft\Windows\System!DLT_AllowDomainMode
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReasonOn, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReasonU
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoEncryptOnMove
HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\MYS!DisableShowAtLogon
HKLM\Software\Policies\Microsoft\Windows NT!DontPowerOffAfterShutdown
HKLM\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampEnabled, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampInterval
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStatusMessages
HKLM\Software\Policies\Microsoft\Windows\System!HelpQualifiedRootDir
HKLM\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKLM\Software\Policies\Microsoft\Windows NT\Setup!SourcePath
HKLM\Software\Policies\Microsoft\Windows NT\Setup!ServicePackSourcePath
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!VerboseStatus
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ApplyToRemovableMedia
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Limit, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LimitUnits, HKLM\Software\Polici
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enable
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enforce
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverLimit
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverThreshold
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!AllowLocalActivationSecurityCheckExemptionList
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!ListBox_Support_ActivationSecurityCheckExemptionList
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoExternalURL, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoF
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!ShowUI, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWAllowHeadless, HKL
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!AllOrNone, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeMicrosoftApps, HK
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\InclusionList
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\ExclusionList
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeKernelFaults
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeShutdownErrs
HKLM\Software\Policies\Microsoft\Windows\System!AllowX-ForestPolicy-and-RUP
HKLM\Software\Policies\Microsoft\Windows\Group Policy!OnlyUseLocalAdminFiles
HKLM\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoSlowLink, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoSlowLink, HKLM\Software\Policies\Microsoft\Wi
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoSlowLink, HKLM\Software\Policies\Microsoft\Wind
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeO
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeDC, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTim
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoSlowLink, HKLM\Software\Policies\Microsoft\Wi
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoSlowLink, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy, HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Windows\System!DenyUsersFromMachGP
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoSlowLink, HKLM\Software\Policies\Microsoft\Wind
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPolicy, HKLM\Software\Policies\Micr
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoSlowLink, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableBkGndGroupPolicy
HKLM\Software\Policies\Microsoft\Windows\System!RSoPLogging
HKLM\Software\Policies\Microsoft\Windows\System!UserPolicyMode
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoSlowLink, HKLM\Software\Policies\Microsoft\W
HKLM\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPubli
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess
HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch
HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration
HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard
HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonType
HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon!SyncForegroundPolicy
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRun
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run!{1,2,3,...}
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AvoidPdcOnWan
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ExpectedDialupDelay
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryQuitTime
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryInitialPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!dbFlag
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryMaximumPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!MaximumLogFileSize
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NegativeCachePeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveScriptsShareAccess
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NonBackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ScavengeInterval
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteName
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveSysvolShareAccess
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AutoSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsAvoidRegisterRecords
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!UseDynamicDns
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowSingleLabelDnsDomain
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvPriority
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsRefreshInterval
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NdncSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!GcSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsTtl
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvWeight
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowUnsolicited, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowU
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowToGetHelp, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowF
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\IgnoreDelegationFailure!IgnoreDelegationFailure
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!MinimumConnectionTimeout
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInformation, HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInfoExceptions
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!RestrictRemoteClients
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!EnableAuthEpResolution
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!StateInformation
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxGPOScriptWait
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideShutdownScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunStartupScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideStartupScripts
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableConfig
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableSR
HKLM\Software\Policies\Microsoft\Windows\System!AddAdminGroupToRUP
HKLM\Software\Policies\Microsoft\Windows\System!DeleteRoamingCache
HKLM\Software\Policies\Microsoft\Windows\System!CompatibleRUPSecurity
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkDetectEnabled
HKLM\Software\Policies\Microsoft\Windows\System!LeaveAppMgmtData
HKLM\Software\Policies\Microsoft\Windows\System!ProfileErrorAction
HKLM\Software\Policies\Microsoft\Windows\System!ProfileUnloadTimeout
HKLM\Software\Policies\Microsoft\Windows\System!LocalProfile
HKLM\Software\Policies\Microsoft\Windows\System!ReadOnlyProfile
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkUIEnabled
HKLM\Software\Policies\Microsoft\Windows\System!UserProfileMinTransferRate, HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkTimeOut
HKLM\Software\Policies\Microsoft\Windows\System!ProfileDlgTimeOut
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkProfileDefault
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcShowProgress
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcQuota
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcScan
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SFCDllCacheDir
HKLM\Software\Policies\Microsoft\W32Time\Config!FrequencyCorrectRate, HKLM\Software\Policies\Microsoft\W32Time\Config!HoldPeriod, HKLM\Software\P
HKLM\Software\Policies\Microsoft\W32time\Parameters!NtpServer, HKLM\Software\Policies\Microsoft\W32time\Parameters!Type, HKLM\Software\Policies\Mi
HKLM\Software\Policies\Microsoft\W32time\TimeProviders\NtpClient!Enabled
HKLM\Software\Policies\Microsoft\W32Time\TimeProviders\NtpServer!Enabled
HKLM\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePropPage
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableEngine
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableWizard
HKLM\Software\Policies\Microsoft\Windows\AppCompat!LogAppHelpEvents
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgram
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgramCommandLineParameters
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionURL
HKLM\Software\Policies\Microsoft\Windows NT\IIS!PreventIISInstall
HKLM\Software\Policies\Microsoft\Windows NT\Security Center!SecurityCenterInDomain
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDenyTSConnections, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Ser
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!fTurnOffSingleAppMode
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableAutoReconnect
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableForcibleLogoff
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fWritableTSCCPermTab
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fNoRemoteDesktopWallpaper
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!KeepAliveEnable, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Service
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!ColorDepth
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxInstanceCount
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDisconnect
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNTSecurity
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fSingleSessionPerUser
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFProfilePath
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicensingMode
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Ter
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!W
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirUNC, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Service
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicenseServers
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCam
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableTimeZoneRedirection
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCpm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableClip
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCcm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCdm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableLPT
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableSmartCard
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fForceClientLptDef
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPolicyFallbackPrintDriver, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Termina
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPromptForPassword
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MinEncryptionLevel
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEncryptRPCTraffic
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fSecureLicensing
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fPreventLicenseUpgrade
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryActive
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryClusterName
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryLocation
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryExposeServerIP
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime VALUE 0, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\T
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!DeleteTempDirsOnExit
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!PerSessionTempDir
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableAdminTSRemote
HKLM\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKLM\Software\Policies\Microsoft\Windows\Installer!MaxPatchCacheSize
HKLM\Software\Policies\Microsoft\Windows\Installer!TransformsSecure
HKLM\Software\Policies\Microsoft\Windows\Installer!SafeForScripting
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableMSI
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableUserControl
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownPatch
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownMedia
HKLM\Software\Policies\Microsoft\Windows\Installer!EnforceUpgradeComponentRules
HKLM\Software\Policies\Microsoft\Windows\Installer!Logging
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLUAPatching
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatch
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatchUninstall
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableUserInstalls
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer!LimitSystemRestoreCheckpointing
HKLM\Software\Policies\Microsoft\WMDRM!DisableOnline
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKCU\Software\Microsoft\Outlook Express!BlockExeAttachments
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!FormSuggest
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnableAutoProxyResultCache
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Accessibility
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Advanced
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Autoconfig
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!CalendarContact
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Certificates
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Colors
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Connection Settings
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Check_If_Default
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Fonts
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!History
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!HomePage
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Languages
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!links
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Messaging
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Profiles
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Proxy
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Ratings
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Cache
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExternalBranding
HKCU\Software\Policies\Microsoft\Internet Explorer!DisableImportExportFavorites
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Connwiz Admin Lock
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!ResetWebSettings
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisplayScriptDownloadFailureUI
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!FormSuggest Passwords
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Identities!Locked Down
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFindFiles
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchCustomization
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DialupAutodetect
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{DED22F57-FEE2-11D0-953B-00C04FD9152D}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2D360201-FFF5-11D1-8D03-00A0C959BC0A}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{9276B91A-E780-11d2-8A8D-00C04FA31D93}, HKCU\Softwar
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{05589FA1-C356-11CE-BF01-00AA0055595A}, HKCU\Softwar
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{275E2FE0-7486-11D0-89D6-00A0C90C9B67}, HKCU\Softwar
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D45FD31B-5C6E-11D1-9EC1-00C04FD7081F}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D6526FE0-E651-11CF-99CB-00C04FD64497}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{AE24FDAE-03C6-11D1-8B76-0080C744F389}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{BD1F006E-174F-11D2-95C0-00C04F9A8CFA}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2FF18E10-DE11-11D1-8161-00A0C90DD90C}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{26F24A93-1DA2-11D0-A334-00AA004A5FC5}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserContextMenu
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoOpeninNewWnd
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoSelectDownloadDir
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserClose
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileNew
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileOpen
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserSaveWebComplete
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserSaveAs
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemNetscapeHelp
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemSendFeedback
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTipOfTheDay
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTutorial
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoFavorites
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserOptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoTheaterMode
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoViewSource
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOC
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!CheckExeSignatures
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKCU\Software\Policies\Microsoft\Win
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKCU\Software\Policies\Microsoft\Win
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKCU\Software\Po
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKCU\Software\Policie
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKCU\Software\Policies\Mic
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTemplate
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKCU\Software\P
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKCU\Software\P
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKCU\
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, H
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1406
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1406
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoScheduledUpdates
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelUI
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSubscriptionContent
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingScheduleGroups
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelLogging
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionSize, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodel
HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence\3!DomainLimit, HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence\3!DocumentL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Exp
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsoft\Intern
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft\Interne
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Software\Policies\Mi
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft\Interne
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies\Micros
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microso
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Microsoft\Inter
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Microsoft\Inter
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\Policies\Mic
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Policies\Micr
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies\Micros
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!SpecifyDefaultButtons, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Expl
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarCustomize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoBandCustomize
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoUpdateCheck
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSplash
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMSAppLogo5ChannelNotify
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ProxySettingsPerUser
HKLM\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_zones_map_edit
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_options_edit
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_HKLM_only
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOC
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!CheckExeSignatures
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKLM\Software\Pol
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKLM\Software\Policie
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTemplate
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKLM\Software\P
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKLM\Software\P
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKLM\
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, H
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1406
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1406
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Exp
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsoft\Interne
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft\Internet
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Software\Policies\Mi
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft\Internet
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies\Micros
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microso
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Microsoft\Inter
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microsoft\Intern
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Policies\Micr
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies\Micros
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS
HKCU\Software\Policies\Microsoft\Conferencing!PersistAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!NoChat
HKCU\Software\Policies\Microsoft\Conferencing!NoDirectoryServices
HKCU\Software\Policies\Microsoft\Conferencing!NoOldWhiteBoard
HKCU\Software\Policies\Microsoft\Conferencing!NoNewWhiteBoard
HKCU\Software\Policies\Microsoft\Conferencing!Use AutoConfig, HKCU\Software\Policies\Microsoft\Conferencing!ConfigFile
HKCU\Software\Policies\Microsoft\Conferencing!MaxFileSendSize
HKCU\Software\Policies\Microsoft\Conferencing!NoAddingDirectoryServers
HKCU\Software\Policies\Microsoft\Conferencing!NoAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!NoChangingCallMode
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingFiles
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingFiles
HKCU\Software\Policies\Microsoft\Conferencing!NoWebDirectory
HKCU\Software\Policies\Microsoft\Conferencing!CallSecurity
HKCU\Software\Policies\Microsoft\Conferencing!IntranetSupportURL
HKCU\Software\Policies\Microsoft\Conferencing!NoAppSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoTrueColorSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoAllowControl
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDesktop
HKCU\Software\Policies\Microsoft\Conferencing!NoSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDosWindows
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingExplorer
HKCU\Software\Policies\Microsoft\Conferencing!NoAudio
HKCU\Software\Policies\Microsoft\Conferencing!NoFullDuplex
HKCU\Software\Policies\Microsoft\Conferencing!MaximumBandwidth
HKCU\Software\Policies\Microsoft\Conferencing!NoChangeDirectSound
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingVideo
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingVideo
HKCU\Software\Policies\Microsoft\Conferencing!NoAdvancedCalling
HKCU\Software\Policies\Microsoft\Conferencing!NoAudioPage
HKCU\Software\Policies\Microsoft\Conferencing!NoGeneralPage
HKCU\Software\Policies\Microsoft\Conferencing!NoSecurityPage
HKCU\Software\Policies\Microsoft\Conferencing!NoVideoPage
HKLM\Software\Policies\Microsoft\Conferencing!NoRDS
soft\Windows\WindowsUpdate\AU!DetectionFrequency
WindowsUpdate\AU!AUOptions, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!ScheduledInstallDay, HKLM\Software\Policies\Microsoft\Win dows\Windo
crosoft\Windows\WindowsUpdate\AU!RebootWarningTimeout
ws\WindowsUpdate!TargetGroup
Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeout
osoft\Windows\WindowsUpdate\AU!RescheduleWaitTime
WindowsUpdate\AU!UseWUServer, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!WUServer, HKLM\Software\Policies\Microsoft\Windows\Windo wsUpd
dowsMediaPlayer\Protocols\HTTP!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\ Policies\Microsof

dowsMediaPlayer\Protocols\MMS!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!AutodetectProxy, HKCU\Software\Pol icies\Microsoft\W
MediaPlayer!BufferingType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!UseDefaultBuffering, HKCU\Software\Policies\Microsoft\Windows MediaPlayer!UseDef
dowsMediaPlayer\Protocols\RTSP!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!AutodetectProxy, HKCU\Software\ Policies\Microsof
es\Microsoft\WindowsMediaPlayer\Protocols!Multicast, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!UDP, HKCU\Software\Policies \Microsoft\Windows
Player!DefaultSkin
tVersion\Policies\Explorer\DisallowCpl!{1,2,3,...}
Version\Policies\Explorer\RestrictCpl!{1,2,3,...}
s NT\Printers\PointAndPrint!InForest, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!TrustedServers, HKCU\Software\Pol icies\Microsoft\Windows NT

ersion\Policies\System!WallpaperStyle
Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Delete
s\DriverSearching!DontSearchCD, HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate
ntVersion\Policies\Explorer\DisallowRun!{1,2,3,...}
tVersion\Policies\Explorer\RestrictRun!{1,2,3,...}
ystem!GroupPolicyRefreshTimeOffset
Version\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKCU\Software\Mi crosoft\Windows\Cu
CurrentVersion\Policies\System!ProfileQuotaMessage, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxProfileSize, HKCU\Softw are\Microsoft\Wind

Windows NT\Terminal Services!WorkDirectory, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fInheritInitialProgram
Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime
CurrentVersion\Policies\comdlg32\Placesbar!Place1, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place2, HKCU\So ftware\Microsoft\W
TS!MaxTransferRateOnSchedule, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBandwidthValidFrom, HKLM\Software\Policies\Microsoft\Windows\BIT S!MaxBandw

6-Global!DontIncludeMicrosoftSeedServer
licies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!RemoteAddresses
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundSourceQuench, HKLM\SOFTWARE\Policies\Microsoft\Windows Firewall
cies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Loggin g!LogDrop

olicies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!RemoteAddresses
E\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!RemoteAddresses
E\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!RemoteAddresses
olicies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!RemoteAddresses
, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundSourceQuench, HKLM\SOFTWARE\Policies\Microsoft\Win dowsFirew
licies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\ Logging!Log

Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!RemoteAddresses
RE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!RemoteAddresses
RE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!RemoteAddresses
soft\Windows\NetCache\AssignedOfflineFolders!PurgeOnlyAutoCacheAtLogoff
NT\Reliability!ShutdownReasonUI
T\Reliability!TimeStampInterval
imitUnits, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Threshold, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ThresholdU nits
ealth\ErrorReporting\DW!DWNoFileCollection, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoSecondLevelCollection, HKLM\Softwar e\Policies\Micro

ting\DW!DWAllowHeadless, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWAllowHeadless
porting!IncludeMicrosoftApps, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeWindowsApps
ware\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\Group Policy\

M\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\Gro
Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoGPOListChanges
ystem!GroupPolicyRefreshTimeOffset
s\System!GroupPolicyRefreshTimeOffsetDC
M\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\Gro

tware\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\Group Policy
cy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges
Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\Group

cy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoGPOListChanges
ware\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoGPOListChanges
M\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\G

ersion\Policies\Explorer!NoPublishingWizard, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKLM\Software\Mi crosoft\Windows\Cu
ws NT\Terminal Services!fAllowUnsolicitedFullControl
ws NT\Terminal Services!fAllowFullControl, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!MaxTicketExpiry, HKLM\Software\pol icies\Microsoft\Windows
!ExtErrorInfoExceptions
\System!SlowLinkTimeOut
ig!HoldPeriod, HKLM\Software\Policies\Microsoft\W32Time\Config!LargePhaseOffset, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxAllowedPh aseOffset, HKLM\

ype, HKLM\Software\Policies\Microsoft\W32time\Parameters!CrossSiteSyncFlags, HKLM\Software\Policies\Microsoft\W32time\Parameters!ResolvePeer BackoffMinutes, HK
rosoft\Windows NT\Terminal Services!fDenyTSConnections
ft\Windows NT\Terminal Services!KeepAliveInterval
icies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip

Windows NT\Terminal Services!WorkDirectory
ft\Windows NT\Terminal Services!WFHomeDir, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirDrive
\Microsoft\Windows NT\Terminal Services!FallbackPrintDriverType
Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

00C04FD9152D}
00A0C959BC0A}
0C04FA31D93}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{52ADE293-85E8-11D2-BB22-00104B0EA28 1}
00AA0055595A}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{22D6F312-B0F6-11D0-94AB-0080C74C7E9 5}
0A0C90C9B67}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{7823A620-9DD9-11CF-A662-00AA00C066D 2}, HKCU\Soft
-00C04FD7081F}
00C04FD64497}
0080C744F389}
00C04F9A8CFA}
00A0C90DD90C}
00AA004A5FC5}
-444553540000}
s!LOCALMACHINE_CD_UNLOCK
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Setti
\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Setti

neTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!Local Machine Zone, HKCU\S oftware\Policies\Mic
emplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!Restricted Sites, HKCU\Soft ware\Policies\Microsoft\Windo
ate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKCU\Software\Policie s\Microsoft\Windows\Curren

MachineZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies! Locked-Down Loca
ownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-Down Internet, HK CU\Software\Policies\M
ownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-Down Intranet, HK CU\Software\Policies\M
ZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!Locked-Dow n Trusted Sites, HKC
SitesZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!L ocked-Down Restricted S
icrosoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionCount, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodeli very\Restrictions!MinUpdateInterval, H
plorer\Persistence\3!DocumentLimit
re\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\M ain\FeatureControl\
oftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Ex plorer\Main\Feat
ftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Expl orer\Main\Feature
ved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Micro soft\
ftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Ex plorer\Main\Feature
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKCU\Software\Policies\Microsoft \Internet E
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Int ernet Ex
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\F
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Fe
ed), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKCU\Software\Policies\M icrosoft\Int
d), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKCU\Software\Policies\Micro soft\Inte
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKCU\Software\Policies\Microsoft \Internet E
ws\CurrentVersion\Policies\Explorer!Btn_Back, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Forward, HKCU\Software\M icrosoft\Windows\Curr

s!LOCALMACHINE_CD_UNLOCK
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Setti
\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Setti

neTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!Local Machine Zone, HKLM\S oftware\Policies\Micr
emplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!Restricted Sites, HKLM\Soft ware\Policies\Microsoft\Window
ate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKLM\Software\Policie s\Microsoft\Windows\Curren

MachineZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies! Locked-Down Loca
ownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-Down Internet, HK LM\Software\Policies\Mi
ownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-Down Intranet, HK LM\Software\Policies\Mi
ZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!Locked-Dow n Trusted Sites, HKLM
SitesZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!L ocked-Down Restricted S
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\M ain\FeatureControl\F
oftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Ex plorer\Main\Featu
ftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Expl orer\Main\Feature

ed), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Micro soft\I
ftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Ex plorer\Main\Feature
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKLM\Software\Policies\Microsoft \Internet E
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Int ernet Ex
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\F
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Fe
ed), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKLM\Software\Policies\M icrosoft\Int
d), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKLM\Software\Policies\Micro soft\Inte
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKLM\Software\Policies\Microsoft \Internet E

ies\Microsoft\Win dows\WindowsUpdate\AU!ScheduledInstallTime
rosoft\Windows\Windo wsUpdate\AU!WUStatusServer
CU\Software\ Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserProx

U\Software\Pol icies\Microsoft\WindowsMediaPlayer\Protocols\MMS!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!UseProxy, HKCU\S
\Windows MediaPlayer!UseDefaultBuffering, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBuffering
KCU\Software\ Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!UseProxy, HKC
are\Policies \Microsoft\WindowsMediaPlayer\Protocols!UDPPorts, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!TCP, HKCU\Software\Policies\Microsof
Pol icies\Microsoft\Windows NT\Printers\PointAndPrint!ServerList

oftware\Mi crosoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP, HKCU\Software\Microsoft\W
KCU\Softw are\Microsoft\Windows\CurrentVersion\Policies\System!IncludeRegInProQuota, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!WarnUser, H

2, HKCU\So ftware\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place3, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesba
oft\Windows\BIT S!MaxBandwidthValidTo, HKLM\Software\Policies\Microsoft\Windows\BITS!UseSystemMaximum, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTr

es\Microsoft\Windows Firewall\DomainProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInbound
omainProfile\Loggin g!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE
licies\Microsoft\Win dowsFirewall\StandardProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowIn
l\StandardProfile\ Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogSuccessfulConnections, HKLM\SOFTW

hresholdU nits
HKLM\Softwar e\Policies\Microsoft\PCHealth\ErrorReporting!ForceQueueMode, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWFileTreeRoot, HKLM\S
crosoft\Windo ws\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoGPOListChanges

Policies\Microsoft\Windo ws\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoGPOListChanges
Policies\Microsoft\Windo ws\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoGPOListChanges

crosoft\Windo ws\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoGPOListChanges
cies\Microsoft\Windo ws\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoGPOListChanges
\Policies\Microsoft\Windo ws\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoGPOListChanges

oftware\Mi crosoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP, HKLM\Software\Policies\Mic
are\pol icies\Microsoft\Windows NT\Terminal Services!MaxTicketExpiryUnits, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fUseMailto
axAllowedPh aseOffset, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxNegPhaseCorrection, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxPosPhaseCo

esolvePeer BackoffMinutes, HKLM\Software\Policies\Microsoft\W32time\Parameters!ResolvePeerBackoffMaxTimes, HKLM\Software\Policies\Microsoft\W32time\Parameter
-00104B0EA28 1}
-0080C74C7E9 5}
-00AA00C066D 2}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{F5131C24-E56D-11CF-B78A-444553540000}
s \CurrentVersion\Internet Settings\Zones\3!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1004, HKCU\Software\Policies\Micro
s \CurrentVersion\Internet Settings\Zones\1!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1004, HKCU\Software\Policies\Micro

, HKCU\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!100
cie s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1004, HKCU\S

ate Policies! Locked-Down Local Machine Zone, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1001, HKCU\Software\Pol
et, HK CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
et, HK CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
ked-Dow n Trusted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1001, HKCU\Software\Policies\Microsoft\Window
ies!L ocked-Down Restricted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1001, HKCU\Software\Policies\Microso
estrictions!MinUpdateInterval, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UpdateExcludeBegin, HKCU\Software\Policies\Microsoft\Internet E
Explorer\M ain\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Re
oft\Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_M
\Internet Expl orer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SEC
U\Software\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet E
\Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIM
are\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\
e\Policies\Microsoft\Int ernet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Fe
rosoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATU
osoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATUR
Software\Policies\M icrosoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explo
oftware\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explore
are\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\
tware\M icrosoft\Windows\CurrentVersion\Policies\Explorer!Btn_Stop, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Refresh, HKCU\Software\M

s \CurrentVersion\Internet Settings\Zones\3!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1004, HKLM\Software\Policies\Micro
s \CurrentVersion\Internet Settings\Zones\1!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1004, HKLM\Software\Policies\Micro

, HKLM\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Z
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1004
ie s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1004, HKLM\S

ate Policies! Locked-Down Local Machine Zone, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1001, HKLM\Software\Poli
et, HK LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
et, HK LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
ked-Dow n Trusted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1001, HKLM\Software\Policies\Microsoft\Window
ies!L ocked-Down Restricted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1001, HKLM\Software\Policies\Microso
Explorer\M ain\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Res
oft\Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_M
Internet Expl orer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SEC

M\Software\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Ex
Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIM
re\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\F
e\Policies\Microsoft\Int ernet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Fea
rosoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATU
osoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATUR
Software\Policies\M icrosoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explo
oftware\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explore
re\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\F

Protocols\HTTP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Policies\Microsoft \WindowsMediaPl
tocols\MMS!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!AutodetectProxy, HKCU\Software\Policies\Microsoft\Windo wsMediaPlayer\P
Protocols\RTSP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!AutodetectProxy, HKCU\Software\Policies\Microsoft \WindowsMediaPla
KCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!HTTP
EIP, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKCU\Software\Policies\Microsoft\Windows NT\ Printers!DisableHTTPPrinti
ion\Policies\System!WarnUser, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!WarnUserTimeout
ion\Policies\comdlg32\Placesbar!Place4
\Microsoft\Windows\BITS!MaxTransferRateOffSchedule
rofile\IcmpSettings!AllowInboundEchoRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInboundRouterRequest, H KLM\SO
onnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogFilePath, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\Domai nPr
dardProfile\IcmpSettings!AllowInboundEchoRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundRouter Request, HK
ssfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogFilePath, HKLM\SOFTWARE\Policies\Microsoft\WindowsFire wall\Sta

g\DW!DWFileTreeRoot, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWReporteeName
EIP, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch, HKLM\Software\Policies\Mic

ces!fUseMailto
32Time\Config!MaxPosPhaseCorrection, HKLM\Software\Policies\Microsoft\W32Time\Config!PhaseCorrectRate, HKLM\Software\Policies\Microsoft\W32T ime\Config!PollAd

s\Microsoft\W32time\Parameters!SpecialPollInterval, HKLM\Software\Policies\Microsoft\W32time\Parameters!EventLogFlags
B78A-444553540000}
4, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1200, HKCU\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Settings
4, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1200, HKCU\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Settings

CurrentVersion\Internet Settings\Zones\0!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1200 , HKCU\Software\Policies\Microso
n\Internet Settings\Zones\4!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1200, H KCU\Software\Policies\Microsoft\Windows\
Settings\Zones\2!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1200, HKCU\Software \Policies\Microsoft\Windows\CurrentVe

nes\0!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1004, HKCU\Software\Policies\Microso ft\Windows\CurrentVer
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!12
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!12
tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1004, HKCU\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings\L
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1004, HKCU\Software\Policies\Microsoft\ Windows\CurrentVersion\Internet
ware\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UpdateExcludeEnd, HKCU\Software\Policies\Micr osoft\Internet Explorer\Infodelivery\Restrictions!MaxWebc
ol\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, H KCU\Software\Po
Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HAND LING!exp
\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND! explorer.e
are\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Mai
\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIF FING!explorer.e
Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC ontr
crosoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\F
orer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJEC T_CACH
er\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ ELEVATIO
\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explor er\Main\
olicies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\ Fea
Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC ontr
Btn_Refresh, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Home, HKCU\Software\Microsoft\Windows\CurrentVers ion\Policies\Explorer!Btn_Se

4, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1200, HKLM\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Settings\
4, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1200, HKLM\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Settings\

urrentVersion\Internet Settings\Zones\0!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1200 , HKLM\Software\Policies\Microso
n\Internet Settings\Zones\4!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1200, H KLM\Software\Policies\Microsoft\Windows\C
Settings\Zones\2!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1200, HKLM\Software \Policies\Microsoft\Windows\CurrentVer

nes\0!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1004, HKLM\Software\Policies\Microso ft\Windows\CurrentVers
ft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!120
ft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!120
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1004, HKLM\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings\L
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1004, HKLM\Software\Policies\Microsoft\ Windows\CurrentVersion\Internet
ol\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, H KLM\Software\Po
ain\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HAND LING!expl
FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND! explorer.e

are\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main
FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIF FING!explorer.e
Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC ontro
rosoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\F
rer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJEC T_CACH
er\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ ELEVATIO
Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explor er\Main\F
olicies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\ Fea
Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC ontro

es\Microsoft \WindowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserProxy, HKCU\So
crosoft\Windo wsMediaPlayer\Protocols\MMS!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyPort, HKCU\Software\Policies\M
es\Microsoft \WindowsMediaPlayer\Protocols\RTSP!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPort, HKCU\Software\Poli

NT\ Printers!DisableHTTPPrinting, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMak
oundRouterRequest, H KLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundTimeExceeded, HKLM\SOFTWARE\Policies\Micro
oft\WindowsFirewall\Domai nProfile\Logging!LogFileSize
owInboundRouter Request, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundTimeExceeded, HKLM\SOFTWARE\Policie
Microsoft\WindowsFire wall\StandardProfile\Logging!LogFileSize
h, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKLM\
rosoft\W32T ime\Config!PollAdjustFactor, HKLM\Software\Policies\Microsoft\W32Time\Config!SpikeWatchPeriod, HKLM\Software\Policies\Microsoft\W32Time\Config!Updat
CurrentVersion\Internet Settings\Zones\3!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1400, HKCU\Software\Policies\Microso
CurrentVersion\Internet Settings\Zones\1!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1400, HKCU\Software\Policies\Microso

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1400, H
es\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1400, HKCU\Soft

Microso ft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone
Settings\Lockdown_Zones\3!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1201, HKCU\Software\Policies\Microsof
rr entVersion\Internet Settings\Lockdown_Zones\2!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1201, HKCU\Softw
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1201, H
fodelivery\Restrictions!MaxWebcrawlLevels
xplorer.exe, H KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe
TURE_MIME_HAND LING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe
E_SECURITYBAND! explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe
s\Microsoft\Internet Explorer\Main\ FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Featu
E_MIME_SNIF FING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe
et Explorer\Main\FeatureC ontrol\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_
Explorer\Main\FeatureControl\F EATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PRO
ol\FEATURE_OBJEC T_CACHING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe
\FEATURE_ZONE_ ELEVATION!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe
crosoft\Internet Explor er\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureCo
soft\Internet Explorer\Main\ FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureContro
et Explorer\Main\FeatureC ontrol\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_
rs ion\Policies\Explorer!Btn_Search, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Favorites, HKCU\Software\Microsoft\Windows\CurrentVersion

CurrentVersion\Internet Settings\Zones\3!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1400, HKLM\Software\Policies\Microsoft
CurrentVersion\Internet Settings\Zones\1!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1400, HKLM\Software\Policies\Microsoft

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1400, HK
s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1400, HKLM\Softw

Microso ft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone
Settings\Lockdown_Zones\3!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1201, HKLM\Software\Policies\Microsoft\
Settings\Lockdown_Zones\1!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1201, HKLM\Software\Policies\Microsoft\
r entVersion\Internet Settings\Lockdown_Zones\2!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1201, HKLM\Softw
indows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1201, HK
plorer.exe, H KLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe
TURE_MIME_HAND LING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe
E_SECURITYBAND! explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe

\Microsoft\Internet Explorer\Main\ FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Featur
E_MIME_SNIF FING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe
t Explorer\Main\FeatureC ontrol\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_D
xplorer\Main\FeatureControl\F EATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PRO
ol\FEATURE_OBJEC T_CACHING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe
FEATURE_ZONE_ ELEVATION!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe
rosoft\Internet Explor er\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureCon
soft\Internet Explorer\Main\ FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl
t Explorer\Main\FeatureC ontrol\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_W

TP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\Win dowsMediaPlaye
yPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!BypassProxyLocal, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\P rotocols\MMS!
!ProxyPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!BypassProxyLocal, HKCU\Software\Policies\Microsoft\WindowsMedi aPlayer\Protocols

ies\Microsoft\WindowsMovieMaker!CodecDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKCU\Software\Policies\M icrosoft\WindowsMovieM
KLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundParameterProblem, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewal
eded, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundParameterProblem, HKLM\SOFTWARE\Policies\Microsoft\ Windo

rer!NoInternetOpenWith, HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW, HKLM\Software\Policies \Microsoft\EventViewer!MicrosoftE
Microsoft\W32Time\Config!UpdateInterval, HKLM\Software\Policies\Microsoft\W32Time\Config!AnnounceFlags, HKLM\Software\Policies\Microsoft\W 32Time\Config!EventLo
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1402, HKCU\Software\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Zo
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1402, HKCU\Software\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Zo

entVersion\Internet Settings\Zones\0!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone s\0!1402, HKCU\Software\Policies\Microsoft\W
nternet Settings\Zones\4!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 !1402, HKCU\Software\Policies\Microsoft\Windows\Cur
ttings\Zones\2!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1402, HKCU\ Software\Policies\Microsoft\Windows\CurrentVersio

nternet Settings\Lockdown_Zones\0!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1 400, HKCU\Software\Policies\
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1400, HKCU\Software\Policies\Micros oft\Windows\CurrentVersion\Internet S
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1400, HKCU\Software\Policies\Micros oft\Windows\CurrentVersion\Internet S
own_Zones\2!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1400, HKCU\Softw are\Policies\Microsoft\Windows\Cu
ngs\Lockdown_Zones\4!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1400 , HKCU\Software\Policies\Microsoft\Wi
LING!iexplore.exe
soft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe
Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe
\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe
ECT_CACHING!iexplore.exe
ELEVATION!iexplore.exe
ternet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe
net Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe
Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe
crosoft\Windows\CurrentVersion\Policies\Explorer!Btn_History, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer !Btn_Folders, HKCU\Software\Microsof

KLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1402, HKLM\Software\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Zon
KLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1402, HKLM\Software\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Zon

entVersion\Internet Settings\Zones\0!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone s\0!1402, HKLM\Software\Policies\Microsoft\W
ternet Settings\Zones\4!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 !1402, HKLM\Software\Policies\Microsoft\Windows\Curre
tings\Zones\2!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1402, HKLM\ Software\Policies\Microsoft\Windows\CurrentVersion

nternet Settings\Lockdown_Zones\0!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1 400, HKLM\Software\Policies\M
KLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1400, HKLM\Software\Policies\Micros oft\Windows\CurrentVersion\Internet S
KLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1400, HKLM\Software\Policies\Micros oft\Windows\CurrentVersion\Internet S
own_Zones\2!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1400, HKLM\Softw are\Policies\Microsoft\Windows\Cur
gs\Lockdown_Zones\4!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1400 , HKLM\Software\Policies\Microsoft\Win
ING!iexplore.exe
oft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe
ain\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe
FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe
CT_CACHING!iexplore.exe
ELEVATION!iexplore.exe
ernet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe
et Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe
Microsoft\Win dowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Polic
sMediaPlayer\P rotocols\MMS!BypassProxyLocalAddress
WindowsMedi aPlayer\Protocols\RTSP!BypassProxyLocalAddress
cies\M icrosoft\WindowsMovieMaker!WebPublish, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Wind
icies\Microsoft\WindowsFirewal l\DomainProfile\IcmpSettings!AllowInboundTimestampRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Icmp
WARE\Policies\Microsoft\ WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundTimestampRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\Standard

Microsoft\EventViewer!MicrosoftEventVwrDisableLinks, HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate, HKLM\Software\Policies\
soft\W 32Time\Config!EventLogFlags, HKLM\Software\Policies\Microsoft\W32Time\Config!LocalClockDispersion, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxP
rentVersion\Internet Settings\Zones\3!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1406, HKCU\Software\Policies\Microsoft\W
rentVersion\Internet Settings\Zones\1!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1406, HKCU\Software\Policies\Microsoft\W

CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1406, HKC
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1406, HKCU\Softwar

1 400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1405, HK
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1405, HK
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdo
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
olders, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Fullscreen, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Tools,
entVersion\Internet Settings\Zones\3!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1406, HKLM\Software\Policies\Microsoft\Win
entVersion\Internet Settings\Zones\1!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1406, HKLM\Software\Policies\Microsoft\Win

M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1406, HKLM
crosoft\Windows\CurrentVersion\Internet Settings\Zones\2!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1406, HKLM\Software

400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1405, HKL
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1405, HKL
\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlaye r\Protocols\HTT
, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKCU\Software\Microsoft\Windows\CurrentVersion\Polic ies\Explorer!NoOnlinePrin
owsFirewall\DomainProfile\IcmpSettings!AllowInboundMaskRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundPack
osoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundMaskRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings! Allo

Update, HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration, HKLM\Software\Policies\Microsoft\ SearchCompanion!DisableContentFileUp
Microsoft\W32Time\Config!MaxPollInterval, HKLM\Software\Policies\Microsoft\W32Time\Config!MinPollInterval
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1407, HKCU\Software\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1407, HKCU\Software\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones

Version\Internet Settings\Zones\0!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti ngs\Zones\0!1407, HKCU\Software\Policies\Microsoft\Wind
net Settings\Zones\4!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \Zones\4!1407, HKCU\Software\Policies\Microsoft\Windows\Current
gs\Zones\2!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!140 7, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In

osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\I nternet Settings\Lockdown_Zones\0!
gs\Lockdown_Zones\3!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3! 1406, HKCU\Software\Policies\Microsoft\Win
gs\Lockdown_Zones\1!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1! 1406, HKCU\Software\Policies\Microsoft\Win
Version\Internet Settings\Lockdown_Zones\2!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\Lockdown_Zones\2!1406, HKCU\Software\
s\CurrentVersion\Internet Settings\Lockdown_Zones\4!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte rnet Settings\Lockdown_Zones\4!1406, HKCU
on\Policies\Explorer!Btn_Tools, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_MailNews, HKCU\S oftware\Microsoft\Windows\CurrentVersion\Po
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1407, HKLM\Software\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1407, HKLM\Software\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1

ersion\Internet Settings\Zones\0!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti ngs\Zones\0!1407, HKLM\Software\Policies\Microsoft\Windo
et Settings\Zones\4!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \Zones\4!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentV
s\Zones\2!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!140 7, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Int

soft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I nternet Settings\Lockdown_Zones\0!1
s\Lockdown_Zones\3!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3! 1406, HKLM\Software\Policies\Microsoft\Wind
s\Lockdown_Zones\1!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1! 1406, HKLM\Software\Policies\Microsoft\Wind
ersion\Internet Settings\Lockdown_Zones\2!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\Lockdown_Zones\2!1406, HKLM\Software\P
\CurrentVersion\Internet Settings\Lockdown_Zones\4!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte rnet Settings\Lockdown_Zones\4!1406, HKLM\S
wsMediaPlaye r\Protocols\HTTP!ProxyPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!BypassProxyLocal, HKCU\Software\Policies\Microsoft
olic ies\Explorer!NoOnlinePrintsWizard, HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!No
cmpSettings!AllowOutboundPacketT ooBig
ndardProfile\IcmpSettings! AllowOutboundPacketTooBig
ompanion!DisableContentFileUpdates, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKLM\Software\Policies\Microsoft\Windows NT\Printers
tVersion\Internet Settings\Zones\3!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1604, HKCU\Software\Policies\Microsoft\Wind
tVersion\Internet Settings\Zones\1!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1604, HKCU\Software\Policies\Microsoft\Wind

Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!16
icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1604, HKCU\S
osoft\Windows\CurrentVersion\Internet Settings\Zones\2!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1604, HKCU\Software\P

net Settings\Lockdown_Zones\0!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1407, HKCU\Software\Policies\Micros
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
_Zones\2!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
ockdown_Zones\4!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1407, HKCU\Software\Policies\Microsoft\Windows
soft\Windows\CurrentVersion\Policies\Explorer!Btn_Size, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Print, HKCU\Software\Microsoft\Windows\
Version\Internet Settings\Zones\3!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1604, HKLM\Software\Policies\Microsoft\Window
Version\Internet Settings\Zones\1!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1604, HKLM\Software\Policies\Microsoft\Window

oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!160
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1604, HKLM\So
soft\Windows\CurrentVersion\Internet Settings\Zones\2!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1604, HKLM\Software\Po

et Settings\Lockdown_Zones\0!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1407, HKLM\Software\Policies\Microso
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
Zones\2!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVer
ockdown_Zones\4!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1407, HKLM\Software\Policies\Microsoft\Windows\C
KCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!BypassProxyLocalAddress
rentVersion\Policies\Explorer!NoInternetOpenWith, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKCU\S oftware\Policies\Microsoft\Windo
s\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSe archWindowsUpdate, HKLM\Software\Po
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1606, HKCU\Sof tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1606, HKCU\Sof tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1

sion\Internet Settings\Zones\0!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intern et Settings\Zones\0!1606, HKCU\Software\Policies\Microsoft\Window
Settings\Zones\4!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVer
Zones\2!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon es\2!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inter

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1601, HKCU\Software\Policies \Microsoft\Windows\CurrentVersion\Interne
\CurrentVersion\Internet Settings\Lockdown_Zones\3!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\3!1604, HKCU\S
\CurrentVersion\Internet Settings\Lockdown_Zones\1!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\1!1604, HKCU\S
es\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1601, HKCU\Software\Policies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Lockdown_Z
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1601, HKCU\Software\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\Lo
CU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Edit, HKCU\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer!Btn_Discussions, HKCU\So
ftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1606, HKLM\Sof tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!16
ftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1606, HKLM\Sof tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!16

on\Internet Settings\Zones\0!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern et Settings\Zones\0!1606, HKLM\Software\Policies\Microsoft\Windows
ettings\Zones\4!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVers
nes\2!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon es\2!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Interne

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1601, HKLM\Software\Policies \Microsoft\Windows\CurrentVersion\Internet
CurrentVersion\Internet Settings\Lockdown_Zones\3!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\3!1604, HKLM\So
CurrentVersion\Internet Settings\Lockdown_Zones\1!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\1!1604, HKLM\So
s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1601, HKLM\Software\Policies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Lockdown_Zo
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1601, HKLM\Software\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\Loc
oftware\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKCU\Software\Policie
owsUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDow
rsion\Internet Settings\Zones\3!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1608, HKCU\Software\Policies\Microsoft\Windows
rsion\Internet Settings\Zones\1!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1608, HKCU\Software\Policies\Microsoft\Windows

tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1608
s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1608, HKCU\Softw
ft\Windows\CurrentVersion\Internet Settings\Zones\2!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1608, HKCU\Software\Polic

ockdown_Zones\3!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1606, HKCU\Software\Policies\Microsoft\Windows\C
on\Internet Settings\Lockdown_Zones\2!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1606, HKCU\Software\Policie
rrentVersion\Internet Settings\Lockdown_Zones\4!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1606, HKCU\Softwa
lorer!Btn_Discussions, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Cut, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Bt
ion\Internet Settings\Zones\3!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1608, HKLM\Software\Policies\Microsoft\Windows\C
ion\Internet Settings\Zones\1!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1608, HKLM\Software\Policies\Microsoft\Windows\C

ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1608, H
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1608, HKLM\Softwa
Windows\CurrentVersion\Internet Settings\Zones\2!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1608, HKLM\Software\Policie

Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1606, HK
kdown_Zones\3!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1606, HKLM\Software\Policies\Microsoft\Windows\Cu
n\Internet Settings\Lockdown_Zones\2!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1606, HKLM\Software\Policies\
entVersion\Internet Settings\Lockdown_Zones\4!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1606, HKLM\Software
wnload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublis h
WindowsMovieMaker!CodecDownload, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKLM\Software\Policies\Micro soft\WindowsMovieMaker!WebPu

n\Internet Settings\Zones\0!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio n\Internet Settings\Zones\0!1609, HKCU\Software\Policies\Microsoft\Windows\C
tings\Zones\4!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\I nternet Settings\Zones\4!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio
es\2!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett ings\Zones\2!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet

ings\Lockdown_Zones\0!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z ones\0!1607, HKCU\Software\Policies\Microsoft\W
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1607, HKCU\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Loc
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1607, HKCU\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Loc
\2!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1607, HK CU\Software\Policies\Microsoft\Windows\CurrentVersio
wn_Zones\4!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone s\4!1607, HKCU\Software\Policies\Microsoft\Windows\Curr
rrentVersion\Policies\Explorer!Btn_Copy, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explo rer!Btn_Paste, HKCU\Software\Microsoft\Windows\CurrentVersio
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1800,
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1800,

nternet Settings\Zones\0!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio n\Internet Settings\Zones\0!1609, HKLM\Software\Policies\Microsoft\Windows\Cur
ngs\Zones\4!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I nternet Settings\Zones\4!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I
\2!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett ings\Zones\2!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se

ngs\Lockdown_Zones\0!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z ones\0!1607, HKLM\Software\Policies\Microsoft\Win
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1607, HKLM\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1607, HKLM\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd
2!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1607, HK LM\Software\Policies\Microsoft\Windows\CurrentVersion\
n_Zones\4!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone s\4!1607, HKLM\Software\Policies\Microsoft\Windows\Curren
oft\WindowsMovieMaker!WebPublish, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKLM\Software\Microsoft\Windows\CurrentV
n\Internet Settings\Zones\3!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1802, HKCU\Software\Policies\Microsoft\Windows\Cu
n\Internet Settings\Zones\1!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1802, HKCU\Software\Policies\Microsoft\Windows\Cu

re\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1802, HK
icrosoft\Windows\CurrentVersion\Internet Settings\Zones\4!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1802, HKCU\Software
Windows\CurrentVersion\Internet Settings\Zones\2!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1802, HKCU\Software\Policies\

CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
entVersion\Internet Settings\Lockdown_Zones\3!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1609, HKCU\Softwar
entVersion\Internet Settings\Lockdown_Zones\1!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1609, HKCU\Softwar
icrosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Encoding
Internet Settings\Zones\3!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1802, HKLM\Software\Policies\Microsoft\Windows\Curr
Internet Settings\Zones\1!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1802, HKLM\Software\Policies\Microsoft\Windows\Curr

\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1802, HKL
rosoft\Windows\CurrentVersion\Internet Settings\Zones\4!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1802, HKLM\Software\P
dows\CurrentVersion\Internet Settings\Zones\2!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1802, HKLM\Software\Policies\Mi

M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
ntVersion\Internet Settings\Lockdown_Zones\3!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1609, HKLM\Software\
ntVersion\Internet Settings\Lockdown_Zones\1!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1609, HKLM\Software\
rosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1
olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
are\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer!NoOnlinePrintsWizard, HKL
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 3!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1804, H
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 1!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1804, H

ernet Settings\Zones\0!1802, HKCU\Software\Policies\Microsoft\Windows\Curre ntVersion\Internet Settings\Zones\0!1803, HKCU\Software\Policies\Microsoft\Windows\Curre
s\Zones\4!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet Settings\Zones\4!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\2!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set

ws\CurrentVersion\Internet Settings\Lockdown_Zones\0!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet Settings\Lockdown_Zones\0!1800, HKCU
n_Zones\3!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\3!1800, HKCU\Software\Policies\Microsoft\Windows\Curre
n_Zones\1!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\1!1800, HKCU\Software\Policies\Microsoft\Windows\Curre
rnet Settings\Lockdown_Zones\2!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1800, HKCU\Software\Policies\Mic
ersion\Internet Settings\Lockdown_Zones\4!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVers ion\Internet Settings\Lockdown_Zones\4!1800, HKCU\Software\P
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 3!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1804, HKL
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 1!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1804, HKL

net Settings\Zones\0!1802, HKLM\Software\Policies\Microsoft\Windows\Curre ntVersion\Internet Settings\Zones\0!1803, HKLM\Software\Policies\Microsoft\Windows\Current
Zones\4!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet Settings\Zones\4!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\2!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin

\CurrentVersion\Internet Settings\Lockdown_Zones\0!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet Settings\Lockdown_Zones\0!1800, HKLM\S
_Zones\3!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\3!1800, HKLM\Software\Policies\Microsoft\Windows\Current
_Zones\1!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\1!1800, HKLM\Software\Policies\Microsoft\Windows\Current
et Settings\Lockdown_Zones\2!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1800, HKLM\Software\Policies\Micro
sion\Internet Settings\Lockdown_Zones\4!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVers ion\Internet Settings\Lockdown_Zones\4!1800, HKLM\Software\Poli
orer!NoOnlinePrintsWizard, HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines, HKLM\Software\Polic
ternet Settings\Zones\3!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1809, HKCU\Software\Policies\Microsoft\Windows\Curre
ternet Settings\Zones\1!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1809, HKCU\Software\Policies\Microsoft\Windows\Curre

Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1809, HKCU
osoft\Windows\CurrentVersion\Internet Settings\Zones\4!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1809, HKCU\Software\Po
ows\CurrentVersion\Internet Settings\Zones\2!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1809, HKCU\Software\Policies\Mic

Lockdown_Zones\0!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1802, HKCU\Software\Policies\Microsoft\Window
olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
Zones\4!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVer
rnet Settings\Zones\3!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentV
rnet Settings\Zones\1!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentV

icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1809, HKLM\S
oft\Windows\CurrentVersion\Internet Settings\Zones\4!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1809, HKLM\Software\Polic
ws\CurrentVersion\Internet Settings\Zones\2!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1809, HKLM\Software\Policies\Micros

cies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
0, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
nes\4!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
Headlines, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch, HKLM\Software\Policies\Microsoft\PCHeal th\ErrorReporting!DoReport, HKLM\Softwar
olicies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\3!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04, HKC
olicies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\1!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A04, HKC

et Settings\Zones\0!1809, HKCU\Software\Policies\Microsoft\Windo ws\CurrentVersion\Internet Settings\Zones\0!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentV
ones\4!1809, HKCU\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\Zones\4!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
09, HKCU\Software\Policies\Microsoft\Windows\CurrentVersi on\Internet Settings\Zones\2!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting

ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1803, HKCU\Software\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L
sion\Internet Settings\Lockdown_Zones\3!1803, HKCU\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Lockdown_Zones\3!1804, HKCU\Software\Po
sion\Internet Settings\Lockdown_Zones\1!1803, HKCU\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Lockdown_Zones\1!1804, HKCU\Software\Po
t\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1803, HKCU\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!180
s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1803, HKCU\Software\Pol icies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zo
cies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\3!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04, HKLM\S
cies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\1!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A04, HKLM\S

Settings\Zones\0!1809, HKLM\Software\Policies\Microsoft\Windo ws\CurrentVersion\Internet Settings\Zones\0!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVer
es\4!1809, HKLM\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\Zones\4!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
, HKLM\Software\Policies\Microsoft\Windows\CurrentVersi on\Internet Settings\Zones\2!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Z

are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1803, HKLM\Software\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Loc
on\Internet Settings\Lockdown_Zones\3!1803, HKLM\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Lockdown_Zones\3!1804, HKLM\Software\Polic
on\Internet Settings\Lockdown_Zones\1!1803, HKLM\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Lockdown_Zones\1!1804, HKLM\Software\Polic
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1803, HKLM\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1804,
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1803, HKLM\Software\Pol icies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone
porting!DoReport, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
net Settings\Zones\3!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentV
net Settings\Zones\1!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentV

cies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1C00, HKCU\S
t\Windows\CurrentVersion\Internet Settings\Zones\4!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1C00, HKCU\Software\Polic
s\CurrentVersion\Internet Settings\Zones\2!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1C00, HKCU\Software\Policies\Micros

urrentVersion\Internet Settings\Lockdown_Zones\0!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1809, HKCU\Softw
ones\3!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVers
ones\1!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVers
Settings\Lockdown_Zones\2!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1809, HKCU\Software\Policies\Microsoft\
n\Internet Settings\Lockdown_Zones\4!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1809, HKCU\Software\Policies\
Settings\Zones\3!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVers
Settings\Zones\1!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVers

s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1C00, HKLM\Softw
Windows\CurrentVersion\Internet Settings\Zones\4!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1C00, HKLM\Software\Policies
urrentVersion\Internet Settings\Zones\2!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1C00, HKLM\Software\Policies\Microsoft

entVersion\Internet Settings\Lockdown_Zones\0!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1809, HKLM\Softwar
es\3!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion
es\1!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion
ttings\Lockdown_Zones\2!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1809, HKLM\Software\Policies\Microsoft\Wi
nternet Settings\Lockdown_Zones\4!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1809, HKLM\Software\Policies\Mi
ft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!Exi tOnMSICW, HKLM\Software\Policies\Microsoft
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2000, HKCU\S
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2000, HKCU\S

Settings\Zones\0!1C00, HKCU\Software\Policies\Microso ft\Windows\CurrentVersion\Internet Settings\Zones\0!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVer
es\4!1C00, HKCU\Software\Policies\Microsoft\ Windows\CurrentVersion\Internet Settings\Zones\4!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
, HKCU\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings\Zones\2!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Z

own_Zones\0!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo ckdown_Zones\0!1A00, HKCU\Software\Policies\Microsoft\Windows\Cu
\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HKCU\Software \Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zon
\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HKCU\Software \Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zon
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2! 1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
4!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd own_Zones\4!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\
s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2000, HKLM\Sof
s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2000, HKLM\Sof

tings\Zones\0!1C00, HKLM\Software\Policies\Microso ft\Windows\CurrentVersion\Internet Settings\Zones\0!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
4!1C00, HKLM\Software\Policies\Microsoft\ Windows\CurrentVersion\Internet Settings\Zones\4!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
KLM\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings\Zones\2!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon

n_Zones\0!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo ckdown_Zones\0!1A00, HKLM\Software\Policies\Microsoft\Windows\Curre
crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HKLM\Software \Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones
crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HKLM\Software \Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2! 1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett
809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd own_Zones\4!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Int
KLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks, HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate, H
Settings\Zones\3!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVers
Settings\Zones\1!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVers

s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2001, HKCU\Softw
Windows\CurrentVersion\Internet Settings\Zones\4!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2001, HKCU\Software\Policies
CurrentVersion\Internet Settings\Zones\2!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2001, HKCU\Software\Policies\Microsoft

e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdo
\Internet Settings\Lockdown_Zones\3!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00, HKCU\Software\Policies\
\Internet Settings\Lockdown_Zones\1!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1C00, HKCU\Software\Policies\
ndows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00, HK
crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!
ettings\Zones\3!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion
ettings\Zones\1!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion

Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2001, HKLM\Software
dows\CurrentVersion\Internet Settings\Zones\4!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2001, HKLM\Software\Policies\Mi
entVersion\Internet Settings\Zones\2!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2001, HKLM\Software\Policies\Microsoft\Wi

olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
ernet Settings\Lockdown_Zones\3!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00, HKLM\Software\Policies\Mic
ernet Settings\Lockdown_Zones\1!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1C00, HKLM\Software\Policies\Mic
ows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00, HKLM
soft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1C
Root!DisableRootAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration, H KLM\Software\Policies\Microsoft\SearchCompanio
\Microsoft\Windows\CurrentVersion\ Internet Settings\Zones\3!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2100, HKCU\Soft
\Microsoft\Windows\CurrentVersion\ Internet Settings\Zones\1!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2100, HKCU\Soft

tings\Zones\0!2001, HKCU\Software\Policies \Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion
4!2001, HKCU\Software\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\Zones\4!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
KCU\Software\Policies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Zones\2!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon

Version\Internet Settings\Lockdown_Zones\0!1C00, HKCU\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\Lockdown_Zones\0!1E05, HKCU\Software
!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\3!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\
!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\1!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\
gs\Lockdown_Zones\2!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\2!1E05, HKCU\Software\Policies\Microsoft\Win
net Settings\Lockdown_Zones\4!1C00, HKCU\Software\Policies\Microsoft\Windows\Cur rentVersion\Internet Settings\Lockdown_Zones\4!1E05, HKCU\Software\Policies\Mic
crosoft\Windows\CurrentVersion\ Internet Settings\Zones\3!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2100, HKLM\Softwar
crosoft\Windows\CurrentVersion\ Internet Settings\Zones\1!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2100, HKLM\Softwar

s\Zones\0!2001, HKLM\Software\Policies \Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
001, HKLM\Software\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\Zones\4!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
M\Software\Policies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Zones\2!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2

sion\Internet Settings\Lockdown_Zones\0!1C00, HKLM\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\Lockdown_Zones\0!1E05, HKLM\Software\Po
C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\3!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\1!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
Lockdown_Zones\2!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\2!1E05, HKLM\Software\Policies\Microsoft\Windo
Settings\Lockdown_Zones\4!1C00, HKLM\Software\Policies\Microsoft\Windows\Cur rentVersion\Internet Settings\Lockdown_Zones\4!1E05, HKLM\Software\Policies\Micros
icies\Microsoft\SearchCompanion!DisableContentFileUpdates, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKLM\Software\Policies\Microso
ttings\Zones\3!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2101, HKCU\Software\Policies\Microsoft\Windows\Current Versio
ttings\Zones\1!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2101, HKCU\Software\Policies\Microsoft\Windows\Current Versio

icrosoft\Windows\CurrentVersion\Internet Settings\Zones\0!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2101, HKCU\Software
dows\CurrentVersion\Internet Settings\Zones\4!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2101, HKCU\Software\Pol icies\M
entVersion\Internet Settings\Zones\2!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2101, HKCU\Software\Policies\Micros oft\W

_Zones\0!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentV
rosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!
rosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!
gs\Zones\3!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2101, HKLM\Software\Policies\Microsoft\Windows\Current Version\In
gs\Zones\1!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2101, HKLM\Software\Policies\Microsoft\Windows\Current Version\In

soft\Windows\CurrentVersion\Internet Settings\Zones\0!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2101, HKLM\Software\ P
s\CurrentVersion\Internet Settings\Zones\4!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2101, HKLM\Software\Pol icies\Micro
Version\Internet Settings\Zones\2!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2101, HKLM\Software\Policies\Micros oft\Wind

ones\0!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVers
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!200
oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKLM\Software\Policies\Microsof t\Windows\DriverSearching!DontSearchWindowsUpda
crosoft\Windows\Current Version\Internet Settings\Zones\3!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2200, HKCU\Softwar
crosoft\Windows\Current Version\Internet Settings\Zones\1!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2200, HKCU\Softwar

s\Zones\0!2101, HKCU\Software\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
01, HKCU\Software\Pol icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
U\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Zones\2!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2

ies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2001, HKCU\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
net Settings\Lockdown_Zones\3!2001, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zones\3!2004, HKCU\Software\Policies\Micr
net Settings\Lockdown_Zones\1!2001, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zones\1!2004, HKCU\Software\Policies\Micr
\CurrentVersion\Internet Settings\Lockdown_Zones\2!2001, HKCU\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2004, HKCU\S
\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2001, HKCU\Soft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!200
oft\Windows\Current Version\Internet Settings\Zones\3!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2200, HKLM\Software\P
oft\Windows\Current Version\Internet Settings\Zones\1!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2200, HKLM\Software\P

ones\0!2101, HKLM\Software\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
HKLM\Software\Pol icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Z
oftware\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Zones\2!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!22

\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2001, HKLM\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zon
Settings\Lockdown_Zones\3!2001, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zones\3!2004, HKLM\Software\Policies\Microso
Settings\Lockdown_Zones\1!2001, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zones\1!2004, HKLM\Software\Policies\Microso
urrentVersion\Internet Settings\Lockdown_Zones\2!2001, HKLM\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2004, HKLM\Soft
indows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2001, HKLM\Soft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2004, H
rching!DontSearchWindowsUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess, HKLM\Software\Policies\Microsoft\Windows
gs\Zones\3!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2201, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\In
gs\Zones\1!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2201, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\In

soft\Windows\CurrentVersion\Internet Settings\Zones\0!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2201, HKCU\S oftware\P
s\CurrentVersion\Internet Settings\Zones\4!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2201, HKCU\Soft ware\Policies\Micro
Version\Internet Settings\Zones\2!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2201, HKCU\Software\Policie s\Microsoft\Wind

ion\Internet Settings\Lockdown_Zones\0!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2100, HKCU\Software\Policie
4, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
4, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
Settings\Lockdown_Zones\4!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2100, HKCU\Software\Policies\Microsoft\W
Zones\3!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2201, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Intern
Zones\1!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2201, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Intern

\Windows\CurrentVersion\Internet Settings\Zones\0!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2201, HKLM\S oftware\Polic
urrentVersion\Internet Settings\Zones\4!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2201, HKLM\Soft ware\Policies\Microsof
ion\Internet Settings\Zones\2!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2201, HKLM\Software\Policie s\Microsoft\Windows

Internet Settings\Lockdown_Zones\0!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2100, HKLM\Software\Policies\M
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
down_Zones\2!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2100, HKLM\Software\Policies\Microsoft\Windows\Curr
ings\Lockdown_Zones\4!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2100, HKLM\Software\Policies\Microsoft\Win
ware\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHe lp, HKLM\Software\Policies\Microsoft\Windo
soft\Windows \CurrentVersion\Internet Settings\Zones\3!2300, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1001, HKCU\Software\P
soft\Windows \CurrentVersion\Internet Settings\Zones\1!2300, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1001, HKCU\Software\P

ones\0!2201, HKCU\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2300, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
HKCU\Soft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2300, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Z
oftware\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2300, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!10

s\0!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set tings\Lockdown_Zones\0!2101, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2101, HKCU\ Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2102
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2101, HKCU\ Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2102
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\2!2101, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Loc
CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin gs\Lockdown_Zones\4!2101, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
Windows \CurrentVersion\Internet Settings\Zones\3!2300, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1001, HKLM\Software\Polici
Windows \CurrentVersion\Internet Settings\Zones\1!2300, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1001, HKLM\Software\Polici

s\0!2201, HKLM\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2300, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
LM\Soft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2300, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone
are\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2300, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1001,

2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set tings\Lockdown_Zones\0!2101, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
dows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2101, HKLM\ Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2102, HK
dows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2101, HKLM\ Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2102, HK
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\2!2101, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdo
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin gs\Lockdown_Zones\4!2101, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
Computer/User
PolicyNode
Path Full Policy Name Supported on
MACHINE Administrative Templates\System
Restrict potentially unsafe HTML Help functions
At least Internet
to specified
Explorer
folders
6 Service Pack 1
Do not display Manage Your Server page At least
at logon
Microsoft Windows Server 2003
Display Shutdown Event Tracker At least Microsoft Windows XP Professional or Windows Server 2003 family
Activate Shutdown Event Tracker System At least
StateMicrosoft
Data feature
Windows Server 2003
Enable Persistent Time Stamp At least Microsoft Windows Server 2003
Specify Windows installation file location At least Microsoft Windows XP Professional or Windows Server 2003 family
Specify Windows Service Pack installation At least
file location
Microsoft Windows XP Professional or Windows Server 2003 family
Remove Boot / Shutdown / Logon / Logoff At least
status Microsoft
messages Windows 2000
Verbose vs normal status messages At least Microsoft Windows 2000
Restrict these programs from being launched At leastfromMicrosoft
Help Windows XP Professional or Windows Server 2003 family
Turn off Autoplay At least Microsoft Windows 2000
Do not automatically encrypt files moved At to
least
encrypted
Microsoftfolders
Windows 2000
Download missing COM components At least Microsoft Windows 2000
Allow Distributed Link Tracking clients to Atuse
leastdomain
Microsoft
resources
Windows Server 2003
Do not turn off system power after a Windows At leastsystem
Microsoftshutdown
Windows hasXPoccurred.
Professional with SP1 or Windows Server 2003 family
MACHINE Administrative Templates\System\User
Do not check forProfiles
user ownership of Roaming At least Profile
Microsoft
Folders
Windows 2000 Service Pack 4, Microsoft Windows XP Professiona
Delete cached copies
Profiles of roaming profiles
At least Microsoft Windows 2000
Do not detect slowProfiles
network connectionsAt least Microsoft Windows 2000
Slow network connection
Profiles timeout for user At least
profiles
Microsoft Windows 2000
Wait for remote user
Profilesprofile At least Microsoft Windows 2000
Prompt user when Profiles
slow link is detectedAt least Microsoft Windows 2000
Timeout for dialogProfiles
boxes At least Microsoft Windows 2000
Log users off whenProfiles
roaming profile failsAt least Microsoft Windows 2000
Maximum retriesProfiles
to unload and update At userleast
profile
Add the Administrators
Profilessecurity group to Atroaming
least Microsoft
user profiles
Windows XP Professional or Windows Server 2003 family
Prevent RoamingProfiles
Profile changes from At propagating
least Microsoft
to theWindows
server XP Professional or Windows Server 2003 family
Only allow local user
Profiles profiles At least Microsoft Windows XP Professional or Windows Server 2003 family
Leave Windows Profiles
Installer and Group Policy At least
Software
Microsoft
Installation
Windows Data
XP Professional with SP2 or Windows Server 2003 family
MACHINE Administrative Templates\System\Scripts
Run logon scripts synchronously At least Microsoft Windows 2000
Run startup scripts asynchronously At least Microsoft Windows 2000
Run startup scripts visible At least Microsoft Windows 2000
Run shutdown scripts visible At least Microsoft Windows 2000
Maximum wait time for Group Policy scripts At least Microsoft Windows 2000
MACHINE Administrative Templates\System\Logon
Don't display the Getting Started welcome Onlyscreen
worksat onlogon
Always use classic logon At least Microsoft Windows XP Professional or Windows Server 2003 family
Run these programs at user logon At least Microsoft Windows 2000
Do not process the run once list At least Microsoft Windows 2000
Do not process the legacy run list At least Microsoft Windows 2000
Always wait for the network at computerAtstartup least Microsoft
and logon Windows XP Professional or Windows Server 2003 family
MACHINE Administrative Templates\System\Disk
Enable disk quotasQuotas At least Microsoft Windows 2000
Enforce disk quotaQuotaslimit At least Microsoft Windows 2000
Default quota limit
Quotas
and warning level At least Microsoft Windows 2000
Log event whenQuotas
quota limit exceeded At least Microsoft Windows 2000
Log event whenQuotas
quota warning level exceeded
Apply policy to removable
Quotas media At least Microsoft Windows 2000
MACHINE Administrative Templates\System\Net
Expected dial-up Logon
delay on logon At least Microsoft Windows XP Professional or Windows Server 2003 family
Site Name Logon At least Microsoft Windows XP Professional or Windows Server 2003 family
Negative DC Discovery
Logon Cache Setting At least Microsoft Windows XP Professional or Windows Server 2003 family
Initial DC Discovery
LogonRetry Setting for Background
At least Microsoft
CallersWindows XP Professional or Windows Server 2003 family
Maximum DC Discovery
Logon Retry Interval At
Setting
least for
Microsoft
Background
WindowsCallers
XP Professional or Windows Server 2003 family
Final DC Discovery
Logon Retry Setting for Background
At least Microsoft
Callers Windows XP Professional or Windows Server 2003 family
Positive PeriodicLogon
DC Cache Refresh forAtBackground
least MicrosoftCallers
Positive PeriodicLogon
DC Cache Refresh forAtNon-Background
least Microsoft Windows
Callers XP Professional or Windows Server 2003 family
Scavenge IntervalLogon At least Microsoft Windows XP Professional or Windows Server 2003 family
Contact PDC on Logon
logon failure At least Microsoft Windows XP Professional or Windows Server 2003 family
Log File DebugLogon
Output Level At least Microsoft Windows Server 2003
Maximum Log File Logon Size At least Microsoft Windows Server 2003
Sysvol share compatibility
Logon At least Microsoft Windows Server 2003
Netlogon shareLogon
compatibility At least Microsoft Windows Server 2003
Dynamic Registration
Logon\DC of the
Locator
DC Locator
DNS AtRecords
DNS
leastRecords
DC Locator DNS Logon\DC
records not Locator
registered
DNS AtRecords
byleast
the DCs
Refresh IntervalLogon\DC
of the DCLocator
LocatorDNS
DNSAtRecords
Records
least Microsoft Windows XP Professional or Windows Server 2003 family
Weight Set in theLogon\DC
DC Locator Locator
DNSDNS
SRVAtRecords
Records
Priority Set in the
Logon\DC
DC Locator Locator
DNSDNS
SRVAtRecords
Records
TTL Set in the DCLogon\DC
LocatorLocator
DNS Records
DNS At Records
Automated SiteLogon\DC
CoverageLocator
by the DCDNS Locator
At
Records
leastDNS
Microsoft
SRV Records
Sites Covered by Logon\DC
the DC Locator
Locator DNS
DNS At SRV
Records
least
Records
the GC Locator
Locator DNS
DNS At SRV
Records
least
Records
the Application
LocatorDirectory
DNS At Records
least
Partition
Microsoft
Locator
Windows
DNS SRV XP Professional
Records or Windows Server 2003 family
Location of the Logon\DC
DCs hosting Locator
a domain
DNSwithAt
Records
least
single
Microsoft
label DNSWindows
name XP Professional or Windows Server 2003 family
MACHINE Administrative Templates\System\Group
Turn off backgroundPolicy
refresh of Group PolicyAt least Microsoft Windows 2000
Group Policy refresh
Policy
interval for computers At least Microsoft Windows 2000
Group Policy refresh
Policy
interval for domainAtcontrollers
least Microsoft Windows 2000
User Group PolicyPolicy
loopback processingAtmode least Microsoft Windows 2000
Allow Cross-Forest Policy
User Policy and Roaming At leastUser
Microsoft
Profiles
Windows Server 2003
Group Policy slowPolicy
link detection At least Microsoft Windows 2000
Turn off ResultantPolicy
Set of Policy loggingAt least Microsoft Windows XP Professional or Windows Server 2003 family
Remove users ability
Policyto invoke machineAtpolicyleast refresh
Disallow Interactive
Policy
Users from generating At least
Resultant
Microsoft
Set Windows
of Policy data
Registry policy processing
Policy At least Microsoft Windows 2000
Policy policy processing
Software Installation
Policy
policy processing At least Microsoft Windows 2000
Folder RedirectionPolicy
policy processing At least Microsoft Windows 2000
Scripts policy processing
Security policy processing
IP Security policy Policy
processing At least Microsoft Windows 2000
Wireless policy processing
EFS recovery policyPolicy
Disk Quota policy Policy
Always use local ADM
Policyfiles for Group PolicyAt least
Object
Microsoft
EditorWindows Server 2003
MACHINE Administrative Templates\System\Remote
Solicited Remote Assistance
Assistance At least Microsoft Windows XP Professional or Windows Server 2003 family
Offer Remote AssistanceAssistance At least Microsoft Windows XP Professional or Windows Server 2003 family
MACHINE Administrative Templates\System\System
Turn off System Restore
Restore Only works on Microsoft Windows XP Professional
MACHINE Administrative Templates\System\System
Turn off ConfigurationRestore Only works on Microsoft Windows XP Professional
MACHINE Administrative Templates\System\Error
Display Error Notification
Reporting At least Microsoft Windows XP Professional or Windows Server 2003 family
Configure Error Reporting
Reporting At least Microsoft Windows XP Professional or Windows Server 2003 family
Default application
Reporting\Advanced
reporting settings Error At least
Reporting
Microsoft
settings
List of applications
Reporting\Advanced
to always report errorsError
At least
for
Reporting
Microsoft
settings
List of applications
Reporting\Advanced
to never report errors Error
Atfor
least
Reporting
Microsoft
settings
Report operatingReporting\Advanced
system errors Error
At least
Reporting
Microsoft
settings
Report unplanned Reporting\Advanced
shutdown events Error At least
Reporting
Microsoft
settings
Windows Server 2003
MACHINE Administrative Templates\System\Windows
Set Windows File Protection
File Protection
scanning At least Microsoft Windows XP Professional or Windows Server 2003 family
Hide the file scan progress
File Protection
window At least Microsoft Windows XP Professional or Windows Server 2003 family
Limit Windows File Protection
File Protection
cache size At least Microsoft Windows XP Professional or Windows Server 2003 family
Specify Windows FileFile Protection
Protection
cacheAt location
RPC Troubleshooting Procedure
State Information
Call At least Microsoft Windows XP Professional or Windows Server 2003 family
Propagation of extendedProcedure
error Call
informationAt least Microsoft Windows XP Professional or Windows Server 2003 family
Ignore Delegation Failure
Procedure Call At least Microsoft Windows Server 2003
Minimum Idle ConnectionProcedure
Timeout
Call for RPC/HTTP
At least Microsoft
connections
Windows XP Professional with SP1 or Windows Server 2003 family
Restrictions for Unauthenticated
Procedure Call RPC clients
RPC Endpoint Mapper Procedure
Client Authentication
Call At least Microsoft Windows XP Professional with SP2
Global Configuration TimeSettings
Service At least Microsoft Windows XP Professional or Windows Server 2003 family
Enable Windows NTP Time
Client
Service\TimeAtProviders
Configure Windows NTP TimeClient
Enable Windows NTP Time
Server
MACHINE Administrative Templates\System\Internet
Communication Management At least Microsoft Windows XP Professional with SP2
Turn off the PublishCommunication
to Web task for Management\Internet
filesAtand
leastfolders
Microsoft Windows
Communication
XP Professional
settings with SP2 or Windows Server 2003 family
Turn off Internet download
Communication
for Web publishing
Management\Internet
At leastand
Microsoft
online Windows
ordering
Communication
wizards
XP Professional
Turn off the Order Prints
Communication
picture taskManagement\Internet
At least Microsoft Windows
Communication
XP Professional
Turn off the Windows Communication
Messenger Customer
Management\Internet
At least
Experience
MicrosoftImprovement
Windows
Communication
XP Program
Professional
Turn off Help and Support
Communication
Center DidManagement\Internet
you
At least
know? Microsoft
contentWindows
Communication
XP Professional
Turn off Help and Support
Communication
Center Microsoft
Management\Internet
At least
Knowledge
MicrosoftBase
Windows
Communication
searchXP Professional
Turn off Windows ErrorCommunication
Reporting Management\Internet
Communication
XP Professional
settings or Windows Server 2003 family
Turn off Internet FileCommunication
Association service
Management\Internet
Communication
XP Professional
Turn off Internet Connection
Communication
WizardManagement\Internet
if URL
At least
connection
Microsoftis Windows
referring
Communication
to
XPMicrosoft.com
Professional
Turn off Event Viewer Communication
Events.asp linksManagement\Internet
Communication
XP Professional
Turn off Automatic Root
Communication
CertificatesManagement\Internet
Update
Communication
XP Professional
Turn off Registration Communication
if URL connection Management\Internet
At
is least
referring
Microsoft
to Microsoft.com
Windows
Communication
XP Professional
Turn off Search Companion
Communication
contentManagement\Internet
fileAtupdates
Communication
XP Professional
Turn off printing overCommunication
HTTP Management\Internet
Communication
XP Professional
Turn off downloading Communication
of print driversManagement\Internet
over
At least
HTTPMicrosoft Windows
Communication
XP Professional
Turn off Windows Update
Communication
device driver
Management\Internet
At
searching
Communication
XP Professional
Turn off access to allCommunication
Windows Update Management\Internet
At
features
Communication
2000 Service
settings
Pack 3, Microsoft Windows XP Professiona
Turn off Windows MovieCommunication
Maker automatic
Management\Internet
At least
codec Microsoft
downloadsWindows
Communication
XP Professional
settings with SP2
Maker onlineManagement\Internet
Web
At least
links
Microsoft Windows
Communication
XP Professional
settings with SP2
Maker savingManagement\Internet
At
to online
least Microsoft
video hosting
Windows
Communication
provider
XP Professional
settings with SP2
Turn off Windows Update device driverAt search
least prompt
Microsoft Windows XP Professional with SP2
MACHINE Administrative Templates\System\Distributed
Allow local activation security
COM\Application
check exemptions
AtCompatibility
least MicrosoftSettings
Windows XP Professional with SP2
MACHINE Administrative Templates\System\Distributed
Define Activation Security COM\Application
Check exemptions
AtCompatibility
least MicrosoftSettings
MACHINE Administrative Templates\Network\Microsoft
Turn off Microsoft Peer-to-Peer
Peer-to-Peer Networking
Networking
At least
Services
Services
Set the Seed Server Peer-to-Peer Networking At least Services\Peer
Microsoft Windows
NameXPResolution
Professional
Protocol\Global
with SP2 Clouds
At least Services\Peer
Microsoft Windows
NameXPResolution
Professional
Protocol\Global
with SP2 Clouds
Microsoft Windows
NameXPResolution
Professional
Protocol\Site-Local
with SP2 Clouds
Microsoft Windows
NameXPResolution
Professional
Protocol\Site-Local
with SP2 Clouds
Microsoft Windows
NameXPResolution
Professional
Protocol\Link-Local
with SP2 Clouds
Microsoft Windows
NameXPResolution
Professional
Protocol\Link-Local
with SP2 Clouds
MACHINE Administrative Templates\Network\DNS
Primary DNS Suffix Client At least Microsoft Windows 2000
Dynamic Update Client At least Microsoft Windows XP Professional or Windows Server 2003 family
DNS Suffix Search Client
List At least Microsoft Windows XP Professional or Windows Server 2003 family
Primary DNS Suffix Client
Devolution At least Microsoft Windows XP Professional or Windows Server 2003 family
Register PTR RecordsClient At least Microsoft Windows XP Professional or Windows Server 2003 family
Registration RefreshClientInterval At least Microsoft Windows XP Professional or Windows Server 2003 family
Replace Addresses Client
In Conflicts Only works on Microsoft Windows XP Professional
DNS Servers Client Only works on Microsoft Windows XP Professional
Connection-Specific Client
DNS Suffix Only works on Microsoft Windows XP Professional
Register DNS recordsClientwith connection-specific
At least Microsoft
DNS suffixWindows XP Professional or Windows Server 2003 family
TTL Set in the A andClientPTR records At least Microsoft Windows XP Professional or Windows Server 2003 family
Update Security Level
Client At least Microsoft Windows XP Professional or Windows Server 2003 family
Update Top LevelClient
Domain Zones At least Microsoft Windows XP Professional or Windows Server 2003 family
MACHINE Administrative Templates\Network\DNS Client
MACHINE Administrative Templates\Network\Offline
Allow or Disallow useFiles of the Offline FilesAtfeature
Prohibit user configuration
Files of Offline Files At least Microsoft Windows 2000
Synchronize all offline
Filesfiles when logging At on
Filesfiles before logging At least
off Microsoft Windows 2000
Synchronize offlineFiles
files before suspendAt least Microsoft Windows 2000
Default cache size Files At least Microsoft Windows 2000
Files At least Microsoft Windows 2000
Non-default server Files
disconnect actions At least Microsoft Windows 2000
Remove 'Make Available
Files Offline' At least Microsoft Windows 2000
Prevent use of Offline
Files Files folder At least Microsoft Windows 2000
Files not cached Files At least Microsoft Windows 2000
Administratively assigned
Files offline files At least Microsoft Windows 2000
Initial reminder balloon
Fileslifetime At least Microsoft Windows 2000
At logoff, delete local
Files copy of user’s offline
At least
files Microsoft Windows 2000
Event logging levelFiles At least Microsoft Windows 2000
Subfolders always Files
available offline At least Microsoft Windows 2000
Encrypt the Offline Files
Files cache At least Microsoft Windows 2000 Service Pack 5, Microsoft Windows XP Professiona
Prohibit 'Make Available
Files Offline' for these At file
least and
Microsoft
folders Windows XP Professional or Windows Server 2003 family
Configure Slow linkFiles
speed At least Microsoft Windows XP Professional or Windows Server 2003 family
MACHINE Administrative Templates\Network\Network
Prohibit use of Internet Connections
Connection SharingAt least
on your
Microsoft
DNS Windows
domain network
2000 Service Pack 1
Prohibit use of Internet Connections
Connection Firewall
At least
on your
Microsoft
DNS Windows
domain network
Prohibit installation andConnections
configuration ofAtNetwork
least Microsoft
Bridge onWindows
your DNSXPdomain
Professional
network
or Windows Server 2003 family
IEEE 802.1x Certificate Connections
Authority for Machine
At leastAuthentication
Windows Firewall: ProtectConnections\Windows
all network connections
At least
Firewall\Domain
Microsoft Windows
ProfileXP Professional with SP2
Windows Firewall: DoConnections\Windows
not allow exceptions
At least
Firewall\Domain
Microsoft Windows
Windows Firewall: Define Connections\Windows
program exceptions
At least
Firewall\Domain
Microsoft Windows
Windows Firewall: Allow Connections\Windows
local program Atexceptions
least
Firewall\Domain
Microsoft Windows
remote administration
At least
Firewall\Domain
Microsoft
exceptionWindows
file and printerAt
sharing
least
Firewall\Domain
Microsoft
exceptionWindows
ICMP exceptions At least
Firewall\Domain
Microsoft Windows
Remote Desktop At least
exception
Firewall\Domain
Microsoft Windows
Windows Firewall: AllowConnections\Windows
UPnP framework At least
exception
Firewall\Domain
Microsoft Windows
Windows Firewall: Prohibit
Connections\Windows
notificationsAt least
Firewall\Domain
Microsoft Windows
logging At least
Firewall\Domain
Microsoft Windows
Connections\Windows
unicast response
At least
Firewall\Domain
to Microsoft
multicast Windows
or broadcast
ProfileXP requests
Professional with SP2
Windows Firewall: Define
Connections\Windows
port exceptionsAt least
Firewall\Domain
Microsoft Windows
local port exceptions
At least
Firewall\Domain
Microsoft Windows
Windows Firewall: Protect
Connections\Windows
all network connections
At least
Firewall\Standard
Microsoft Windows
Profile
XP Professional with SP2
Windows Firewall: DoConnections\Windows
not allow exceptionsAt least
Firewall\Standard
Microsoft Windows
Profile
Connections\Windows
program exceptions
At least
Firewall\Standard
Microsoft Windows
Profile
local program At exceptions
least
Firewall\Standard
Microsoft Windows
Profile
remote administration
At least
Firewall\Standard
Microsoft
exceptionWindows
Profile
file and printerAtsharing
least
Firewall\Standard
Microsoft
exceptionWindows
Profile
ICMP exceptions At least
Firewall\Standard
Microsoft Windows
Profile
Remote Desktop At least
exception
Firewall\Standard
Microsoft Windows
Profile
UPnP framework At least
exception
Firewall\Standard
Microsoft Windows
Profile
Connections\Windows
notificationsAt least
Firewall\Standard
Microsoft Windows
Profile
logging At least
Firewall\Standard
Microsoft Windows
Profile
Connections\Windows
unicast response
At least
Firewall\Standard
to Microsoft
multicast Windows
or broadcast
Profile
XP requests
Professional with SP2
Connections\Windows
port exceptionsAt least
Firewall\Standard
Microsoft Windows
Profile
local port exceptions
At least
Firewall\Standard
Microsoft Windows
Profile
authenticated At IPSec
least
Firewall
bypass
MACHINE Administrative Templates\Network\QoS
Limit reservable bandwidth
Packet Scheduler At least Microsoft Windows XP Professional or Windows Server 2003 family
Limit outstandingPacket
packetsScheduler At least Microsoft Windows XP Professional or Windows Server 2003 family
Set timer resolution
Packet Scheduler At least Microsoft Windows XP Professional or Windows Server 2003 family
Best effort service
Packet
type Scheduler\DSCP At least
valueMicrosoft
of conforming
Windows
packets
Controlled load service
Packettype
Scheduler\DSCP At least
valueMicrosoft
of conforming
Windows
packets
Guaranteed servicePacket
typeScheduler\DSCP At least
valueMicrosoft
of conforming
Windows
packets
Network control service
Packet type
valueMicrosoft
of conforming
Windows
packets
Qualitative service
Packet
valueMicrosoft
of conforming
Windows
packets
Best effort service
Packet
valueMicrosoft
of non-conforming
Windows XP packets
Professional or Windows Server 2003 family
Packettype
valueMicrosoft
of non-conforming
Windows XP packets
typeScheduler\DSCP At least
valueMicrosoft
of non-conforming
Windows XP packets
Packet type
valueMicrosoft
of non-conforming
Windows XP packets
Qualitative service
Packet
valueMicrosoft
of non-conforming
Windows XP packets
Non-conforming packets
Packet Scheduler\Layer-2 At least
priority
Microsoft
value Windows XP Professional or Windows Server 2003 family
Best effort service
Packet
type Scheduler\Layer-2 At least
priority
Microsoft
Packettype
Scheduler\Layer-2 At least
priority
Microsoft
typeScheduler\Layer-2 At least
priority
Microsoft
Packet type
Scheduler\Layer-2 At least
priority
Microsoft
Qualitative service
Packet
type Scheduler\Layer-2 At least
priority
Microsoft
MACHINE Administrative Templates\Network\SNMP
Communities At least Microsoft Windows XP Professional or Windows Server 2003 family
Permitted Managers At least Microsoft Windows XP Professional or Windows Server 2003 family
Traps for public community At least Microsoft Windows XP Professional or Windows Server 2003 family
MACHINE Administrative Templates\Network\Background
Maximum network bandwidth Intelligent
that BITS
Transfer
Windows
usesServiceXP SP2 or Windows Server 2003 SP1, or computers with BITS 2.0 installed
MACHINE Administrative Templates\Network\Background
Timeout (days) for inactiveIntelligent
jobs TransferWindows
ServiceXP or Windows Server 2003, or computers with BITS 1.5 installed.
MACHINE Administrative Templates\Network
Sets how often a DFS Client discovers At DC's
MACHINE Administrative Templates\Printers
Allow printers to be published At least Microsoft Windows 2000
Allow pruning of published printers At least Microsoft Windows 2000
Automatically publish new printers in Active At least
Directory
Check published state At least Microsoft Windows 2000
Computer location At least Microsoft Windows 2000
Custom support URL in the Printers folder's At least
leftMicrosoft
pane Windows 2000
Directory pruning interval At least Microsoft Windows 2000
Directory pruning priority At least Microsoft Windows 2000
Directory pruning retry At least Microsoft Windows 2000
Disallow installation of printers using kernel-mode
At least Microsoft
driversWindows XP Professional or Windows Server 2003 family
Log directory pruning retry events At least Microsoft Windows XP Professional or Windows Server 2003 family
Pre-populate printer search location text At least Microsoft Windows 2000
Printer browsing At least Microsoft Windows 2000
Prune printers that are not automatically Atrepublished
Allow Print Spooler to accept client connections
At least Microsoft Windows Server 2003
Web-based printing Windows 2000 or later, running IIS. Not supported on Windows Server 2003
MACHINE Administrative Templates\Windows
Turn Off Application
Components\Application
Compatibility Engine Compatibility
Turn Off Program
Compatibility WizardAt Compatibility
least Microsoft Windows Server 2003
Remove Program
Compatibility Property Compatibility
AtPage
least Microsoft Windows Server 2003
Turn On Application
Help Log Events Compatibility
Prevent accessComponents\Application
to 16-bit applications Compatibility
Events.asp URLComponents\Event ViewerAt least Microsoft Windows XP Professional with SP2
Events.asp program
Components\Event ViewerAt least Microsoft Windows XP Professional with SP2
Events.asp program
Components\Event
command line Viewer
parameters
Prevent IIS installation
Components\Internet Information At leastServices
Microsoft Windows Server 2003
Turn on Security
Components\Security
Center (Domain PCs Center
only)
At least Microsoft Windows XP Professional or Windows Server 2003 family
Hide Property Components\Task
Pages SchedulerAt least Microsoft Windows 2000
Prevent TaskComponents\Task
Run or End SchedulerAt least Microsoft Windows 2000
Components\Task Scheduler At least Microsoft Windows 2000
Prohibit NewComponents\Task
Task Creation SchedulerAt least Microsoft Windows 2000
Prohibit TaskComponents\Task
Deletion SchedulerAt least Microsoft Windows 2000
Hide Advanced Components\Task
Properties Checkbox Scheduler
inAtAdd
least
Scheduled
MicrosoftTask
Windows
Wizard
2000
Prohibit Browse
Keep-Alive Connections
Components\Terminal Services At least Microsoft Windows XP Terminal Services
Automatic reconnection
Components\Terminal Services At least Microsoft Windows XP Terminal Services
Restrict Terminal
Components\Terminal
Services users to Services
a single
At least
remote
Microsoft
session
Windows XP Terminal Services
Enforce Removal
Components\Terminal
of Remote Desktop Services
Wallpaper
At least Microsoft Windows XP Terminal Services
Deny log off Components\Terminal
of an administrator logged Services
At
in least
to theMicrosoft
console session
Windows Server 2003
Allow Time Zone
Components\Terminal
Redirection Services\Client/Server
data redirection
XP Terminal Services
Do not allow Components\Terminal
clipboard redirection Services\Client/Server
data redirection
smart card device redirectionServices\Client/Server
data redirection
Allow audio redirection
Components\Terminal Services\Client/Server
data redirection
COM port redirection Services\Client/Server
data redirection
client printer redirectionServices\Client/Server
data redirection
LPT port redirection Services\Client/Server
data redirection
drive redirection Services\Client/Server
data redirection
Do not set default
Components\Terminal
client printer to beServices\Client/Server
default
At least
printer
Microsoft
in a session
Windows
data redirection
Terminal Server
Components\Terminal
Fallback Printer DriverServices\Client/Server
At
Behavior
data redirection
Server 2003 with SP1
Always prompt Components\Terminal
client for password upon Services\Encryption
Atconnection
least Microsoftand
Windows
Security
Set client connection
Components\Terminal
encryption levelServices\Encryption
At least MicrosoftandWindows
Security
Secure Server Components\Terminal
(Require Security) Services\Encryption
At least MicrosoftandWindows
Security\RPC
Server 2003
Security Policy
Limit numberComponents\Terminal
of connections Services
Limit maximum Components\Terminal
color depth Services
Allow users toComponents\Terminal
connect remotely using Services
Terminal
At least Microsoft
Services Windows XP Terminal Services
local administrators to Services
customize
At leastpermissions
Microsoft Windows XP Terminal Services
Remove WindowsComponents\Terminal
Security item from Services
Start
At least
menu Microsoft Windows 2000 Terminal Services
Remove Disconnect
Components\Terminal
option from Shut Services
Down
At leastdialog
Microsoft Windows 2000 Terminal Services
Always showComponents\Terminal
desktop on connectionServices At least Microsoft Windows Server 2003 with SP1
License ServerComponents\Terminal
Security Group Services\Licensing
Prevent License
Components\Terminal
Upgrade Services\Licensing
Do not use temp
Components\Terminal
folders per sessionServices\Temporary
At least Microsoftfolders
Do not deleteComponents\Terminal
temp folder upon exit Services\Temporary
At least Microsoftfolders
passwords to be savedServices\Client
At least Microsoft Windows XP Professional with SP2 or Windows Server 2003 family
Terminal Server
Components\Terminal
IP Address Redirection Services\Session
Microsoft WindowsDirectory
Server 2003, Enterprise Edition
Join SessionComponents\Terminal
Directory Services\Session
Session Directory
Components\Terminal
Server Services\Session
Session Directory
Components\Terminal
Cluster Name Services\Session
Set time limitComponents\Terminal
for disconnected sessions Services\Sessions
Sets a time limit
Components\Terminal
for active Terminal Services\Sessions
Services
At leastsessions
Sets a time limit
Components\Terminal
for active but idle Terminal
Services\Sessions
At least
Services
Microsoft
sessions
Allow reconnection
Components\Terminal
from original client
Services\Sessions
only
Terminate session
Components\Terminal
when time limits Services\Sessions
are reached
Set path for TS
Components\Terminal
Roaming Profiles Services At least Microsoft Windows XP Terminal Services
Use the specified
Components\Terminal
Terminal Server license
Services
At least
servers
Microsoft Windows Server 2003 with SP1
Set the Terminal
Components\Terminal
Server licensing mode Services
At least Microsoft Windows Server 2003 with SP1
Show Tooltips Components\Terminal
for Licensing problems Services
on
At Terminal
least Microsoft
ServerWindows Server 2003 with SP1
TS User Home Components\Terminal
Directory Services
Sets rules forComponents\Terminal
remote control of Terminal Services
AtServices
least Microsoft
user sessions
Start a program
Components\Terminal
on connection Services
Turn off shellComponents\Windows
protocol protected mode Explorer
Disable Windows
Components\Windows
Installer Installer
Always installComponents\Windows
with elevated privileges Installer
Prohibit rollback
Components\Windows Installer At least Microsoft Windows 2000
Remove browse Components\Windows
dialog box for new Installer
source
Prohibit patching
Disable IE security
Components\Windows
prompt for Windows Installer
AtInstaller
least Microsoft
scripts Windows 2000
Enable user Components\Windows
control over installs Installer
to browse for source while Installer
At
elevated
to use media source while Installer
At
elevated
to patch elevated productsAt Installer
Allow admin Components\Windows
to install from Terminal Installer
Services
At leastsession
Cache transforms
Components\Windows
in secure locationInstaller
onAtworkstation
Logging Components\Windows Installer At least Microsoft Windows 2000
Prohibit UserComponents\Windows
Installs Installer
Microsoft Windows XP or Windows 2000 with Windows Installer v2.0
Turn off creation
Components\Windows
of System Restore Installer
Checkpoints
Only works on Microsoft Windows XP Professional
Prohibit removal
Components\Windows
of updates Installer
Windows Installer v3.0
Enforce upgradeComponents\Windows
component rules Installer Windows Installer v3.0
Prohibit non-administrators
Components\Windows from applying
Installer
Windows
vendorInstaller
signed updates
v3.0
Baseline file Components\Windows
cache maximum size Installer Windows Installer v3.0
Do not allow Components\Windows
Windows Messenger toMessenger beAtrun
Do not automatically
Components\Windows
start Windows Messenger
At least Microsoft
initially Windows XP Professional or Windows Server 2003 family
Prevent WindowsComponents\Windows
Media DRM Internet Media
At
Access
least
Digital
Microsoft
Rights Management
Windows Server 2003
Windows Movie MakerMovie to At
runleast
MakerMicrosoft Windows XP Professional with SP2
Do not display Components\Windows
'Install Updates and Shut Update
AtDown'
least Microsoft
option in Shut
Windows
DownXP Windows
Professional
dialogwith
boxSP2
Do not adjustComponents\Windows
default option to 'Install Update
Updates
At least and
Microsoft
Shut Down'
Windowsin Shut
XP Professional
Down Windows withdialog
SP2 box
USER Administrative Templates\Start
RemoveMenuuser'sand folders
Taskbarfrom the Start Menu
RemoveMenulinks and
and access
Taskbarto Windows Update At least Microsoft Windows 2000
RemoveMenucommon and program
Taskbar groups fromAtStart leastMenu
RemoveMenuMy Documents
and Taskbar icon from StartAtMenu
RemoveMenuDocuments
and Taskbarmenu from Start Menu At least Microsoft Windows 2000
RemoveMenuprogramsand Taskbar
on Settings menu At least Microsoft Windows 2000
RemoveMenuNetwork andConnections
Taskbar from Start
At least
MenuMicrosoft Windows 2000
RemoveMenuFavorites
and Taskbar
menu from Start Menu At least Microsoft Windows 2000
RemoveMenuSearch and menu
Taskbarfrom Start MenuAt least Microsoft Windows 2000
RemoveMenuHelp menu
and Taskbar
from Start Menu At least Microsoft Windows 2000
RemoveMenuRun menuand Taskbar
from Start Menu At least Microsoft Windows 2000
RemoveMenuMy Pictures
and Taskbaricon from Start Menu At least Microsoft Windows XP Professional or Windows Server 2003 family
RemoveMenuMy Musicand Taskbar
icon from Start Menu At least Microsoft Windows XP Professional or Windows Server 2003 family
RemoveMenuMy Network
and TaskbarPlaces icon from At Start
least
Menu
Add Logoff
Menu to the
andStart
TaskbarMenu At least Microsoft Windows 2000
RemoveMenuLogoffand on Taskbar
the Start Menu At least Microsoft Windows 2000
RemoveMenuand prevent
and Taskbar access to the Shut AtDown
least Microsoft
commandWindows 2000
RemoveMenuDrag-and-drop
and Taskbar context menusAt onleast
the Start
Microsoft
MenuWindows 2000
Prevent Menu
changes andtoTaskbar
Taskbar and Start Menu At least Settings
RemoveMenuaccess and to Taskbar
the context menus for At the
leasttaskbar
Do not keep
Menuhistory
and Taskbar
of recently opened At documents
Clear history
Menuofand recently
Taskbar opened documentsAt leaston Microsoft
exit Windows 2000
Turn off Menu
personalized
and Taskbar menus At least Microsoft Windows 2000
Turn off Menu
user tracking
and Taskbar At least Microsoft Windows 2000
Add RunMenuin Separate
and TaskbarMemory Space check At leastboxMicrosoft
to Run dialog
Windows
box 2000
Do not use
Menu theandsearch-based
Taskbar method when At least
resolving
Microsoftshell
Windows
shortcuts
2000
Do not use
Menu theandtracking-based
Taskbar method Atwhenleastresolving
Microsoft shell
Windows
shortcuts
2000
Gray unavailable
Menu andWindows Taskbar Installer programs
At leastStart
Microsoft
MenuWindows
shortcuts2000
Prevent Menu
grouping andofTaskbar
taskbar items At least Microsoft Windows XP Professional or Windows Server 2003 family
Turn off Menu
notification
and Taskbar
area cleanup At least Microsoft Windows XP Professional or Windows Server 2003 family
Lock theMenu
Taskbar and Taskbar At least Microsoft Windows XP Professional or Windows Server 2003 family
Force classic
MenuStartand Taskbar
Menu At least Microsoft Windows XP Professional or Windows Server 2003 family
RemoveMenuBalloon andTipsTaskbar
on Start Menu items At least Microsoft Windows XP Professional or Windows Server 2003 family
RemoveMenupinned and programs
Taskbarlist from the At Start
least
Menu
RemoveMenufrequentandprograms
Taskbar list from theAtStart leastMenu
RemoveMenuAll Programs
and Taskbar list from the StartAtmenu
RemoveMenuthe Undock
and TaskbarPC button from the AtStart
leastMenu
RemoveMenuuser name
and Taskbar
from Start Menu At least Microsoft Windows XP Professional or Windows Server 2003 family
RemoveMenuClockand fromTaskbar
the system notification
At least
areaMicrosoft Windows XP Professional or Windows Server 2003 family
Hide theMenu
notification
and Taskbar
area At least Microsoft Windows XP Professional or Windows Server 2003 family
Do not display
Menu and any Taskbar
custom toolbars in the At least
taskbar
RemoveMenuSet Program
and Taskbar Access and DefaultsAt least
fromMicrosoft
Start menu
Windows 2000 Service Pack 3 or Microsoft Windows XP Professio
USER Administrative Templates\Desktop
Hide and disable all items on the desktop At least Microsoft Windows 2000
Remove My Documents icon on the desktop At least Microsoft Windows 2000
Remove My Computer icon on the desktop At least Microsoft Windows XP Professional or Windows Server 2003 family
Remove Recycle Bin icon from desktopAt least Microsoft Windows XP Professional or Windows Server 2003 family
Remove Properties from the My Documents At least
context
Microsoft
menuWindows 2000 Service Pack 3
Remove Properties from the My Computer At least
context
Microsoft
menu Windows 2000 Service Pack 3
Remove Properties from the Recycle Bin At context
least Microsoft
menu Windows XP Professional or Windows Server 2003 family
Hide My Network Places icon on desktop At least Microsoft Windows 2000
Hide Internet Explorer icon on desktop At least Microsoft Windows 2000
Do not add shares of recently opened documents
At least Microsoft
to My Network
WindowsPlaces
2000
Prohibit user from changing My Documents At least
pathMicrosoft Windows 2000
Prevent adding, dragging, dropping andAtclosing least Microsoft
the Taskbar's
Windows
toolbars
2000
Prohibit adjusting desktop toolbars At least Microsoft Windows 2000
Don't save settings at exit At least Microsoft Windows 2000
Remove the Desktop Cleanup Wizard At least Microsoft Windows XP Professional or Windows Server 2003 family
USER Administrative Templates\Desktop\Active
Enable Active Desktop Desktop At least Microsoft Windows 2000
Disable Active Desktop Desktop At least Microsoft Windows 2000
Disable all items Desktop At least Microsoft Windows 2000
Prohibit changes Desktop At least Microsoft Windows 2000
Prohibit adding items Desktop At least Microsoft Windows 2000
Prohibit deleting itemsDesktop At least Microsoft Windows 2000
Prohibit editing items Desktop At least Microsoft Windows 2000
Prohibit closing items Desktop At least Microsoft Windows 2000
Add/Delete items Desktop At least Microsoft Windows 2000
Active Desktop Wallpaper
Desktop At least Microsoft Windows 2000
Allow only bitmapped Desktop
wallpaper At least Microsoft Windows 2000
Maximum size of Active Directory
Directory searches
Enable filter in FindDirectory
dialog box At least Microsoft Windows 2000
Hide Active Directory Directory
folder Only works on Microsoft Windows 2000
USER Administrative Templates\Control
Prohibit access
Panelto the Control Panel At least Microsoft Windows 2000
Hide specified
PanelControl Panel applets At least Microsoft Windows 2000
Show only Panel
specified Control Panel applets At least Microsoft Windows 2000
Force classic
Panel
Control Panel Style At least Microsoft Windows XP Professional or Windows Server 2003 family
Remove Add Panel\Add
or Remove or Remove
Programs Programs
Hide Change Panel\Add
or Remove or Remove
Programs Programs
page
Hide Add NewPanel\Add
Programs or Remove
page Programs At least Microsoft Windows 2000
Hide Add/Remove
Panel\Add Windows
or RemoveComponents
Programs
At least
pageMicrosoft Windows 2000
Hide the SetPanel\Add
Programor Access
RemoveandPrograms
Defaults
At least
pageMicrosoft Windows 2000 Service Pack 3 or Microsoft Windows XP Professio
Hide the AddPanel\Add
a program or Remove
from CD-ROM
Programs
At
orleast
floppyMicrosoft
disk option
Windows 2000
programs or from
Remove
Microsoft
Programs
option
programs or from
Remove
yourPrograms
network
At least
option
Go directlyPanel\Add
to Componentsor Remove
WizardPrograms
Remove Support
Panel\AddInformation
or Remove Programs At least Microsoft Windows 2000
Specify default
Panel\Add
categoryor Remove
for Add New
Programs
Programs
Remove Display
Panel\Display
in Control Panel At least Microsoft Windows 2000
Hide DesktopPanel\Display
tab At least Microsoft Windows 2000
Prevent changing
Panel\Display
wallpaper At least Microsoft Windows 2000
Hide Appearance
Panel\Display
and Themes tab At least Microsoft Windows 2000
Hide Settings
Panel\Display
tab At least Microsoft Windows 2000
Hide Screen Panel\Display
Saver tab At least Microsoft Windows 2000
Screen SaverPanel\Display At least Microsoft Windows 2000 Service Pack 1
Screen SaverPanel\Display
executable name At least Microsoft Windows 2000 Service Pack 1
Password protect
Panel\Display
the screen saver At least Microsoft Windows 2000 Service Pack 1
Screen SaverPanel\Display
timeout At least Microsoft Windows 2000 Service Pack 1
Remove ThemePanel\Display\Desktop
option Themes
Prevent selection
Panel\Display\Desktop
of windows and Themes
buttons
At least
stylesMicrosoft Windows XP Professional or Windows Server 2003 family
Prohibit selection
of font size Themes
Prohibit Theme
color selection Themes
Load a specific
visual style file or force
Themes
At
Windows
least Microsoft
Classic Windows XP Professional or Windows Server 2003 family
Browse a common
Panel\Printers
web site to find printers
Browse thePanel\Printers
network to find printers At least Microsoft Windows 2000
Default Active
Panel\Printers
Directory path when searching
At leastfor
Microsoft
printers Windows 2000
Point and Print
Panel\Printers
Restrictions At least Microsoft Windows XP Professional with SP1 or Windows Server 2003 family
Prevent addition
Panel\Printers
of printers At least Microsoft Windows 2000
Prevent deletion
Panel\Printers
of printers At least Microsoft Windows 2000
Restrict selection
Panel\Regional
of Windows andmenus
Language
and
At least
Options
dialogs
Microsoft
languageWindows 2000
USER Administrative Templates\Shared
Allow sharedFolders
folders to be published At least Microsoft Windows XP Professional or Windows Server 2003 family
USER Administrative Templates\Shared
Allow DFS Folders
roots to be published At least Microsoft Windows XP Professional or Windows Server 2003 family
USER Administrative Templates\Network\Offline
Prohibit user configuration
Files of Offline Files At least Microsoft Windows 2000
Filesfiles when logging At on
Filesfiles before loggingAt least
off Microsoft Windows 2000
Synchronize offlineFiles
files before suspendAt least Microsoft Windows 2000
Non-default server Files
disconnect actions At least Microsoft Windows 2000
Remove 'Make AvailableFiles Offline' At least Microsoft Windows 2000
Prevent use of OfflineFilesFiles folder At least Microsoft Windows 2000
Administratively assigned
Files offline files At least Microsoft Windows 2000
Initial reminder balloon
Fileslifetime At least Microsoft Windows 2000
Event logging levelFiles At least Microsoft Windows 2000
Prohibit 'Make Available
Files Offline' for these At file
leastandMicrosoft
folders Windows XP Professional or Windows Server 2003 family
Do not automatically Files
make redirected folders
At leastavailable
Microsoft offline
USER Administrative Templates\Network\Network
Ability to rename LAN Connections
connections or remote
At leastaccess
Microsoft
connections
Windowsavailable
2000 Service
to all Pack
users1
Prohibit access to properties
Connections
of components
At leastof Microsoft
a LAN connection
Windows 2000 Service Pack 1
Connections
of components
At leastof Microsoft
a remote access
Windows connection
2000 Service Pack 1
Prohibit TCP/IP advanced Connections
configurationAt least Microsoft Windows 2000 Service Pack 1
Prohibit access to theConnections
Advanced Settings At least
item on Microsoft
the Advanced
Windows menu
2000 Service Pack 1
Prohibit adding and removing
Connectionscomponents At least
for aMicrosoft
LAN or remote
Windowsaccess
2000connection
Service Pack 1
Connections
of a LAN connection
At least Microsoft Windows 2000 Service Pack 1
Prohibit Enabling/Disabling
Connections
componentsAtofleasta LANMicrosoft
connection
Ability to change properties
Connections
of an all user
At remote
least Microsoft
access connection
Prohibit changing properties
Connections
of a privateAtremote
least Microsoft
access connection
Prohibit deletion of remote
Connections
access connections
Ability to delete all user
Connections
remote access At connections
least Microsoft Windows 2000 Service Pack 1
Prohibit connecting and Connections
disconnecting aAtremote
least Microsoft
access connection
Ability to Enable/DisableConnections
a LAN connectionAt least Microsoft Windows 2000 Service Pack 1
New Connection At Wizard
Ability to rename LAN Connections
connections At least Microsoft Windows XP Professional or Windows Server 2003 family
Ability to rename all user
Connections
remote access Atconnections
Prohibit renaming privateConnections
remote access Atconnections
Remote Access Preferences
At least Microsoft
item onWindows
the Advanced
2000 Service
menu Pack 1
Prohibit viewing of status
Connections
for an active connection
Enable Windows 2000 Connections
Network ConnectionsAt least settings
Microsoftfor Windows
Administrators
Turn off notifications Connections
when a connectionAthas leastonly
Microsoft
limited orWindows
no connectivity
USER Administrative Templates\System
Don't display the Getting Started welcome Onlyscreen
worksat onlogon
Century interpretation for Year 2000 At least Microsoft Windows 2000
Configure driver search locations At least Microsoft Windows XP Professional or Windows Server 2003 family
Code signing for device drivers At least Microsoft Windows 2000
Custom user interface At least Microsoft Windows 2000
Prevent access to the command promptAt least Microsoft Windows 2000
Prevent access to registry editing tools At least Microsoft Windows 2000
Run only allowed Windows applicationsAt least Microsoft Windows 2000
Don't run specified Windows applications At least Microsoft Windows 2000
Turn off Autoplay At least Microsoft Windows 2000
Restrict these programs from being launched At leastfrom
Microsoft
Help Windows XP Professional or Windows Server 2003 family
Download missing COM components At least Microsoft Windows 2000
Windows Automatic Updates Only works on Microsoft Windows XP Professional
USER Administrative Templates\System\User
Connect home directory
Profiles to root of the share
Limit profile size Profiles At least Microsoft Windows 2000
Exclude directoriesProfiles
in roaming profile At least Microsoft Windows 2000
USER Administrative Templates\System\Scripts
Run logon scripts synchronously At least Microsoft Windows 2000
Run legacy logon scripts hidden At least Microsoft Windows 2000
Run logon scripts visible At least Microsoft Windows 2000
Run logoff scripts visible At least Microsoft Windows 2000
USER Administrative Templates\System\Ctrl+Alt+Del
Remove Task Manager Options At least Microsoft Windows 2000
Remove Lock ComputerOptions At least Microsoft Windows 2000
Remove Change Password Options At least Microsoft Windows 2000
Remove Logoff Options At least Microsoft Windows 2000
USER Administrative Templates\System\Logon
Run these programs at user logon At least Microsoft Windows 2000
Do not process the run once list At least Microsoft Windows 2000
Do not process the legacy run list At least Microsoft Windows 2000
USER Administrative Templates\System\Group
Group Policy refresh Policyinterval for users At least Microsoft Windows 2000
Group Policy slowPolicylink detection At least Microsoft Windows 2000
Group Policy domain Policy controller selection At least Microsoft Windows 2000
Create new GroupPolicy Policy object links disabled
At least by Microsoft
default Windows 2000
Default name for new Policy Group Policy objects At least Microsoft Windows 2000
Enforce Show Policies PolicyOnly At least Microsoft Windows 2000
Turn off automaticPolicy
update of ADM files At least Microsoft Windows 2000
Disallow Interactive Policy
Users from generating At least
Resultant
Microsoft
Set Windows
of Policy data
USER Administrative Templates\System\Power
Prompt for password Management
on resume from hibernate
At least Microsoft
/ suspendWindows XP Professional or Windows Server 2003 family
USER Administrative Templates\System\Internet
Communication Management At least Microsoft Windows XP Professional with SP2
Turn off the PublishCommunication
to Web task for Management\Internet
filesAtand
least folders
Microsoft Windows
Communication
XP Professional
Turn off Internet download
Communication
for Web publishing
Management\Internet
At leastand Microsoft
online Windows
ordering
Communication
wizards
XP Professional
Turn off the Order PrintsCommunication
picture taskManagement\Internet
Communication
XP Professional
Turn off the Windows Communication
Messenger Customer
Management\Internet
At least Experience
MicrosoftImprovement
Windows
Communication
XP Program
Professional
Turn off Internet FileCommunication
Association service
Management\Internet
Communication
XP Professional
Turn off printing over Communication
HTTP Management\Internet
Communication
XP Professional
settings with SP2
Turn off downloading Communication
of print driversManagement\Internet
overAt least
HTTPMicrosoft WindowsCommunication
XP Professional
settings with SP2
Turn off Windows Movie Communication
Maker automatic
Management\Internet
At least
codec Microsoft
downloadsWindows
Communication
XP Professional
settings with SP2
Maker online Management\Internet
Web
At leastlinks
Microsoft Windows
Communication
XP Professional
settings with SP2
Maker saving Management\Internet
At
to online
least Microsoft
video hosting
Windows
Communication
provider
XP Professional
settings with SP2
Turn off Windows Update device driverAt search
least prompt
USER Administrative Templates\Windows
Prevent access Components\Application
to 16-bit applications Compatibility
Default risk level
Components\Attachment
for file attachments Manager At least Microsoft Windows XP Professional with SP2
Inclusion list Components\Attachment
for high risk file types Manager
for moderate risk file types Manager
for low file types Manager
Trust logic forComponents\Attachment
file attachments Manager
Do not preserveComponents\Attachment
zone information in file Manager
Atattachments
least Microsoft Windows XP Professional with SP2
Hide mechanismsComponents\Attachment
to remove zone information
Manager
Notify antivirus
Components\Attachment
programs when opening Manager
Atattachments
Turn on ClassicComponents\Windows
Shell Explorer
Removes theComponents\Windows
Folder Options menu item Explorer
Atfrom
leasttheMicrosoft
Tools menu
Windows 2000
Remove FileComponents\Windows
menu from Windows Explorer Explorer
Remove MapComponents\Windows
Network Drive and DisconnectExplorer
At least Network
MicrosoftDrive
Windows 2000
Remove Search Components\Windows
button from Windows Explorer
Explorer
Remove Windows Components\Windows
Explorer's defaultExplorer
context
At least menu
Hides the Manage
Components\Windows
item on the Windows Explorer
AtExplorer
least Microsoft
contextWindows
menu 2000
Allow only per Components\Windows
user or approved shell Explorer
extensions
Do not track Components\Windows
Shell shortcuts during roamingExplorer
Hide these specified
Components\Windows
drives in My Computer
Explorer
Prevent access Components\Windows
to drives from My Computer
Explorer
Remove HardwareComponents\Windows
tab Explorer
Remove DFSComponents\Windows
tab Explorer
Remove SecurityComponents\Windows
tab Explorer
Remove UI to Components\Windows
change menu animation Explorer
At
setting
Remove UI to Components\Windows
change keyboard navigation Explorer
At least
indicator
Microsoft
setting
Windows 2000
No Computers Components\Windows
Near Me in My Network Explorer
At
Places
No Entire Network
Components\Windows
in My Network Places Explorer
Maximum number Components\Windows
of recent documentsAt Explorer least Microsoft Windows 2000
Do not request Components\Windows
alternate credentialsExplorer At least Microsoft Windows 2000
Request credentials
Components\Windows
for network installations
Explorer
Remove CD Components\Windows
Burning features Explorer
Do not moveComponents\Windows
deleted files to the Recycle Explorer
AtBin
Display confirmation
Components\Windows
dialog when deleting
Explorer
At least
files Microsoft Windows XP Professional or Windows Server 2003 family
Maximum allowedComponents\Windows
Recycle Bin size Explorer At least Microsoft Windows XP Professional or Windows Server 2003 family
Remove Shared Components\Windows
Documents from My Explorer
Computer
Only works on Microsoft Windows XP Professional
Turn off caching
Components\Windows
of thumbnail pictures Explorer
Turn off Windows+X
Components\Windows
hotkeys Explorer
Turn off shellComponents\Windows
protocol protected mode Explorer
Items displayedComponents\Windows
in Places Bar Explorer\Common
At least Microsoft Open
Windows
File Dialog
Hide the commonComponents\Windows
dialog places bar Explorer\Common
Windows
File Dialog
2000
Hide the commonComponents\Windows
dialog back buttonExplorer\Common
Windows
File Dialog
2000
Hide the dropdown
Components\Windows
list of recent filesExplorer\Common
Windows
File Dialog
2000
Restrict the user
Components\Microsoft
from entering author Management
mode
At least Microsoft
ConsoleWindows 2000
Restrict usersComponents\Microsoft
to the explicitly permitted
Management
Atlistleast
of snap-ins
Microsoft
ConsoleWindows 2000
Active Directory
Users and Computers Management
At least Microsoft
Console\Restricted/Permitted
Windows 2000 snap-ins
Active Directory
Domains and TrustsManagement
At least Microsoft
Active Directory
Sites and Services Management
At least Microsoft
ADSI Edit Components\Microsoft Management At least Microsoft
Windows XP Professional
snap-ins
ActiveX Control
Components\Microsoft Management
At least Microsoft
snap-ins
Certificates Components\Microsoft Management
At least Microsoft
At least Microsoft
Certificate Templates
At least Microsoft
Windows Server 2003 snap-ins
Wireless Monitor
At least Microsoft
Component Services
At least Microsoft
Computer Management
At least Microsoft
Device ManagerComponents\Microsoft Management
At least Microsoft
Disk Management
At least Microsoft
Disk Defragmenter
At least Microsoft
Distributed File
System Management
At least Microsoft
Event ViewerComponents\Microsoft ManagementAt least Microsoft
FAX ServiceComponents\Microsoft Management At least Microsoft
FrontPage Server
Extensions Management
At least Microsoft
snap-ins
Indexing Service
At least Microsoft
.Net FrameworkComponents\Microsoft
Configuration Management
At least Microsoft
Internet Authentication
Service (IAS)Management
At least Microsoft
Internet Information
Services Management
At least Microsoft
IP Security Policy
Management Management
At least Microsoft
snap-ins
IP Security Monitor
At least Microsoft
snap-ins
Link to Web Address
At least Microsoft
snap-ins
Local Users and
Groups Management
At least Microsoft
PerformanceComponents\Microsoft
Logs and Alerts Management
At least Microsoft
QoS Admission Components\Microsoft
Control Management
At least Microsoft
Remote Desktops
At least Microsoft
snap-ins
Removable Storage
At least Microsoft
Routing and Components\Microsoft
Remote Access Management
At least Microsoft
Security Configuration
and Analysis Management
At least Microsoft
Security Templates
At least Microsoft
Services Components\Microsoft Management
At least Microsoft
Shared FoldersComponents\Microsoft Management
At least Microsoft
System Information
At least Microsoft
Telephony Components\Microsoft Management At least Microsoft
Terminal Services
Configuration Management
At least Microsoft
WMI ControlComponents\Microsoft Management At least Microsoft
AppleTalk Routing
At least Microsoft
Windows 2000 snap-ins\Extension snap-ins
AuthorizationComponents\Microsoft
Manager Management
At least Microsoft
Policy SettingsManagement
At least Microsoft
Connection Sharing
(NAT) Management
At least Microsoft
DCOM Configuration
Extension Management
At least Microsoft
Device ManagerComponents\Microsoft Management
At least Microsoft
DHCP RelayComponents\Microsoft
At least Microsoft
Event ViewerComponents\Microsoft ManagementAt least Microsoft
Extended View Components\Microsoft
(Web View) Management
At least Microsoft
snap-ins\Extension
or Windows Server
snap-ins
2003 family
IAS Logging Components\Microsoft ManagementAt least Microsoft
IGMP Routing Components\Microsoft Management
At least Microsoft
IP Routing Components\Microsoft Management At least Microsoft
IPX RIP Routing
At least Microsoft
IPX Routing Components\Microsoft ManagementAt least Microsoft
IPX SAP Routing
At least Microsoft
Logical and Mapped
Drives Management
At least Microsoft
OSPF Routing Components\Microsoft Management
At least Microsoft
Public Key Policies
At least Microsoft
RAS Dialin - Components\Microsoft
User Node Management
At least Microsoft
Remote Access Components\Microsoft Management
At least Microsoft
Removable Storage
At least Microsoft
RIP Routing Components\Microsoft ManagementAt least Microsoft
Routing Components\Microsoft Management
At least Microsoft
Shared FoldersComponents\Microsoft
Ext Management
At least Microsoft
Send Console Components\Microsoft
Message Management
At least Microsoft
Service Dependencies
Components\Microsoft Management At least Microsoft
SMTP Protocol Components\Microsoft Management At least Microsoft
SNMP Components\Microsoft Management At least Microsoft
System Properties
Group PolicyComponents\Microsoft
At least Microsoft
Windows XP Professional snap-ins\Group
with SP1 or Windows
Policy Server 2003 family
Object Editor Management
At least Microsoft
Windows 2000 snap-ins\Group Policy
tab for Active DirectoryManagement
Tools
At least Microsoft
Windows 2000 snap-ins\Group Policy
Resultant SetComponents\Microsoft
of Policy snap-in Management
At least Microsoft
or Windows Policy
Server 2003 family
AdministrativeComponents\Microsoft
Templates (Computers) Management
At least Microsoft
Windows 2000 snap-ins\Group Policy\Group Policy snap-in
Templates (Users) Management At least Microsoft
Folder Redirection
Internet Explorer
Maintenance Management
At least Microsoft
Remote Installation
Services Management
At least Microsoft
Security Settings
(Computers) Management
At least Microsoft
(Users) Management
At least Microsoft
Wireless Network
(IEEE 802.11) Policies
Management
At least Microsoft
Templates (Computers) Management
At least Microsoft
or Windows Policy\Resultant
Server 2003 family
Set of Polic
Templates (Users) Management At least Microsoft
Server 2003 family
Set of Polic
Folder Redirection
Server 2003 family
Set of Polic
Internet Explorer
Maintenance Management
At least Microsoft
Server 2003 family
Set of Polic
Server 2003 family
Set of Polic
Server 2003 family
Set of Polic
Security Settings
Server 2003 family
Set of Polic
(Computers) Management
At least Microsoft
Server 2003 family
Set of Polic
(Users) Management
At least Microsoft
Server 2003 family
Set of Polic
Hide Property Components\Task
Pages Scheduler At least Microsoft Windows 2000
Prevent TaskComponents\Task
Run or End Scheduler At least Microsoft Windows 2000
Prohibit NewComponents\Task
Task Creation Scheduler At least Microsoft Windows 2000
Prohibit TaskComponents\Task
Deletion Scheduler At least Microsoft Windows 2000
Hide Advanced Components\Task
Properties Checkbox
Scheduler
inAtAdd
least
Scheduled
MicrosoftTask
Windows
Wizard2000
Prohibit Browse
Start a program
Components\Terminal
on connection Services
passwords to be savedServices\Client
Set time limitComponents\Terminal
for disconnected sessions Services\Sessions
Sets a time limit
Components\Terminal
for active Terminal Services\Sessions
Services
At leastsessions
Sets a time limit
Components\Terminal
for active but idle Terminal
Services\Sessions
At least
Services
Microsoft
sessions
Allow reconnection
Components\Terminal
from original client
Services\Sessions
only
Terminate session
Components\Terminal
when time limits Services\Sessions
areAtreached
least Microsoft Windows XP Terminal Services
Sets rules forComponents\Terminal
remote control of TerminalServices
AtServices
least Microsoft
user sessions
Always installComponents\Windows
with elevated privileges Installer
Search orderComponents\Windows Installer At least Microsoft Windows 2000
Prohibit rollback
Prevent removable
Components\Windows
media source forInstaller
any
At install
Windows Messenger toMessenger beAtrun
Do not automatically
Components\Windows
start Windows Messenger
At least Microsoft
initially Windows XP Professional or Windows Server 2003 family
Remove access Components\Windows
to use all Windows Update
Update
At least
features
Do not displayComponents\Windows
'Install Updates and ShutUpdate
AtDown'
least Microsoft
option in Shut
Windows
DownXPWindows
Professional
dialogwith
boxSP2
Do not adjustComponents\Windows
default option to 'InstallUpdate
Updates
At least and
Microsoft
Shut Down'
Windowsin Shut
XP Professional
Down Windows withdialog
SP2 box
Windows Movie MakerMovie to At
runleast
MakerMicrosoft Windows XP Professional with SP2
Help/Explain Text
With this policy, you can restrict certain HTML Help commands to function only in HTML Help (.chm) files within specified folders and their subfolders. Alterna
Specifies whether to turn off the automatic display of the Manage Your Server page. If the status is set to Enabled, the Manage Your Server page does not ap
The Shutdown Event Tracker can be displayed when you shut down a workstation or server. This is an extra set of questions that is displayed when you invok
Defines when the Shutdown Event Tracker System State Data feature is activated. The system state data file contains information about the basic system sta
The Persistent System Timestamp allows the system to detect the time of unexpected shutdowns by writing the current time to disk on a schedule controlled b
Specifies an alternate location for Windows installation files. To enable this setting, and enter the fully qualified path to the new location in the Windows Setup
Specifies an alternate location for Windows Service Pack installation files. To enable this setting, enter the fully qualified path to the new location in the Windo
Suppresses system status messages. If you enable this setting, the system does not display a message reminding users to wait while their system starts or sh
Directs the system to display highly detailed status messages. If you enable this setting, the system displays status messages that reflect each step in the pro
Allows you to restrict programs from being run from online Help. If you enable this setting, you can prevent programs that you specify from being allowed to be
Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the m
Prevents Windows Explorer from encrypting files that are moved to an encrypted folder. If you disable this setting or do not configure it, Windows Explorer aut
Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. Many Windows programs, su
Specifies that Distributed Link Tracking clients in this domain may use the Distributed LInk Tracking (DLT) server, which runs on domain controllers. The DLT
This setting allows you to configure whether power is automatically turned off when Windows shutdown completes. This setting does not effect Windows shutd
This setting disables the more secure default setting for the user’s roaming user profile folder. Once an administrator has configured a users' roaming profile,
Determines whether the system saves a copy of a user’s roaming profile on the local computer's hard drive when the user logs off. This setting, and related se
Disables the slow link detection feature. Slow link detection measures the speed of the connection between a user's computer and the remote server that stor
Defines a slow connection for roaming user profiles. If the server on which the user's roaming user profile resides takes longer to respond than the thresholds
Directs the system to wait for the remote copy of the roaming user profile to load, even when loading is slow. Also, the system waits for the remote copy when
Notifies users when their roaming profile is slow to load. The notice lets users decide whether to use a local copy or to wait for the roaming user profile. If you
Determines how long the system waits for a user response before it uses a default value. The default value is applied when the user does not respond to mes
Logs a user off automatically when the system cannot load the user's roaming user profile. This setting is used when the system cannot find the roaming user
Determines how many times the system tries to unload and update the registry portion of a user profile. When the number of trials specified by this setting is e
This setting adds the Administrator security group to the roaming user profile share. Once an administrator has configured a users' roaming profile, the profile
This setting determines if the changes a user makes to their roaming profile are merged with the server copy of their profile. By default, when a roaming profile
This setting determines if roaming user profiles are available on a particular computer. By default, when roaming profile users log on to a computer, their roam
Determines whether the system retains a roaming user’s Windows Installer and Group Policy based software installation data on their profile deletion. By defa
Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and creates the desktop. If you enable
Lets the system run startup scripts simultaneously. Startup scripts are batch files that run before the user is invited to log on. By default, the system waits for e
Displays the instructions in startup scripts as they run. Startup scripts are batch files of instructions that run before the user is invited to log on. By default, the
Displays the instructions in shutdown scripts as they run. Shutdown scripts are batch files of instructions that run when the user restarts the system or shuts it
Determines how long the system waits for scripts applied by Group Policy to run. This setting limits the total time allowed for all logon, startup, and shutdown s
Supresses the welcome screen. This setting hides the welcome screen that is displayed on Windows 2000 Professional and Windows XP Professional each t
This setting forces the user to log on to the computer using the classic logon screen. By default, a workgroup is set to use the simple logon screen. This setting
Specifies additional programs or documents that Windows starts automatically when a user logs on to the system. To use this setting, click Show, click Add, a
Ignores customized run-once lists. You can create a customized list of additional programs and documents that are started automatically the next time the sys
Ignores the customized run list. You can create a customized list of additional programs and documents that the system starts automatically when it runs on W
Determines whether Windows XP waits for the network during computer startup and user logon. By default, Windows XP does not wait for the network to be fu
Enables and disables disk quota management on all NTFS volumes of the computer, and prevents users from changing the setting. If you enable this setting,
Determines whether disk quota limits are enforced and prevents users from changing the setting. If you enable this setting, disk quota limits are enforced. If yo
Specifies the default disk quota limit and warning level for new users of the volume. This setting determines how much disk space can be used by each user o
Determines whether the system records an event in the local Application log when users reach their disk quota limit on a volume, and prevents users from cha
Determines whether the system records an event in the Application log when users reach their disk quota warning level on a volume. If you enable this setting
Extends the disk quota policies in this folder to NTFS file system volumes on removable media. If you disable this setting or do not configure it, the disk quota
Specifies the additional time for the computer to wait for the domain controller’s (DC) response when logging on to the network. To specify the Expected dial-u
Specifies the Active Directory site to which computers belong. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators
Specifies the amount of time (in seconds) the DC locator remembers that a domain controller (DC) could not be found in a domain. When a subsequent attemp
When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setting determines the amount of tim
When applications performing periodic searches for Domain Controllers (DCs) are unable to find a DC, the value set in this setting determines the maximum re
When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setting determines when retries are n
Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that periodically attempt to locate DCs, and it is applied b
Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that do not periodically attempt to locate DCs, and it is ap
Determines the interval at which Netlogon performs the following scavenging operations: - Checks if a password on a secure channel needs to be modified, a
Defines whether a domain controller (DC) should attempt to verify with the PDC the password provided by a client if the DC failed to validate the password. Co
Specifies the level of debug output for the Net Logon service. The Net Logon service outputs debug information to the log file netlogon.log in the directory %w
Specifies the maximum size in bytes of the log file netlogon.log in the directory %windir%\debug when logging is enabled. By default, the maximum size of the
This setting controls whether or not the Sysvol share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharing
This setting controls whether or not the Netlogon share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharin
Determines if Dynamic Registration of the domain controller (DC) locator DNS resource records is enabled. These DNS records are dynamically registered by
Determines which Domain Controller (DC) Locator DNS records are not registered by the Netlogon service. To enable this setting, select Enable and specify a
Specifies the Refresh Interval of the domain controller (DC) Locator DNS resource records for DCs to which this setting is applied. These DNS records are dyn
Specifies the Weight field in the SRV resource records registered by the domain controllers (DC) to which this setting is applied. These DNS records are dynam
Specifies the Priority field in the SRV resource records registered by domain controllers (DC) to which this setting is applied. These DNS records are dynamica
Specifies the value for the Time-To-Live (TTL) field in Net Logon registered SRV resource records. These DNS records are dynamically registered by the Net L
Determines whether domain controllers (DC) will dynamically register DC Locator site-specific SRV records for the closest sites where no DC for the same dom
Specifies the sites for which the domain controllers (DC) register the site-specific DC Locator DNS SRV resource records. These records are registered in add
Specifies the sites for which the global catalogs (GC) should register site-specific GC locator DNS SRV resource records. These records are registered in addi
Specifies the sites for which the domain controllers (DC) housing application directory partition should register the site-specific, application directory partition-s
Specifies whether the computers to which this setting is applied attempt DNS name resolution of a single-label domain names. By default, when a computer (o
Prevents Group Policy from being updated while the computer is in use. This setting applies to Group Policy for computers, users, and domain controllers. If y
Specifies how often Group Policy for computers is updated while the computer is in use (in the background). This setting specifies a background update rate o
Specifies how often Group Policy is updated on domain controllers while they are running (in the background). The updates specified by this setting occur in a
Applies alternate user settings when a user logs on to a computer affected by this setting. This setting directs the system to apply the set of Group Policy obje
Allows User based policy processing, Roaming User Profiles and User Object logon scripts for cross forest interactive logons. This setting affects all user acco
Defines a slow connection for purposes of applying and updating Group Policy. If the rate at which data is transferred from the domain controller providing a p
This setting allows you to enable or disable Resultant Set of Policy (RSoP) logging on a client computer. RSoP logs information on Group Policy settings that
This setting allows you to control a user's ability to invoke a computer policy refresh. If you enable this setting, users may not invoke a refresh of computer pol
This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged on users can view their own Resultan
Determines when registry policies are updated. This setting affects all policies in the Administrative Templates folder and any other policies that store values i
Determines when Internet Explorer Maintenance policies are updated. This setting affects all policies that use the Internet Explorer Maintenance component o
Determines when software installation policies are updated. This setting affects all policies that use the software installation component of Group Policy, such
Determines when folder redirection policies are updated. This setting affects all policies that use the folder redirection component of Group Policy, such as tho
Determines when policies that assign shared scripts are updated. This setting affects all policies that use the scripts component of Group Policy, such as thos
Determines when security policies are updated. This setting affects all policies that use the security component of Group Policy, such as those in Windows Se
Determines when IP security policies are updated. This setting affects all policies that use the IP security component of Group Policy, such as policies in Com
Determines when policies that assign wireless network settings are updated. This setting affects all policies that use the wireless network component of Group
Determines when encryption policies are updated. This setting affects all policies that use the encryption component of Group Policy, such as policies related
Determines when disk quota policies are updated. This setting affects all policies that use the disk quota component of Group Policy, such as those in Compu
Always use local ADM files for the Group Policy snap-in. By default, when you edit a Group Policy object (GPO) using the Group Policy Object Editor snap-in,
Specifies whether users can solicit another user’s assistance via Remote Assistance. If you use Windows Firewall in your organization, depending on the kind
Specifies whether or not a support person or IT administrator (the expert) can offer remote assistance to this computer without a user explicitly requesting it firs
Determines whether System Restore is turned on or off. System Restore enables users, in the event of a problem, to restore their computers to a previous sta
Allows you to turn off the Configuration Interface for System Restore. System Restore enables users, in the event of a problem, to restore their computers to a
Use this setting to control whether or not a user is given the choice to report an error. When Display Error Notification is enabled, the user will be notified that
Configures how errors are reported and what information is sent when Error Reporting is enabled. This Policy will not enable or disable Error Reporting, to do
This setting controls whether or not errors in general applications are included when error reporting is enabled. When this setting is enabled, The 'Default' drop
This setting specifies the applications that are always included in error reporting. When this setting is enabled, You can create a list of applications that are alw
This setting controls error reporting for errors in general applications when error reporting is enabled. The Default dropdown list allows you to choose whether
This setting controls whether or not errors in the operating system are included when error reporting is enabled. When this setting is enabled, error reporting w
This setting controls whether or not unplanned shutdown events can be reported when error reporting is enabled. When this setting is enabled, error reporting
Determines when Windows File Protection scans protected files. This setting directs Windows File Protection to enumerate and scan all system files for chang
Hides the file scan progress window. This window provides status information to sophisticated users, but it might confuse novices. If you enable this setting, t
Specifies the maximum amount of disk space that can be used for the Windows File Protection file cache. Windows File Protection adds protected files to the
Specifies an alternate location for the Windows File Protection cache. To enable this setting, enter the fully qualified local path to the new location in the Cach
Determines whether the RPC Runtime maintains RPC state information for the system, and how much information it maintains. Basic state information, which
Directs the RPC Runtime to generate extended error information when an error occurs. Extended error information includes the local time that the error occur
Directs the RPC Runtime to ignore delegation failures if delegation was asked for. Windows Server 2003 family includes a new delegation model - constrained
Directs the RPC Runtime to assume the specified timeout as the idle connection timeout even if the IIS server running the RPC HTTP proxy is configured with
If you enable this setting, it directs the RPC Runtime on an RPC server to restrict unauthenticated RPC clients connecting to RPC servers running on a machin
Enabling this setting directs RPC Clients that need to communicate with the Endpoint Mapper Service to authenticate as long as the RPC call for which the en
Specifies a set of parameters for all time providers installed on your system. There are two sets of parameters: clock discipline parameters, which control how
Specifies whether the Windows NTP Client is enabled. Enabling the Windows NTP Client allows your computer to synchronize its computer clock with other N
Specifies whether the Windows NTP Client synchronizes time from the domain hierarchy or a manually configured NTP server. Specifies whether the client ca
Specifies whether the Windows NTP Server is enabled. Enabling the Windows NTP Server allows your computer to service NTP requests from other machine
Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. If this setting is enabled, all of the the policy settings l
Specifies whether the tasks Publish this file to the Web, Publish this folder to the Web, and Publish the selected items to the Web, are available from File and F
Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards. These wizards allow users to select from
Specifies whether the Order Prints Online task is available from Picture Tasks in Windows folders. The Order Prints Online Wizard is used to download a list o
Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used. With the Customer Exp
Specifies whether to show the Did you know? section of Help and Support Center. This content is dynamically updated when users who are connected to the
Specifies whether users can perform a Microsoft Knowledge Base search from the Help and Support Center. The Knowledge Base is an online source of tech
Controls whether or not errors are reported to Microsoft. Error Reporting is used to report information about a system or application that has failed or has stop
Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association. When a user opens a file that h
Specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs). If you enable this setting, th
Specifies whether Events.asp hyperlinks are available for events within the Event Viewer application. The Event Viewer normally makes all HTTP(S) URLs int
Specifies whether to automatically update root certificates using the Windows Update Web site. Typically, a certificate is used when you use a secure Web si
Specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration. If you enable this setting, it blocks users from connectin
Specifies whether Search Companion should automatically download content updates during local and Internet searches. When the user searches the local m
Specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intranet as well as the Internet. Not
Specifies whether to allow this client to download print driver packages over HTTP. To set up HTTP printing, non-inbox drivers need to be downloaded over H
This policy specifies whether Windows searches Windows Update for device drivers when no local drivers for a device are present. If you enable this setting,
This setting allows you to remove access to Windows Update. If you enable this setting, all Windows Update features are removed. This includes blocking acc
Specifies whether Windows Movie Maker automatically downloads codecs. Windows Movie Maker can be configured so that codecs are downloaded automa
Specifies whether links to Web sites are available in Windows Movie Maker. These links include the Windows Movie Maker on the Web and Privacy Statemen
Specifies whether users can send a final movie to a video hosting provider on the Web by choosing The Web saving option in the Save Movie Wizard of Windo
Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet. Note: This setting only ha
Allows you to specify that local computer administrators can supplement the Define Activation Security Check exemptions list. If you enable this policy setting,
Allows you to view and change a list of DCOM server application ids (appids) which are exempted from the DCOM Activation security check. DCOM uses two
Allows configuration of components of the operating system used by a client computer to connect to a network. This includes DNS settings and Offline Files.
The Peer Name Resolution Protocol (PNRP) allows for distributed resolution of a name to an IPV6 address and port number.
Specifies the primary Domain Name System (DNS) suffix for all affected computers. The primary DNS suffix is used in DNS name registration and DNS name
Determines if dynamic update is enabled. Computers configured for dynamic update automatically register and update their DNS resource records with a DNS
Determines the DNS suffixes to attach to an unqualified single-label name before submission of a DNS query for that name. An unqualified single-label name
Determines whether the DNS client performs primary DNS suffix devolution in a name resolution process. When a user submits a query for a single-label nam
Determines whether the registration of PTR resource records is enabled for the computers to which this policy is applied. By default, DNS clients configured to
Specifies the Registration Refresh Interval of A and PTR resource records for computers to which this setting is applied. This setting may be applied to compu
Determines whether a DNS client that attempts to register its A resource record should overwrite an existing A resource record or records containing conflicting
Defines the DNS servers to which a computer sends queries when it attempts to resolve names. Warning: The list of the DNS servers defined in this setting su
Specifies a connection-specific DNS suffix. This setting supersedes the connection-specific DNS suffixes set on the computers to which this setting is applied,
Determines if a computer performing dynamic registration may register A and PTR resource records with a concatenation of its Computer Name and a connec
Specifies the value for the Time-To-Live (TTL) field in A and PTR resource records registered by the computers to which this setting is applied. To specify the
Specifies whether the computers to which this setting is applied use secure dynamic update or standard dynamic update for registration of DNS records. To e
Specifies whether the computers to which this setting is applied may send dynamic updates to the zones named with a single label name, also known as top-le
Determines whether the Offline Files feature is enabled. This setting also disables the Enable Offline Files option on the Offline Files tab. This prevents users
Prevents users from enabling, disabling, or changing the configuration of Offline Files. This setting removes the Offline Files tab from the Folder Options dialo
Determines whether offline files are fully synchronized when users log on. This setting also disables the Synchronize all offline files before logging on option o
Determines whether offline files are fully synchronized when users log off. This setting also disables the Synchronize all offline files before logging off option o
Determines whether offline files are synchonized before a computer is suspended. If you enable this setting, offline files will be synchronized whenever the co
Limits the percentage of the computer's disk space that can be used to store automatically cached offline files. This setting also disables the Amount of disk s
Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This setting also disables the W
Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the default response, a user-specifie
Prevents users from making network files and folders available offline. This setting removes the Make Available Offline option from the File menu and from all
Disables the Offline Files folder. This setting disables the View Files button on the Offline Files tab. As a result, users cannot use the Offline Files folder to view
Lists types of files that cannot be used offline. This setting lets you exclude certain types of files from automatic and manual caching for offline use. The system
This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified files and folders are available offlin
Hides or displays reminder balloons, and prevents users from changing the setting. Reminder balloons appear above the Offline Files icon in the notification a
Determines how often reminder balloon updates appear. If you enable this setting, you can select how often reminder balloons updates apppear and also prev
Determines how long the first reminder balloon for a network status change is displayed. Reminder balloons appear when the user's connection to a network f
Determines how long updated reminder balloons are displayed. Reminder balloons appear when the user's connection to a network file is lost or reconnected
Deletes local copies of the user's offline files when the user logs off. This setting specifies that automatically and manually cached offline files are retained onl
Determines which events the Offline Files feature records in the event log. Offline Files records events in the Application log in Event Viewer when it detects e
Makes subfolders available offline whenever their parent folder is made available offline. This setting automatically extends the make available offline setting t
This setting determines whether offline files are encrypted. Offline files reside on a user's hard drive, not the network, and they are stored in a local cache on t
This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' option. If you enable this policy settin
Configures the threshold value at which Offline Files considers a network connection to be slow. Any network speed below this value is considered to be slow.
Determines whether administrators can enable and configure the Internet Connection Sharing (ICS) feature of an Internet connection and if the ICS service ca
Prohibits use of Internet Connection Firewall on your DNS domain network. Determines whether users can enable the Internet Connection Firewall feature on
Determines whether a user can install and configure the Network Bridge. Important: This settings is location aware. It only applies when a computer is connec
If you want to use IEEE 802.1x machine authentication, configure this setting. If you enable this setting, it configures the Certificate Authority to be used on the
Turns on Windows Firewall, which replaces Internet Connection Firewall on all computers that are running Windows XP Service Pack 2. If you enable this poli
Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewall policy settings that allow su
Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception lists: one is defined by Gro
Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows Firewall uses two program e
Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and Windows Management Instru
Allows file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445. If you enable this policy setting, Wind
Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP messages to determine the s
Allows this computer to receive Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389. If you enable this policy setting, Windows Fire
Allows this computer to receive unsolicited Plug and Play messages sent by network devices, such as routers with built-in firewalls. To do this, Windows Firew
Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the program to the program exception
Allows Windows Firewall to record information about the unsolicited incoming messages that it receives. If you enable this policy setting, Windows Firewall wr
Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages. If you enable this policy setting, and this computer
Allows you to view and change the port exceptions list defined by Group Policy. Windows Firewall uses two port exception lists: one is defined by Group Policy
Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firewall uses two port exception
Turns on Windows Firewall, which replaces Internet Connection Firewall on all computers that are running Windows XP Service Pack 2. If you enable this poli
Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewall policy settings that allow su
Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception lists: one is defined by Gro
Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows Firewall uses two program e
Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and Windows Management Instru
Allows file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445. If you enable this policy setting, Wind
Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP messages to determine the s
Allows this computer to receive Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389. If you enable this policy setting, Windows Fire
Allows this computer to receive unsolicited Plug and Play messages sent by network devices, such as routers with built-in firewalls. To do this, Windows Firew
Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the program to the program exception
Allows Windows Firewall to record information about the unsolicited incoming messages that it receives. If you enable this policy setting, Windows Firewall wr
Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages. If you enable this policy setting, and this computer
Allows you to view and change the port exceptions list defined by Group Policy. Windows Firewall uses two port exception lists: one is defined by Group Policy
Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firewall uses two port exception
Allows unsolicited incoming messages from specified systems that authenticate using the IPSec transport. If you enable this policy setting, you must type a se
Determines the percentage of connection bandwidth that the system can reserve. This value limits the combined bandwidth reservations of all programs runnin
Specifies the maximum number of outstanding packets permitted on the system. When the number of outstanding packets reaches this limit, the Packet Sched
Determines the smallest unit of time that the Packet Scheduler uses when scheduling packets for transmission. The Packet Scheduler cannot schedule packe
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (ServiceTypeBestEffort). The Pac
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type (ServiceTypeControlledLoad
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The P
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type (ServiceTypeNetworkContro
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (ServiceTypeQualitative). The Pa
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (ServiceTypeBestEffort). The Pac
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type (ServiceTypeControlledLoad
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The P
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type (ServiceTypeNetworkContro
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (ServiceTypeQualitative). The Pa
Specifies an alternate link layer (Layer-2) priority value for packets that do not conform to the flow specification. The Packet Scheduler inserts the correspondin
Specifies an alternate link layer (Layer-2) priority value for packets with the Best Effort service type (ServiceTypeBestEffort). The Packet Scheduler inserts the
Specifies an alternate link layer (Layer-2) priority value for packets with the Controlled Load service type (ServiceTypeControlledLoad). The Packet Scheduler
Specifies an alternate link layer (Layer-2) priority value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The Packet Scheduler inserts
Specifies an alternate link layer (Layer-2) priority value for packets with the Network Control service type (ServiceTypeNetworkControl). The Packet Scheduler
Specifies an alternate link layer (Layer-2) priority value for packets with the Qualitative service type (ServiceTypeQualitative). The Packet Scheduler inserts the
Configures a list of the communities defined to the Simple Network Management Protocol (SNMP) service. SNMP is a protocol designed to give a user the ca
This setting determines the permitted list of hosts that can submit a query to the Simple Network Management (SNMP) agent running on the client computer.
This setting allows Trap configuration for the Simple Network Management Protocol (SNMP) agent. Simple Network Management Protocol is a protocol desig
Limits the network bandwidth that BITS uses for background transfers (this policy does not affect foreground transfers). Specify a limit to use during a specific
The number of days a pending BITS job can remain inactive before being considered abandoned by the requestor. Once a job is determined to be abandoned
Allows you to configure how often a Distributed File System (DFS) client attempts to discover domain controllers on their network. By default, a DFS client atte
Determines whether the computer's shared printers can be published in Active Directory. If you enable this setting or do not configure it, users can use the Lis
Determines whether the domain controller can prune (delete from Active Directory) the printers published by this computer. By default, the pruning service on
Determines whether the Add Printer Wizard automatically publishes the computer's shared printers in Active Directory. If you enable this setting or do not con
Directs the system to periodically verify that the printers published by this computer still appear in Active Directory. This setting also specifies how often the sy
Specifies the default location criteria used when searching for printers. This setting is a component of the Location Tracking feature of Windows printers. To u
Adds a customized Web page link to the Printers folder. By default, the Printers folder includes a link to the Microsoft Support Web page called Get help with p
Specifies how often the pruning service on a domain controller contacts computers to verify that their printers are operational. The pruning service periodically
Sets the priority of the pruning thread. The pruning thread, which runs only on domain controllers, deletes printer objects from Active Directory if the printer tha
Specifies how many times the pruning service on a domain controller repeats its attempt to contact a computer before pruning the computer's printers. The pr
Determines whether printers using kernel-mode drivers may be installed on the local computer. Kernel-mode drivers have access to system-wide memory, an
Specifies whether or not to log events when the pruning service on a domain controller attempts to contact a computer before pruning the computer's printers.
Enables the physical Location Tracking support feature of Windows printers. Location tracking lets you design a location scheme for your enterprise and assig
Announces the presence of shared printers to print browse master servers for the domain. On domains with Active Directory, shared printer resources are ava
Determines whether the system prunes (deletes from Active Directory) printers that are not automatically republished. This setting applies to printers running o
This policy controls whether the print spooler will accept client connections. When the policy is unconfigured, the spooler will not accept client connections un
Determines whether Internet printing is activated on this server. Internet printing lets you display printers on Web pages so the printers can be viewed, manag
This policy controls the state of the application compatibility engine in the system. The engine is part of the loader and looks through a compatibility database
This policy controls the state of the Program Compatibility Wizard. When enabled, this policy disables the start page of the wizard in the Help and Support Ce
This policy controls the visibility of the Program Compatibility property page shell extension. This shell extension is visible on the property context-menu of any
The Application Help features blocks known incompatible applications and displays a dialog to the end-user regarding the problem. This dialog may include lin
Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running on this computer. This setting affects the launching of 16-bit applications in the
This is the URL that will be passed to the Description area in the Event Properties dialog box. Change this value if you want to use a different Web server to ha
This is the program that will be invoked when the user clicks the events.asp link.
This specifies the command line parameters that will be passed to the events.asp program
When you enable this setting, it will prevent Internet Information Services (IIS) from being installed, and you will not be able to install Windows components or
Specifies whether the Security Center is turned on or off on users' computers that are joined to an Active Directory domain. When the Security Center is turne
Prevents users from viewing and changing the properties of an existing task. This setting removes the Properties item from the File menu in Scheduled Tasks
Prevents users from starting and stopping tasks manually. This setting removes the Run and End Task items from the context menu that appears when you ri
Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder. This setting disables the Cut, Copy, Paste, and
Prevents users from creating new tasks. This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also, the system does not respo
Prevents users from deleting tasks from the Scheduled Tasks folder. This setting removes the Delete command from the Edit menu in the Scheduled Tasks fo
This setting removes the Open advanced properties for this task when I click Finish checkbox from the last page of the Scheduled Task Wizard. This policy is
Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for existing tasks. This setting remove
Specifies whether persistent connections are allowed. After a terminal server client loses the connection to a terminal server, the session on the terminal serv
Specifies whether to allow Remote Desktop Connection clients to automatically reconnect to Terminal Services sessions if their network link is temporarily lost
Specifies whether to restrict users to a single remote Terminal Services session. If the status is set to Enabled, users who log on remotely via Terminal Servic
Specifies whether desktop wallpaper is displayed to remote clients connecting via Terminal Services. You can use this setting to enforce the removal of wallp
Specifies whether to allow an administrator attempting to connect to the console of a server to log off an administrator currently logged on to the console. The
Specifies whether to allow the client computer to redirect its time zone settings to the Terminal Services session. By default, the session time zone is the same
Specifies whether to prevent the sharing of clipboard contents (clipboard redirection) between a remote computer and a client computer during a Terminal Ser
Specifies whether to prevent the mapping of smart card devices (smart card device redirection) in a Terminal Services session. The client computer must be ru
Specifies whether users can choose where to play the remote computer's audio output during a Terminal Services session (audio redirection). Users can use
Specifies whether to prevent the redirection of data to client COM ports from the remote computer in a Terminal Services session. You can use this setting to
Specifies whether to prevent the mapping of client printers in Terminal Services sessions. You can use this setting to prevent users from redirecting print jobs
Specifies whether to prevent the redirection of data to client LPT ports during a Terminal Services session. You can use this setting to prevent users from ma
Specifies whether to prevent the mapping of client drives in a Terminal Services session (drive redirection). By default, Terminal Services maps client drives a
Specifies whether the client default printer is automatically set as the default printer in a Terminal Services session. By default, Terminal Services automatica
Specifies the Terminal Server fallback printer driver behavior. By default, Terminal Server fallback printer driver is disabled. If the Terminal Server does not ha
Specifies whether Terminal Services always prompts the client for a password upon connection. You can use this setting to enforce a password prompt for us
Specifies whether to enforce an encryption level for all data sent between the client and the server during the Terminal Services session. If the status is set to
Specifies whether a Terminal Server requires secure RPC communication with all clients or allows unsecured communication. You can use this setting to stre
Specifies whether Terminal Services limits the number of simultaneous connections to the server. You can use this setting to restrict the number of remote se
Specifies the maximum color resolution (color depth) for Terminal Services connections. You can use this setting to set a limit on the color depth of any conne
Specifies whether to allow users to connect remotely using Terminal Services. You can use this setting to configure Terminal Services remote access for the
Specifies whether to disable the administrator rights to customize security permissions in the Terminal Services Configuration tool (tscc.msc). You can use th
Specifies whether to remove the Windows Security item from the Settings menu on Terminal Services clients. You can use this setting to prevent inexperience
Specifies whether to remove the Disconnect option from the Shut Down Windows dialog box on Terminal Services clients. You can use this setting to preven
This policy setting determines whether the desktop is always displayed after a client connects to a remote computer or an initial program can run. It can be use
Specifies the terminal servers and license servers to which a Terminal Server License Server offers licenses. You can use this setting to control which servers
Specifies how a License Server distributes license upgrades to terminal servers running Windows 2000. A License Server attempts to provide the most appro
Specifies whether to prevent Terminal Services from creating session-specific temporary folders. You can use this setting to disable the creation of separate
Specifies whether Terminal Services retains a user's per-session temporary folders at logoff. You can use this setting to maintain a user's session-specific tem
Controls whether passwords can be saved on this computer from Terminal Services clients. If you enable this setting the password saving checkbox in Termin
Specifies how client devices are directed when reconnecting to an existing terminal server session. If the status is set to Enabled, client devices attempt to re
Specifies whether Terminal Services uses a Session Directory for tracking user sessions, allowing a group of terminal servers to locate and connect a user ba
Specifies whether to configure a server as a Session Directory Server for Terminal Services sessions on your network. A Session Directory Server directs inc
Specifies the Cluster Name for the terminal server, associating it with other servers in the same logical group. If the status is set to Enabled, you can specify th
Specifies a time limit for disconnected Terminal Services sessions. You can use this setting to specify the maximum amount of time that a disconnected sess
Specifies a time limit for active Terminal Services sessions. You can use this setting to specify the maximum amount of time a Terminal Services session can
Specifies a time limit for active but idle Terminal Services sessions. You can use this setting to specify the maximum amount of time that an active session ca
Specifies whether to allow users to reconnect to a disconnected Terminal Services session using a computer other than the original client computer. You can
Specifies whether to terminate a timed-out Terminal Services session instead of disconnecting it. You can use this setting to direct Terminal Services to termi
Specifies whether Terminal Services uses the specified network path for roaming user profiles. You can use this setting to specify a network share where the p
Determines whether terminal servers must first attempt to locate Terminal Server license servers that are specified in this setting before attempting to locate ot
Determines the type of Terminal Server client access license (CAL) a device or user requires to connect to this Terminal Server. Per User licensing mode: Ea
Displays tooltips to the Administrator upon login if there are any licensing issues with the Terminal Server. Not configured: If this setting is not configured, the
Specifies whether Terminal Services uses the specified network share or local directory path as the root of the user's home directory for a Terminal Services s
Specifies the level of remote control permitted in a Terminal Services session. Remote control can be established with or without the session user's permission
Configures Terminal Services to run a specified program automatically upon connection. You can use this setting to specify a program to run automatically wh
This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applicat
Disables or restricts the use of Windows Installer. This setting can prevent users from installing software on their systems or permit users to install only those
Directs Windows Installer to use system permissions when it installs any program on the system. This setting extends elevated privileges to all programs. The
Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation. This setting prevents Windows
Prevents users from searching for installation files when they add features or components to an installed program. This setting disables the Browse button be
Prevents users from using Windows Installer to install patches. Patches are updates or upgrades that replace only those program files that have changed. Be
Allows Web-based programs to install software on the computer without notifying the user. By default, when a script hosted by an Internet browser tries to inst
Permits users to change installation options that typically are available only to system administrators. This setting bypasses some of the security features of W
Allows users to search for installation files during privileged installations. This setting enables the Browse button in the Use feature from dialog box. As a resu
Allows users to install programs from removable media, such as floppy disks and CD-ROMs, during privileged installations. This setting permits all users to ins
Allows users to upgrade programs during privileged installations. This setting permits all users to install patches, even when the installation program is running
Allows Terminal Services administrators to install and configure programs remotely. By default, system administrators can install programs only when system
Saves copies of transform files in a secure location on the local computer. Transform files consist of instructions to modify or customize a program during insta
Specifies the types of events that Windows Installer records in its transaction log for each installation. The log, Msi.log, appears in the Temp directory of the sy
This setting allows you to configure user installs. To configure this setting, set it to enabled and use the drop-down list to select the behavior you want. If this s
System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. By default, the Wind
This setting controls the ability for users or administrators to remove Windows Installer based updates. This setting should be used if you need to maintain a t
This setting causes the Windows Installer to enforce strict rules for component upgrades - setting this may cause some updates to fail. If you enable this polic
This setting controls the ability of non-administrators to install updates that have been digitally signed by the application vendor. Non-administrator updates pr
This policy controls the percentage of disk space available to the Windows Installer baseline file cache. The Windows Installer uses the baseline file cache to
Allows you to disable Windows Messenger. If you enable this setting, Windows Messenger will not run. If you disable or do not configure this setting, Window
Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this setting to stop Windows Messeng
Prevents Windows Media Digital Rights Management (DRM) from accessing the Internet (or intranet). When enabled, Windows Media DRM is prevented from
Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of the Windows XP operating system that can be used to capture, edit, a
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Windows dialog box. If you enable
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choice in the Shut Down Windows dia
Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden. This setting is designed for use with redirecte
Prevents users from connecting to the Windows Update Web site. This setting blocks user access to the Windows Update Web site at http://windowsupdate.m
Removes items in the All Users profile from the Programs menu on the Start menu. By default, the Programs menu contains items from the All Users profile a
Removes the My Documents icon from the Start menu and its submenus. This setting only removes the icon. It does not prevent the user from using other me
Removes the Documents menu from the Start menu. The Documents menu contains links to the nonprogram files that users have most recently opened. It ap
Prevents Control Panel, Printers, and Network Connections from running. This setting removes the Control Panel, Printers, and Network and Connection folde
Prevents users from running Network Connections. This setting prevents the Network Connections folder from opening. This setting also removes Network Co
Prevents users from adding the Favorites menu to the Start menu or classic Start menu. If you enable this setting, the Display Favorites item does not appear
Removes the Search item from the Start menu, and disables some Windows Explorer search elements. This setting removes the Search item from the Start m
Removes the Help command from the Start menu. This setting only affects the Start menu. It does not remove the Help menu from Windows Explorer and doe
Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager. If you enable this setting, the following changes occur: (1
Removes the My Pictures icon from the Start Menu.
Removes the My Music icon from the Start Menu.
Removes the My Network Places icon from the Start Menu.
Adds the Log Off <username> item to the Start menu and prevents users from removing it. If you enable this setting, the Log Off <username> item appears in
Removes the Log Off <username> item from the Start menu and prevents users from restoring it. If you enable this setting, the Log Off <username> item doe
Prevents users from shutting down or restarting Windows. This setting removes the Shut Down option from the Start menu and disables the Shut Down button
Prevents users from using the drag-and-drop method to reorder or remove items on the Start menu. Also, it removes context menus from the Start menu. If yo
Removes the Taskbar and Start Menu item from Settings on the Start menu. This setting also prevents the user from opening the Taskbar Properties dialog bo
Hides the menus that appear when you right-click the taskbar and items on the taskbar, such as the Start button, the clock, and the taskbar buttons. This setti
Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents. If you enable this setting, the sys
Clear history of recently opened documents on exit. If you enable this setting, the system deletes shortcuts to recently used document files when the user logs
Disables personalized menus. Windows personalizes long menus by moving recently used items to the top of the menu and hiding items that have not been u
Disables user tracking. This setting prevents the system from tracking the programs users run, the paths they navigate, and the documents they open. The sy
Lets users run a 16-bit program in a dedicated (not shared) Virtual DOS Machine (VDM) process. All DOS and 16-bit programs run on Windows 2000 Profess
Prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut. By default, when the system cannot find the target file
Prevents the system from using NTFS tracking features to resolve a shortcut. By default, when the system cannot find the target file for a shortcut (.lnk), it sea
Displays Start menu shortcuts to partially installed programs in gray text. This setting makes it easier for users to distinguish between programs that are fully i
This setting effects the taskbar buttons used to switch between running programs. Taskbar grouping consolidates similar applications when there is no room o
This setting effects the notification area, also called the system tray. The notification area is located in the task bar, generally at the bottom of the screen, and
This setting effects the taskbar, which is used to switch between running applications. The taskbar includes the Start button, list of currently running tasks, and
This setting effects the presentation of the Start menu. The classic Start menu in Windows 2000 Professional allows users to begin common tasks, while the n
Hides pop-up text on the Start menu and in the notification area. When you hold the cursor over an item on the Start menu or in the notification area, the syste
If you enable this setting, the Pinned Programs list is removed from the Start menu, and the Internet and Email checkboxes are removed from the simple Start
If you enable this setting, the frequently used programs list is removed from the Start menu. If you disable this setting or do not configure it, the frequently use
If you enable this setting, the All Programs item is removed from the simple Start menu. If you disable this setting or do not configure it, the All Programs item
If you enable this setting, the Undock PC button is removed from the simple Start Menu, and your PC cannot be undocked. If you disable this setting or do not
Remove user name from Start Menu
Prevents the clock in the system notification area from being displayed. If you enable this setting, the clock will not be displayed in the system notification area
This setting affects the notification area (previously called the system tray) on the taskbar. Description: The notification area is located at the far right end of th
This setting affects the taskbar. The taskbar includes the Start button, buttons for currently running tasks, custom toolbars, the notification area, and the syste
Removes the Set Program Access and Defaults icon from the Start menu. Clicking the Set Program Access and Defaults icon from the Start menu opens Add
Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, My Computer, and My Network Places
Removes most occurrences of the My Documents icon. This setting removes the My Documents icon from the desktop, from Windows Explorer, from program
This setting hides My Computer from the desktop and from the new Start menu. It also hides links to My Computer in the Web view of all Explorer windows, an
Removes most occurrences of the Recycle Bin icon. This setting removes the Recycle Bin icon from the desktop, from Windows Explorer, from programs that
This setting hides Properties for the context menu on My Documents. If you enable this setting, the Properties option will not be present when the user right-cl
This setting hides Properties on the context menu for My Computer. If you enable this setting, the Properties option will not be present when the user right-clic
Removes the Properties option from the Recycle Bin context menu. If you enable this setting, the Properties option will not be present when the user right-clic
Removes the My Network Places icon from the desktop. This setting only affects the desktop icon. It does not prevent users from connecting to the network o
Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar. This setting does not prevent the user from starting Intern
Remote shared folders are not added to My Network Places whenever you open a document in the shared folder. If you disable this setting or do not configur
Prevents users from changing the path to the My Documents folder. By default, a user can change the location of the My Documents folder by typing a new p
Prevents users from manipulating desktop toolbars. If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag
Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars. This setting does not preven
Prevents users from saving certain changes to the desktop. If you enable this setting, users can change the desktop, but some changes, such as the position
Prevents users from using the Desktop Cleanup Wizard. If you enable this setting, the Desktop Cleanup wizard does not automatically run on a users worksta
Enables Active Desktop and prevents users from disabling it. This setting prevents users from trying to enable or disable Active Desktop while a policy control
Disables Active Desktop and prevents users from enabling it. This setting prevents users from trying to enable or disable Active Desktop while a policy contro
Removes Active Desktop content and prevents users from adding Active Desktop content. This setting removes all Active Desktop items from the desktop. It
Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration. This is a comprehensive setting that locks down th
Prevents users from adding Web content to their Active Desktop. This setting removes the New button from Web tab in Display in Control Panel. As a result, u
Prevents users from deleting Web content from their Active Desktop. This setting removes the Delete button from the Web tab in Display in Control Panel. As
Prevents users from changing the properties of Web content items on their Active Desktop. This setting disables the Properties button on the Web tab in Disp
Prevents users from removing Web content from their Active Desktop. In Active Desktop, you can add items to the desktop but close them so they are not dis
Adds and deletes specified Web content items. You can use the Add box in this setting to add particular Web-based items or shortcuts to users' desktops. Us
Specifies the desktop background (wallpaper) displayed on all users' desktops. This setting lets you specify the wallpaper on users' desktops and prevents us
Permits only bitmap images for wallpaper. This setting limits the desktop background (wallpaper) to bitmap (.bmp) files. If users select files with other image fo
Specifies the maximum number of objects the system displays in response to a command to browse or search Active Directory. This setting affects all browse
Displays the filter bar above the results of an Active Directory search. The filter bar consists of buttons for applying additional filters to search results. If you en
Hides the Active Directory folder in My Network Places. The Active Directory folder displays Active Directory objects in a browse window. If you enable this se
Disables all Control Panel programs. This setting prevents Control.exe, the program file for Control Panel, from starting. As a result, users cannot start Contro
Hides specified Control Panel items and folders. This setting removes Control Panel items (such as Display) and folders (such as Fonts) from the Control Pan
Hides all Control Panel items and folders except those specified in this setting. This setting removes all Control Panel items (such as Network) and folders (su
This setting affects the visual style and presentation of the Control Panel. It allows you to disable the new style of Control Panel, which is task-based, and use
Prevents users from using Add or Remove Programs. This setting removes Add or Remove Programs from Control Panel and removes the Add or Remove P
Removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page. The
Removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page. The Add New P
Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or change the associated pag
Removes the Set Program Access and Defaults button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page
Removes the Add a program from CD-ROM or floppy disk section from the Add New Programs page. This prevents users from using Add or Remove Program
Removes the Add programs from Microsoft section from the Add New Programs page. This setting prevents users from using Add or Remove Programs to con
Prevents users from viewing or installing published programs. This setting removes the Add programs from your network section from the Add New Programs
Prevents users from using Add or Remove Programs to configure installed services. This setting removes the Set up services section of the Add/Remove Win
Removes links to the Support Info dialog box from programs on the Change or Remove Programs page. Programs listed on the Change or Remove Programs
Specifies the category of programs that appears when users open the Add New Programs page. If you enable this setting, only the programs in the category y
Disables Display in Control Panel. If you enable this setting, Display in Control Panel does not run. When users try to start Display, a message appears explai
Removes the Desktop tab from Display in Control Panel. This setting prevents users from using Control Panel to change the pattern and wallpaper on the des
Prevents users from adding or changing the background design of the desktop. By default, users can use the Desktop tab of Display in Control Panel to add a
Removes the Appearance and Themes tabs from Display in Control Panel. When this setting is enabled, it removes the desktop color selection option from th
Removes the Settings tab from Display in Control Panel. This setting prevents users from using Control Panel to add, configure, or change the display setting
Removes the Screen Saver tab from Display in Control Panel. This setting prevents users from using Control Panel to add, configure, or change the screen sa
Enables desktop screen savers. If you disable this setting, screen savers do not run. Also, this setting disables the Screen Saver section of the Screen Saver
Specifies the screen saver for the user's desktop. If you enable this setting, the system displays the specified screen saver on the user's desktop. Also, this se
Determines whether screen savers used on the computer are password protected. If you enable this setting, all screen savers are password protected. If you
Specifies how much user idle time must elapse before the screen saver is launched. When configured, this idle time can be set from a minimum of 1 second t
This setting effects the Themes tab that controls the overall appearance of windows. It is accessed through the Display icon in Control Panel. Using the optio
Prevents users from changing the visual style of the windows and buttons displayed on their screens. When enabled, this setting disables the Windows and bu
Prevents users from changing the size of the font in the windows and buttons displayed on their screens. If this setting is enabled, the Font size drop-down lis
This setting forces the theme color to be the default color scheme. If you enable this setting, a user cannot change the color scheme of the current desktop the
This setting allows you to load a specific visual style file by entering the path (location) of the visual style file. This can be a local computer visual style (Luna.m
Adds a link to an Internet or intranet Web page to the Add Printer Wizard. You can use this setting to direct users to a Web page from which they can install p
Allows users to use the Add Printer Wizard to search the network for shared printers. If you enable this setting or do not configure it, when users choose to ad
Specifies the Active Directory location where searches for printers begin. The Add Printer Wizard gives users the option of searching Active Directory for a sha
This policy setting restricts the servers that a client can connect to for point and print. The policy setting applies only to non Print Administrators clients, and on
Prevents users from using familiar methods to add local and network printers. This setting removes the Add Printer option from the Start menu. (To find the Ad
Prevents users from deleting local and network printers. If a user tries to delete a printer, such as by using the Delete option in Printers in Control Panel, a me
This setting restricts users to the specified language by disabling the menus and dialog box controls in the Regional and Language Options Control Panel. If th
Determines whether the user can publish shared folders in Active Directory. If you enable this setting or do not configure it, users can use the Publish in Active
Determines whether the user can publish DFS roots in Active Directory. If you enable this setting or do not configure it, users can use the Publish in Active Dir
Prevents users from enabling, disabling, or changing the configuration of Offline Files. This setting removes the Offline Files tab from the Folder Options dialo
Determines whether offline files are fully synchronized when users log on. This setting also disables the Synchronize all offline files before logging on option o
Determines whether offline files are fully synchronized when users log off. This setting also disables the Synchronize all offline files before logging off option o
Determines whether offline files are synchonized before a computer is suspended. If you enable this setting, offline files will be synchronized whenever the co
Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This setting also disables the W
Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the default response, a user-specifie
Prevents users from making network files and folders available offline. This setting removes the Make Available Offline option from the File menu and from all
Disables the Offline Files folder. This setting disables the View Files button on the Offline Files tab. As a result, users cannot use the Offline Files folder to view
This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified files and folders are available offlin
Hides or displays reminder balloons, and prevents users from changing the setting. Reminder balloons appear above the Offline Files icon in the notification a
Determines how often reminder balloon updates appear. If you enable this setting, you can select how often reminder balloons updates apppear and also prev
Determines how long the first reminder balloon for a network status change is displayed. Reminder balloons appear when the user's connection to a network f
Determines how long updated reminder balloons are displayed. Reminder balloons appear when the user's connection to a network file is lost or reconnected
Determines which events the Offline Files feature records in the event log. Offline Files records events in the Application log in Event Viewer when it detects e
This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' option. If you enable this policy settin
All redirected shell folders, such as My Documents, Desktop, Start Menu, and Application Data, are available offline by default. This setting allows you to chan
Determines whether users can rename LAN or all user remote access connections. If you enable this setting, the Rename option is enabled for all users. Use
Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN connection. This setting d
Determines whether users can view and change the properties of components used by a private or all-user remote access connection. This setting determine
Determines whether users can configure advanced TCP/IP settings. If you enable this setting (and enable the Enable Network Connections settings for Admin
Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators. The Advanced Settings item le
Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has no effect on nonadmin
Determines whether users can change the properties of a LAN connection. This setting determines whether the Properties menu item is enabled, and thus, w
Determines whether administrators can enable and disable the components used by LAN connections. If you enable this setting (and enable the Enable Netw
Determines whether a user can view and change the properties of remote access connections that are available to all users of the computer. To create an all-
Determines whether users can view and change the properties of their private remote access connections. Private connections are those that are available on
Determines whether users can delete remote access connections. If you enable this setting (and enable the Enable Network Connections settings for Adminis
Determines whether users can delete all user remote access connections. To create an all-user remote access connection, on the Connection Availability pag
Determines whether users can connect and disconnect remote access connections. If you enable this setting (and enable the Enable Network Connections se
Determines whether users can enable/disable LAN connections. If you enable this setting, the Enable and Disable options for LAN connections are available t
Determines whether users can use the New Connection Wizard, which creates new network connections. If you enable this setting (and enable the Enable Ne
Determines whether nonadministrators can rename a LAN connection. If you enable this setting, the Rename option is enabled for LAN connections. Nonadm
Determines whether nonadministrators can rename all-user remote access connections. To create an all-user connection, on the Connection Availability page
Determines whether users can rename their private remote access connections. Private connections are those that are available only to one user. To create a
Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled. The Remote Access Preferenc
Determines whether users can view the status for an active connection. Connection status is available from the connection status taskbar icon or from the Sta
Determines whether settings that existed in Windows 2000 Server family will apply to Administrators. The set of Network Connections group settings that exis
This policy setting allows you to manage whether notifications are shown to the user when a DHCP-configured connection is unable to retrieve an IP address f
Supresses the welcome screen. This setting hides the welcome screen that is displayed on Windows 2000 Professional and Windows XP Professional each t
Determines how programs interpret two-digit years. This setting specifies the largest two-digit year interpreted as being preceded by 20. All numbers less than
This setting configures the location that Windows searches for drivers when a new piece of hardware is found. By default, Windows searches the following pla
Determines how the system responds when a user tries to install device driver files that are not digitally signed. This setting establishes the least secure respo
Specifies an alternate user interface for Windows 2000. The Explorer program (%systemdrive%\program files\internet explorer\iExplorer.exe) creates the fam
Prevents users from running the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd and .bat) can run on the comp
Disables the Windows registry editor Regedit.exe. If this setting is enabled and the user tries to start a registry editor, a message appears explaining that a se
Limits the Windows programs that users have permission to run on the computer. If you enable this setting, users can only run programs that you add to the L
Prevents Windows from running the programs you specify in this setting. If you enable this setting, users cannot run programs that you add to the list of disallo
Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the m
Allows you to restrict programs from being run from online Help. If you enable this setting, you can prevent programs that you specify from being allowed to be
Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. Many Windows programs, su
This setting controls automatic updates to a user's computer. Whenever a user connects to the Internet, Windows searches for updates available for the softw
Restores the definitions of the %HOMESHARE% and %HOMEPATH% environment variables to those used in Windows NT 4.0 and earlier. If you enable this
Sets the maximum size of each user profile and determines the system's response when a user profile reaches the maximum size. If you disable this setting o
Lets you add to the list of folders excluded from the user's roaming profile. This setting lets you exclude folders that are normally included in the user's profile.
Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and creates the desktop. If you enable
Hides the instructions in logon scripts written for Windows NT 4.0 and earlier. Logon scripts are batch files of instructions that run when the user logs on. By d
Displays the instructions in logon scripts as they run. Logon scripts are batch files of instructions that run when the user logs on. By default, the system does n
Displays the instructions in logoff scripts as they run. Logoff scripts are batch files of instructions that run when the user logs off. By default, the system does n
Prevents users from starting Task Manager (Taskmgr.exe). If this setting is enabled and users try to start Task Manager, a message appears explaining that a
Prevents users from locking the system. While locked, the desktop is hidden and the system cannot be used. Only the user who locked the system or the syst
Prevents users from changing their Windows password on demand. This setting disables the Change Password button on the Windows Security dialog box (w
Prevents the user from logging off. This setting does not let the user log off the system by using any method, including programs run from the command line, s
Specifies additional programs or documents that Windows starts automatically when a user logs on to the system. To use this setting, click Show, click Add, a
Ignores customized run-once lists. You can create a customized list of additional programs and documents that are started automatically the next time the sys
Ignores the customized run list. You can create a customized list of additional programs and documents that the system starts automatically when it runs on W
Specifies how often Group Policy for users is updated while the computer is in use (in the background). This setting specifies a background update rate only fo
Defines a slow connection for purposes of applying and updating Group Policy. If the rate at which data is transferred from the domain controller providing a p
Determines which domain controller the Group Policy Object Editor snap-in uses. -- Use the Primary Domain Controller indicates that the Group Policy Objec
Creates new Group Policy object links in the disabled state. This setting creates all new Group Policy object links in the disabled state by default. After you co
Sets the default display name for new Group Policy objects. This setting allows you to specify the default name for new Group Policy objects created from pol
Prevents administrators from viewing or using Group Policy preferences. A Group Policy administration (.adm) file can contain both true settings and preferen
Prevents the system from updating the Administrative Templates source files automatically when you open the Group Policy Object Editor. Administrators ma
This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged on users can view their own Resultan
This settings allows you to configure client computers to always lock when resuming from a hibernate or suspend. If you enable this setting, the client comput
Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. If this setting is enabled, all of the the policy settings l
Specifies whether the tasks Publish this file to the Web, Publish this folder to the Web, and Publish the selected items to the Web, are available from File and F
Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards. These wizards allow users to select from
Specifies whether the Order Prints Online task is available from Picture Tasks in Windows folders. The Order Prints Online Wizard is used to download a list o
Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used. With the Customer Exp
Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association. When a user opens a file that h
Specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intranet as well as the Internet. Not
Specifies whether to allow this client to download print driver packages over HTTP. To set up HTTP printing, non-inbox drivers need to be downloaded over H
Specifies whether Windows Movie Maker automatically downloads codecs. Windows Movie Maker can be configured so that codecs are downloaded automa
Specifies whether links to Web sites are available in Windows Movie Maker. These links include the Windows Movie Maker on the Web and Privacy Statemen
Specifies whether users can send a final movie to a video hosting provider on the Web by choosing The Web saving option in the Save Movie Wizard of Windo
Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet. Note: This setting only ha
Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running for all users. This setting affects the launching of 16-bit applications in the ope
This policy setting allows you to manage the default risk level for file types. To fully customize the risk level for file attachments, you may also need to configure
This policy setting allows you to configure the list of high risk file types. If the file attachment is in the list of high risk file types and is from the restricted zone, W
This policy setting allows you to configure the list of moderate risk file types. If the attachment is in the list of moderate risk file types and is from the restricted o
This policy setting allows you to configure the list of low risk file types. If the attachment is in the list of low risk file types, Windows will not prompt the user befo
This policy setting allows you to configure the logic that Windows uses to determine the risk for file attachments. Preferring the file handler instructs Windows
This policy setting allows you to manage whether Windows marks file attachments with information about their zone of origin (i.e. restricted, Internet, intranet, l
This policy setting allows you to manage whether users can manually remove the zone information from saved file attachments by clicking the Unblock button
This policy setting allows you to manage the behavior for notifying registered antivirus programs. If multiple programs are registered, they will all be notified. If
This setting allows you to remove the Active Desktop and Web view features. If you enable this setting, it will disable the Active Desktop and Web view. Also, u
Removes the Folder Options item from all Windows Explorer menus and removes the Folder Options item from Control Panel. As a result, users cannot use th
Removes the File menu from My Computer and Windows Explorer. This setting does not prevent users from using other methods to perform tasks available o
Prevents users from using Windows Explorer or My Network Places to map or disconnect network drives. If you enable this setting, the system removes the M
Removes the Search button from the Windows Explorer toolbar. This setting removes the Search button from the Standard Buttons toolbar that appears in Wi
Removes shortcut menus from the desktop and Windows Explorer. Shortcut menus appear when you right-click an item. If you enable this setting, menus do
Removes the Manage item from the Windows Explorer context menu. This context menu appears when you right-click Windows Explorer or My Computer. Th
This setting is designed to ensure that shell extensions can operate on a per-user basis. If you enable this setting, Windows is directed to only run those shell
Determines whether Windows traces shortcuts back to their sources when it cannot find the target on the user's system. Shortcut files typically include an abs
Removes the icons representing selected hard drives from My Computer and Windows Explorer. Also, the drive letters representing the selected drives do not
Prevents users from using My Computer to gain access to the content of selected drives. If you enable this setting, users can browse the directory structure o
Removes the Hardware tab. This setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. It also removes
Removes the DFS tab from Windows Explorer. This setting removes the DFS tab from Windows Explorer and from other programs that use the Windows Exp
Removes the Security tab from Windows Explorer. If you enable this setting, users opening the Properties dialog box for all file system objects, including folde
Prevents users from selecting the option to animate the movement of windows, menus, and lists. If you enable this setting, the Use transition effects for menu
Disables the Hide keyboard navigation indicators until I use the ALT key option in Display in Control Panel. When this Display Properties option is selected, th
Removes computers in the user's workgroup and domain from lists of network resources in Windows Explorer and My Network Places. If you enable this setti
Removes all computers outside of the user's workgroup or local domain from lists of network resources in Windows Explorer and My Network Places. If you e
Determines how many shortcuts the system can display in the Documents menu on the Start menu. The Documents menu contains shortcuts to the nonprogr
Prevents users from submitting alternate logon credentials to install a program. This setting suppresses the Install Program As Other User dialog box for local
Prompts users for alternate logon credentials during network-based installations. This setting displays the Install Program As Other User dialog box even whe
Windows Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC. If you enable this setting, all features in the
When a file or folder is deleted in Windows Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setting, you can change this behavior.
Allows you to have Windows Explorer display a confirmation dialog whenever a file is deleted or moved to the Recycle Bin. If you enable this setting, a confirm
Limits the percentage of a volume's disk space that can be used to store deleted files. If you enable this setting, the user has a maximum amount of disk spac
Removes the Shared Documents folder from My Computer. When a Windows client in is a workgroup, a Shared Documents icon appears in the Windows Exp
This settings controls whether the thumbnail views are cached. If you enable this setting, thumbnail views are not cached. If you disable or do not configure th
Turn off Windows+X hotkeys. Keyboards with a Windows key provide users with shortcuts to common shell features. For example, pressing the keyboard seq
This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applicat
Configures the list of items displayed in the Places Bar in the Windows File/Open dialog. If enable this setting you can specify from 1 to 5 items to be displayed
Removes the shortcut bar from the Open dialog box. This setting, and others in this folder, lets you remove new features added in Windows 2000 Professiona
Removes the Back button from the Open dialog box. This setting, and others in this folder, lets you remove new features added in Windows 2000 Professiona
Removes the list of most recently used files from the Open dialog box. If you disable this setting or do not configure it, the File name field includes a drop-dow
Prevents users from entering author mode. This setting prevents users from opening the Microsoft Management Console (MMC) in author mode, explicitly op
Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins. -- If you enable this setting, all snap-ins are prohibited, exc
Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is
Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory Sites and Services snap
Prevents users from viewing and changing the properties of an existing task. This setting removes the Properties item from the File menu in Scheduled Tasks
Prevents users from starting and stopping tasks manually. This setting removes the Run and End Task items from the context menu that appears when you ri
Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder. This setting disables the Cut, Copy, Paste, and
Prevents users from creating new tasks. This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also, the system does not respo
Prevents users from deleting tasks from the Scheduled Tasks folder. This setting removes the Delete command from the Edit menu in the Scheduled Tasks fo
This setting removes the Open advanced properties for this task when I click Finish checkbox from the last page of the Scheduled Task Wizard. This policy is
Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for existing tasks. This setting remove
Configures Terminal Services to run a specified program automatically upon connection. You can use this setting to specify a program to run automatically wh
Controls whether a user can save passwords using a Terminal Services client. If you enable this setting the password saving checkbox in Terminal Services c
Specifies a time limit for disconnected Terminal Services sessions. You can use this setting to specify the maximum amount of time that a disconnected sess
Specifies a time limit for active Terminal Services sessions. You can use this setting to specify the maximum amount of time a Terminal Services session can
Specifies a time limit for active but idle Terminal Services sessions. You can use this setting to specify the maximum amount of time that an active session ca
Specifies whether to allow users to reconnect to a disconnected Terminal Services session using a computer other than the original client computer. You can
Specifies whether to terminate a timed-out Terminal Services session instead of disconnecting it. You can use this setting to direct Terminal Services to termi
Specifies the level of remote control permitted in a Terminal Services session. Remote control can be established with or without the session user's permission
Directs Windows Installer to use system permissions when it installs any program on the system. This setting extends elevated privileges to all programs. The
Specifies the order in which Windows Installer searches for installation files. By default, the Windows Installer searches the network first, then removable med
Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation. This setting prevents Windows
Prevents users from installing programs from removable media. If a user tries to install a program from removable media, such as CD-ROMs, floppy disks, an
Allows you to disable Windows Messenger. If you enable this setting, Windows Messenger will not run. If you disable or do not configure this setting, Window
Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this setting to stop Windows Messeng
This setting allows you to remove access to Windows Update. If you enable this setting, all Windows Update features are removed. This includes blocking acc
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Windows dialog box. If you enable
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choice in the Shut Down Windows dia
Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of the Windows XP operating system that can be used to capture, edit, a
Registry Settings
HKLM\Software\Policies\Microsoft\Windows\System!HelpQualifiedRootDir
HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\MYS!DisableShowAtLogon
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReasonOn, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReasonU
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!SnapShot
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampEnabled, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampInterval
HKLM\Software\Policies\Microsoft\Windows NT\Setup!SourcePath
HKLM\Software\Policies\Microsoft\Windows NT\Setup!ServicePackSourcePath
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStatusMessages
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!VerboseStatus
HKLM\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoEncryptOnMove
HKLM\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKLM\Software\Policies\Microsoft\Windows\System!DLT_AllowDomainMode
HKLM\Software\Policies\Microsoft\Windows NT!DontPowerOffAfterShutdown
HKLM\Software\Policies\Microsoft\Windows\System!CompatibleRUPSecurity
HKLM\Software\Policies\Microsoft\Windows\System!DeleteRoamingCache
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkDetectEnabled
HKLM\Software\Policies\Microsoft\Windows\System!UserProfileMinTransferRate, HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkTimeOut
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkProfileDefault
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkUIEnabled
HKLM\Software\Policies\Microsoft\Windows\System!ProfileDlgTimeOut
HKLM\Software\Policies\Microsoft\Windows\System!ProfileErrorAction
HKLM\Software\Policies\Microsoft\Windows\System!ProfileUnloadTimeout
HKLM\Software\Policies\Microsoft\Windows\System!AddAdminGroupToRUP
HKLM\Software\Policies\Microsoft\Windows\System!ReadOnlyProfile
HKLM\Software\Policies\Microsoft\Windows\System!LocalProfile
HKLM\Software\Policies\Microsoft\Windows\System!LeaveAppMgmtData
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunStartupScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideStartupScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideShutdownScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxGPOScriptWait
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonType
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run!{1,2,3,...}
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRun
HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon!SyncForegroundPolicy
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enable
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enforce
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Limit, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LimitUnits, HKLM\Software\Polici
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverLimit
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverThreshold
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ApplyToRemovableMedia
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ExpectedDialupDelay
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteName
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NegativeCachePeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryInitialPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryMaximumPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryQuitTime
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NonBackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ScavengeInterval
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AvoidPdcOnWan
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!dbFlag
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!MaximumLogFileSize
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveSysvolShareAccess
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveScriptsShareAccess
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!UseDynamicDns
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsAvoidRegisterRecords
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsRefreshInterval
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvWeight
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvPriority
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsTtl
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AutoSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!GcSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NdncSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowSingleLabelDnsDomain
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableBkGndGroupPolicy
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeO
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeDC, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTim
HKLM\Software\Policies\Microsoft\Windows\System!UserPolicyMode
HKLM\Software\Policies\Microsoft\Windows\System!AllowX-ForestPolicy-and-RUP
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKLM\Software\Policies\Microsoft\Windows\System!RSoPLogging
HKLM\Software\Policies\Microsoft\Windows\System!DenyUsersFromMachGP
HKLM\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy, HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoSlowLink, HKLM\Software\Policies\Microsoft\Wi
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoSlowLink, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoSlowLink, HKLM\Software\Policies\Microsoft\Wind
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoSlowLink, HKLM\Software\Policies\Microsoft\Wind
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPolicy, HKLM\Software\Policies\Micr
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoSlowLink, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoSlowLink, HKLM\Software\Policies\Microsoft\W
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoSlowLink, HKLM\Software\Policies\Microsoft\Wi
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoSlowLink, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\Group Policy!OnlyUseLocalAdminFiles
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowToGetHelp, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowF
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowUnsolicited, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowU
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableSR
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableConfig
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!ShowUI, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWAllowHeadless, HKL
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoExternalURL, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoF
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!AllOrNone, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeMicrosoftApps, HK
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\InclusionList
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\ExclusionList
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeKernelFaults
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeShutdownErrs
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcScan
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcShowProgress
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcQuota
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SFCDllCacheDir
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!StateInformation
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInformation, HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInfoExceptions
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\IgnoreDelegationFailure!IgnoreDelegationFailure
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!MinimumConnectionTimeout
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!RestrictRemoteClients
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!EnableAuthEpResolution
HKLM\Software\Policies\Microsoft\W32Time\Config!FrequencyCorrectRate, HKLM\Software\Policies\Microsoft\W32Time\Config!HoldPeriod, HKLM\Software\P
HKLM\Software\Policies\Microsoft\W32time\TimeProviders\NtpClient!Enabled
HKLM\Software\Policies\Microsoft\W32time\Parameters!NtpServer, HKLM\Software\Policies\Microsoft\W32time\Parameters!Type, HKLM\Software\Policies\Mi
HKLM\Software\Policies\Microsoft\W32Time\TimeProviders\NtpServer!Enabled
HKLM\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPubli
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks
HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate
HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration
HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!AllowLocalActivationSecurityCheckExemptionList
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!ListBox_Support_ActivationSecurityCheckExemptionList
HKLM\Software\policies\Microsoft\Peernet!Disabled
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!SeedServer, HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DontIncludeMicrosoftSe
HKLM\Software\Policies\Microsoft\System\DNSClient!NV PrimaryDnsSuffix
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationEnabled
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!SearchList
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UseDomainNameDevolution
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterReverseLookup
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationRefreshInterval
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationOverwritesInConflict
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!NameServer
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AdapterDomainName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterAdapterName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationTtl
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateSecurityLevel
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateTopLevelDomainZones
HKLM\
HKLM\Software\Policies\Microsoft\Windows\NetCache!Enabled
HKLM\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend
HKLM\Software\Policies\Microsoft\Windows\NetCache!DefCacheSize
HKLM\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoMakeAvailableOffline
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoCacheViewer
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!ExcludeExtensions
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!NoReminders
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderFreqMinutes
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!InitialBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!PurgeAtLogoff, HKLM\Software\Policies\Microsoft\Windows\NetCache\Assigne
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EventLoggingLevel
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!AlwaysPinSubFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EncryptCache
HKLM\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList
HKLM\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList!SlowLinkSpeed
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_ShowSharedAccessUI
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_PersonalFirewallConfig
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowNetBridge_NLA
HKLM\Software\Policies\Microsoft\Windows\Network Connections\8021X!8021XCARootHash
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!EnableFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewal
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\Mic
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFire
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFir
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\D
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!EnableFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!Enabled
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\Mi
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFi
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsF
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewal
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\ICFv4!BypassFirewall
HKLM\Software\Policies\Microsoft\Windows\Psched!NonBestEffortLimit
HKLM\Software\Policies\Microsoft\Windows\Psched!MaxOutstandingSends
HKLM\Software\Policies\Microsoft\Windows\Psched!TimerResolution
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNonConforming
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeQualitative
HKLM\Software\Policies\SNMP\Parameters\ValidCommunities!{1,2,3,...}
HKLM\Software\Policies\SNMP\Parameters\PermittedManagers!{1,2,3,...}
HKLM\Software\Policies\SNMP\Parameters\TrapConfiguration\public!{1,2,3,...}
HKLM\Software\Policies\Microsoft\Windows\BITS!EnableBITSMaxBandwidth, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTransferRateOnSchedule
HKLM\Software\Policies\Microsoft\Windows\BITS!JobInactivityTimeout
HKLM\Software\Policies\Microsoft\System\DFSClient!DfsDcNameDelay
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PublishPrinters
HKLM\Software\Policies\Microsoft\Windows NT\Printers!Immortal
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Auto Publishing
HKLM\Software\Policies\Microsoft\Windows NT\Printers!VerifyPublishedState
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocation
HKLM\Software\Policies\Microsoft\Windows NT\Printers!SupportLink
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningInterval
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningPriority
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetries
HKLM\Software\Policies\Microsoft\Windows NT\Printers!KMPrintersAreBlocked
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetryLog
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocationSupport
HKLM\Software\Policies\Microsoft\Windows NT\Printers!ServerThread
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruneDownlevel
HKLM\Software\Policies\Microsoft\Windows NT\Printers!RegisterSpoolerRemoteRpcEndPoint
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPrinting
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableEngine
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableWizard
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePropPage
HKLM\Software\Policies\Microsoft\Windows\AppCompat!LogAppHelpEvents
HKLM\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionURL
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgramCommandLineParameters
HKLM\Software\Policies\Microsoft\Windows NT\IIS!PreventIISInstall
HKLM\Software\Policies\Microsoft\Windows NT\Security Center!SecurityCenterInDomain
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!KeepAliveEnable, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Service
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableAutoReconnect
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fSingleSessionPerUser
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fNoRemoteDesktopWallpaper
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableForcibleLogoff
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableTimeZoneRedirection
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableClip
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableSmartCard
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCam
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCcm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCpm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableLPT
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCdm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fForceClientLptDef
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPolicyFallbackPrintDriver, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Termina
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPromptForPassword
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MinEncryptionLevel
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEncryptRPCTraffic
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxInstanceCount
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!ColorDepth
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDenyTSConnections, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Ser
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fWritableTSCCPermTab
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNTSecurity
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDisconnect
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!fTurnOffSingleAppMode
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fSecureLicensing
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fPreventLicenseUpgrade
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!PerSessionTempDir
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!DeleteTempDirsOnExit
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryExposeServerIP
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryActive
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryLocation
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryClusterName
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime VALUE 0, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\T
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFProfilePath
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicenseServers
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicensingMode
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Ter
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirUNC, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Service
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!W
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableMSI
HKLM\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatch
HKLM\Software\Policies\Microsoft\Windows\Installer!SafeForScripting
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableUserControl
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownMedia
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownPatch
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableAdminTSRemote
HKLM\Software\Policies\Microsoft\Windows\Installer!TransformsSecure
HKLM\Software\Policies\Microsoft\Windows\Installer!Logging
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableUserInstalls
HKLM\Software\Policies\Microsoft\Windows\Installer!LimitSystemRestoreCheckpointing
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatchUninstall
HKLM\Software\Policies\Microsoft\Windows\Installer!EnforceUpgradeComponentRules
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLUAPatching
HKLM\Software\Policies\Microsoft\Windows\Installer!MaxPatchCacheSize
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKLM\Software\Policies\Microsoft\WMDRM!DisableOnline
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuSubFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWindowsUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCommonGroups
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetworkConnections
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFavoritesMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFind
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMHelp
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyPictures
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyMusic
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuNetworkPlaces
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceStartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!StartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoClose
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsHistory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentDocsOnExit
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Intellimenus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInstrumentation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MemCheckBoxInRunDlg
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveSearch
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveTrack
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!GreyMSIAds
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTaskGrouping
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoTrayNotify
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LockTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSimpleStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMBalloonTip
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuPinnedList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMFUprogramsList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMorePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuEjectPC
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserNameInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideClock
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayItemsDisplay
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarsOnTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMConfigurePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{450D8FBA-AD25-11D0-98A8-0800361B1103}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{645FF040-5081-101B-9F08-00AA002F954E}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyComputer
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesRecycleBin
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetIcon
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisablePersonalDirChange
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCloseDragDropBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMovingBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSaveSettings
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktopCleanupWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceActiveDesktopOn
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktopChanges
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoAddingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDeletingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoEditingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoClosingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Add, HKCU\Software\Microsoft\Windows\CurrentVersion\Policie
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpaper, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpape
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoHTMLWallPaper
HKCU\Software\Policies\Microsoft\Windows\Directory UI!QueryLimit
HKCU\Software\Policies\Microsoft\Windows\Directory UI!EnableFilter
HKCU\Software\Policies\Microsoft\Windows\Directory UI!HideDirectoryFolder
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disallo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Restric
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl!ForceClassicControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddRemovePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoRemovePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoWindowsSetupPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoChooseProgramsPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromCDorFloppy
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromInternet
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoSupportInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!DefaultCategory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispCPL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispBackgroundPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoChangingWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispAppearancePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispSettingsPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDispScrSavPage
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveActive
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!SCRNSAVE.EXE
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaverIsSecure
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveTimeOut
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThemesTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoVisualStyleChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoSizeChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoColorChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!SetVisualStyle
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Printers Page URL
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Downlevel Browse
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Default Search Scope
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!Restricted, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!InFo
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!NoAddPrinter
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!NoDeletePrinter
HKCU\Software\Policies\Microsoft\Control Panel\Desktop!MultiUILanguageID
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishSharedFolders
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishDfsRoots
HKCU\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend
HKCU\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoMakeAvailableOffline
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions!NoCacheViewer
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!NoReminders
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderFreqMinutes
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!InitialBalloonTimeoutSeconds
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!ReminderBalloonTimeoutSeconds
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders!EventLoggingLevel
HKCU\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList
HKCU\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList!DisableFRAdminPin
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowAdvancedTCPIPConfig
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AdvancedSettings
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AddRemoveComponents
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_ChangeBindState
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasAllUserProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasMyProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteAllUserConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_NewConnectionWizard
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameLanConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameAllUserRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameMyRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DialupPrefs
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_Statistics
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_EnableAdminProhibits
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_IpStateChecking
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax!1
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchFloppies, HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchC
HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing!BehaviorOnFailedVerify
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Shell
HKCU\Software\Policies\Microsoft\Windows\System!DisableCMD
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableRegistryTools
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Restri
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disal
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKCU\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKCU\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ConnectHomeDirToRoot
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!EnableProfileQuota, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!
HKCU\Software\Policies\Microsoft\Windows\System!ExcludeProfileDirs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLegacyLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogoffScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableTaskMgr
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableLockWorkstation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableChangePassword
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoLogoff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run!{1,2,3,...}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRunOnce
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRun
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeO
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DCOption
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!NewGPOLinksDisabled
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!GPODisplayName
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!ShowPoliciesOnly
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DisableAutoADMUpdate
HKCU\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKCU\Software\Policies\Microsoft\Windows\System\Power!PromptPasswordOnResume
HKCU\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPubl
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKCU\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!ModRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!LowRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!UseTrustedHandlers
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!SaveZoneInformation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!HideZoneInfoOnProperties
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!ScanWithAntiVirus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClassicShell
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFolderOptions
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFileMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetConnectDisconnect
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoShellSearchButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoManageMyComputerVerb
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!EnforceShellExtensionSecurity
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LinkResolveIgnoreLinkInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDrives
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewOnDrive
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoHardwareTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDFSTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSecurityTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeAnimation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeKeyboardNavigationIndicators
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoComputersNearMe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoEntireNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!MaxRecentDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoRunasInstallPrompt
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!PromptRunasInstallNetPath
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoCDBurning
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoRecycleFiles
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!ConfirmFileDelete
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!RecycleBinSize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoSharedDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoThumbnailCache
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoWinKeys
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place0, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg3
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoPlacesBar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoBackButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!NoFileMru
HKCU\Software\Policies\Microsoft\MMC!RestrictAuthorMode
HKCU\Software\Policies\Microsoft\MMC!RestrictToPermittedSnapins
HKCU\Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C96401CF-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{de751566-4cc6-11d1-8ca0-00c04fc297eb}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A994E107-6854-4F3D-917C-E6F01670F6D3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{23DC5869-BD9F-46fd-AADD-1F869BA64FC3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{43668E21-2636-11D1-A1CE-0080C88593A5}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FF5903A8-78D6-11D1-92F6-006097B01056}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{18BA7139-D98B-43c2-94DA-2604E34E175D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{57C596D0-9370-40C0-BA0D-AB491B63255D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C96401D1-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3D5D035E-7721-4B83-A645-6C07A3D403B7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{45ac8c63-23e2-11d1-a696-00c04fd58bc3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F83C-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1F5EEC01-1214-4D94-80C5-4BDCD2014DDD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3F276EB4-70EE-11D1-8A0F-00C04FB93753}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE450B-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{9EC88934-C774-11d1-87F4-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{394C052E-B830-11D0-9A86-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B708457E-DB61-4C55-A92F-0D4B5E9B1224}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2E19B602-48EB-11d2-83CA-00104BCA42CF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6E8E0081-19CD-11D1-AD91-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5880CD5C-8EC0-11d1-9570-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{243E20B0-48ED-11D2-97DA-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DAB1A262-4FD7-11D1-842C-00C04FB6C218}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-11d0-bb77-00aa00a1eab7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7AF60DD3-4979-11D1-8A6C-00C04FC33566}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F3621F1-23C6-11D1-AD97-00AA00B88E5A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E12BBB5D-D59D-4E61-947A-301D25AE8C23}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D70A2BEA-A63E-11D1-A7D4-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6DC3804B-7212-458D-ADB0-9A07E2AE1FA2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957D-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FC715823-C5FB-11D1-9EEF-00A0C90347FF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3060E8CE-7020-11D2-842D-00C04FA372D4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66650-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B6664F-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{942A8E4F-A261-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2DA6AA7F-8C88-4194-A558-0D36E7FD3E64}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AE-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AF-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{c40d66a0-e90c-46c6-aa3b-473e38c72bf2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{d524927d-6c08-46bf-86af-391534d779d3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{fe883157-cebd-4570-b7a2-e4fe06abe626}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7E45546F-6D52-4D10-B702-9C2E67232E62}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1BC972D6-555C-4FF7-BE2C-C584021A0A6A}!Restrict_Run
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!W
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime VALUE 0, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKCU\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKCU\Software\Policies\Microsoft\Windows\Installer!SearchOrder
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableMedia
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate!DisableWindowsUpdateAccess
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
NT\Reliability!ShutdownReasonUI
NT\Reliability!TimeStampInterval
ws\System!SlowLinkTimeOut
!LimitUnits, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Threshold, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ThresholdU nits

System!GroupPolicyRefreshTimeOffset
ws\System!GroupPolicyRefreshTimeOffsetDC
olicy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoGPOListChanges

LM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\G
oftware\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoGPOListChanges
M\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoGPOListChanges
M\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\Grou
olicy, HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoGPOListChanges
oftware\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\Group Poli
KLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\
LM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\G
oftware\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\Group Polic
ows NT\Terminal Services!fAllowFullControl, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!MaxTicketExpiry, HKLM\Software\pol icies\Microsoft\Window

dows NT\Terminal Services!fAllowUnsolicitedFullControl
orting\DW!DWAllowHeadless, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWAllowHeadless
Health\ErrorReporting\DW!DWNoFileCollection, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoSecondLevelCollection, HKLM\Softwar e\Policies\Mic
eporting!IncludeMicrosoftApps, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeWindowsApps
pc!ExtErrorInfoExceptions
nfig!HoldPeriod, HKLM\Software\Policies\Microsoft\W32Time\Config!LargePhaseOffset, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxAllowedPh aseOffset, HKLM
!Type, HKLM\Software\Policies\Microsoft\W32time\Parameters!CrossSiteSyncFlags, HKLM\Software\Policies\Microsoft\W32time\Parameters!ResolvePeer BackoffMinutes, H
Version\Policies\Explorer!NoPublishingWizard, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKLM\Software\Mi crosoft\Windows\C

Pv6-Global!DontIncludeMicrosoftSeedServer
osoft\Windows\NetCache\AssignedOfflineFolders!PurgeOnlyAutoCacheAtLogoff
Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!RemoteAddresses
Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!RemoteAddresses
, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundSourceQuench, HKLM\SOFTWARE\Policies\Microsoft\Windows Firewa
RE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!RemoteAddresses
RE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!RemoteAddresses
olicies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Loggin g!LogDr
E\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!RemoteAddresses
\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!RemoteAddresses
e, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundSourceQuench, HKLM\SOFTWARE\Policies\Microsoft\Win dowsFire
ARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!RemoteAddresses
ARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!RemoteAddresses
Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\ Logging!Lo
ITS!MaxTransferRateOnSchedule, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBandwidthValidFrom, HKLM\Software\Policies\Microsoft\Windows\BIT S!MaxBand

soft\Windows NT\Terminal Services!KeepAliveInterval
es\Microsoft\Windows NT\Terminal Services!FallbackPrintDriverType
icrosoft\Windows NT\Terminal Services!fDenyTSConnections
E\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime
olicies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip

soft\Windows NT\Terminal Services!WFHomeDir, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirDrive
\Windows NT\Terminal Services!WorkDirectory

ft\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Delete
Version\Policies\System!WallpaperStyle
ntVersion\Policies\Explorer\DisallowCpl!{1,2,3,...}
ntVersion\Policies\Explorer\RestrictCpl!{1,2,3,...}
ws NT\Printers\PointAndPrint!InForest, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!TrustedServers, HKCU\Software\Pol icies\Microsoft\Windows N

ws\DriverSearching!DontSearchCD, HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate
ntVersion\Policies\Explorer\RestrictRun!{1,2,3,...}
entVersion\Policies\Explorer\DisallowRun!{1,2,3,...}
s\CurrentVersion\Policies\System!ProfileQuotaMessage, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxProfileSize, HKCU\Softw are\Microsoft\Win

System!GroupPolicyRefreshTimeOffset
tVersion\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKCU\Software\Mi crosoft\Windows\C
s\CurrentVersion\Policies\comdlg32\Placesbar!Place1, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place2, HKCU\So ftware\Microsoft\W

\Windows NT\Terminal Services!WorkDirectory, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fInheritInitialProgram
E\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

ThresholdU nits
e\Policies\Microsoft\Windo ws\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoGPOListChanges
olicies\Microsoft\Windo ws\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoGPOListChanges
Microsoft\Windo ws\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoGPOListChanges

re\Policies\Microsoft\Windo ws\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoGPOListChanges
e\Policies\Microsoft\Windo ws\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoGPOListChanges
Microsoft\Windo ws\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoGPOListChanges
ware\pol icies\Microsoft\Windows NT\Terminal Services!MaxTicketExpiryUnits, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fUseMailto
n, HKLM\Softwar e\Policies\Microsoft\PCHealth\ErrorReporting!ForceQueueMode, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWFileTreeRoot, HKLM
MaxAllowedPh aseOffset, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxNegPhaseCorrection, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxPosPhaseC
ResolvePeer BackoffMinutes, HKLM\Software\Policies\Microsoft\W32time\Parameters!ResolvePeerBackoffMaxTimes, HKLM\Software\Policies\Microsoft\W32time\Paramete
Software\Mi crosoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP, HKLM\Software\Policies\M

cies\Microsoft\Windows Firewall\DomainProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInbou
DomainProfile\Loggin g!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWAR
Policies\Microsoft\Win dowsFirewall\StandardProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!Allow
all\StandardProfile\ Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogSuccessfulConnections, HKLM\SOFT
osoft\Windows\BIT S!MaxBandwidthValidTo, HKLM\Software\Policies\Microsoft\Windows\BITS!UseSystemMaximum, HKLM\Software\Policies\Microsoft\Windows\BITS!Max

e\Pol icies\Microsoft\Windows NT\Printers\PointAndPrint!ServerList
HKCU\Softw are\Microsoft\Windows\CurrentVersion\Policies\System!IncludeRegInProQuota, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!WarnUser
\Software\Mi crosoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP, HKCU\Software\Microsoft
e2, HKCU\So ftware\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place3, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesb

vices!fUseMailto
ng\DW!DWFileTreeRoot, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWReporteeName
W32Time\Config!MaxPosPhaseCorrection, HKLM\Software\Policies\Microsoft\W32Time\Config!PhaseCorrectRate, HKLM\Software\Policies\Microsoft\W32T ime\Config!PollA
ies\Microsoft\W32time\Parameters!SpecialPollInterval, HKLM\Software\Policies\Microsoft\W32time\Parameters!EventLogFlags
CEIP, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch, HKLM\Software\Policies\M

nProfile\IcmpSettings!AllowInboundEchoRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInboundRouterRequest, H KLM\S
Connections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogFilePath, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\Domai nP
ndardProfile\IcmpSettings!AllowInboundEchoRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundRouter Request, H
essfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogFilePath, HKLM\SOFTWARE\Policies\Microsoft\WindowsFire wall\S
es\Microsoft\Windows\BITS!MaxTransferRateOffSchedule
rsion\Policies\System!WarnUser, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!WarnUserTimeout
CEIP, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKCU\Software\Policies\Microsoft\Windows NT\ Printers!DisableHTTPPrin
rsion\Policies\comdlg32\Placesbar!Place4
icrosoft\W32T ime\Config!PollAdjustFactor, HKLM\Software\Policies\Microsoft\W32Time\Config!SpikeWatchPeriod, HKLM\Software\Policies\Microsoft\W32Time\Config!Upd
rch, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKLM

boundRouterRequest, H KLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundTimeExceeded, HKLM\SOFTWARE\Policies\Micr
soft\WindowsFirewall\Domai nProfile\Logging!LogFileSize
AllowInboundRouter Request, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundTimeExceeded, HKLM\SOFTWARE\Polic
s\Microsoft\WindowsFire wall\StandardProfile\Logging!LogFileSize
NT\ Printers!DisableHTTPPrinting, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKCU\Software\Policies\Microsoft\WindowsMovieM
\Microsoft\W32Time\Config!UpdateInterval, HKLM\Software\Policies\Microsoft\W32Time\Config!AnnounceFlags, HKLM\Software\Policies\Microsoft\W 32Time\Config!EventL
lorer!NoInternetOpenWith, HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW, HKLM\Software\Policies \Microsoft\EventViewer!Microso

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundParameterProblem, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
eeded, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundParameterProblem, HKLM\SOFTWARE\Policies\Microsoft\ Win
icies\Microsoft\WindowsMovieMaker!CodecDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKCU\Software\Policies\M icrosoft\WindowsMovi
rosoft\W 32Time\Config!EventLogFlags, HKLM\Software\Policies\Microsoft\W32Time\Config!LocalClockDispersion, HKLM\Software\Policies\Microsoft\W32Time\Config!Max
\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks, HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate, HKLM\Software\Policie

olicies\Microsoft\WindowsFirewal l\DomainProfile\IcmpSettings!AllowInboundTimestampRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Icm
TWARE\Policies\Microsoft\ WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundTimestampRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\Standa
licies\M icrosoft\WindowsMovieMaker!WebPublish, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Wi
\Microsoft\W32Time\Config!MaxPollInterval, HKLM\Software\Policies\Microsoft\W32Time\Config!MinPollInterval
oUpdate, HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration, HKLM\Software\Policies\Microsoft\ SearchCompanion!DisableContentFileU

dowsFirewall\DomainProfile\IcmpSettings!AllowInboundMaskRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundPa
crosoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundMaskRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings! Al
rd, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKCU\Software\Microsoft\Windows\CurrentVersion\Polic ies\Explorer!NoOnlinePr
Companion!DisableContentFileUpdates, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKLM\Software\Policies\Microsoft\Windows NT\Printe
\IcmpSettings!AllowOutboundPacketT ooBig
andardProfile\IcmpSettings! AllowOutboundPacketTooBig
\Polic ies\Explorer!NoOnlinePrintsWizard, HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!N
es\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSe archWindowsUpdate, HKLM\Software\P
urrentVersion\Policies\Explorer!NoInternetOpenWith, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKCU\S oftware\Policies\Microsoft\Wind
ndowsUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecD
oftware\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKCU\Software\Polici
ft\WindowsMovieMaker!CodecDownload, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKLM\Software\Policies\Micro soft\WindowsMovieMaker!WebP
Download, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublis h
soft\WindowsMovieMaker!WebPublish, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKLM\Software\Microsoft\Windows\Curren
ware\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer!NoOnlinePrintsWizard, HK
plorer!NoOnlinePrintsWizard, HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines, HKLM\Software\Po
c!Headlines, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch, HKLM\Software\Policies\Microsoft\PCHeal th\ErrorReporting!DoReport, HKLM\Softw
eporting!DoReport, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\A
soft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!Exi tOnMSICW, HKLM\Software\Policies\Microso
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks, HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate,
thRoot!DisableRootAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration, H KLM\Software\Policies\Microsoft\SearchCompan
olicies\Microsoft\SearchCompanion!DisableContentFileUpdates, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKLM\Software\Policies\Micro
g, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKLM\Software\Policies\Microsof t\Windows\DriverSearching!DontSearchWindowsUp
arching!DontSearchWindowsUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess, HKLM\Software\Policies\Microsoft\Window
ftware\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHe lp, HKLM\Software\Policies\Microsoft\Win
Computer/User
PolicyNode
Path
USER Administrative Templates\Windows Components\Internet Explorer
USER Administrative Templates\Windows Components\Internet Explorer\Administrator Approved Controls
USER Administrative Templates\Windows Components\Internet Explorer\Browser menus
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-DownIntranet Zone
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
USER Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
USER Administrative Templates\Windows Components\Internet Explorer\Offline Pages
USER Administrative Templates\Windows Components\Internet Explorer\Persistence Behavior
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Information Bar
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protocols Per Security
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Object Caching Protection
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download
USER Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions
USER Administrative Templates\Windows Components\Internet Explorer\Toolbars
MACHINE Administrative Templates\Windows Components\Internet Explorer
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-DownIntranet Zone
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
MACHINE Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Information Bar
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protocols Per Security
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Object Caching Protection
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download
MACHINE Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions
Full Policy Name Supported on
Configure Outlook Express at least Internet Explorer v6.0
Disable AutoComplete for forms at least Internet Explorer v5.0
Disable caching of Auto-Proxy scripts at least Internet Explorer v5.0
Disable changing accessibility settings at least Internet Explorer v5.0
Disable changing Advanced page settings at least Internet Explorer v5.0
Disable changing Automatic Configuration settings at least Internet Explorer v5.0
Disable changing Calendar and Contact settings at least Internet Explorer v5.0
Disable changing certificate settings at least Internet Explorer v5.0
Disable changing color settings at least Internet Explorer v5.0
Disable changing connection settings at least Internet Explorer v5.0
Disable changing default browser check at least Internet Explorer v5.0
Disable changing font settings at least Internet Explorer v5.0
Disable changing history settings at least Internet Explorer v5.0
Disable changing home page settings at least Internet Explorer v5.0
Disable changing language settings at least Internet Explorer v5.0
Disable changing link color settings at least Internet Explorer v5.0
Disable changing Messaging settings at least Internet Explorer v5.0
Disable changing Profile Assistant settings at least Internet Explorer v5.0
Disable changing proxy settings at least Internet Explorer v5.0
Disable changing ratings settings at least Internet Explorer v5.0
Disable changing Temporary Internet files settings at least Internet Explorer v5.0
Disable external branding of Internet Explorer at least Internet Explorer v5.0
Disable importing and exporting of favorites at least Internet Explorer v5.0
Disable Internet Connection wizard at least Internet Explorer v5.0
Disable the Reset Web Settings feature at least Internet Explorer v5.0
Display error message on proxy script download failure
Do not allow AutoComplete to save passwords at least Internet Explorer v5.0
Do not allow users to enable or disable add-ons at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Identity Manager: Prevent users from using Identitiesat least Internet Explorer v5.0
Pop-up allow list at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Search: Disable Find Files via F3 within the browser at least Internet Explorer v5.0
Search: Disable Search Customization at least Internet Explorer v5.0
Turn off Crash Detection at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Turn off pop-up management at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Use Automatic Detection for dial-up connections at least Internet Explorer v5.0
Carpoint at least Internet Explorer v5.0
DHTML Edit Control at least Internet Explorer v5.0
Investor at least Internet Explorer v5.0
Media Player at least Internet Explorer v5.0
Menu Controls at least Internet Explorer v5.0
Microsoft Agent at least Internet Explorer v5.0
Microsoft Chat at least Internet Explorer v5.0
Microsoft Scriptlet Component at least Internet Explorer v5.0
Microsoft Survey Control at least Internet Explorer v5.0
MSNBC at least Internet Explorer v5.0
NetShow File Transfer Control at least Internet Explorer v5.0
Shockwave Flash at least Internet Explorer v5.0
Disable Context menu at least Internet Explorer v5.0
Disable Open in New Window menu option at least Internet Explorer v5.0
Disable Save this program to disk option at least Internet Explorer v5.0
File menu: Disable closing the browser and Explorer at
windows
least Internet Explorer v5.0
File menu: Disable New menu option at least Internet Explorer v5.0
File menu: Disable Open menu option at least Internet Explorer v5.0
File menu: Disable Save As Web Page Complete at least Internet Explorer v5.0
File menu: Disable Save As... menu option at least Internet Explorer v5.0
Help menu: Remove 'For Netscape Users' menu option at least Internet Explorer v5.0
Help menu: Remove 'Send Feedback' menu option at least Internet Explorer v5.0
Help menu: Remove 'Tip of the Day' menu option at least Internet Explorer v5.0
Help menu: Remove 'Tour' menu option
Hide Favorites menu at least Internet Explorer v5.0
Tools menu: Disable Internet Options... menu option at least Internet Explorer v5.0
View menu: Disable Full Screen menu option at least Internet Explorer v5.0
View menu: Disable Source menu option at least Internet Explorer v5.0
Disable the Advanced page at least Internet Explorer v5.0
Disable the Connections page at least Internet Explorer v5.0
Disable the Content page at least Internet Explorer v5.0
Disable the General page at least Internet Explorer v5.0
Disable the Privacy page at least Internet Explorer v5.0
Disable the Programs page at least Internet Explorer v5.0
Disable the Security page at least Internet Explorer v5.0
Allow active content from CDs to run on user machines at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow Install On Demand (except Internet Explorer) at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Allow Install On Demand (Internet Explorer) at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Allow software to run or install even if the signature isatinvalid
least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow third-party browser extensions at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Automatically check for Internet Explorer updates at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Check for server certificate revocation at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Check for signatures on downloaded programs at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Do not save encrypted pages to disk at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Empty Temporary Internet Files folder when browser at is least
closed
Internet Explorer v6.0 in Windows 2003 Service Pack 1
Play animations in web pages at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Play sounds in web pages at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Play videos in web pages at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Internet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Intranet Sites: Include all local (intranet) sites not listed
at in
least
other
Internet
zonesExplorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Intranet Sites: Include all network paths (UNCs) at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Intranet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Local Machine Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Internet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Intranet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Local Machine Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Restricted Sites Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Trusted Sites Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Restricted Sites Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Site to Zone Assignment List at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Trusted Sites Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Access data sources across domains at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow active content over restricted protocols to access at least
my computer
Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow active scripting at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow binary and script behaviors at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow drag and drop or copy and paste files at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow file downloads at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow font downloads at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow installation of desktop items at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow META REFRESH at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow paste operations via script at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow script-initiated windows without size or position at constraints
Allow Scriptlets at least Internet Explorer v6.0 in Windows 2003 Service Pack 2
Automatic prompting for ActiveX controls at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Automatic prompting for file downloads at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Display mixed content at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Do not prompt for client certificate selection when no at certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
exists. XP Service Pack 2 or Windows Server 2003 Service Pack 1
Download signed ActiveX controls at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Download unsigned ActiveX controls at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Initialize and script ActiveX controls not marked as safe at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Java permissions at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Launching applications and files in an IFRAME at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Logon options at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Navigate sub-frames across different domains at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Open files based on content, not file extension at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Run .NET Framework-reliant components not signed at with
least
Authenticode
Run .NET Framework-reliant components signed withatAuthenticodeleast Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Run ActiveX controls and plugins at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Script ActiveX controls marked safe for scripting at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Scripting of Java applets at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Software channel permissions at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Submit non-encrypted form data at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Use Pop-up Blocker at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Userdata persistence at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Web sites in less privileged Web content zones can navigate
at least Internet
into thisExplorer
zone v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow active content over restricted protocols to accessat least
my computer
Allow script-initiated windows without size or position at
constraints
Do not prompt for client certificate selection when no at
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
Run .NET Framework-reliant components signed withatAuthenticode
at least Internet
into thisExplorer
my computer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
my computer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
my computer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
Disable adding channels at least Internet Explorer v5.0
Disable adding schedules for offline pages at least Internet Explorer v5.0
Disable all scheduled offline pages at least Internet Explorer v5.0
Disable channel user interface completely at least Internet Explorer v5.0
Disable downloading of site subscription content at least Internet Explorer v5.0
Disable editing and creating of schedule groups at least Internet Explorer v5.0
Disable editing schedules for offline pages at least Internet Explorer v5.0
Disable offline page hit logging at least Internet Explorer v5.0
Disable removing channels at least Internet Explorer v5.0
Disable removing schedules for offline pages at least Internet Explorer v5.0
Subscription Limits at least Internet Explorer v5.0
File size limits for Internet zone at least Internet Explorer v5.0
File size limits for Intranet zone at least Internet Explorer v5.0
File size limits for Local Machine zone at least Internet Explorer v5.0
File size limits for Restricted Sites zone at least Internet Explorer v5.0
File size limits for Trusted Sites zone at least Internet Explorer v5.0
Add-on List at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
All Processes at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Deny all add-ons unless specifically allowed in the Add-on
at least
List
Process List at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Admin-approved behaviors at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Internet Explorer Processes at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Internet Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Intranet Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Local Machine Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Restricted Sites Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Trusted Sites Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Configure Toolbar Buttons at least Internet Explorer v5.0
Disable customizing browser toolbar buttons at least Internet Explorer v5.0
Disable customizing browser toolbars at least Internet Explorer v5.0
Disable Automatic Install of Internet Explorer components
Disable Periodic Check for Internet Explorer softwareatupdates
Disable showing the splash screen at least Internet Explorer v5.0
Disable software update shell notifications on programat launch
Do not allow users to enable or disable add-ons at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Make proxy settings per-machine (rather than per-user)at least Internet Explorer v5.0
Pop-up allow list at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Security Zones: Do not allow users to add/delete sitesat least Internet Explorer v5.0
Security Zones: Do not allow users to change policiesat least Internet Explorer v5.0
Security Zones: Use only machine settings at least Internet Explorer v5.0
Turn off Crash Detection at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Turn off pop-up management at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Disable the Advanced page at least Internet Explorer v5.0
Disable the Connections page at least Internet Explorer v5.0
Disable the Content page at least Internet Explorer v5.0
Disable the General page at least Internet Explorer v5.0
Disable the Privacy page at least Internet Explorer v5.0
Disable the Programs page at least Internet Explorer v5.0
Disable the Security page at least Internet Explorer v5.0
Allow active content from CDs to run on user machines at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Allow Install On Demand (except Internet Explorer) at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Allow Install On Demand (Internet Explorer) at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Allow software to run or install even if the signature isatinvalid
Automatically check for Internet Explorer updates at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Empty Temporary Internet Files folder when browser at is least
closed
Internet Explorer v6.0 in Windows 2003 Service Pack 1
Internet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Intranet Sites: Include all local (intranet) sites not listed
at in
least
other
Internet
zonesExplorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Intranet Sites: Include all network paths (UNCs) at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Intranet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Local Machine Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Local Machine Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Trusted Sites Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Restricted Sites Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Site to Zone Assignment List at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Trusted Sites Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
my computer
Allow script-initiated windows without size or position at constraints
Do not prompt for client certificate selection when no at certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
Initialize and script ActiveX controls not marked as safe at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
least
Authenticode
Run .NET Framework-reliant components signed withatAuthenticodeleast Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Web sites in less privileged Web content zones can navigate at least Internet
into thisExplorer
my computer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
my computer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
my computer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
my computer
constraints
certificates
least Internet
or only
Explorer
one certificate
v6.0 in Windows
least
Authenticode
at least Internet
into thisExplorer
Add-on List at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Deny all add-ons unless specifically allowed in the Add-on
at least
List
Admin-approved behaviors at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Internet Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Intranet Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Local Machine Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Restricted Sites Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Trusted Sites Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Help/Explain Text
Allows Administrators to enable and disable the ability for Outlook Express users to save or open attachments that can potentially contain a virus. If you check
Prevents Microsoft Internet Explorer from automatically completing forms, such as filling in a name or a password that the user has entered previously on a We
Prevents automatic proxy scripts, which interact with a server to automatically configure users' proxy settings, from being stored in the users' cache. If you ena
Prevents users from changing accessibility settings. If you enable this policy, the Accessibility button on the General tab in the Internet Options dialog box app
Prevents users from changing settings on the Advanced tab in the Internet Options dialog box. If you enable this policy, users are prevented from changing ad
Prevents users from changing automatic configuration settings. Automatic configuration is a process that administrators can use to update browser settings pe
Prevents users from changing the default programs for managing schedules and contacts. If you enable this policy, the Calendar and Contact check boxes ap
Prevents users from changing certificate settings in Internet Explorer. Certificates are used to verify the identity of software publishers. If you enable this policy
Prevents users from changing the default Web page colors. If you enable this policy, the color settings for Web pages appear dimmed. The settings are locate
Prevents users from changing dial-up settings. If you enable this policy, the Settings button on the Connections tab in the Internet Options dialog box appears
Prevents Microsoft Internet Explorer from checking to see whether it is the default browser. If you enable this policy, the Internet Explorer Should Check to Se
Prevents users from changing font settings. If you enable this policy, the Font button on the General tab in the Internet Options dialog box appears dimmed. I
Prevents users from changing the history settings for the browser. If you enable this policy, the settings in the History area on the General tab in the Internet O
Prevents users from changing the home page of the browser. The home page is the first page that appears when users start the browser. If you enable this po
Prevents users from changing language settings. If you enable this policy, the Languages button on the General tab in the Internet Options dialog box appear
Prevents users from changing the colors of links on Web pages. If you enable this policy, the color settings for links appear dimmed. The settings are located
Prevents users from changing the default programs for messaging tasks. If you enable this policy, the E-mail, Newsgroups, and Internet Call options in the Int
Prevents users from changing Profile Assistant settings. If you enable this policy, the My Profile button appears dimmed in the Personal Information area on th
Prevents users from changing proxy settings. If you enable this policy, the proxy settings appear dimmed. These settings are in the Proxy Server area of the L
Prevents users from changing ratings that help control the type of Internet content that can be viewed. If you enable this policy, the settings in the Content Adv
Prevents users from changing the browser cache settings, such as the location and amount of disk space to use for the Temporary Internet Files folder. If you
Prevents branding of Internet programs, such as customization of Internet Explorer and Outlook Express logos and title bars, by another party. If you enable th
Prevents users from exporting or importing favorite links by using the Import/Export Wizard. If you enable this policy, the Import/Export Wizard cannot import o
Prevents users from running the Internet Connection Wizard. If you enable this policy, the Setup button on the Connections tab in the Internet Options dialog b
Prevents users from restoring default settings for home and search pages. If you enable this policy, the Reset Web Settings button on the Programs tab in the
Specifies that error messages will be displayed to users if problems occur with proxy scripts. If you enable this policy, error messages will be displayed when
Disables automatic completion of user names and passwords in forms on Web pages, and prevents users from being prompted to save passwords. If you ena
This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager. If you enable this policy setting, u
Prevents users from configuring unique identities by using Identity Manager. Identity Manager enables users to create multiple accounts, such as e-mail acco
This policy setting allows you to manage a list of web sites that will be allowed to open pop-up windows regardless of the Internet Explorer process's Pop-Up B
Disables using the F3 key to search in Internet Explorer and Windows Explorer. If you enable this policy, the search functionality of the F3 key is disabled. Use
Makes the Customize button in the Search Assistant appear dimmed. The Search Assistant is a tool that appears in the Search bar to help users search the In
This policy setting allows you to manage the crash detection feature of add-on Management. If you enable this policy setting, a crash in Internet Explorer will e
This policy setting allows you to manage pop-up management functionality in Internet Explorer. If you enable this policy setting, the Control Panel information
Specifies that Automatic Detection will be used to configure dial-up settings for users. Automatic Detection uses a DHCP (Dynamic Host Configuration Protoc
Designates the Microsoft Network (MSN) Carpoint automatic pricing control as administrator-approved. This control enables enhanced pricing functionality on
Designates a set of Microsoft Network (MSN) Investor controls as administrator-approved. These controls enable users to view updated lists of stocks on their
Designates the Media Player ActiveX control as administrator-approved. This control is used for playing sounds, videos, and other media. If you enable this p
Designates a set of Microsoft ActiveX controls used to manipulate pop-up menus in the browser as administrator-approved. If you enable this policy, these co
Designates the Microsoft Agent ActiveX control as administrator-approved. Microsoft Agent is a set of software services that supports the presentation of softw
Designates the Microsoft Chat ActiveX control as administrator-approved. This control is used by Web authors to build text-based and graphical-based Chat c
Designates a set of MSNBC controls as administrator-approved. These controls enable enhanced browsing of news reports on the MSNBC Web site. If you e
Prevents the shortcut menu from appearing when users click the right mouse button while using the browser. If you enable this policy, the shortcut menu will n
Prevents using the shortcut menu to open a link in a new browser window. If you enable this policy, users cannot point to a link, click the right mouse button, a
Prevents users from saving a program or file that Microsoft Internet Explorer has downloaded to the hard disk. If you enable this policy, users cannot save a p
Prevents users from closing Microsoft Internet Explorer and Windows Explorer. If you enable this policy, the Close command on the File menu will appear dim
Prevents users from opening a new browser window from the File menu. If this policy is enabled, users cannot open a new browser window by clicking the Fil
Prevents users from opening a file or Web page from the File menu in Internet Explorer. If you enable this policy, the Open dialog box will not appear when us
Prevents users from saving the complete contents that are displayed on or run from a Web page, including the graphics, scripts, linked files, and other elemen
Prevents users from saving Web pages from the browser File menu to their hard disk or to a network share. If you enable this policy, the Save As command o
Prevents users from displaying tips for users who are switching from Netscape. If you enable this policy, the For Netscape Users command is removed from th
Prevents users from sending feedback to Microsoft by clicking the Send Feedback command on the Help menu. If you enable this policy, the Send Feedback
Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet Explorer. If you enable this policy, the Tip of the Day command is re
Prevents users from running the Internet Explorer Tour from the Help menu in Internet Explorer. If you enable this policy, the Tour command is removed from
Prevents users from adding, removing, or editing the list of Favorite links. The Favorites list is a way to store popular links for future use. If you enable this po
Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer. If you enable this policy, users cannot change
Prevents users from displaying the browser in full-screen (kiosk) mode, without the standard toolbar. If you enable this policy, the Full Screen command on the
Prevents users from viewing the HTML source of Web pages by clicking the Source command on the View menu. If you enable this policy, the Source comma
Removes the Advanced tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing adva
Removes the Connections tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing co
Removes the Content tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing ratings
Removes the General tab from the interface in the Internet Options dialog box. If you enable this policy, users are unable to see and change settings for the h
Removes the Privacy tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing default
Removes the Programs tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing defa
Removes the Security tab from the interface in the Internet Options dialog box. If you enable this policy, it prevents users from seeing and changing settings fo
This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run. If you enable this policy setti
This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Explorer components) that are regis
This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts) that can installed by Internet
This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the si
This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, such as toolbars. Browser help
This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer is set to do this, the checks
This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificates are revoked when they have
This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies i
This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) information such as passwords and
This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder after all browser windows are clo
This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generally only animated GIF files are a
This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound files such as MIDI files are affe
This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embedded video files are affected
This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Mediu
This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone. If you en
This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone. If you enable this policy setting, all network pat
This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone. If you enable this policy setting, sites
This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security
This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or A
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Intranet Zone can run active content such as script,
This policy setting allows you to manage whether script code on pages in the zone is run. If you enable this policy setting, script code on pages in the zone ca
This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality for HTML elements to which
This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. If you enable this policy setting, u
This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link ca
This policy setting allows you to manage whether pages of the zone may download HTML fonts. If you enable this policy setting, HTML fonts can be download
This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this option are: If you enable this polic
This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the Web page uses the Meta Refres
This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region. If you ena
This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars. If you enable this po
This policy setting allows you to manage whether scriptlets can be allowed. If you enable this policy setting, users will be able to run scriptlets. If you disable th
This policy setting manages whether users will be automatically prompted for ActiveX control installations. If you enable this policy setting, users will receive a
This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download d
This policy setting allows you to manage whether users can display nonsecure items and manage whether users receive a security information message to dis
This policy setting allows you to manage whether users are prompted to select a certificate when no certificate or only one certificate exists. If you enable this
This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone. If you enable this policy, users can do
This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially w
This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with paramete
This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Cust
This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages
This policy setting allows you to manage settings for logon options. If you enable this policy setting, you can choose from the following logon options. Anonym
This policy setting allows you to manage the opening of sub-frames and access of applications across different domains. If you enable this policy setting, user
This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by In
This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer.
This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. The
This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone. If you enable this policy setting,
This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script. If you enable this policy setting, script
This policy setting allows you to manage whether applets are exposed to scripts within the zone. If you enable this policy setting, scripts can access applets a
This policy setting allows you to manage software channel permissions. If you enable this policy setting, you can choose the following options from the drop-d
This policy setting allows you to manage whether data on HTML forms on pages in the zone may be submitted. Forms sent with SSL (Secure Sockets Layer) e
This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not
This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page sa
This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone. If you enable thi
This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone. If you enable this p
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone can run active content such as s
Prevents users from adding channels to Internet Explorer. Channels are Web sites that are updated automatically on your computer, according to a schedule
Prevents users from specifying that Web pages can be downloaded for viewing offline. When users make Web pages available for offline viewing, they can vie
Disables existing schedules for downloading Web pages for offline viewing. When users make Web pages available for offline viewing, they can view content
Prevents users from viewing the Channel bar interface. Channels are Web sites that are automatically updated on their computer according to a schedule spe
Prevents content from being downloaded from Web sites that users have subscribed to. When users make Web pages available for offline viewing, they can v
Prevents users from adding, editing, or removing schedules for offline viewing of Web pages and groups of Web pages that users have subscribed to. A subs
Prevents users from editing an existing schedule for downloading Web pages for offline viewing. When users make Web pages available for offline viewing, th
Prevents channel providers from recording information about when their channel pages are viewed by users who are working offline. If you enable this policy,
Prevents users from disabling channel synchronization in Microsoft Internet Explorer. Channels are Web sites that are automatically updated on your compute
Prevents users from clearing the preconfigured settings for Web pages to be downloaded for offline viewing. When users make Web pages available for offlin
Restricts the amount of information downloaded for offline viewing. If you enable this policy, you can set limits to the size and number of pages that users can
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Internet security zone. If you enable this policy, you ca
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Intranet security zone. If you enable this policy,
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Computer security zone. If you enable this polic
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Restricted Sites security zone. If you enable this policy
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Trusted Sites security zone. If you enable this policy, y
This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. This list can be used with the 'Deny all add-ons unless
This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on Manager) or policy setting
This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denied. By default, the 'Add-on List'
This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered into Add-on Manager) or pol
For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved behaviors. This list may be conf
Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to which they are attached. Th
Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received through a Web server. This p
This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer processes when file or code in
This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code installs are restricted. By d
This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code installs are restricted. By default, the
Internet Explorer places zone restrictions on each Web page it opens, which are dependent upon the location of the Web page (Internet, Intranet, Local Machi
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. If you enable
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. This policy se
The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on the MK protocol will fail.
Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manner. This policy setting contr
Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manner.
For each zone, the Network Protocol Lockdown security restriction may be configured to prevent active content obtained through restricted protocols from runn
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a new domain. If you enable t
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a new domain. This policy set
Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (Internet, Intranet, Local M
This policy setting enables applications hosting the Web Browser Control to block automatic prompting of ActiveX control installation. If you enable this policy
This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this policy setting, prompting for Activ
This policy setting enables applications hosting the Web Browser Control to block automatic prompting of file downloads that are not user initiated. If you enab
This policy setting enables blocking of file download prompts that are not user initiated. If you enable this policy setting, file download prompts that are not use
Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictions security feature restricts p
Specifies which buttons will be displayed on the standard toolbar in Microsoft Internet Explorer. If you enable this policy, you can specify whether or not each
Prevents users from determining which buttons appear on the Microsoft Internet Explorer and Windows Explorer standard toolbars. If you enable this policy, th
Prevents users from determining which toolbars are displayed in Microsoft Internet Explorer and Windows Explorer. If you enable this policy, the list of toolbar
Prevents Internet Explorer from automatically installing components. If you enable this policy, it prevents Internet Explorer from downloading a component wh
Prevents Internet Explorer from checking whether a new version of the browser is available. If you enable this policy, it prevents Internet Explorer from checkin
Prevents the Internet Explorer splash screen from appearing when users start the browser. If you enable this policy, the splash screen, which displays the pro
Specifies that programs using the Microsoft Software Distribution Channel will not notify users when they install new components. The Software Distribution Ch
This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager. If you enable this policy setting, u
Applies proxy settings to all users of the same computer. If you enable this policy, users cannot set user-specific proxy settings. They must use the zones crea
This policy setting allows you to manage a list of web sites that will be allowed to open pop-up windows regardless of the Internet Explorer process's Pop-Up B
Prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same security level. If you enable this polic
Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level. If you enable this policy, the Custom
Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same security level. If you enable this po
This policy setting allows you to manage the crash detection feature of add-on Management. If you enable this policy setting, a crash in Internet Explorer will e
This policy setting allows you to manage pop-up management functionality in Internet Explorer. If you enable this policy setting, the Control Panel information
Removes the Advanced tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing adva
Removes the Connections tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing co
Removes the Content tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing ratings
Removes the General tab from the interface in the Internet Options dialog box. If you enable this policy, users are unable to see and change settings for the h
Removes the Privacy tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing default
Removes the Programs tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing defa
Removes the Security tab from the interface in the Internet Options dialog box. If you enable this policy, it prevents users from seeing and changing settings fo
This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run. If you enable this policy setti
This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Explorer components) that are regis
This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts) that can installed by Internet
This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the si
This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, such as toolbars. Browser help
This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer is set to do this, the checks
This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificates are revoked when they have
This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies i
This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) information such as passwords and
This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder after all browser windows are clo
This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generally only animated GIF files are a
This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound files such as MIDI files are affe
This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embedded video files are affected
This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone. If you en
This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone. If you enable this policy setting, all network pat
This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone. If you enable this policy setting, sites
This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone can run active content such as s
This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. This list can be used with the 'Deny all add-ons unless
This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on Manager) or policy setting
This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denied. By default, the 'Add-on List'
This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered into Add-on Manager) or pol
For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved behaviors. This list may be conf
This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer processes when file or code in
This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code installs are restricted. By d
This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code installs are restricted. By default, the
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. This policy se
Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manner.
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a new domain. This policy set
This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this policy setting, prompting for Activ
This policy setting enables blocking of file download prompts that are not user initiated. If you enable this policy setting, file download prompts that are not use
Registry Settings
HKCU\Software\Microsoft\Outlook Express!BlockExeAttachments
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!FormSuggest
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnableAutoProxyResultCache
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Accessibility
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Advanced
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Autoconfig
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!CalendarContact
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Certificates
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Colors
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Connection Settings
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Check_If_Default
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Fonts
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!History
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!HomePage
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Languages
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!links
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Messaging
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Profiles
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Proxy
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!Ratings
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Cache
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExternalBranding
HKCU\Software\Policies\Microsoft\Internet Explorer!DisableImportExportFavorites
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Connwiz Admin Lock
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!ResetWebSettings
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisplayScriptDownloadFailureUI
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows\Allow!FormSuggest Passwords
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Identities!Locked Down
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFindFiles
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchCustomization
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DialupAutodetect
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{DED22F57-FEE2-11D0-953B-00C04FD9152D}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2D360201-FFF5-11D1-8D03-00A0C959BC0A}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{9276B91A-E780-11d2-8A8D-00C04FA31D93}, HKCU\Softwar
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{05589FA1-C356-11CE-BF01-00AA0055595A}, HKCU\Softwar
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{275E2FE0-7486-11D0-89D6-00A0C90C9B67}, HKCU\Softwar
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D45FD31B-5C6E-11D1-9EC1-00C04FD7081F}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D6526FE0-E651-11CF-99CB-00C04FD64497}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{AE24FDAE-03C6-11D1-8B76-0080C744F389}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{BD1F006E-174F-11D2-95C0-00C04F9A8CFA}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2FF18E10-DE11-11D1-8161-00A0C90DD90C}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{26F24A93-1DA2-11D0-A334-00AA004A5FC5}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserContextMenu
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoOpeninNewWnd
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoSelectDownloadDir
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserClose
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileNew
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileOpen
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserSaveWebComplete
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserSaveAs
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemNetscapeHelp
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemSendFeedback
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTipOfTheDay
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTutorial
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoFavorites
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserOptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoTheaterMode
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoViewSource
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOC
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!CheckExeSignatures
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKCU\Software\Policies\Microsoft\Win
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKCU\Software\Policies\Microsoft\Win
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKCU\Software\Po
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKCU\Software\P
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKCU\Software\P
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTemplate
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, H
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKCU\
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKCU\Software\Policie
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKCU\Software\Policies\Mic
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoScheduledUpdates
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelUI
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSubscriptionContent
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingScheduleGroups
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelLogging
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionSize, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Exp
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsoft\Intern
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft\Interne
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Software\Policies\Mi
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft\Interne
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies\Micros
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microso
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Microsoft\Inter
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Microsoft\Inter
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\Policies\Mic
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Policies\Micr
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies\Micros
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!SpecifyDefaultButtons, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Expl
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarCustomize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoBandCustomize
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoUpdateCheck
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSplash
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMSAppLogo5ChannelNotify
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ProxySettingsPerUser
HKLM\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_zones_map_edit
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_options_edit
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_HKLM_only
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOC
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!CheckExeSignatures
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKLM\Software\Pol
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKLM\Software\P
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKLM\Software\P
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTemplate
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, H
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKLM\
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKLM\Software\Policie
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKLM\Software\Policies\Mic
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Exp
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsoft\Interne
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft\Internet
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Software\Policies\Mi
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft\Internet
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies\Micros
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microso
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Microsoft\Inter
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microsoft\Intern
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Policies\Micr
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies\Micros
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS
B-00C04FD9152D}
-00A0C959BC0A}
-00C04FA31D93}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{52ADE293-85E8-11D2-BB22-00104B0EA28 1}
-00AA0055595A}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{22D6F312-B0F6-11D0-94AB-0080C74C7E9 5}
-00A0C90C9B67}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{7823A620-9DD9-11CF-A662-00AA00C066D 2}, HKCU\So
1-00C04FD7081F}
B-00C04FD64497}
6-0080C744F389}
0-00C04F9A8CFA}
-00A0C90DD90C}
-00AA004A5FC5}
B8-444553540000}
gs!LOCALMACHINE_CD_UNLOCK
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Se
U\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Se

oneTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!Local Machine Zone, HKCU\S oftware\Policies\M
downTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-Down Internet, HK CU\Software\Policies\M
downTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-Down Intranet, HK CU\Software\Policies\M
alMachineZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies! Locked-Down Lo
dSitesZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!L ocked-Down Restricted
sZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!Locked-Dow n Trusted Sites, HK
eTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!Restricted Sites, HKCU\Soft ware\Policies\Microsoft\Wind
plate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKCU\Software\Policie s\Microsoft\Windows\Curre

Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionCount, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodeli very\Restrictions!MinUpdateInterval,
Explorer\Persistence\3!DocumentLimit
are\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\M ain\FeatureContro
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Ex plorer\Main\Fe
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Expl orer\Main\Featu
rved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Micro sof
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Ex plorer\Main\Featu
), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKCU\Software\Policies\Microsoft \Interne
, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Int ernet E
U\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main
U\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\
ved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKCU\Software\Policies\M icrosoft\I
ed), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKCU\Software\Policies\Micro soft\In
), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKCU\Software\Policies\Microsoft \Interne
dows\CurrentVersion\Policies\Explorer!Btn_Back, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Forward, HKCU\Software\M icrosoft\Windows\Cu
gs!LOCALMACHINE_CD_UNLOCK
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Set
M\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Set

oneTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!Local Machine Zone, HKLM\S oftware\Policies\Mi
downTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-Down Internet, HK LM\Software\Policies\M
downTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-Down Intranet, HK LM\Software\Policies\M
lMachineZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies! Locked-Down Lo
dSitesZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!L ocked-Down Restricted
sZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!Locked-Dow n Trusted Sites, HKL
Template, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!Restricted Sites, HKLM\Soft ware\Policies\Microsoft\Wind
plate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKLM\Software\Policie s\Microsoft\Windows\Curre

are\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\M ain\FeatureContro
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Ex plorer\Main\Fea
oftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Expl orer\Main\Featu
rved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Micro sof
oftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Ex plorer\Main\Featu
), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKLM\Software\Policies\Microsoft \Internet
, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Int ernet E

M\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\
M\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\F
ved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKLM\Software\Policies\M icrosoft\I
ed), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKLM\Software\Policies\Micro soft\Int
), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKLM\Software\Policies\Microsoft \Internet

22-00104B0EA28 1}
B-0080C74C7E9 5}
62-00AA00C066D 2}, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{F5131C24-E56D-11CF-B78A-444553540000}
ws \CurrentVersion\Internet Settings\Zones\3!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1004, HKCU\Software\Policies\Mic
ws \CurrentVersion\Internet Settings\Zones\1!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1004, HKCU\Software\Policies\Mic

ne, HKCU\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
rnet, HK CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Int
anet, HK CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Int
plate Policies! Locked-Down Local Machine Zone, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1001, HKCU\Software\P
licies!L ocked-Down Restricted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1001, HKCU\Software\Policies\Micros
ocked-Dow n Trusted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1001, HKCU\Software\Policies\Microsoft\Windo
oft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!10
licie s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1004, HKCU

\Restrictions!MinUpdateInterval, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UpdateExcludeBegin, HKCU\Software\Policies\Microsoft\Internet
t Explorer\M ain\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(R
soft\Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE
oft\Internet Expl orer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SE
CU\Software\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet
oft\Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MI
ware\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main
are\Policies\Microsoft\Int ernet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\F
icrosoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEAT
crosoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATU
U\Software\Policies\M icrosoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Exp
\Software\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explo
ware\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main
oftware\M icrosoft\Windows\CurrentVersion\Policies\Explorer!Btn_Stop, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Refresh, HKCU\Software\M

ws \CurrentVersion\Internet Settings\Zones\3!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1004, HKLM\Software\Policies\Mic
ws \CurrentVersion\Internet Settings\Zones\1!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1004, HKLM\Software\Policies\Mic

ne, HKLM\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
rnet, HK LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
anet, HK LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
plate Policies! Locked-Down Local Machine Zone, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1001, HKLM\Software\Po
icies!L ocked-Down Restricted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1001, HKLM\Software\Policies\Micros
cked-Dow n Trusted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1001, HKLM\Software\Policies\Microsoft\Windo
ft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!10
icie s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1004, HKLM

t Explorer\M ain\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(R
soft\Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_
ft\Internet Expl orer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SE
LM\Software\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet E
ft\Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MI
ware\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main
re\Policies\Microsoft\Int ernet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\F

crosoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEAT
crosoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATU
M\Software\Policies\M icrosoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Exp
Software\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explo
ware\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main

-B78A-444553540000}
004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1200, HKCU\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Setting
004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1200, HKCU\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Setting

\CurrentVersion\Internet Settings\Zones\0!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1200 , HKCU\Software\Policies\Micro
soft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1
ones\0!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1004, HKCU\Software\Policies\Microso ft\Windows\CurrentVe
, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1004, HKCU\Software\Policies\Microsoft\ Windows\CurrentVersion\Interne
oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1004, HKCU\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings
ion\Internet Settings\Zones\4!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1200, H KCU\Software\Policies\Microsoft\Window
et Settings\Zones\2!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1200, HKCU\Software \Policies\Microsoft\Windows\CurrentV

ftware\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UpdateExcludeEnd, HKCU\Software\Policies\Micr osoft\Internet Explorer\Infodelivery\Restrictions!MaxWe
ntrol\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, H KCU\Software\
Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HAND LING!ex
in\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND! explorer
ware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\M
in\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIF FING!explorer
s\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC on
Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\F
plorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJEC T_CAC
orer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ ELEVAT
re\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explor er\Main
\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\ F
s\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC on
r!Btn_Refresh, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Home, HKCU\Software\Microsoft\Windows\CurrentVers ion\Policies\Explorer!Btn_S

04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1200, HKLM\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Setting
04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1200, HKLM\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Setting

\CurrentVersion\Internet Settings\Zones\0!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1200 , HKLM\Software\Policies\Micros
soft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1
ones\0!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1004, HKLM\Software\Policies\Microso ft\Windows\CurrentVe
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1004, HKLM\Software\Policies\Microsoft\ Windows\CurrentVersion\Interne
oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1004, HKLM\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings
ion\Internet Settings\Zones\4!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1200, H KLM\Software\Policies\Microsoft\Windows
et Settings\Zones\2!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1200, HKLM\Software \Policies\Microsoft\Windows\CurrentV

trol\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, H KLM\Software\P
Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HAND LING!ex
n\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND! explorer
ware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Ma
n\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIF FING!explorer
\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC ont
icrosoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\F

lorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJEC T_CAC
orer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ ELEVATI
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explor er\Main
Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\ Fe
\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC on

s\CurrentVersion\Internet Settings\Zones\3!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1400, HKCU\Software\Policies\Micros
s\CurrentVersion\Internet Settings\Zones\1!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1400, HKCU\Software\Policies\Micros

, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zo
Settings\Lockdown_Zones\3!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1201, HKCU\Software\Policies\Micros
Settings\Lockdown_Zones\1!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1201, HKCU\Software\Policies\Micros
s\Microso ft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zo
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1201,
urr entVersion\Internet Settings\Lockdown_Zones\2!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1201, HKCU\So
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1400,
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1400, HKCU\So

Infodelivery\Restrictions!MaxWebcrawlLevels
explorer.exe, H KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe
ATURE_MIME_HAND LING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe
RE_SECURITYBAND! explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe
es\Microsoft\Internet Explorer\Main\ FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Fea
RE_MIME_SNIF FING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe
net Explorer\Main\FeatureC ontrol\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE
Explorer\Main\FeatureControl\F EATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PR
trol\FEATURE_OBJEC T_CACHING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe
ol\FEATURE_ZONE_ ELEVATION!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe
Microsoft\Internet Explor er\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC
rosoft\Internet Explorer\Main\ FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureCont
net Explorer\Main\FeatureC ontrol\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE
ers ion\Policies\Explorer!Btn_Search, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Favorites, HKCU\Software\Microsoft\Windows\CurrentVersio

s\CurrentVersion\Internet Settings\Zones\3!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1400, HKLM\Software\Policies\Microso
s\CurrentVersion\Internet Settings\Zones\1!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1400, HKLM\Software\Policies\Microso

, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zo
Settings\Lockdown_Zones\3!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1201, HKLM\Software\Policies\Microso
Settings\Lockdown_Zones\1!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1201, HKLM\Software\Policies\Microso
\Microso ft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zon
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1201, H
urr entVersion\Internet Settings\Lockdown_Zones\2!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1201, HKLM\Soft
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1400,
ies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1400, HKLM\Sof

explorer.exe, H KLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe
ATURE_MIME_HAND LING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe
RE_SECURITYBAND! explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe
es\Microsoft\Internet Explorer\Main\ FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Feat
RE_MIME_SNIF FING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe
net Explorer\Main\FeatureC ontrol\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE
Explorer\Main\FeatureControl\F EATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PR

rol\FEATURE_OBJEC T_CACHING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe
ol\FEATURE_ZONE_ ELEVATION!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe
icrosoft\Internet Explor er\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureCo
osoft\Internet Explorer\Main\ FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureContr
net Explorer\Main\FeatureC ontrol\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1402, HKCU\Software\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Z
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1402, HKCU\Software\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Z

rrentVersion\Internet Settings\Zones\0!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone s\0!1402, HKCU\Software\Policies\Microsoft
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1400, HKCU\Software\Policies\Micros oft\Windows\CurrentVersion\Interne
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1400, HKCU\Software\Policies\Micros oft\Windows\CurrentVersion\Interne
n\Internet Settings\Lockdown_Zones\0!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1 400, HKCU\Software\Policie
tings\Lockdown_Zones\4!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1400 , HKCU\Software\Policies\Microsoft\W
kdown_Zones\2!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1400, HKCU\Softw are\Policies\Microsoft\Windows\C
\Internet Settings\Zones\4!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 !1402, HKCU\Software\Policies\Microsoft\Windows\Cu
Settings\Zones\2!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1402, HKCU\ Software\Policies\Microsoft\Windows\CurrentVers

DLING!iexplore.exe
osoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe
\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe
in\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe
JECT_CACHING!iexplore.exe
E_ELEVATION!iexplore.exe
Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe
rnet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe
r\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe
Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_History, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer !Btn_Folders, HKCU\Software\Micros

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1402, HKLM\Software\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Zo
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1402, HKLM\Software\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Zo

rentVersion\Internet Settings\Zones\0!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone s\0!1402, HKLM\Software\Policies\Microsoft\
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1400, HKLM\Software\Policies\Micros oft\Windows\CurrentVersion\Internet
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1400, HKLM\Software\Policies\Micros oft\Windows\CurrentVersion\Internet
\Internet Settings\Lockdown_Zones\0!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1 400, HKLM\Software\Policies
ings\Lockdown_Zones\4!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1400 , HKLM\Software\Policies\Microsoft\W
down_Zones\2!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1400, HKLM\Softw are\Policies\Microsoft\Windows\Cu
nternet Settings\Zones\4!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 !1402, HKLM\Software\Policies\Microsoft\Windows\Cu
ettings\Zones\2!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1402, HKLM\ Software\Policies\Microsoft\Windows\CurrentVersi

DLING!iexplore.exe
soft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe
Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe
n\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe
ECT_CACHING!iexplore.exe
_ELEVATION!iexplore.exe
nternet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe
rnet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe
urrentVersion\Internet Settings\Zones\3!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1406, HKCU\Software\Policies\Microsoft\
urrentVersion\Internet Settings\Zones\1!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1406, HKCU\Software\Policies\Microsoft\

KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone
!1 400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\
CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1406, HK
\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1406, HKCU\Softw

Folders, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Fullscreen, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Tools
rrentVersion\Internet Settings\Zones\3!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1406, HKLM\Software\Policies\Microsoft\W

KLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
1 400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdo
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1406, HKL

KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1407, HKCU\Software\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1407, HKCU\Software\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone

ntVersion\Internet Settings\Zones\0!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti ngs\Zones\0!1407, HKCU\Software\Policies\Microsoft\Wi
ngs\Lockdown_Zones\3!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3! 1406, HKCU\Software\Policies\Microsoft\W
ngs\Lockdown_Zones\1!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1! 1406, HKCU\Software\Policies\Microsoft\W
rosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\I nternet Settings\Lockdown_Zones\0
ws\CurrentVersion\Internet Settings\Lockdown_Zones\4!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte rnet Settings\Lockdown_Zones\4!1406, HKC
ntVersion\Internet Settings\Lockdown_Zones\2!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\Lockdown_Zones\2!1406, HKCU\Softwar
ernet Settings\Zones\4!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \Zones\4!1407, HKCU\Software\Policies\Microsoft\Windows\Curre
ngs\Zones\2!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!140 7, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion

sion\Policies\Explorer!Btn_Tools, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_MailNews, HKCU\S oftware\Microsoft\Windows\CurrentVersion\P
LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1407, HKLM\Software\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1407, HKLM\Software\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones

Version\Internet Settings\Zones\0!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti ngs\Zones\0!1407, HKLM\Software\Policies\Microsoft\Win
ngs\Lockdown_Zones\3!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3! 1406, HKLM\Software\Policies\Microsoft\Win
ngs\Lockdown_Zones\1!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1! 1406, HKLM\Software\Policies\Microsoft\Win
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I nternet Settings\Lockdown_Zones\0
ws\CurrentVersion\Internet Settings\Lockdown_Zones\4!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte rnet Settings\Lockdown_Zones\4!1406, HKLM
Version\Internet Settings\Lockdown_Zones\2!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\Lockdown_Zones\2!1406, HKLM\Software
net Settings\Zones\4!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \Zones\4!1407, HKLM\Software\Policies\Microsoft\Windows\Curren
gs\Zones\2!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!140 7, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I

entVersion\Internet Settings\Zones\3!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1604, HKCU\Software\Policies\Microsoft\Win
entVersion\Internet Settings\Zones\1!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1604, HKCU\Software\Policies\Microsoft\Win

U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!
U\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
rnet Settings\Lockdown_Zones\0!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1407, HKCU\Software\Policies\Micro
\Lockdown_Zones\4!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1407, HKCU\Software\Policies\Microsoft\Window
n_Zones\2!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKCU\Software\Policies\Microsoft\Windows\Current
olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1604, HKCU
crosoft\Windows\CurrentVersion\Internet Settings\Zones\2!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1604, HKCU\Software\

rosoft\Windows\CurrentVersion\Policies\Explorer!Btn_Size, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Print, HKCU\Software\Microsoft\Window
tVersion\Internet Settings\Zones\3!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1604, HKLM\Software\Policies\Microsoft\Wind
tVersion\Internet Settings\Zones\1!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1604, HKLM\Software\Policies\Microsoft\Wind

\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!16
net Settings\Lockdown_Zones\0!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1407, HKLM\Software\Policies\Micros
Lockdown_Zones\4!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1407, HKLM\Software\Policies\Microsoft\Windows
_Zones\2!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentV
licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1604, HKLM\S
osoft\Windows\CurrentVersion\Internet Settings\Zones\2!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1604, HKLM\Software\P

\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1606, HKCU\Sof tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1606, HKCU\Sof tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1

ersion\Internet Settings\Zones\0!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intern et Settings\Zones\0!1606, HKCU\Software\Policies\Microsoft\Windo
ws\CurrentVersion\Internet Settings\Lockdown_Zones\3!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\3!1604, HKCU
ws\CurrentVersion\Internet Settings\Lockdown_Zones\1!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\1!1604, HKCU
7, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1601, HKCU\Software\Policies \Microsoft\Windows\CurrentVersion\Intern
tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1601, HKCU\Software\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\L
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1601, HKCU\Software\Policies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Lockdown
et Settings\Zones\4!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentV
\Zones\2!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon es\2!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte

KCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Edit, HKCU\Software\Microsoft\Windows\Curr entVersion\Policies\Explorer!Btn_Discussions, HKCU\
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1606, HKLM\Sof tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1606, HKLM\Sof tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1

sion\Internet Settings\Zones\0!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern et Settings\Zones\0!1606, HKLM\Software\Policies\Microsoft\Window
s\CurrentVersion\Internet Settings\Lockdown_Zones\3!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\3!1604, HKLM\S
s\CurrentVersion\Internet Settings\Lockdown_Zones\1!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\1!1604, HKLM\S
, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1601, HKLM\Software\Policies \Microsoft\Windows\CurrentVersion\Interne
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1601, HKLM\Software\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\Lo
ies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1601, HKLM\Software\Policies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Lockdown_Z
Settings\Zones\4!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVer
Zones\2!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon es\2!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter

Version\Internet Settings\Zones\3!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1608, HKCU\Software\Policies\Microsoft\Window
Version\Internet Settings\Zones\1!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1608, HKCU\Software\Policies\Microsoft\Window

oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!160
Lockdown_Zones\3!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1606, HKCU\Software\Policies\Microsoft\Windows
t\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1606
sion\Internet Settings\Lockdown_Zones\2!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1606, HKCU\Software\Polic
ies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1608, HKCU\So
oft\Windows\CurrentVersion\Internet Settings\Zones\2!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1608, HKCU\Software\Pol

xplorer!Btn_Discussions, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Cut, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!B
rsion\Internet Settings\Zones\3!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1608, HKLM\Software\Policies\Microsoft\Windows
rsion\Internet Settings\Zones\1!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1608, HKLM\Software\Policies\Microsoft\Windows

tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1608,
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1606, H
rrentVersion\Internet Settings\Lockdown_Zones\4!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1606, HKLM\Softwa
on\Internet Settings\Lockdown_Zones\2!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1606, HKLM\Software\Policie
s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1608, HKLM\Softw
ft\Windows\CurrentVersion\Internet Settings\Zones\2!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1608, HKLM\Software\Polici

ftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!18
ftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!18

on\Internet Settings\Zones\0!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio n\Internet Settings\Zones\0!1609, HKCU\Software\Policies\Microsoft\Windows\
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1607, HKCU\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lo
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1607, HKCU\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lo
ettings\Lockdown_Zones\0!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z ones\0!1607, HKCU\Software\Policies\Microsoft\
own_Zones\4!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone s\4!1607, HKCU\Software\Policies\Microsoft\Windows\Cu
es\2!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1607, HK CU\Software\Policies\Microsoft\Windows\CurrentVersi
ettings\Zones\4!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\I nternet Settings\Zones\4!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVers
nes\2!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett ings\Zones\2!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Interne

urrentVersion\Policies\Explorer!Btn_Copy, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explo rer!Btn_Paste, HKCU\Software\Microsoft\Windows\CurrentVers

\Internet Settings\Zones\0!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio n\Internet Settings\Zones\0!1609, HKLM\Software\Policies\Microsoft\Windows\C
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1607, HKLM\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Loc
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1607, HKLM\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Loc
ings\Lockdown_Zones\0!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z ones\0!1607, HKLM\Software\Policies\Microsoft\W
wn_Zones\4!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone s\4!1607, HKLM\Software\Policies\Microsoft\Windows\Curr
\2!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1607, HK LM\Software\Policies\Microsoft\Windows\CurrentVersion
tings\Zones\4!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I nternet Settings\Zones\4!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion
es\2!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett ings\Zones\2!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet

ion\Internet Settings\Zones\3!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1802, HKCU\Software\Policies\Microsoft\Windows\C
ion\Internet Settings\Zones\1!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1802, HKCU\Software\Policies\Microsoft\Windows\C

ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1802, H
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1802, HKCU\Softwa
Windows\CurrentVersion\Internet Settings\Zones\2!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1802, HKCU\Software\Policie

e\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Encoding
n\Internet Settings\Zones\3!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1802, HKLM\Software\Policies\Microsoft\Windows\Cu
n\Internet Settings\Zones\1!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1802, HKLM\Software\Policies\Microsoft\Windows\Cu

re\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1802, HK
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
icrosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2
icrosoft\Windows\CurrentVersion\Internet Settings\Zones\4!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1802, HKLM\Software
indows\CurrentVersion\Internet Settings\Zones\2!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1802, HKLM\Software\Policies\M

are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 3!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1804,
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 1!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1804,

nternet Settings\Zones\0!1802, HKCU\Software\Policies\Microsoft\Windows\Curre ntVersion\Internet Settings\Zones\0!1803, HKCU\Software\Policies\Microsoft\Windows\Cur
wn_Zones\3!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\3!1800, HKCU\Software\Policies\Microsoft\Windows\Cur
wn_Zones\1!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\1!1800, HKCU\Software\Policies\Microsoft\Windows\Cur
ows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet Settings\Lockdown_Zones\0!1800, HKC
Version\Internet Settings\Lockdown_Zones\4!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVers ion\Internet Settings\Lockdown_Zones\4!1800, HKCU\Software\
ternet Settings\Lockdown_Zones\2!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1800, HKCU\Software\Policies\M
ngs\Zones\4!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet Settings\Zones\4!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\
\2!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\2!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S

e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 3!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1804, HK
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 1!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1804, HK

ernet Settings\Zones\0!1802, HKLM\Software\Policies\Microsoft\Windows\Curre ntVersion\Internet Settings\Zones\0!1803, HKLM\Software\Policies\Microsoft\Windows\Curre
n_Zones\3!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\3!1800, HKLM\Software\Policies\Microsoft\Windows\Curre
n_Zones\1!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\1!1800, HKLM\Software\Policies\Microsoft\Windows\Curre
ws\CurrentVersion\Internet Settings\Lockdown_Zones\0!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet Settings\Lockdown_Zones\0!1800, HKLM
rsion\Internet Settings\Lockdown_Zones\4!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVers ion\Internet Settings\Lockdown_Zones\4!1800, HKLM\Software\Po
rnet Settings\Lockdown_Zones\2!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1800, HKLM\Software\Policies\Mic
s\Zones\4!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet Settings\Zones\4!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Int
!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\2!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett

Internet Settings\Zones\3!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1809, HKCU\Software\Policies\Microsoft\Windows\Curr
Internet Settings\Zones\1!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1809, HKCU\Software\Policies\Microsoft\Windows\Curr

\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1809, HKC
\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
s\Lockdown_Zones\0!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1802, HKCU\Software\Policies\Microsoft\Windo
_Zones\4!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentV
1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
rosoft\Windows\CurrentVersion\Internet Settings\Zones\4!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1809, HKCU\Software\P
ndows\CurrentVersion\Internet Settings\Zones\2!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1809, HKCU\Software\Policies\M

ernet Settings\Zones\3!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1809, HKLM\Software\Policies\Microsoft\Windows\Curren
ernet Settings\Zones\1!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1809, HKLM\Software\Policies\Microsoft\Windows\Curren

olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1809, HKLM\
Lockdown_Zones\0!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1802, HKLM\Software\Policies\Microsoft\Windows
ones\4!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVers
00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
soft\Windows\CurrentVersion\Internet Settings\Zones\4!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1809, HKLM\Software\Po
ows\CurrentVersion\Internet Settings\Zones\2!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1809, HKLM\Software\Policies\Micr

Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\3!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04, HK
Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\1!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A04, HK

net Settings\Zones\0!1809, HKCU\Software\Policies\Microsoft\Windo ws\CurrentVersion\Internet Settings\Zones\0!1A00, HKCU\Software\Policies\Microsoft\Windows\Curren
ersion\Internet Settings\Lockdown_Zones\3!1803, HKCU\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Lockdown_Zones\3!1804, HKCU\Software\P
ersion\Internet Settings\Lockdown_Zones\1!1803, HKCU\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Lockdown_Zones\1!1804, HKCU\Software\P
oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1803, HKCU\Software\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings
es\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1803, HKCU\Software\Pol icies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1803, HKCU\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!18
Zones\4!1809, HKCU\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\Zones\4!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersi on\Internet Settings\Zones\2!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin

licies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\3!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04, HKLM
licies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\1!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A04, HKLM

t Settings\Zones\0!1809, HKLM\Software\Policies\Microsoft\Windo ws\CurrentVersion\Internet Settings\Zones\0!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentV
sion\Internet Settings\Lockdown_Zones\3!1803, HKLM\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Lockdown_Zones\3!1804, HKLM\Software\Pol
sion\Internet Settings\Lockdown_Zones\1!1803, HKLM\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Lockdown_Zones\1!1804, HKLM\Software\Pol
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1803, HKLM\Software\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo
\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1803, HKLM\Software\Pol icies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zon
\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1803, HKLM\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1804
nes\4!1809, HKLM\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\Zones\4!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
09, HKLM\Software\Policies\Microsoft\Windows\CurrentVersi on\Internet Settings\Zones\2!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

ernet Settings\Zones\3!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00, HKCU\Software\Policies\Microsoft\Windows\Curren
ernet Settings\Zones\1!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1C00, HKCU\Software\Policies\Microsoft\Windows\Curren

olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1C00, HKCU\
Zones\3!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
Zones\1!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
CurrentVersion\Internet Settings\Lockdown_Zones\0!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1809, HKCU\Sof
on\Internet Settings\Lockdown_Zones\4!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1809, HKCU\Software\Policie
t Settings\Lockdown_Zones\2!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1809, HKCU\Software\Policies\Microso
oft\Windows\CurrentVersion\Internet Settings\Zones\4!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1C00, HKCU\Software\Po
ws\CurrentVersion\Internet Settings\Zones\2!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1C00, HKCU\Software\Policies\Micr

et Settings\Zones\3!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVe
et Settings\Zones\1!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVe

ies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1C00, HKLM\So
nes\3!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
nes\1!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
rrentVersion\Internet Settings\Lockdown_Zones\0!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1809, HKLM\Softwa
\Internet Settings\Lockdown_Zones\4!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1809, HKLM\Software\Policies\M
Settings\Lockdown_Zones\2!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1809, HKLM\Software\Policies\Microsoft\W
\Windows\CurrentVersion\Internet Settings\Zones\4!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1C00, HKLM\Software\Policie
\CurrentVersion\Internet Settings\Zones\2!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1C00, HKLM\Software\Policies\Microso

licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2000, HKCU
licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2000, HKCU

t Settings\Zones\0!1C00, HKCU\Software\Policies\Microso ft\Windows\CurrentVersion\Internet Settings\Zones\0!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentV
es\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HKCU\Software \Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
es\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HKCU\Software \Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
down_Zones\0!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo ckdown_Zones\0!1A00, HKCU\Software\Policies\Microsoft\Windows\C
\4!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd own_Zones\4!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2! 1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
nes\4!1C00, HKCU\Software\Policies\Microsoft\ Windows\CurrentVersion\Internet Settings\Zones\4!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
0, HKCU\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings\Zones\2!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

es\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2000, HKLM\So
es\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2000, HKLM\So

ettings\Zones\0!1C00, HKLM\Software\Policies\Microso ft\Windows\CurrentVersion\Internet Settings\Zones\0!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVers
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HKLM\Software \Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zon
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HKLM\Software \Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zon
wn_Zones\0!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo ckdown_Zones\0!1A00, HKLM\Software\Policies\Microsoft\Windows\Curr
1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd own_Zones\4!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I
LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2! 1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
s\4!1C00, HKLM\Software\Policies\Microsoft\ Windows\CurrentVersion\Internet Settings\Zones\4!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
HKLM\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings\Zones\2!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zo

et Settings\Zones\3!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
et Settings\Zones\1!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVe

ies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2001, HKCU\Sof
n\Internet Settings\Lockdown_Zones\3!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00, HKCU\Software\Policie
n\Internet Settings\Lockdown_Zones\1!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1C00, HKCU\Software\Policie
re\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00, H
\Windows\CurrentVersion\Internet Settings\Zones\4!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2001, HKCU\Software\Policie
\CurrentVersion\Internet Settings\Zones\2!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2001, HKCU\Software\Policies\Microso

Settings\Zones\3!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio

nternet Settings\Lockdown_Zones\3!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00, HKLM\Software\Policies\M
nternet Settings\Lockdown_Zones\1!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1C00, HKLM\Software\Policies\M
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1
dows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00, HKL
ndows\CurrentVersion\Internet Settings\Zones\4!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2001, HKLM\Software\Policies\M

es\Microsoft\Windows\CurrentVersion\ Internet Settings\Zones\3!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2100, HKCU\So
es\Microsoft\Windows\CurrentVersion\ Internet Settings\Zones\1!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2100, HKCU\So

ettings\Zones\0!2001, HKCU\Software\Policies \Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersi
\3!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\3!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio
\1!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\1!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio
ntVersion\Internet Settings\Lockdown_Zones\0!1C00, HKCU\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\Lockdown_Zones\0!1E05, HKCU\Softwa
ernet Settings\Lockdown_Zones\4!1C00, HKCU\Software\Policies\Microsoft\Windows\Cur rentVersion\Internet Settings\Lockdown_Zones\4!1E05, HKCU\Software\Policies\M
ngs\Lockdown_Zones\2!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\2!1E05, HKCU\Software\Policies\Microsoft\W
s\4!2001, HKCU\Software\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\Zones\4!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
HKCU\Software\Policies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Zones\2!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zo

Microsoft\Windows\CurrentVersion\ Internet Settings\Zones\3!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2100, HKLM\Softw
Microsoft\Windows\CurrentVersion\ Internet Settings\Zones\1!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2100, HKLM\Softw

ngs\Zones\0!2001, HKLM\Software\Policies \Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\
1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\3!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\1!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
ersion\Internet Settings\Lockdown_Zones\0!1C00, HKLM\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\Lockdown_Zones\0!1E05, HKLM\Software\P
et Settings\Lockdown_Zones\4!1C00, HKLM\Software\Policies\Microsoft\Windows\Cur rentVersion\Internet Settings\Lockdown_Zones\4!1E05, HKLM\Software\Policies\Micro
s\Lockdown_Zones\2!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\2!1E05, HKLM\Software\Policies\Microsoft\Wind
2001, HKLM\Software\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\Zones\4!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti
LM\Software\Policies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Zones\2!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones

Settings\Zones\3!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2101, HKCU\Software\Policies\Microsoft\Windows\Current Vers
Settings\Zones\1!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2101, HKCU\Software\Policies\Microsoft\Windows\Current Vers

n_Zones\0!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2000, HKCU\Software\Policies\Microsoft\Windows\Curren
E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
ndows\CurrentVersion\Internet Settings\Zones\4!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2101, HKCU\Software\Pol icies
rrentVersion\Internet Settings\Zones\2!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2101, HKCU\Software\Policies\Micros oft

ngs\Zones\3!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2101, HKLM\Software\Policies\Microsoft\Windows\Current Version
ngs\Zones\1!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2101, HKLM\Software\Policies\Microsoft\Windows\Current Version

rosoft\Windows\CurrentVersion\Internet Settings\Zones\0!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2101, HKLM\Software\
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!20
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!20
Zones\0!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVe
5, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
ws\CurrentVersion\Internet Settings\Zones\4!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2101, HKLM\Software\Pol icies\Mic
ntVersion\Internet Settings\Zones\2!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2101, HKLM\Software\Policies\Micros oft\Win

Microsoft\Windows\Current Version\Internet Settings\Zones\3!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2200, HKCU\Softw
Microsoft\Windows\Current Version\Internet Settings\Zones\1!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2200, HKCU\Softw

ngs\Zones\0!2101, HKCU\Software\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\
rnet Settings\Lockdown_Zones\3!2001, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zones\3!2004, HKCU\Software\Policies\Mic
rnet Settings\Lockdown_Zones\1!2001, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zones\1!2004, HKCU\Software\Policies\Mic
licies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2001, HKCU\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2001, HKCU\Soft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!20
ws\CurrentVersion\Internet Settings\Lockdown_Zones\2!2001, HKCU\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2004, HKCU
2101, HKCU\Software\Pol icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti
CU\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Zones\2!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones

osoft\Windows\Current Version\Internet Settings\Zones\3!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2200, HKLM\Software\
osoft\Windows\Current Version\Internet Settings\Zones\1!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2200, HKLM\Software\

Zones\0!2101, HKLM\Software\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
t Settings\Lockdown_Zones\3!2001, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zones\3!2004, HKLM\Software\Policies\Micros
t Settings\Lockdown_Zones\1!2001, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zones\1!2004, HKLM\Software\Policies\Micros
es\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2001, HKLM\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2001, HKLM\Soft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2004,
CurrentVersion\Internet Settings\Lockdown_Zones\2!2001, HKLM\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2004, HKLM\So
1, HKLM\Software\Pol icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Zones\2!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2

ngs\Zones\3!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2201, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion
ngs\Zones\1!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2201, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion

rosoft\Windows\CurrentVersion\Internet Settings\Zones\0!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2201, HKCU\S oftware
rsion\Internet Settings\Lockdown_Zones\0!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2100, HKCU\Software\Polic
ws\CurrentVersion\Internet Settings\Zones\4!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2201, HKCU\Soft ware\Policies\Mic
tVersion\Internet Settings\Zones\2!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2201, HKCU\Software\Policie s\Microsoft\Win

\Zones\3!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2201, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Inte
\Zones\1!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2201, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Inte

oft\Windows\CurrentVersion\Internet Settings\Zones\0!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2201, HKLM\S oftware\Po
, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
n\Internet Settings\Lockdown_Zones\0!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2100, HKLM\Software\Policies
ttings\Lockdown_Zones\4!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2100, HKLM\Software\Policies\Microsoft\W
CurrentVersion\Internet Settings\Zones\4!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2201, HKLM\Soft ware\Policies\Micros
rsion\Internet Settings\Zones\2!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2201, HKLM\Software\Policie s\Microsoft\Window

Computer/User
PolicyNode
Path
USER Administrative Templates\Windows Components\NetMeeting\Application Sharing
USER Administrative Templates\Windows Components\NetMeeting\Audio & Video
USER Administrative Templates\Windows Components\NetMeeting\Options Page
USER Administrative Templates\Windows Components\NetMeeting
MACHINE Administrative Templates\Windows Components\NetMeeting
Disable application Sharing at least Windows NetMeeting v3.0
Prevent Sharing at least Windows NetMeeting v3.0
Prevent Desktop Sharing at least Windows NetMeeting v3.0
Prevent Sharing Command Prompts at least Windows NetMeeting v3.0
Prevent Sharing Explorer windows at least Windows NetMeeting v3.0
Prevent Control at least Windows NetMeeting v3.0
Prevent Application Sharing in true color at least Windows NetMeeting v3.0
Limit the bandwidth of Audio and Video at least Windows NetMeeting v3.0
Disable Audio at least Windows NetMeeting v3.0
Disable full duplex Audio at least Windows NetMeeting v3.0
Prevent changing DirectSound Audio setting at least Windows NetMeeting v3.0
Prevent sending Video at least Windows NetMeeting v3.0
Prevent receiving Video at least Windows NetMeeting v3.0
Hide the General page at least Windows NetMeeting v3.0
Disable the Advanced Calling button at least Windows NetMeeting v3.0
Hide the Security page at least Windows NetMeeting v3.0
Hide the Audio page at least Windows NetMeeting v3.0
Hide the Video page at least Windows NetMeeting v3.0
Enable Automatic Configuration at least Windows NetMeeting v3.0
Disable Directory services at least Windows NetMeeting v3.0
Prevent adding Directory servers at least Windows NetMeeting v3.0
Prevent viewing Web directory at least Windows NetMeeting v3.0
Set the intranet support Web page at least Windows NetMeeting v3.0
Set Call Security options at least Windows NetMeeting v3.0
Prevent changing Call placement method at least Windows NetMeeting v3.0
Prevent automatic acceptance of Calls at least Windows NetMeeting v3.0
Allow persisting automatic acceptance of Calls at least Windows NetMeeting v3.0
Prevent sending files at least Windows NetMeeting v3.0
Prevent receiving files at least Windows NetMeeting v3.0
Limit the size of sent files at least Windows NetMeeting v3.0
Disable Chat at least Windows NetMeeting v3.0
Disable NetMeeting 2.x Whiteboard at least Windows NetMeeting v3.0
Disable Whiteboard at least Windows NetMeeting v3.0
Disable remote Desktop Sharing
Help/Explain Text
Disables the application sharing feature of NetMeeting completely. Users will not be able to host or view shared applications.
Prevents users from sharing anything themselves. They will still be able to view shared applications/desktops from others.
Prevents users from sharing the whole desktop. They will still be able to share individual applications.
Prevents users from sharing command prompts. This prevents users from inadvertently sharing out applications, since command prompts can be used to laun
Prevents users from sharing Explorer windows. This prevents users from inadvertently sharing out applications, since Explorer windows can be used to launc
Prevents users from allowing others in a conference to control what they have shared. This enforces a read-only mode; the other participants cannot change t
Prevents users from sharing applications in true color. True color sharing uses more bandwidth in a conference.
Limits the bandwidth audio and video will consume when in a conference. This setting will guide NetMeeting to choose the right formats and send rate so that
Disables the audio feature of NetMeeting. Users will not be able to send or receive audio.
Disables full duplex mode audio. Users will not be able to listen to incoming audio while speaking into the microphone. Older audio hardware does not perform
Prevents user from changing the DirectSound audio setting. DirectSound provides much better audio quality, but older audio hardware may not support it.
Prevents users from sending video if they have the hardware. Users will still be able to receive video from others.
Prevents users from receiving video. Users will still be able to send video provided they have the hardware.
Hides the General page of the Tools Options dialog. Users will not then be able to change personal identification and bandwidth settings.
Disables the Advanced Calling button on the General Options page. Users will not then be able to change the call placement method and the servers used.
Hides the Security page of the Tools Options dialog. Users will not then be able to change call security and authentication settings.
Hides the Audio page of the Tools Options dialog. Users will not then be able to change audio settings.
Hides the Video page of the Tools Options dialog. Users will not then be able to change video settings.
Configures NetMeeting to download settings for users each time it starts. The settings are downloaded from the URL listed in the Configuration URL: text box.
Disables the directory feature of NetMeeting. Users will not logon to a directory (ILS) server when NetMeeting starts. Users will also not be able to view or pla
Prevents users from adding directory (ILS) servers to the list of those they can use for placing calls.
Prevents users from viewing directories as Web pages in a browser.
Sets the URL NetMeeting will display when the user chooses the Help Online Support command.
Sets the level of security for both outgoing and incoming NetMeeting calls.
Prevents users from changing the way calls are placed, either directly or via a gatekeeper server.
Prevents users from turning on automatic acceptance of incoming calls. This ensures that others cannot call and connect to NetMeeting when the user is not
Make the automatic acceptance of incoming calls persistent.
Prevents users from sending files to others in a conference.
Prevents users from receiving files from others in a conference.
Limits the size of files users can send to others in a conference.
Disables the Chat feature of NetMeeting.
Disables the 2.x whiteboard feature of NetMeeting. The 2.x whiteboard is available for compatibility with older versions of NetMeeting only. Deployers who do
Disables the T.126 whiteboard feature of NetMeeting.
Disables the remote desktop sharing feature of NetMeeting. Users will not be able to set it up or use it for controlling their computers remotely.
Registry Settings
HKCU\Software\Policies\Microsoft\Conferencing!NoAppSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDesktop
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDosWindows
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingExplorer
HKCU\Software\Policies\Microsoft\Conferencing!NoAllowControl
HKCU\Software\Policies\Microsoft\Conferencing!NoTrueColorSharing
HKCU\Software\Policies\Microsoft\Conferencing!MaximumBandwidth
HKCU\Software\Policies\Microsoft\Conferencing!NoAudio
HKCU\Software\Policies\Microsoft\Conferencing!NoFullDuplex
HKCU\Software\Policies\Microsoft\Conferencing!NoChangeDirectSound
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingVideo
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingVideo
HKCU\Software\Policies\Microsoft\Conferencing!NoGeneralPage
HKCU\Software\Policies\Microsoft\Conferencing!NoAdvancedCalling
HKCU\Software\Policies\Microsoft\Conferencing!NoSecurityPage
HKCU\Software\Policies\Microsoft\Conferencing!NoAudioPage
HKCU\Software\Policies\Microsoft\Conferencing!NoVideoPage
HKCU\Software\Policies\Microsoft\Conferencing!Use AutoConfig, HKCU\Software\Policies\Microsoft\Conferencing!ConfigFile
HKCU\Software\Policies\Microsoft\Conferencing!NoDirectoryServices
HKCU\Software\Policies\Microsoft\Conferencing!NoAddingDirectoryServers
HKCU\Software\Policies\Microsoft\Conferencing!NoWebDirectory
HKCU\Software\Policies\Microsoft\Conferencing!IntranetSupportURL
HKCU\Software\Policies\Microsoft\Conferencing!CallSecurity
HKCU\Software\Policies\Microsoft\Conferencing!NoChangingCallMode
HKCU\Software\Policies\Microsoft\Conferencing!NoAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!PersistAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingFiles
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingFiles
HKCU\Software\Policies\Microsoft\Conferencing!MaxFileSendSize
HKCU\Software\Policies\Microsoft\Conferencing!NoChat
HKCU\Software\Policies\Microsoft\Conferencing!NoOldWhiteBoard
HKCU\Software\Policies\Microsoft\Conferencing!NoNewWhiteBoard
HKLM\Software\Policies\Microsoft\Conferencing!NoRDS
Computer/User
PolicyNode
Path Full Policy Name
MACHINEAdministrative Templates\Windows Components\Windows
Configure
Update
Automatic Updates
SpecifyUpdate
intranet Microsoft update service location
Enable Update
client-side targeting
Reschedule
Update Automatic Updates scheduled installations
No auto-restart
Update for scheduled Automatic Updates installations
Automatic
Update
Updates detection frequency
Allow Automatic
Update Updates immediate installation
Delay Restart
Updatefor scheduled installations
Re-prompt
Update
for restart with scheduled installations
Allow non-administrators
Update to receive update notifications
Supported on
Windows Server 2003, XP SP1, 2000 SP3
Help/Explain Text
Specifies whether this computer will receive security updates and other important downloads through the Windows automatic updating service. This setting le
Specifies an intranet server to host updates from the Microsoft Update Web sites. You can then use this update service to automatically update computers on
Specifies the target group name that should be used to receive updates from an intranet Microsoft update service. If the status is set to Enabled, the specified
Specifies the amount of time for Automatic Updates to wait, following system startup, before proceeding with a scheduled installation that was missed previous
Specifies that to complete a scheduled installation, Automatic Updates will wait for the computer to be restarted by any user who is logged on, instead of causi
Specifies the hours that Windows will use to determine how long to wait before checking for available updates. The exact wait time is determined by using the
Specifies whether Automatic Updates should automatically install certain updates that neither interrupt Windows services nor restart Windows. If the status is
Specifies the amount of time for Automatic Updates to wait before proceeding with a scheduled restart. If the status is set to Enabled, a scheduled restart will
Specifies the amount of time for Automatic Updates to wait before prompting again with a scheduled restart. If the status is set to Enabled, a scheduled restar
Specifies whether, when logged on, non-administrative users will receive update notifications based on the configuration settings for Automatic Updates. If Aut
Registry Settings
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AUOptions
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUServer, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUSer
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGroupEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGroup
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RescheduleWaitTimeEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoRebootWithLoggedOnUsers
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!DetectionFrequencyEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\A
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AutoInstallMinorUpdates
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootWarningTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpda
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpd
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!ElevateNonAdmins
s\WindowsUpdate\AU!AUOptions, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!ScheduledInstallDay, HKLM\Software\Policies\Microsoft\Win dows\Wind
s\WindowsUpdate\AU!UseWUServer, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!WUServer, HKLM\Software\Policies\Microsoft\Windows\Windo wsUp
ows\WindowsUpdate!TargetGroup
crosoft\Windows\WindowsUpdate\AU!RescheduleWaitTime
osoft\Windows\WindowsUpdate\AU!DetectionFrequency
Microsoft\Windows\WindowsUpdate\AU!RebootWarningTimeout
\Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeout
icies\Microsoft\Win dows\WindowsUpdate\AU!ScheduledInstallTime
icrosoft\Windows\Windo wsUpdate\AU!WUStatusServer
Computer/User
PolicyNode
USER Administrative Templates\Windows Components\Windows
Set andMedia
Lock Player\User
Skin Interface
Do NotMedia
Show Player\User
Anchor Interface
PreventMedia
Codec Player\Playback
Download
Hide Network
Media Player\Networking
Tab
Streaming
Media
Media
Player\Networking
Protocols
Configure
Media
HTTPPlayer\Networking
Proxy
Configure
Media
MMS Player\Networking
Proxy
Configure
Media
Network
Player\Networking
Buffering
MACHINE Administrative Templates\Windows Components\Windows
Do NotMedia
Show Player
First Use Dialog Boxes
PreventMedia
Desktop
Player
Shortcut Creation
PreventMedia
QuickPlayer
Launch Toolbar Shortcut Creation
PreventMedia
Automatic
PlayerUpdates
PreventMedia
VideoPlayer
Smoothing
PreventMedia
CD andPlayer
DVD Media Information Retrieval
PreventMedia
MusicPlayer
File Media Information Retrieval
PreventMedia
RadioPlayer
Station Preset Retrieval
Hide Privacy
Media Tab
Player\User Interface
Hide Security
Media Player\User
Tab Interface
Allow Screen
Media Player\Playback
Saver
Configure
Media
RTSPPlayer\Networking
Proxy
Supported on
Windows Media Player for Windows XP and later.
Windows Media Player 9 Series and later.
Help/Explain Text
Enables Windows Media Player to be shown only in skin mode, using a specified skin. This policy displays the Player only in skin mode by using the skin spec
Prevents the anchor window from being displayed when Windows Media Player is in skin mode. This policy hides the anchor window when the Player is in sk
Prevents Windows Media Player from downloading codecs. This policy prevents the Player from automatically downloading codecs to your computer. In addit
Hides the Network tab. This policy hides the Network tab in Windows Media Player. The default network settings are used unless the user has previously defin
Specifies that the selected protocols are used when receiving streaming media from a server running Windows Media Services. This policy specifies that the p
Specifies the HTTP proxy settings for Windows Media Player. This policy specifies the proxy settings for the HTTP protocol. When this policy is enabled, a pro
Specifies the MMS proxy settings for Windows Media Player. This policy specifies the proxy settings for the MMS protocol. When this policy is enabled, a prox
Specifies whether network buffering uses the default or a specified number of seconds. This policy specifies that the default network buffering is used or spec
Do Not Show First Use Dialog Boxes This policy prevents the Privacy Options and Installation Options dialog boxes from being displayed the first time a user
This policy prevents a shortcut icon for the Player from being added to the user's desktop. When this policy is not configured or disabled, users can choose wh
This policy prevents a shortcut for the Player from being added to the Quick Launch bar. When this policy is not configured or disabled, the user can choose w
Prevents users from being prompted to update Windows Media Player. This policy prevents the Player from being updated and prevents users with administra
Prevents video smoothing from occurring. This policy prevents video smoothing, which can improve video playback on computers with limited resources, from
Prevents media information for CDs and DVDs from being retrieved from the Internet. This policy prevents the Player from automatically obtaining media infor
Prevents media information for music files from being retrieved from the Internet. This policy prevents the Player from automatically obtaining media informatio
Prevents radio station presets from being retrieved from the Internet. This policy prevents the Player from automatically retrieving radio station presets from th
Hides the Privacy tab. This policy hides the Privacy tab in Windows Media Player. The default privacy settings are used for the options on the Privacy tab unle
Hides the Security tab. This policy hides the Security tab in Windows Media Player. The default security settings for the options on the Security tab are used u
Enables a screen saver to interrupt playback. This policy displays a screen saver during playback of digital media according to the options selected on the Sc
Specifies the RTSP proxy settings for Windows Media Player. This policy specifies the proxy settings for the RTSP protocol. When this policy is enabled, a pro
Registry Settings
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!SetAndLockSkin, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DefaultSkin
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DoNotShowAnchor
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCodecDownload
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideNetworkTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!WindowsMediaStreamingProtocols, HKCU\Software\Policies\Microsoft\WindowsMediaPlay
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTT
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBufferingPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!BufferingType, HKC
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!GroupPrivacyAcceptance
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DesktopShortcut
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!QuickLaunchShortcut
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DisableAutoUpdate
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DontUseFrameInterpolation
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCDDVDMetadataRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventMusicFileMetadataRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventRadioPresetsRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HidePrivacyTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideSecurityTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!EnableScreenSaver
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTS
aPlayer!DefaultSkin
cies\Microsoft\WindowsMediaPlayer\Protocols!Multicast, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!UDP, HKCU\Software\Policies \Microsoft\Window

ndowsMediaPlayer\Protocols\HTTP!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\ Policies\Micros
ndowsMediaPlayer\Protocols\MMS!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!AutodetectProxy, HKCU\Software\Pol icies\Microsof
wsMediaPlayer!BufferingType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!UseDefaultBuffering, HKCU\Software\Policies\Microsoft\Windows MediaPlayer!UseD
ndowsMediaPlayer\Protocols\RTSP!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!AutodetectProxy, HKCU\Software\ Policies\Micros

ware\Policies \Microsoft\WindowsMediaPlayer\Protocols!UDPPorts, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!TCP, HKCU\Software\Policies\Micros
KCU\Software\ Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserPr
CU\Software\Pol icies\Microsoft\WindowsMediaPlayer\Protocols\MMS!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!UseProxy, HKCU\
ft\Windows MediaPlayer!UseDefaultBuffering, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBuffering
HKCU\Software\ Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!UseProxy, HK

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!HTTP
\Protocols\HTTP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Policies\Microsoft \WindowsMedia
rotocols\MMS!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!AutodetectProxy, HKCU\Software\Policies\Microsoft\Windo wsMediaPlaye
r\Protocols\RTSP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!AutodetectProxy, HKCU\Software\Policies\Microsoft \WindowsMediaP

cies\Microsoft \WindowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserProxy, HKCU\
Microsoft\Windo wsMediaPlayer\Protocols\MMS!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyPort, HKCU\Software\Policies
cies\Microsoft \WindowsMediaPlayer\Protocols\RTSP!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPort, HKCU\Software\Po

HTTP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserProxy, HKCU\Software\Policies\Microsoft\Win dowsMediaPlay
xyPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!BypassProxyLocal, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\P rotocols\MMS
P!ProxyPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!BypassProxyLocal, HKCU\Software\Policies\Microsoft\WindowsMedi aPlayer\Protoco

s\Microsoft\Win dowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Po
wsMediaPlayer\P rotocols\MMS!BypassProxyLocalAddress
\WindowsMedi aPlayer\Protocols\RTSP!BypassProxyLocalAddress
P!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyAddress, HKCU\Software\Policies\Microsoft\WindowsMediaPlaye r\Protocols\HT
dowsMediaPlaye r\Protocols\HTTP!ProxyPort, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!BypassProxyLocal, HKCU\Software\Policies\Microso
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!BypassProxyLocalAddress
This worksheet provides a historical list of policy settings added
Introduced .adm File Computer/User Node
Windows XP SP2 System MACHINE
Windows XP SP2 System USER
Windows XP SP2 Inetres USER
Windows XP SP2 Inetres MACHINE
Windows Server 2003 SP1 system MACHINE
Windows Server 2003 SP1 inetres USER
Windows Server 2003 SP1 inetres MACHINE
policy settings added after the release of Windows Server 2003.
Policy Path
Administrative Templates\System\User Profiles
Administrative Templates\System\Remote Procedure Call
Administrative Templates\System\Remote Procedure Call
Administrative Templates\System\Internet Communication Management
Administrative Templates\System\Internet Communication Management\Internet Communication settings
Administrative Templates\System
Administrative Templates\System\Distributed COM\Application Compatibility Settings
Administrative Templates\System\Distributed COM\Application Compatibility Settings
Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services
Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds
Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds
Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
Administrative Templates\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
Administrative Templates\Network\Network Connections\Windows Firewall\Domain Profile
Administrative Templates\Network\Network Connections\Windows Firewall\Standard Profile
Administrative Templates\Network\Network Connections\Windows Firewall
Administrative Templates\Network\Background Intelligent Transfer Service
Administrative Templates\Windows Components\Event Viewer
Administrative Templates\Windows Components\Terminal Services\Client
Administrative Templates\Windows Components\Windows Explorer
Administrative Templates\Windows Components\Windows Movie Maker
Administrative Templates\Windows Components\Windows Update
Administrative Templates\Network\Network Connections
Administrative Templates\System\Internet Communication Management
Administrative Templates\System
Administrative Templates\Windows Components\Attachment Manager
Administrative Templates\Windows Components\Windows Explorer
Administrative Templates\Windows Components\Terminal Services\Client
Administrative Templates\Windows Components\Windows Movie Maker
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
Administrative Templates\Windows Components\Internet Explorer
Administrative Templates\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction
Administrative Templates\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction
Administrative Templates\Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security
Administrative Templates\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling
Administrative Templates\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature
Administrative Templates\Windows Components\Internet Explorer\Security Features\Object Caching Protection
Administrative Templates\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions
Administrative Templates\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation
Administrative Templates\Windows Components\Internet Explorer\Security Features\Information Bar
Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install
Administrative Templates\Windows Components\Internet Explorer\Security Features\Restrict File Download
Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management
Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown
Administrative Templates\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protocols Per Security Zone
Administrative Templates\Windows Components\Terminal Services\Client/Server data redirection
Administrative Templates\Windows Components\Terminal Services
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-DownIntranet Zone
Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-DownIntranet Zone
Leave Windows Installer and Group PolicyAt Software
least Microsoft
Installation
Windows
Data XP Professional with SP2
Restrictions for Unauthenticated RPC clientsAt least Microsoft Windows XP Professional with SP2
RPC Endpoint Mapper Client Authentication At least Microsoft Windows XP Professional with SP2
Restrict Internet communication At least Microsoft Windows XP Professional with SP2
Turn off the Publish to Web task for files and
At folders
Turn off Internet download for Web publishing
At least
and Microsoft
online ordering
Windows
wizards
Turn off the Order Prints picture task At least Microsoft Windows XP Professional with SP2 or Windows Server 2003 family
Turn off the Windows Messenger CustomerAtExperience
least Microsoft
Improvement
Windows Program
Turn off Help and Support Center Did you know?
At leastcontent
Turn off Help and Support Center MicrosoftAtKnowledge
least Microsoft
BaseWindows
search XP Professional with SP2
Turn off Internet Connection Wizard if URLAt connection
least Microsoft
is referring
Windows
to Microsoft.com
Turn off Event Viewer Events.asp links At least Microsoft Windows XP Professional with SP2
Turn off Automatic Root Certificates Update At least Microsoft Windows XP Professional with SP2
Turn off Registration if URL connection is referring
At least Microsoft
to Microsoft.com
Turn off Search Companion content file updates
Turn off printing over HTTP At least Microsoft Windows XP Professional with SP2
Turn off Windows Update device driver searching
Turn off Windows Movie Maker automatic codecAt least downloads
Turn off Windows Movie Maker online WebAtlinks least Microsoft Windows XP Professional with SP2
Turn off Windows Movie Maker saving to online
At leastvideo
Microsoft
hostingWindows
providerXP Professional with SP2
Turn off Windows Update device driver searchAt least
prompt
Allow local activation security check exemptions
Define Activation Security Check exemptions At least Microsoft Windows XP Professional with SP2
Turn off Microsoft Peer-to-Peer NetworkingAtServices
Set the Seed Server At least Microsoft Windows XP Professional with SP2
Turn off Multicast Bootstrap At least Microsoft Windows XP Professional with SP2
Windows Firewall: Do not allow exceptionsAt least Microsoft Windows XP Professional with SP2
Windows Firewall: Define program exceptions At least Microsoft Windows XP Professional with SP2
Windows Firewall: Allow remote administration
At least
exception
Windows Firewall: Allow file and printer sharing
At leastexception
Windows Firewall: Allow ICMP exceptions At least Microsoft Windows XP Professional with SP2
Windows Firewall: Allow UPnP framework At exception
Windows Firewall: Prohibit notifications At least Microsoft Windows XP Professional with SP2
Windows Firewall: Allow logging At least Microsoft Windows XP Professional with SP2
Windows Firewall: Prohibit unicast response At to
least
multicast
Microsoft
or broadcast
Windows requests
Windows Firewall: Define port exceptions At least Microsoft Windows XP Professional with SP2
Windows Firewall: Do not allow exceptionsAt least Microsoft Windows XP Professional with SP2
Windows Firewall: Define program exceptions At least Microsoft Windows XP Professional with SP2
Windows Firewall: Allow remote administration
At least
exception
Windows Firewall: Allow file and printer sharing
At leastexception
Windows Firewall: Allow ICMP exceptions At least Microsoft Windows XP Professional with SP2
Windows Firewall: Allow UPnP framework At exception
Windows Firewall: Prohibit notifications At least Microsoft Windows XP Professional with SP2
Windows Firewall: Allow logging At least Microsoft Windows XP Professional with SP2
Windows Firewall: Prohibit unicast response At to
least
multicast
Microsoft
or broadcast
Windows requests
Windows Firewall: Define port exceptions At least Microsoft Windows XP Professional with SP2
Windows Firewall: Allow authenticated IPSec At least
bypassMicrosoft Windows XP Professional with SP2
Maximum network bandwith that BITS usesWindows Windows XP SP2 or computers with BITS 2.0 installed.
Events.asp URL At least Microsoft Windows XP Professional with SP2
Events.asp program At least Microsoft Windows XP Professional with SP2
Events.asp program command line parameters At least Microsoft Windows XP Professional with SP2
Do not allow passwords to be saved At least Microsoft Windows XP Professional with SP2
Turn off shell protocol protected mode At least Microsoft Windows XP Professional with SP2
Do not allow Windows Movie Maker to run At least Microsoft Windows XP Professional with SP2
Do not display 'Install Updates and Shut Down'At least
option
Microsoft
in ShutWindows
Down Windows
XP Professional
dialog boxwith SP2
Do not adjust default option to 'Install Updates
At least
and Microsoft
Shut Down' Windows
in ShutXPDown
Professional
Windows with
dialog
SP2box
Turn off notifications when a connection has At only
leastlimited
Microsoft
or no
Windows
connectivity
Restrict Internet communication At least Microsoft Windows XP Professional with SP2
Turn off the Publish to Web task for files andAt folders
Turn off Internet download for Web publishing At least
and Microsoft
online ordering
Windowswizards
Turn off the Order Prints picture task At least Microsoft Windows XP Professional with SP2 or Windows Server 2003 family
Turn off the Windows Messenger CustomerAtExperience
least MicrosoftImprovement
Windows Program
Turn off printing over HTTP At least Microsoft Windows XP Professional with SP2
Turn off Windows Movie Maker automatic codec At least downloads
Turn off Windows Movie Maker online WebAtlinks least Microsoft Windows XP Professional with SP2
Turn off Windows Movie Maker saving to online At leastvideo
Microsoft
hostingWindows
providerXP Professional with SP2
Turn off Windows Update device driver search At least
prompt
Default risk level for file attachments At least Microsoft Windows XP Professional with SP2
Inclusion list for high risk file types At least Microsoft Windows XP Professional with SP2
Inclusion list for moderate risk file types At least Microsoft Windows XP Professional with SP2
Inclusion list for low file types At least Microsoft Windows XP Professional with SP2
Trust logic for file attachments At least Microsoft Windows XP Professional with SP2
Do not preserve zone information in file attachments
Hide mechanisms to remove zone information At least Microsoft Windows XP Professional with SP2
Notify antivirus programs when opening attachments
Turn off shell protocol protected mode At least Microsoft Windows XP Professional with SP2
Do not allow passwords to be saved At least Microsoft Windows XP Professional with SP2
Do not display 'Install Updates and Shut Down'At least
option
Microsoft
in ShutWindows
Down Windows
XP Professional
dialog boxwith SP2
Do not adjust default option to 'Install Updates
At least
and Microsoft
Shut Down' Windows
in ShutXPDown
Professional
Windows with
dialog
SP2box
Do not allow Windows Movie Maker to run At least Microsoft Windows XP Professional with SP2
Run .NET Framework-reliant components signed at leastwith
Internet
Authenticode
Explorer v6.0 in Windows XP Service Pack 2
Run .NET Framework-reliant components not at least
signedInternet
with Authenticode
Download signed ActiveX controls at least Internet Explorer v6.0 in Windows XP Service Pack 2
Download unsigned ActiveX controls at least Internet Explorer v6.0 in Windows XP Service Pack 2
Initialize and script ActiveX controls not marked
at least
asInternet
safe Explorer v6.0 in Windows XP Service Pack 2
Run ActiveX controls and plugins at least Internet Explorer v6.0 in Windows XP Service Pack 2
at least Internet Explorer v6.0 in Windows XP Service Pack 2
Allow file downloads at least Internet Explorer v6.0 in Windows XP Service Pack 2
Allow font downloads at least Internet Explorer v6.0 in Windows XP Service Pack 2
Java permissions at least Internet Explorer v6.0 in Windows XP Service Pack 2
Access data sources across domains at least Internet Explorer v6.0 in Windows XP Service Pack 2
Allow active content over restricted protocolsat least
to access
Internet
my Explorer
computerv6.0 in Windows XP Service Pack 2
Automatic prompting for file downloads at least Internet Explorer v6.0 in Windows XP Service Pack 2
Automatic prompting for ActiveX controls at least Internet Explorer v6.0 in Windows XP Service Pack 2
Allow META REFRESH at least Internet Explorer v6.0 in Windows XP Service Pack 2
Allow script-initiated windows without size orat position
least Internet
constraints
Allow binary and script behaviors at least Internet Explorer v6.0 in Windows XP Service Pack 2
Display mixed content at least Internet Explorer v6.0 in Windows XP Service Pack 2
Do not prompt for client certificate selectionatwhen
least noInternet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
Allow drag and drop or copy and paste filesat least Internet Explorer v6.0 in Windows XP Service Pack 2
Allow installation of desktop items at least Internet Explorer v6.0 in Windows XP Service Pack 2
Launching applications and files in an IFRAME at least Internet Explorer v6.0 in Windows XP Service Pack 2
Navigate sub-frames across different domains at least Internet Explorer v6.0 in Windows XP Service Pack 2
Software channel permissions at least Internet Explorer v6.0 in Windows XP Service Pack 2
Submit non-encrypted form data at least Internet Explorer v6.0 in Windows XP Service Pack 2
Use Pop-up Blocker at least Internet Explorer v6.0 in Windows XP Service Pack 2
Userdata persistence at least Internet Explorer v6.0 in Windows XP Service Pack 2
Web sites in less privileged Web content zonesat least
can Internet
navigateExplorer
into this
v6.0
zone
in Windows XP Service Pack 2
Allow active scripting at least Internet Explorer v6.0 in Windows XP Service Pack 2
Allow paste operations via script at least Internet Explorer v6.0 in Windows XP Service Pack 2
Scripting of Java applets at least Internet Explorer v6.0 in Windows XP Service Pack 2
Logon options at least Internet Explorer v6.0 in Windows XP Service Pack 2
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
to access
Internet
my Explorer
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
can
Internet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
to access
Internet
my Explorer
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
can
Internet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
to access
Internet
my Explorer
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
can
Internet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
to access
Internet
my Explorer
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
can
Internet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signedInternet
with Authenticode
at least
asInternet
Allow script-initiated windows without size or at position
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
Open files based on content, not file extension at least Internet Explorer v6.0 in Windows XP Service Pack 2
Web sites in less privileged Web content zones at least
can Internet
navigateExplorer
into this
v6.0
zone
Site to Zone Assignment List at least Internet Explorer v6.0 in Windows XP Service Pack 2
Intranet Sites: Include all local (intranet) sites
at least
not listed
Internet
in other
Explorer
zones
v6.0 in Windows XP Service Pack 2
Intranet Sites: Include all sites that bypass attheleast
proxyInternet
serverExplorer v6.0 in Windows XP Service Pack 2
Intranet Sites: Include all network paths (UNCs)at least Internet Explorer v6.0 in Windows XP Service Pack 2
Internet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2
Intranet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2
Trusted Sites Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2
Restricted Sites Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2
Local Machine Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2
l\Security Page at least Internet Explorer v6.0 in Windows XP Service Pack 2
Allow software to run or install even if the signature
at least Internet
is invalid
Allow active content from CDs to run on user at least
machines
Internet Explorer v6.0 in Windows XP Service Pack 2
Turn off pop-up management at least Internet Explorer v6.0 in Windows XP Service Pack 2
Pop-up allow list at least Internet Explorer v6.0 in Windows XP Service Pack 2
Turn off Crash Detection at least Internet Explorer v6.0 in Windows XP Service Pack 2
Do not allow users to enable or disable add-ons at least Internet Explorer v6.0 in Windows XP Service Pack 2
Internet Explorer Processes at least Internet Explorer v6.0 in Windows XP Service Pack 2
Process List at least Internet Explorer v6.0 in Windows XP Service Pack 2
All Processes at least Internet Explorer v6.0 in Windows XP Service Pack 2
Admin-approved behaviors at least Internet Explorer v6.0 in Windows XP Service Pack 2
Deny all add-ons unless specifically allowed at in
least
the Internet
Add-on Explorer
List v6.0 in Windows XP Service Pack 2
Add-on List at least Internet Explorer v6.0 in Windows XP Service Pack 2
Internet Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2
Intranet Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2
Trusted Sites Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2
Restricted Sites Zone Restricted Protocolsat least Internet Explorer v6.0 in Windows XP Service Pack 2
Local Machine Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2
Turn off Crash Detection at least Internet Explorer v6.0 in Windows XP Service Pack 2
Turn off pop-up management at least Internet Explorer v6.0 in Windows XP Service Pack 2
Pop-up allow list at least Internet Explorer v6.0 in Windows XP Service Pack 2
Internet
Authenticode
signed
Internet
with Authenticode
at leastasInternet
to access
Internet
my Explorer
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
Web sites in less privileged Web content zonesat leastcanInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
to access
Internet
my Explorer
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
can
Internet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
to access
Internet
my Explorer
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
can
Internet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
to access
Internet
my Explorer
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
can
Internet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
to access
Internet
my Explorer
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
can
Internet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signedInternet
with Authenticode
at least
asInternet
Allow script-initiated windows without size or at position
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2
Open files based on content, not file extension at least Internet Explorer v6.0 in Windows XP Service Pack 2
Web sites in less privileged Web content zones at least
can Internet
navigateExplorer
into this
v6.0
zone
Site to Zone Assignment List at least Internet Explorer v6.0 in Windows XP Service Pack 2
Intranet Sites: Include all local (intranet) sites
at least
not listed
Internet
in other
Explorer
zones
v6.0 in Windows XP Service Pack 2
Intranet Sites: Include all sites that bypass attheleast
proxyInternet
serverExplorer v6.0 in Windows XP Service Pack 2
Intranet Sites: Include all network paths (UNCs)at least Internet Explorer v6.0 in Windows XP Service Pack 2
Internet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2
Intranet Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2
Trusted Sites Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2
Restricted Sites Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2
Local Machine Zone Template at least Internet Explorer v6.0 in Windows XP Service Pack 2
l\Security Page at least Internet Explorer v6.0 in Windows XP Service Pack 2
Allow software to run or install even if the signature
at least Internet
is invalid
Allow active content from CDs to run on user at least
machines
Internet Explorer v6.0 in Windows XP Service Pack 2
Admin-approved behaviors at least Internet Explorer v6.0 in Windows XP Service Pack 2
Deny all add-ons unless specifically allowed at in
least
the Internet
Add-on Explorer
List v6.0 in Windows XP Service Pack 2
Add-on List at least Internet Explorer v6.0 in Windows XP Service Pack 2
Internet Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2
Intranet Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2
Trusted Sites Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2
Restricted Sites Zone Restricted Protocolsat least Internet Explorer v6.0 in Windows XP Service Pack 2
Local Machine Zone Restricted Protocols at least Internet Explorer v6.0 in Windows XP Service Pack 2
Terminal Server Fallback Printer Driver Behavior
Always show desktop on connection At least Microsoft Windows Server 2003 with SP1
Use the specified Terminal Server license servers
Set the Terminal Server licensing mode At least Microsoft Windows Server 2003 with SP1
Show Tooltips for Licensing problems on Terminal
At least Microsoft
Server Windows Server 2003 with SP1
at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Allow Install On Demand (Internet Explorer)at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Empty Temporary Internet Files folder when at browser
least Internet
is closed
Explorer v6.0 in Windows 2003 Service Pack 1
Allow Install On Demand (Internet Explorer)at least Internet Explorer v6.0 in Windows 2003 Service Pack 1
Empty Temporary Internet Files folder when at browser
least Internet
is closed
Explorer v6.0 in Windows 2003 Service Pack 1
Internet
Authenticode
Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
signed
Internet
with Authenticode
at least
asInternet
safe Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
Service Pack 2 or Windows Server 2003 Service Pack 1
Allow drag and drop or copy and paste filesat least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
canInternet
navigateExplorer
into this
v6.0
zone
in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Internet
Authenticode
signed
Internet
with Authenticode
at least
asInternet
least Internet
constraints
least no
Internet
certificates
Explorer
or only
v6.0one
in Windows
certificate
XPexists.
canInternet
navigateExplorer
into this
v6.0
zone
Locked-Down Trusted Sites Zone Templateat least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Locked-Down Trusted Sites Zone Templateat least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Help/Explain Text Registry Settings
Determines whether the system retains aHKLM\Software\Policies\Microsoft\Windows\System!LeaveAppMgmtData
roaming user’s Windows Installer and Group Policy based software installation data on their profile deletion. By defa
If you enable this setting, it directs the RPC
HKLM\Software\Policies\Microsoft\Windows
Runtime on an RPC server to restrict unauthenticated
NT\Rpc\MinimumConnectionTimeout!RestrictRemoteClients
RPC clients connecting to RPC servers running on a machin
Enabling this setting directs RPC ClientsHKLM\Software\Policies\Microsoft\Windows
that need to communicate with the EndpointNT\Rpc\MinimumConnectionTimeout!EnableAuthEpResolution
Mapper Service to authenticate as long as the RPC call for which the en
Specifies whether Windows can access the HKLM\Software\Policies\Microsoft\InternetManagement!RestrictCommunication,
Internet to accomplish tasks that require Internet resources. If this setting is enabled,
HKLM\Software\Microsoft\Windows\C
all of the the policy settings l
Specifies whether the tasks Publish this file
to the Web, Publish this folder to the Web, and Publish the selected items to the Web, are available from File and F
Specifies whether Windows should download HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
a list of providers for the Web publishing and online ordering wizards. These wizards allow users to select from
Specifies whether the Order Prints OnlineHKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
task is available from Picture Tasks in Windows folders. The Order Prints Online Wizard is used to download a list o
Specifies whether Windows Messenger collectsHKLM\Software\Policies\Microsoft\Messenger\Client!CEIP
anonymous information about how Windows Messenger software and service is used. With the Customer Exp
Specifies whether to show the Did you know? HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines
section of Help and Support Center. This content is dynamically updated when users who are connected to the
Specifies whether users can perform a Microsoft
Knowledge Base search from the Help and Support Center. The Knowledge Base is an online source of tech
Specifies whether the Internet Connection HKLM\Software\Policies\Microsoft\Windows\Internet
Wizard can connect to Microsoft to download a list Connection
of Internet Service
Wizard!ExitOnMSICW
Providers (ISPs). If you enable this setting, th
Specifies whether Events.asp hyperlinksHKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks
are available for events within the Event Viewer application. The Event Viewer normally makes all HTTP(S) URLs int
Specifies whether to automatically update HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate
root certificates using the Windows Update Web site. Typically, a certificate is used when you use a secure Web si
Specifies whether the Windows Registration HKLM\Software\Policies\Microsoft\Windows\Registration
Wizard connects to Microsoft.com for online registration. Wizard
If you
Control!NoRegistration
enable this setting, it blocks users from connectin
Specifies whether Search Companion should HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates
automatically download content updates during local and Internet searches. When the user searches the local m
Specifies whether to allow printing over HTTP
from this client. Printing over HTTP allows
NT\Printers!DisableHTTPPrinting
a client to print to printers on the intranet as well as the Internet. Not
Specifies whether to allow this client to download
print driver packages over HTTP. To NT\Printers!DisableWebPnPDownload
set up HTTP printing, non-inbox drivers need to be downloaded over H
This policy specifies whether Windows searches
Windows Update for device drivers when no local drivers for a device are present. If you enable this setting,
Specifies whether Windows Movie MakerHKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
automatically downloads codecs. Windows Movie Maker can be configured so that codecs are downloaded automa
Specifies whether links to Web sites are HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
available in Windows Movie Maker. These links include the Windows Movie Maker on the Web and Privacy Statemen
Specifies whether users can send a finalHKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
movie to a video hosting provider on the Web by choosing The Web saving option in the Save Movie Wizard of Windo
Specifies whether the administrator will be HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
prompted about going to Windows Update to search for device drivers using the Internet. Note: This setting only ha
Allows you to specify that local computerHKLM\Software\Policies\Microsoft\Windows
administrators can supplement the Define Activation
NT\DCOM\AppCompat!AllowLocalActivationSecurityCheckExemptionList
Security Check exemptions list. If you enable this policy setting,
Allows you to view and change a list of DCOMHKLM\Software\Policies\Microsoft\Windows
server application ids (appids) which are
NT\DCOM\AppCompat!ListBox_Support_ActivationSecurityCheckExemp
exempted from the DCOM Activation security check. DCOM uses two
Allows configuration of components of the HKLM\Software\policies\Microsoft\Peernet!Disabled
operating system used by a client computer to connect to a network. This includes DNS settings and Offline Files.
The Peer Name Resolution Protocol (PNRP) HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!SeedServer,
allows for distributed resolution of a name to an IPV6 address and port HKLM\Software\policies\Microsoft\Peernet\P
number.
Turns on Windows Firewall, which replaces HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!EnableFirewall
Internet Connection Firewall on all computers that are running Windows XP Service Pack 2. If you enable this poli
Specifies that Windows Firewall blocks all HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DoNotAllowExceptions
unsolicited incoming messages. This policy setting overrides all other Windows Firewall policy settings that allow su
Allows you to view and change the program HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!Enabled
exceptions list defined by Group Policy. Windows Firewall uses two program exception lists: one is defined by Gro
Allows administrators to use the Windows HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!AllowUserPrefMerge
Firewall component in Control Panel to define a local program exceptions list. Windows Firewall uses two program e
Allows remote administration of this computer
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!Enabled,
using administrative tools such as the Microsoft Management Console (MMC) and Windows Management HKLM\SOFTW
Instru
Allows file and printer sharing. To do this,HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!Enabled,
Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445. If you enable this policy HKLM\SOFTW
setting, Wind
Defines the set of Internet Control Message HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundDestinationUnrea
Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP messages to determine the s
Allows this computer to receive Remote Desktop
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!Enabled,
requests. To do this, Windows Firewall opens TCP port 3389. If you enable this policy setting, Windows HKLM\SOFFire
Allows this computer to receive unsolicited HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!Enabled,
Plug and Play messages sent by network devices, such as routers with built-in firewalls. To do this, Windows HKLM\SO
Firew
Prevents Windows Firewall from displaying HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!DisableNotifications
notifications to the user when a program requests that Windows Firewall add the program to the program exception
Allows Windows Firewall to record information
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogDroppedPackets,
about the unsolicited incoming messages that it receives. If you enable this policy setting, Windows HKLM\SOFTWA
Firewall wr
Prevents this computer from receiving unicast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!DisableUnicastResponsesToMulticast
responses to its outgoing multicast or broadcast messages. If you enable this policy setting, and this computer
Allows you to view and change the port exceptions
list defined by Group Policy. Windows Firewall uses two port exception lists: one is defined by Group Policy
Allows administrators to use the Windows HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!AllowUserPrefMerge
Firewall component in Control Panel to define a local port exceptions list. Windows Firewall uses two port exception
Turns on Windows Firewall, which replaces HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!EnableFirewall
Internet Connection Firewall on all computers that are running Windows XP Service Pack 2. If you enable this poli
Specifies that Windows Firewall blocks all HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DoNotAllowExceptions
unsolicited incoming messages. This policy setting overrides all other Windows Firewall policy settings that allow su
Allows you to view and change the program HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!Enabled
exceptions list defined by Group Policy. Windows Firewall uses two program exception lists: one is defined by Gro
Allows administrators to use the Windows HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!AllowUserPrefMerge
Firewall component in Control Panel to define a local program exceptions list. Windows Firewall uses two program e
Allows remote administration of this computer
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!Enabled,
using administrative tools such as the Microsoft Management Console (MMC) and Windows Management HKLM\SOFT
Instru
Allows file and printer sharing. To do this,HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!Enabled,
Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445. If you enable this policyHKLM\SOFT setting, Wind
Defines the set of Internet Control Message HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundDestinationUnre
Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP messages to determine the s
Allows this computer to receive Remote Desktop
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!Enabled,
requests. To do this, Windows Firewall opens TCP port 3389. If you enable this policy setting, Windows HKLM\SOFire
Allows this computer to receive unsolicited HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!Enabled,
Plug and Play messages sent by network devices, such as routers with built-in firewalls. To do this, Windows HKLM\S
Firew
Prevents Windows Firewall from displaying HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!DisableNotification
notifications to the user when a program requests that Windows Firewall add the program to the program exception
Allows Windows Firewall to record information
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogDroppedPackets,
about the unsolicited incoming messages that it receives. If you enable this policy setting, Windows HKLM\SOFTW
Firewall wr
Prevents this computer from receiving unicast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!DisableUnicastResponsesToMultica
responses to its outgoing multicast or broadcast messages. If you enable this policy setting, and this computer
Allows you to view and change the port exceptions
list defined by Group Policy. Windows Firewall uses two port exception lists: one is defined by Group Policy
Allows administrators to use the Windows HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!AllowUserPrefMerge
Firewall component in Control Panel to define a local port exceptions list. Windows Firewall uses two port exception
Allows unsolicited incoming messages from HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\ICFv4!BypassFirewall
specified systems that authenticate using the IPSec transport. If you enable this policy setting, you must type a se
Limits the network bandwidth that BITS uses HKLM\Software\Policies\Microsoft\Windows\BITS!EnableBITSMaxBandwidth,
for background transfers (this policy does not affect foreground transfers).HKLM\Software\Policies\Microsoft\Wind
Specify a limit to use during a specific
This is the URL that will be passed to theHKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionURL
Description area in the Event Properties dialog box. Change this value if you want to use a different Web server to ha
This is the program that will be invoked when
the user clicks the events.asp link.
This specifies the command line parameters HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgramCommandLineParameters
that will be passed to the events.asp program
Controls whether passwords can be saved HKLM\Software\Policies\Microsoft\Windows
on this computer from Terminal Services clients. NT\Terminal
If youServices!DisablePasswordSaving
enable this setting the password saving checkbox in Termin
This policy setting allows you to configureHKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applicat
Specifies whether Windows Movie MakerHKLM\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
can run. Windows Movie Maker is a feature of the Windows XP operating system that can be used to capture, edit, a
This policy setting allows you to manageHKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Windows dialog box. If you enable
This policy setting allows you to manageHKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
whether the 'Install Updates and Shut Down' option is allowed to be the default choice in the Shut Down Windows dia
This policy setting allows you to manageHKCU\Software\Policies\Microsoft\Windows\Network
whether notifications are shown to the user when a DHCP-configured
Connections!NC_IpStateChecking
connection is unable to retrieve an IP address f
Specifies whether Windows can access the HKCU\Software\Policies\Microsoft\InternetManagement!RestrictCommunication,
Internet to accomplish tasks that require Internet resources. If this setting is enabled, HKCU\Software\Microsoft\Windows\
all of the the policy settings l
Specifies whether the tasks Publish this file
to the Web, Publish this folder to the Web, and Publish the selected items to the Web, are available from File and F
Specifies whether Windows should download HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
a list of providers for the Web publishing and online ordering wizards. These wizards allow users to select from
Specifies whether the Order Prints OnlineHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
task is available from Picture Tasks in Windows folders. The Order Prints Online Wizard is used to download a list o
Specifies whether Windows Messenger collects
anonymous information about how Windows Messenger software and service is used. With the Customer Exp
Specifies whether to allow printing over HTTP
HKCU\Software\Policies\Microsoft\Windows
from this client. Printing over HTTP allows NT\Printers!DisableHTTPPrinting
a client to print to printers on the intranet as well as the Internet. Not
Specifies whether to allow this client to download
HKCU\Software\Policies\Microsoft\Windows
print driver packages over HTTP. To NT\Printers!DisableWebPnPDownload
set up HTTP printing, non-inbox drivers need to be downloaded over H
Specifies whether Windows Movie MakerHKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
automatically downloads codecs. Windows Movie Maker can be configured so that codecs are downloaded automa
Specifies whether links to Web sites are HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
available in Windows Movie Maker. These links include the Windows Movie Maker on the Web and Privacy Statemen
Specifies whether users can send a finalHKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
movie to a video hosting provider on the Web by choosing The Web saving option in the Save Movie Wizard of Windo
Specifies whether the administrator will beHKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
prompted about going to Windows Update to search for device drivers using the Internet. Note: This setting only ha
This policy setting allows you to manageHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk
the default risk level for file types. To fully customize the risk level for file attachments, you may also need to configure
This policy setting allows you to configureHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes
the list of high risk file types. If the file attachment is in the list of high risk file types and is from the restricted zone, W
This policy setting allows you to configureHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!ModRiskFileTypes
the list of moderate risk file types. If the attachment is in the list of moderate risk file types and is from the restricted o
This policy setting allows you to configureHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!LowRiskFileTypes
the list of low risk file types. If the attachment is in the list of low risk file types, Windows will not prompt the user befo
This policy setting allows you to configureHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!UseTrustedHandlers
the logic that Windows uses to determine the risk for file attachments. Preferring the file handler instructs Windows
This policy setting allows you to manageHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!SaveZoneInformation
whether Windows marks file attachments with information about their zone of origin (i.e. restricted, Internet, intranet, l
This policy setting allows you to manageHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!HideZoneInfoOnProperties
whether users can manually remove the zone information from saved file attachments by clicking the Unblock button
This policy setting allows you to manageHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!ScanWithAntiVirus
the behavior for notifying registered antivirus programs. If multiple programs are registered, they will all be notified. If
This policy setting allows you to configureHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applicat
Controls whether a user can save passwords HKCU\SOFTWARE\Policies\Microsoft\Windows
using a Terminal Services client. If you enable NT\Terminal
this setting
Services!DisablePasswordSaving
the password saving checkbox in Terminal Services c
This policy setting allows you to manageHKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Windows dialog box. If you enable
This policy setting allows you to manageHKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
whether the 'Install Updates and Shut Down' option is allowed to be the default choice in the Shut Down Windows dia
Specifies whether Windows Movie MakerHKCU\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
can run. Windows Movie Maker is a feature of the Windows XP operating system that can be used to capture, edit, a
This policy setting allows you to manageHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
whether .NET Framework components that are signed with Authenticode Settings\Zones\3!2001
can be executed from Internet Explorer. The
whether .NET Framework components that are not signed with Authenticode Settings\Zones\3!2004
can be executed from Internet Explorer.
whether users may download signed ActiveX controls from a page inSettings\Zones\3!1001
the zone. If you enable this policy, users can do
whether users may download unsigned ActiveX controls from the zone. Settings\Zones\3!1004
Such code is potentially harmful, especially w
ActiveX controls not marked as safe. If you enable this policy setting,Settings\Zones\3!1201
ActiveX controls are run, loaded with parameter
whether ActiveX controls and plug-ins can be run on pages from the Settings\Zones\3!1200
specified zone. If you enable this policy setting,
whether an ActiveX control marked safe for scripting can interact withSettings\Zones\3!1405
a script. If you enable this policy setting, script
whether file downloads are permitted from the zone. This option is determined Settings\Zones\3!1803
by the zone of the page with the link ca
whether pages of the zone may download HTML fonts. If you enableSettings\Zones\3!1604
this policy setting, HTML fonts can be download
permissions for Java applets. If you enable this policy setting, you can Settings\Zones\3!1C00
choose options from the drop-down box. Cust
whether Internet Explorer can access data from another security zone Settings\Zones\3!1406
using the Microsoft XML Parser (MSXML) or A
whether a resource hosted on an admin-restricted protocol in the Internet Settings\Zones\3!2300
zone can run active content such as script,
This policy setting determines whether users
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
will be prompted for non user-initiated file downloads. Regardless Settings\Zones\3!2200
of this setting, users will receive file download d
This policy setting manages whether users HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
will be automatically prompted for ActiveX control installations. If you Settings\Zones\3!2201
enable this policy setting, users will receive a
whether a user's browser can be redirected to another Web page if the Settings\Zones\3!1608
author of the Web page uses the Meta Refres
restrictions on script-initiated pop-up windows and windows that include Settings\Zones\3!2102
the title and status bars. If you enable this po
dynamic binary and script behaviors: components that encapsulate specific Settings\Zones\3!2000
functionality for HTML elements to which
whether users can display nonsecure items and manage whether users Settings\Zones\3!1609
receive a security information message to dis
whether users are prompted to select a certificate when no certificateSettings\Zones\3!1A04
or only one certificate exists. If you enable this
whether users can drag files or copy and paste files from a source within Settings\Zones\3!1802
the zone. If you enable this policy setting, u
whether users can install Active Desktop items from this zone. The settings Settings\Zones\3!1800
for this option are: If you enable this polic
whether applications may be run and files may be downloaded from Settings\Zones\3!1804
an IFRAME reference in the HTML of the pages
the opening of sub-frames and access of applications across different Settings\Zones\3!1607
domains. If you enable this policy setting, user
MIME sniffing for file promotion from one type to another based on aSettings\Zones\3!2100
MIME sniff. A MIME sniff is the recognition by In
software channel permissions. If you enable this policy setting, you can Settings\Zones\3!1E05
choose the following options from the drop-d
whether data on HTML forms on pages in the zone may be submitted. Settings\Zones\3!1601
Forms sent with SSL (Secure Sockets Layer) e
whether unwanted pop-up windows appear. Pop-up windows that areSettings\Zones\3!1809
opened when the end user clicks a link are not
the preservation of information in the browser's history, in favorites, in Settings\Zones\3!1606
an XML store, or directly within a Web page sa
whether Web sites from less privileged zones, such as Restricted Sites, Settings\Zones\3!2101
can navigate into this zone. If you enable thi
whether script code on pages in the zone is run. If you enable this policy Settings\Zones\3!1400
setting, script code on pages in the zone ca
whether scripts can perform a clipboard operation (for example, cut, Settings\Zones\3!1407
copy, and paste) in a specified region. If you ena
whether applets are exposed to scripts within the zone. If you enableSettings\Zones\3!1402
this policy setting, scripts can access applets a
settings for logon options. If you enable this policy setting, you can choose Settings\Zones\3!1A00
from the following logon options. Anonym
whether file downloads are permitted from the zone. This option is determined
Settings\Zones\1!1803
whether a resource hosted on an admin-restricted protocol in the IntranetSettings\Zones\1!2300
Zone can run active content such as script,
This policy setting manages whether users
will be automatically prompted for ActiveX control installations. If you
dynamic binary and script behaviors: components that encapsulate specificSettings\Zones\1!2000
whether users can drag files or copy and paste files from a source withinSettings\Zones\1!1802
whether users can install Active Desktop items from this zone. The settings
the preservation of information in the browser's history, in favorites, in
whether Web sites from less privileged zones, such as Internet sites,Settings\Zones\1!2101
can navigate into this zone. If you enable this p
whether script code on pages in the zone is run. If you enable this policy
settings for logon options. If you enable this policy setting, you can choose
Settings\Zones\1!1A00
whether a resource hosted on an admin-restricted protocol in the Trusted Settings\Zones\2!2300
Sites Zone can run active content such as s
whether a resource hosted on an admin-restricted protocol in the Restricted
Sites Zone can run active content such a
whether Web sites from less privileged zones, which could only be custom Settings\Zones\4!2101
zones, can navigate into this zone. If you
from the following logon options: Anonym
the zone. If you enable this policy, users can d
whether a resource hosted on an admin-restricted protocol in the Local Settings\Zones\0!2300
Machine Zone can run active content such as
whether .NET Framework components that are signed with Authenticode Settings\Lockdown_Zones\0!2001
whether .NET Framework components that are not signed with Authenticode Settings\Lockdown_Zones\0!2004
whether users may download signed ActiveX controls from a page inSettings\Lockdown_Zones\0!1001
whether users may download unsigned ActiveX controls from the zone. Settings\Lockdown_Zones\0!1004
ActiveX controls not marked as safe. If you enable this policy setting,Settings\Lockdown_Zones\0!1201
whether ActiveX controls and plug-ins can be run on pages from the Settings\Lockdown_Zones\0!1200
Local Machine zone. If you enable this policy se
whether an ActiveX control marked safe for scripting can interact withSettings\Lockdown_Zones\0!1405
whether file downloads are permitted from the Local Machine zone. This Settings\Lockdown_Zones\0!1803
option is determined by the zone of the page
whether pages of the zone may download HTML fonts. If you enableSettings\Lockdown_Zones\0!1604
permissions for Java applets. If you enable this policy setting, you can Settings\Lockdown_Zones\0!1C00
whether Internet Explorer can access data from another security zone Settings\Lockdown_Zones\0!1406
will be prompted for non user-initiated file downloads. Regardless Settings\Lockdown_Zones\0!2200
will be automatically prompted for ActiveX control installations. If you Settings\Lockdown_Zones\0!2201
whether a user's browser can be redirected to another Web page if the Settings\Lockdown_Zones\0!1608
restrictions on script-initiated pop-up windows and windows that include Settings\Lockdown_Zones\0!2102
dynamic binary and script behaviors: components that encapsulate specific Settings\Lockdown_Zones\0!2000
whether users can display nonsecure items and manage whether users Settings\Lockdown_Zones\0!1609
whether users are prompted to select a certificate when no certificateSettings\Lockdown_Zones\0!1A04
whether users can drag files or copy and paste files from a source within Settings\Lockdown_Zones\0!1802
the Local Machine zone. If you enable this
whether users can install Active Desktop items from the Local Machine Settings\Lockdown_Zones\0!1800
zone. The settings for this option are: If you e
whether applications may be run and files may be downloaded from Settings\Lockdown_Zones\0!1804
the opening of sub-frames and access of applications across different Settings\Lockdown_Zones\0!1607
MIME sniffing for file promotion from one type to another based on aSettings\Lockdown_Zones\0!2100
software channel permissions. If you enable this policy setting, you can Settings\Lockdown_Zones\0!1E05
whether data on HTML forms on pages in the Local Machine zone may Settings\Lockdown_Zones\0!1601
be submitted. Forms sent with SSL (Secure S
whether unwanted pop-up windows appear. Pop-up windows that areSettings\Lockdown_Zones\0!1809
the preservation of information in the browser's history, in favorites, in Settings\Lockdown_Zones\0!1606
whether Web sites from less privileged zones, such as Internet sites,Settings\Lockdown_Zones\0!2101
can navigate to the Local Machine zone. If you
whether script code on pages in the Local Machine zone is run. If you Settings\Lockdown_Zones\0!1400
enable this policy setting, script code on pages
whether scripts can perform a clipboard operation (for example, cut, Settings\Lockdown_Zones\0!1407
whether applets are exposed to scripts within the zone. If you enableSettings\Lockdown_Zones\0!1402
Settings\Lockdown_Zones\0!1A00
a list of sites that you want to associate with a particular security zone. Settings!ListBox_Support_ZoneMapKey
These zone numbers have associated security
This policy setting controls whether localHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
sites which are not explicitly mapped into any Security Zone are forced Settings\ZoneMap!IntranetName
into the local Intranet security zone. If you en
This policy setting controls whether sitesHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
which bypass the proxy server are mapped into the local Intranet security Settings\ZoneMap!ProxyByPass
zone. If you enable this policy setting, sites
This policy setting controls whether URLsHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
representing UNCs are mapped into the local Intranet security zone.Settings\ZoneMap!UNCAsIntranet
If you enable this policy setting, all network pat
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
configure policy settings in this zone consistent with a selected security Settings\Template
level, for example,
Policies!InternetZoneTemplate
Low, Medium Low, Mediu
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet
level, for example,
Policies!IntranetZoneTemplate
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted
configure policy settings in this zone consistent with a selected security Siteslevel,
Settings\Template
for example, Low,
Policies!TrustedSitesZon
Medium Low, Mediu
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted
configure policy settings in this zone consistent with a selected securitySites level,Settings\Template
for example, Low,Policies!RestrictedSite
Medium Low, Mediu
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local
configure policy settings in this zone consistent with a selected security
Machine level,
Zone for Settings\Template
example, Low, MediumPolicies!LocalMa
Low, Mediu
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local
Machine level,
Zone for Lockdown
example, Low,
Settings\Template
Medium Low, Policie
Mediu
This policy setting allows you to manageHKCU\Software\Policies\Microsoft\Internet
whether software, such as ActiveX controlsExplorer\Download!RunInvalidSignatures
and file downloads, can be installed or run by the user even though the si
whether users receive a dialog requesting permission
Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN
for active content on a CD to run. If you enable this policy setti
pop-up management functionality in Internet Explorer\Restrictions!NoPopupManagement
Explorer. If you enable this policy setting, the Control Panel information
a list of web sites that will be allowed to open
Explorer\New
pop-up windows
Windows!ListBox_Support_Allow
regardless of the Internet Explorer process's Pop-Up B
the crash detection feature of add-on Management.
Explorer\Restrictions!NoCrashDetection
If you enable this policy setting, a crash in Internet Explorer will e
whether users have the ability to allow or deny
Explorer\Restrictions!NoExtensionManagement
add-ons through Add-On Manager. If you enable this policy setting, u
Internet Explorer contains dynamic binaryHKCU\Software\Policies\Microsoft\Internet
behaviors: components that encapsulate specific
Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved),
functionality for the HTML elements to which they are attached. HKCU
Th
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS
functionality for the HTML elements to which they are attached. Th
Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
For each zone, the Binary and Scripted Behavior
security restrictions may be configured to allow only a list of Settings!ListBox_Support_AllowedBehaviors
admin-approved behaviors. This list may be conf
The MK Protocol Security Restriction policy
HKCU\Software\Policies\Microsoft\Internet
setting reduces attack surface area by preventing
Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Re
the MK protocol. Resources hosted on the MK protocol will fail.
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK
Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
Internet Explorer places zone restrictionsHKCU\Software\Policies\Microsoft\Internet
on each Web page it opens, which are dependent
upon the location of the Web page (Internet, Intranet, Local Machi
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACH
Internet Explorer uses Multipurpose Internet
Mail Extensions (MIME) data to determine Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved),
file handling procedures for files received through a Web server. This p
Mail Extensions (MIME) data to determine Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDL
Mail Extensions (MIME) data to determine Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
This policy setting determines whether Internet
Explorer MIME sniffing will prevent promotion
Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved),
of a file of one type to a more dangerous file type. If you enableH
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFI
of a file of one type to a more dangerous file type. This policy se
Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
of a file of one type to a more dangerous file type. If you enable
This policy setting defines whether a reference
to an object is accessible when the user
Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved)
navigates within the same domain or to a new domain. If you enable t
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CAC
navigates within the same domain or to a new domain. This policy set
Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
Internet Explorer allows scripts to programmatically
open, resize, and reposition windows
Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Re
of various types. The Window Restrictions security feature restricts p
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RE
Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
Internet Explorer places restrictions on each
Web page it opens. The restrictions areExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved)
dependent upon the location of the Web page (Internet, Intranet, Local M
Web page it opens. The restrictions areExplorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVA
Web page it opens. The restrictions areExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
whether the Information Bar is displayed forExplorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved),
Internet Explorer processes when file or code installs are restricted. By H d
whether the Information Bar is displayed forExplorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBA
specific processes when file or code installs are restricted. By default, the
whether the Information Bar is displayed forExplorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
processes other than the Internet Explorer processes when file or code in
This policy setting enables blocking of ActiveX
control installation prompts for Internet
Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!
Explorer processes. If you enable this policy setting, prompting for Activ
This policy setting enables applications hosting
the Web Browser Control to block automatic
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_A
prompting of ActiveX control installation. If you enable this policy
Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!
This policy setting enables blocking of fileHKCU\Software\Policies\Microsoft\Internet
download prompts that are not user initiated. Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(
If you enable this policy setting, file download prompts that are not use
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FI
prompting of file downloads that are not user initiated. If you enab
Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
This policy setting allows you to ensure that
any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denied. By default, the 'Add-on List'
This policy setting allows you to manageHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID
a list of add-ons to be allowed or denied by Internet Explorer. This list can be used with the 'Deny all add-ons unless
whether the listed processes respect add-on Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MAN
management user preferences (as entered into Add-on Manager) or pol
whether processes respect add-on management Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
user preferences (as reflected by Add-on Manager) or policy setting
Windows Explorer and Internet Explorer HKCU\Software\Policies\Microsoft\Internet
may be configured to prevent active contentExplorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Res
obtained through restricted protocols from running in an unsafe manner.
Internet Explorer may be configured to prevent
active content obtained through restricted
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_L
protocols from running in an unsafe manner. This policy setting contr
Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
For each zone, the Network Protocol LockdownHKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet
security restriction may be configured to prevent active content obtained
Settings\RestrictedProtocols!ListBox_Suppor
through restricted protocols from runn
This policy setting allows you to manageHKLM\Software\Policies\Microsoft\Internet
the crash detection feature of add-on Management.
Explorer\Restrictions!NoCrashDetection
If you enable this policy setting, a crash in Internet Explorer will e
whether users have the ability to allow or denyExplorer\Restrictions!NoExtensionManagement
add-ons through Add-On Manager. If you enable this policy setting, u
pop-up management functionality in Internet Explorer\Restrictions!NoPopupManagement
Explorer. If you enable this policy setting, the Control Panel information
a list of web sites that will be allowed to open
Explorer\New
pop-up windows
Windows!ListBox_Support_Allow
regardless of the Internet Explorer process's Pop-Up B
This policy setting allows you to manageHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
whether ActiveX controls and plug-ins can be run on pages from theSettings\Zones\3!1200
whether an ActiveX control marked safe for scripting can interact with Settings\Zones\3!1405
whether a resource hosted on an admin-restricted protocol in the Internet Settings\Zones\3!2300
zone can run active content such as script,
This policy setting determines whether usersHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
This policy setting manages whether users HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
will be automatically prompted for ActiveX control installations. If you Settings\Zones\3!2201
dynamic binary and script behaviors: components that encapsulate specific Settings\Zones\3!2000
whether users can drag files or copy and paste files from a source within Settings\Zones\3!1802
whether users can install Active Desktop items from this zone. The settings Settings\Zones\3!1800
whether unwanted pop-up windows appear. Pop-up windows that are Settings\Zones\3!1809
the preservation of information in the browser's history, in favorites, in Settings\Zones\3!1606
whether Web sites from less privileged zones, such as Restricted Sites, Settings\Zones\3!2101
can navigate into this zone. If you enable thi
whether applets are exposed to scripts within the zone. If you enable Settings\Zones\3!1402
whether a resource hosted on an admin-restricted protocol in the IntranetSettings\Zones\1!2300
Zone can run active content such as script,
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
whether a resource hosted on an admin-restricted protocol in the Trusted Settings\Zones\2!2300
Sites Zone can run active content such as s
whether a resource hosted on an admin-restricted protocol in the Restricted
Sites Zone can run active content such a
whether Web sites from less privileged zones, which could only be custom Settings\Zones\4!2101
zones, can navigate into this zone. If you
the zone. If you enable this policy, users can d
whether a resource hosted on an admin-restricted protocol in the Local Settings\Zones\0!2300
Machine Zone can run active content such as
ActiveX controls not marked as safe. If you enable this policy setting,Settings\Lockdown_Zones\0!1201
whether ActiveX controls and plug-ins can be run on pages from theSettings\Lockdown_Zones\0!1200
Local Machine zone. If you enable this policy se
whether an ActiveX control marked safe for scripting can interact with Settings\Lockdown_Zones\0!1405
whether file downloads are permitted from the Local Machine zone. This Settings\Lockdown_Zones\0!1803
option is determined by the zone of the page
will be automatically prompted for ActiveX control installations. If you Settings\Lockdown_Zones\0!2201
dynamic binary and script behaviors: components that encapsulate specific Settings\Lockdown_Zones\0!2000
whether users can drag files or copy and paste files from a source within Settings\Lockdown_Zones\0!1802
the Local Machine zone. If you enable this
whether users can install Active Desktop items from the Local Machine Settings\Lockdown_Zones\0!1800
zone. The settings for this option are: If you e
whether data on HTML forms on pages in the Local Machine zone may Settings\Lockdown_Zones\0!1601
be submitted. Forms sent with SSL (Secure S
whether unwanted pop-up windows appear. Pop-up windows that are Settings\Lockdown_Zones\0!1809
the preservation of information in the browser's history, in favorites, in Settings\Lockdown_Zones\0!1606
can navigate to the Local Machine zone. If you
whether script code on pages in the Local Machine zone is run. If you Settings\Lockdown_Zones\0!1400
enable this policy setting, script code on pages
whether applets are exposed to scripts within the zone. If you enable Settings\Lockdown_Zones\0!1402
a list of sites that you want to associate with a particular security zone. Settings!ListBox_Support_ZoneMapKey
These zone numbers have associated security
This policy setting controls whether localHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
sites which are not explicitly mapped into any Security Zone are forced Settings\ZoneMap!IntranetName
into the local Intranet security zone. If you en
This policy setting controls whether sitesHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
which bypass the proxy server are mapped into the local Intranet security Settings\ZoneMap!ProxyByPass
zone. If you enable this policy setting, sites
This policy setting controls whether URLsHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
representing UNCs are mapped into the local Intranet security zone.Settings\ZoneMap!UNCAsIntranet
If you enable this policy setting, all network pat
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
level, for example,
Policies!InternetZoneTemplate
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet
level, for example,
Policies!IntranetZoneTemplate
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted
configure policy settings in this zone consistent with a selected security Siteslevel,
Settings\Template
for example, Low,
Policies!TrustedSitesZon
Medium Low, Mediu
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted
configure policy settings in this zone consistent with a selected securitySites level,
Settings\Template
for example, Low,Policies!RestrictedSite
Medium Low, Mediu
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local
Machine level,
Zone forSettings\Template
example, Low, Medium
Policies!LocalMa
Low, Mediu
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local
Machine level,
Zone forLockdown
example, Low,
Settings\Template
Medium Low, Policie
Mediu
whether software, such as ActiveX controlsExplorer\Download!RunInvalidSignatures
and file downloads, can be installed or run by the user even though the si
whether users receive a dialog requesting Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN
permission for active content on a CD to run. If you enable this policy setti
Internet Explorer contains dynamic binaryHKLM\Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved),
functionality for the HTML elements to which they are attached. HKLMTh
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS
Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
For each zone, the Binary and Scripted Behavior
security restrictions may be configured to allow only a list of Settings!ListBox_Support_AllowedBehaviors
admin-approved behaviors. This list may be conf
HKLM\Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Re
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK
Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
Internet Explorer places zone restrictionsHKLM\Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHI
Mail Extensions (MIME) data to determine Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved),
file handling procedures for files received through a Web server. This H p
Mail Extensions (MIME) data to determine Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDL
Mail Extensions (MIME) data to determine Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved),
of a file of one type to a more dangerous file type. If you enableH
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFI
of a file of one type to a more dangerous file type. This policy se
Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
of a file of one type to a more dangerous file type. If you enable
Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved)
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CAC
navigates within the same domain or to a new domain. This policy set
Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Re
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RE
Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
Web page it opens. The restrictions areExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved)
Web page it opens. The restrictions areExplorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVA
Web page it opens. The restrictions areExplorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
whether the Information Bar is displayed for Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved),
Internet Explorer processes when file or code installs are restricted. By H d
whether the Information Bar is displayed for Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBA
specific processes when file or code installs are restricted. By default, the
whether the Information Bar is displayed for Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
processes other than the Internet Explorer processes when file or code in
This policy setting enables blocking of ActiveX
control installation prompts for Internet
Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(
Explorer processes. If you enable this policy setting, prompting for Activ
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_AC
Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
This policy setting enables blocking of fileHKLM\Software\Policies\Microsoft\Internet
download prompts that are not user initiated. Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(R
If you enable this policy setting, file download prompts that are not use
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FI
Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
This policy setting allows you to ensure that
any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denied. By default, the 'Add-on List'
This policy setting allows you to manageHKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID
a list of add-ons to be allowed or denied by Internet Explorer. This list can be used with the 'Deny all add-ons unless
whether the listed processes respect add-on Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MAN
management user preferences (as entered into Add-on Manager) or pol
whether processes respect add-on management Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
user preferences (as reflected by Add-on Manager) or policy setting
Windows Explorer and Internet Explorer HKLM\Software\Policies\Microsoft\Internet
may be configured to prevent active contentExplorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Res
obtained through restricted protocols from running in an unsafe manner.
Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_L
Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
For each zone, the Network Protocol LockdownHKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet
security restriction may be configured to prevent active content obtained Settings\RestrictedProtocols!ListBox_Suppor
Specifies the Terminal Server fallback printer
HKLM\SOFTWARE\Policies\Microsoft\Windows
driver behavior. By default, Terminal ServerNT\Terminal
fallback printer
Services!fPolicyFallbackPrintDriver,
driver is disabled. If the TerminalHKLM\SOFTWARE
Server does not ha
This policy setting determines whether the HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!fTurnOffSingleAppMode
desktop is always displayed after a client connects to a remote computer or an initial program can run. It can be use
Determines whether terminal servers must HKLM\SOFTWARE\Policies\Microsoft\Windows
first attempt to locate Terminal Server license NT\Terminal
servers that are
Services!LicenseServers
specified in this setting before attempting to locate ot
Determines the type of Terminal Server client
HKLM\SOFTWARE\Policies\Microsoft\Windows
access license (CAL) a device or user requires NT\Terminal
to connect
Services!LicensingMode
to this Terminal Server. Per User licensing mode: Ea
Displays tooltips to the Administrator upon HKLM\SOFTWARE\Policies\Microsoft\Windows
login if there are any licensing issues with the Terminal
NT\Terminal Server.
Services!fDisableTerminalServerTooltip,
Not configured: If this setting is not configured,
HKLM\SOFTW the
whether Internet Explorer checks the Internet Explorer\Main!NoUpdateCheck
for newer versions. When Internet Explorer is set to do this, the checks
whether users can automatically downloadExplorer\Main!NoJITSetup
and install Web components (such as fonts) that can installed by Internet
whether users can download and install self-installing
Explorer\Main!NoWebJITSetup
program files (non-Internet Explorer components) that are regis
whether Internet Explorer will launch COM Explorer\Main!Enable
add-ons known as browser Browser helper
Extensions
objects, such as toolbars. Browser help
whether Internet Explorer will display animatedExplorer\Main!Play_Animations
pictures found in Web content. Generally only animated GIF files are a
whether Internet Explorer will play sounds found
Explorer\Main!Play_Background_Sounds
in web content. Generally only sound files such as MIDI files are affe
whether Internet Explorer will display videos Explorer\Main!Display
found in Web content. Inline
Generally
Videosonly embedded video files are affected
whether Internet Explorer will check revocation status of servers' certificates.
Settings!CertificateRevocation
Certificates are revoked when they have
whether Internet Explorer checks for digitalExplorer\Main!CheckExeSignatures
signatures (which identifies the publisher of signed software and verifies i
whether Internet Explorer will save encrypted pages that contain secure Settings!DisableCachingOfSSLPages
(HTTPS) information such as passwords and
whether Internet Explorer deletes the contents of the Temporary Internet Settings\Cache!Persistent
Files folder after all browser windows are clo
whether Internet Explorer checks the Internet Explorer\Main!NoUpdateCheck
for newer versions. When Internet Explorer is set to do this, the checks
whether users can automatically downloadExplorer\Main!NoJITSetup
and install Web components (such as fonts) that can installed by Internet
whether users can download and install self-installing
Explorer\Main!NoWebJITSetup
program files (non-Internet Explorer components) that are regis
whether Internet Explorer will launch COMExplorer\Main!Enable
add-ons known as browser Browser helper
Extensions
objects, such as toolbars. Browser help
whether Internet Explorer will display animatedExplorer\Main!Play_Animations
pictures found in Web content. Generally only animated GIF files are a
whether Internet Explorer will play sounds Explorer\Main!Play_Background_Sounds
found in web content. Generally only sound files such as MIDI files are affe
whether Internet Explorer will display videos Explorer\Main!Display
found in Web content. Inline
Generally
Videosonly embedded video files are affected
whether Internet Explorer will check revocation status of servers' certificates.
Settings!CertificateRevocation
Certificates are revoked when they have
whether Internet Explorer checks for digitalExplorer\Main!CheckExeSignatures
signatures (which identifies the publisher of signed software and verifies i
whether Internet Explorer will save encrypted pages that contain secure Settings!DisableCachingOfSSLPages
(HTTPS) information such as passwords and
whether Internet Explorer deletes the contents of the Temporary Internet Settings\Cache!Persistent
Files folder after all browser windows are clo
ActiveX controls not marked as safe. If you enable this policy setting, Settings\Lockdown_Zones\3!1201
ActiveX controls are run, loaded with paramete
whether file downloads are permitted from the zone. This option is determined Settings\Lockdown_Zones\3!1803
Settings\Lockdown_Zones\3!2201
dynamic binary and script behaviors: components that encapsulate specificSettings\Lockdown_Zones\3!2000
whether users can drag files or copy and paste files from a source withinSettings\Lockdown_Zones\3!1802
whether data on HTML forms on pages in the zone may be submitted. Settings\Lockdown_Zones\3!1601
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Lockdown
level, for
Settings\Template
Policies!InternetZo
Low, Mediu
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet
Lockdown
level, for
Settings\Template
Policies!IntranetZo
Low, Mediu
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted
Siteslevel,
Lockdown
for example,
Settings\Template
Low, MediumPolicies!Trust
Low, Mediu
This template policy setting allows you toHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted
configure policy settings in this zone consistent with a selected securitySites
level,Lockdown
for example,
Settings\Template
Low, Medium Low,Policies!Re
Mediu
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Lockdown
level, for
Settings\Template
Policies!InternetZon
Low, Mediu
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet
Lockdown
level, for
Settings\Template
Policies!IntranetZon
Low, Mediu
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted
Siteslevel,
Lockdown
for example,
Settings\Template
Low, Medium Policies!Trust
Low, Mediu
This template policy setting allows you toHKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted
configure policy settings in this zone consistent with a selected securitySites
level,Lockdown
for example,
Settings\Template
Low, Medium Low,Policies!Re
Mediu
whether scriptlets can be allowed. If you enable this policy setting, users
will be able to run scriptlets. If you disable th
RestrictRemoteClients
EnableAuthEpResolution
KLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
vationSecurityCheckExemptionList
rt_ActivationSecurityCheckExemptionList
oftware\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DontIncludeMicrosoftSeedServer
pplications!Enabled
pplications!AllowUserPrefMerge
inSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!RemoteAddresses
eAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!RemoteAddresses
s!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundSourceQuench, HKLM\SOFTW
moteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!RemoteAddresses
nPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!RemoteAddresses
nPFramework!DisableNotifications
DroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\Windows
ableUnicastResponsesToMulticastBroadcast
nPorts!Enabled
nPorts!AllowUserPrefMerge
Applications!Enabled
Applications!AllowUserPrefMerge
minSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!RemoteAddresses
leAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!RemoteAddresses
gs!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundSourceQuench, HKLM\SOFT
emoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!RemoteAddresses
PnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!RemoteAddresses
PnPFramework!DisableNotifications
gDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\Windo
sableUnicastResponsesToMulticastBroadcast
enPorts!Enabled
enPorts!AllowUserPrefMerge
M\Software\Policies\Microsoft\Windows\BITS!MaxTransferRateOnSchedule, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBandwidthValidFrom, HKLM\Software\Polic

mandLineParameters
ellProtocolBehavior
hutdownOption
KCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
InfoOnProperties
ellProtocolBehavior
hutdownOption
own_Zones\0!2001
own_Zones\0!2004
own_Zones\0!1001
own_Zones\0!1004
own_Zones\0!1201
own_Zones\0!1200
own_Zones\0!1405
own_Zones\0!1803
own_Zones\0!1604
own_Zones\0!1C00
own_Zones\0!1406
own_Zones\0!2200
own_Zones\0!2201
own_Zones\0!1608
own_Zones\0!2102
own_Zones\0!2000
own_Zones\0!1609
own_Zones\0!1A04
own_Zones\0!1802
own_Zones\0!1800
own_Zones\0!1804
own_Zones\0!1607
own_Zones\0!2100
own_Zones\0!1E05
own_Zones\0!1601
own_Zones\0!1809
own_Zones\0!1606
own_Zones\0!2101
own_Zones\0!1400
own_Zones\0!1407
own_Zones\0!1402
own_Zones\0!1A00
ox_Support_ZoneMapKey
Map!IntranetName
Map!ProxyByPass
Map!UNCAsIntranet
late Policies!InternetZoneTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKCU\Software\Policies\Microso
late Policies!IntranetZoneTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKCU\Software\Policies\Microso
Template Policies!TrustedSitesZoneTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKCU\Sof
gs\Template Policies!RestrictedSitesZoneTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!Restricted Sites, H
ettings\Template Policies!LocalMachineZoneTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!Local Mac
ockdown Settings\Template Policies!LocalMachineZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settin
E_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOCK
E_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKCU\Software\Policies\Microso

upport_FEATURE_BEHAVIORS
E_BEHAVIORS!*
ox_Support_AllowedBehaviors
E_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HK
upport_FEATURE_DISABLE_MK_PROTOCOL
E_DISABLE_MK_PROTOCOL!*
E_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer
upport_FEATURE_LOCALMACHINE_LOCKDOWN
E_LOCALMACHINE_LOCKDOWN!*
E_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKCU\Software\Polic
upport_FEATURE_MIME_HANDLING
E_MIME_HANDLING!*
E_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKCU\Software\Policies
upport_FEATURE_MIME_SNIFFING
E_MIME_SNIFFING!*
E_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKCU\Software\P
upport_FEATURE_OBJECT_CACHING
E_OBJECT_CACHING!*
E_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HK
upport_FEATURE_WINDOW_RESTRICTIONS
E_WINDOW_RESTRICTIONS!*
E_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKCU\Software\Po
upport_FEATURE_ZONE_ELEVATION
E_ZONE_ELEVATION!*
E_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKCU\Software\Policies
upport_FEATURE_SECURITYBAND
E_SECURITYBAND!*
E_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.e
upport_FEATURE_RESTRICT_ACTIVEXINSTALL
E_RESTRICT_ACTIVEXINSTALL!*
E_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe
upport_FEATURE_RESTRICT_FILEDOWNLOAD
E_RESTRICT_FILEDOWNLOAD!*
upport_FEATURE_ADDON_MANAGEMENT
E_ADDON_MANAGEMENT!*
E_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKC
upport_FEATURE_PROTOCOL_LOCKDOWN
E_PROTOCOL_LOCKDOWN!*
estrictedProtocols!ListBox_Support_3
own_Zones\0!2001
own_Zones\0!2004
own_Zones\0!1001
own_Zones\0!1004
own_Zones\0!1201
own_Zones\0!1200
own_Zones\0!1405
own_Zones\0!1803
own_Zones\0!1604
own_Zones\0!1C00
own_Zones\0!1406
own_Zones\0!2200
own_Zones\0!2201
own_Zones\0!1608
own_Zones\0!2102
own_Zones\0!2000
own_Zones\0!1609
own_Zones\0!1A04
own_Zones\0!1802
own_Zones\0!1800
own_Zones\0!1804
own_Zones\0!1607
own_Zones\0!2100
own_Zones\0!1E05
own_Zones\0!1601
own_Zones\0!1809
own_Zones\0!1606
own_Zones\0!2101
own_Zones\0!1400
own_Zones\0!1407
own_Zones\0!1402
own_Zones\0!1A00
ox_Support_ZoneMapKey
Map!IntranetName
Map!ProxyByPass
Map!UNCAsIntranet
late Policies!InternetZoneTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKLM\Software\Policies\Microso
late Policies!IntranetZoneTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKLM\Software\Policies\Microso
Template Policies!TrustedSitesZoneTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKLM\Soft
gs\Template Policies!RestrictedSitesZoneTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!Restricted Sites, H
ettings\Template Policies!LocalMachineZoneTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!Local Mac
ockdown Settings\Template Policies!LocalMachineZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settin
E_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOCK
E_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKLM\Software\Policies\Microsof
upport_FEATURE_BEHAVIORS
E_BEHAVIORS!*
ox_Support_AllowedBehaviors
E_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HK
upport_FEATURE_DISABLE_MK_PROTOCOL
E_DISABLE_MK_PROTOCOL!*
E_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer
upport_FEATURE_LOCALMACHINE_LOCKDOWN
E_LOCALMACHINE_LOCKDOWN!*
E_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKLM\Software\Polici
upport_FEATURE_MIME_HANDLING
E_MIME_HANDLING!*
E_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKLM\Software\Policies
upport_FEATURE_MIME_SNIFFING
E_MIME_SNIFFING!*
E_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKLM\Software\Po
upport_FEATURE_OBJECT_CACHING
E_OBJECT_CACHING!*
E_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKL
upport_FEATURE_WINDOW_RESTRICTIONS
E_WINDOW_RESTRICTIONS!*
E_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKLM\Software\Po
upport_FEATURE_ZONE_ELEVATION
E_ZONE_ELEVATION!*
E_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKLM\Software\Policies
upport_FEATURE_SECURITYBAND
E_SECURITYBAND!*
E_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.ex
upport_FEATURE_RESTRICT_ACTIVEXINSTALL
E_RESTRICT_ACTIVEXINSTALL!*
E_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe
upport_FEATURE_RESTRICT_FILEDOWNLOAD
E_RESTRICT_FILEDOWNLOAD!*
upport_FEATURE_ADDON_MANAGEMENT
E_ADDON_MANAGEMENT!*
E_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM
upport_FEATURE_PROTOCOL_LOCKDOWN
E_PROTOCOL_LOCKDOWN!*
ckPrintDriver, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!FallbackPrintDriverType
minalServerTooltip, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip
cateRevocation
leCachingOfSSLPages
cateRevocation
leCachingOfSSLPages
own_Zones\3!2001
own_Zones\3!2004
own_Zones\3!1001
own_Zones\3!1004
own_Zones\3!1201
own_Zones\3!1200
own_Zones\3!1405
own_Zones\3!1803
own_Zones\3!1604
own_Zones\3!1C00
own_Zones\3!1406
own_Zones\3!2200
own_Zones\3!2201
own_Zones\3!1608
own_Zones\3!2102
own_Zones\3!2000
own_Zones\3!1609
own_Zones\3!1A04
own_Zones\3!1802
own_Zones\3!1800
own_Zones\3!1804
own_Zones\3!1607
own_Zones\3!2100
own_Zones\3!1E05
own_Zones\3!1601
own_Zones\3!1809
own_Zones\3!1606
own_Zones\3!2101
own_Zones\3!1400
own_Zones\3!1407
own_Zones\3!1402
own_Zones\3!1A00
own_Zones\3!2001
own_Zones\3!2004
own_Zones\3!1001
own_Zones\3!1004
own_Zones\3!1201
own_Zones\3!1200
own_Zones\3!1405
own_Zones\3!1803
own_Zones\3!1604
own_Zones\3!1C00
own_Zones\3!1406
own_Zones\3!2200
own_Zones\3!2201
own_Zones\3!1608
own_Zones\3!2102
own_Zones\3!2000
own_Zones\3!1609
own_Zones\3!1A04
own_Zones\3!1802
own_Zones\3!1800
own_Zones\3!1804
own_Zones\3!1607
own_Zones\3!2100
own_Zones\3!1E05
own_Zones\3!1601
own_Zones\3!1809
own_Zones\3!1606
own_Zones\3!2101
own_Zones\3!1400
own_Zones\3!1407
own_Zones\3!1402
own_Zones\3!1A00
own_Zones\1!2001
own_Zones\1!2004
own_Zones\1!1001
own_Zones\1!1004
own_Zones\1!1201
own_Zones\1!1200
own_Zones\1!1405
own_Zones\1!1803
own_Zones\1!1604
own_Zones\1!1C00
own_Zones\1!1406
own_Zones\1!2200
own_Zones\1!2201
own_Zones\1!1608
own_Zones\1!2102
own_Zones\1!2000
own_Zones\1!1609
own_Zones\1!1A04
own_Zones\1!1802
own_Zones\1!1800
own_Zones\1!1804
own_Zones\1!1607
own_Zones\1!2100
own_Zones\1!1E05
own_Zones\1!1601
own_Zones\1!1809
own_Zones\1!1606
own_Zones\1!2101
own_Zones\1!1400
own_Zones\1!1407
own_Zones\1!1402
own_Zones\1!1A00
own_Zones\1!2001
own_Zones\1!2004
own_Zones\1!1001
own_Zones\1!1004
own_Zones\1!1201
own_Zones\1!1200
own_Zones\1!1405
own_Zones\1!1803
own_Zones\1!1604
own_Zones\1!1C00
own_Zones\1!1406
own_Zones\1!2200
own_Zones\1!2201
own_Zones\1!1608
own_Zones\1!2102
own_Zones\1!2000
own_Zones\1!1609
own_Zones\1!1A04
own_Zones\1!1802
own_Zones\1!1800
own_Zones\1!1804
own_Zones\1!1607
own_Zones\1!2100
own_Zones\1!1E05
own_Zones\1!1601
own_Zones\1!1809
own_Zones\1!1606
own_Zones\1!2101
own_Zones\1!1400
own_Zones\1!1407
own_Zones\1!1402
own_Zones\1!1A00
own_Zones\4!2001
own_Zones\4!2004
own_Zones\4!1001
own_Zones\4!1004
own_Zones\4!1201
own_Zones\4!1200
own_Zones\4!1405
own_Zones\4!1803
own_Zones\4!1604
own_Zones\4!1C00
own_Zones\4!1406
own_Zones\4!2200
own_Zones\4!2201
own_Zones\4!1608
own_Zones\4!2102
own_Zones\4!2000
own_Zones\4!1609
own_Zones\4!1A04
own_Zones\4!1802
own_Zones\4!1800
own_Zones\4!1804
own_Zones\4!1607
own_Zones\4!2100
own_Zones\4!1E05
own_Zones\4!1601
own_Zones\4!1809
own_Zones\4!1606
own_Zones\4!2101
own_Zones\4!1400
own_Zones\4!1407
own_Zones\4!1402
own_Zones\4!1A00
own_Zones\4!2001
own_Zones\4!2004
own_Zones\4!1001
own_Zones\4!1004
own_Zones\4!1201
own_Zones\4!1200
own_Zones\4!1405
own_Zones\4!1803
own_Zones\4!1604
own_Zones\4!1C00
own_Zones\4!1406
own_Zones\4!2200
own_Zones\4!2201
own_Zones\4!1608
own_Zones\4!2102
own_Zones\4!2000
own_Zones\4!1609
own_Zones\4!1A04
own_Zones\4!1802
own_Zones\4!1800
own_Zones\4!1804
own_Zones\4!1607
own_Zones\4!2100
own_Zones\4!1E05
own_Zones\4!1601
own_Zones\4!1809
own_Zones\4!1606
own_Zones\4!2101
own_Zones\4!1400
own_Zones\4!1407
own_Zones\4!1402
own_Zones\4!1A00
own_Zones\2!2001
own_Zones\2!2004
own_Zones\2!1001
own_Zones\2!1004
own_Zones\2!1201
own_Zones\2!1200
own_Zones\2!1405
own_Zones\2!1803
own_Zones\2!1604
own_Zones\2!1C00
own_Zones\2!1406
own_Zones\2!2200
own_Zones\2!2201
own_Zones\2!1608
own_Zones\2!2102
own_Zones\2!2000
own_Zones\2!1609
own_Zones\2!1A04
own_Zones\2!1802
own_Zones\2!1800
own_Zones\2!1804
own_Zones\2!1607
own_Zones\2!2100
own_Zones\2!1E05
own_Zones\2!1601
own_Zones\2!1809
own_Zones\2!1606
own_Zones\2!2101
own_Zones\2!1400
own_Zones\2!1407
own_Zones\2!1402
own_Zones\2!1A00
own_Zones\2!2001
own_Zones\2!2004
own_Zones\2!1001
own_Zones\2!1004
own_Zones\2!1201
own_Zones\2!1200
own_Zones\2!1405
own_Zones\2!1803
own_Zones\2!1604
own_Zones\2!1C00
own_Zones\2!1406
own_Zones\2!2200
own_Zones\2!2201
own_Zones\2!1608
own_Zones\2!2102
own_Zones\2!2000
own_Zones\2!1609
own_Zones\2!1A04
own_Zones\2!1802
own_Zones\2!1800
own_Zones\2!1804
own_Zones\2!1607
own_Zones\2!2100
own_Zones\2!1E05
own_Zones\2!1601
own_Zones\2!1809
own_Zones\2!1606
own_Zones\2!2101
own_Zones\2!1400
own_Zones\2!1407
own_Zones\2!1402
own_Zones\2!1A00
ings\Template Policies!InternetZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-D
ings\Template Policies!IntranetZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-D
n Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template P
own Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Tem
ings\Template Policies!InternetZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!Locked-D
ings\Template Policies!IntranetZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!Locked-D
n Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Po
own Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Tem
own_Zones\3!1209
own_Zones\0!1209
own_Zones\4!1209
own_Zones\2!1209
own_Zones\1!1209
own_Zones\3!1209
own_Zones\0!1209
own_Zones\4!1209
own_Zones\2!1209
own_Zones\1!1209
olicies\Explorer!NoWebServices, HKLM\Software\Mi crosoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKLM\Software\Policies\Microsoft\Messenge
dSourceQuench, HKLM\SOFTWARE\Policies\Microsoft\Windows Firewall\DomainProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewal
ARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Loggin g!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSu
undSourceQuench, HKLM\SOFTWARE\Policies\Microsoft\Win dowsFirewall\StandardProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFire
TWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\ Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!
ValidFrom, HKLM\Software\Policies\Microsoft\Windows\BIT S!MaxBandwidthValidTo, HKLM\Software\Policies\Microsoft\Windows\BITS!UseSystemMaximum, HKLM\Softwa

Policies\Explorer!NoWebServices, HKCU\Software\Mi crosoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard, HKCU\Software\Policies\Microsoft\Messenge
HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Zones\3!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zo
HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Zones\1!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zo
olicies!Trusted Sites, HKCU\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio
mplate Policies!Restricted Sites, HKCU\Soft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1001, HKCU\Software\Policies\Microsoft\Windows\Cur
ngs\Template Policies!Local Machine Zone, HKCU\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKCU\Software\Policies\Microsoft\W
l Machine Zone Lockdown Settings\Template Policies! Locked-Down Local Machine Zone, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lock
HKCU\Software\Policies\Microsoft\Internet Explorer\M ain\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Fe
K_PROTOCOL!explorer.exe, HKCU\Software\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe, HKCU\Software
ACHINE_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe, HK
plorer.exe, HKCU\Software\Policies\Microsoft\Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet
rer.exe, HKCU\Software\Policies\Microsoft\Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Exp

!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe, HKCU\Software\Policies\Microsoft\Inte
ESTRICTIONS!explorer.exe, HKCU\Software\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe, HKCU\Software
explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe, HKCU\Software\Policies\Microsoft\Inter
rer.exe, HKCU\Software\Policies\Microsoft\Internet Expl orer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Exp
T_ACTIVEXINSTALL!explorer.exe, HKCU\Software\Policies\M icrosoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe, HKCU
T_FILEDOWNLOAD!explorer.exe, HKCU\Software\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe, HKCU\S
LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Int ernet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe, HKCU\Software\P

HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Zones\3!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zo
HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Zones\1!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zo
olicies!Trusted Sites, HKLM\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
plate Policies!Restricted Sites, HKLM\Soft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1001, HKLM\Software\Policies\Microsoft\Windows\Cur
ngs\Template Policies!Local Machine Zone, HKLM\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1001, HKLM\Software\Policies\Microsoft\W
Machine Zone Lockdown Settings\Template Policies! Locked-Down Local Machine Zone, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lock
HKLM\Software\Policies\Microsoft\Internet Explorer\M ain\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Fea
K_PROTOCOL!explorer.exe, HKLM\Software\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe, HKLM\Software
ACHINE_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe, HK
lorer.exe, HKLM\Software\Policies\Microsoft\Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet E
rer.exe, HKLM\Software\Policies\Microsoft\Internet Ex plorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Exp
explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe, HKLM\Software\Policies\Microsoft\Inte

ESTRICTIONS!explorer.exe, HKLM\Software\Policies\Microsoft \Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe, HKLM\Software
explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe, HKLM\Software\Policies\Microsoft\Intern
rer.exe, HKLM\Software\Policies\Microsoft\Internet Expl orer\Main\FeatureControl\FEATURE_SECURITYBAND!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Exp
T_ACTIVEXINSTALL!explorer.exe, HKLM\Software\Policies\M icrosoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe, HKLM
_FILEDOWNLOAD!explorer.exe, HKLM\Software\Policies\Micro soft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe, HKLM\S
LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Int ernet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe, HKLM\Software\P

ngs\Template Policies!Locked-Down Internet, HK CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKCU\Software\Polici
ngs\Template Policies!Locked-Down Intranet, HK CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKCU\Software\Polici
Lockdown Settings\Template Policies!Locked-Dow n Trusted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1001,
ed Sites Lockdown Settings\Template Policies!L ocked-Down Restricted Sites, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone
ngs\Template Policies!Locked-Down Internet, HK LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1001, HKLM\Software\Policie
ngs\Template Policies!Locked-Down Intranet, HK LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1001, HKLM\Software\Policie
Lockdown Settings\Template Policies!Locked-Dow n Trusted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1001, H
ed Sites Lockdown Settings\Template Policies!L ocked-Down Restricted Sites, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones
are\Policies\Microsoft\Messenger\Client!CEIP, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Microso
licies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInboundEchoRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
all\DomainProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogFilePath, HKLM\SOFTWARE\Polici
E\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundEchoRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpS
irewall\StandardProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogFilePath, HKLM\SOFTWARE
SystemMaximum, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTransferRateOffSchedule
are\Policies\Microsoft\Messenger\Client!CEIP, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKCU\Software\Policies\Microsoft\W
rrentVersion\Internet Settings\Zones\3!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1200, HKCU\Software\Policies\Microsoft
rrentVersion\Internet Settings\Zones\1!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1200, HKCU\Software\Policies\Microsoft
\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1200, H K
entVersion\Internet Settings\Lockdown_Zones\0!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1004, HKCU\Software
crosoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHA
OL!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies\Micro
E_LOCKDOWN!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Softwa
ware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureCo
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureContro

U\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Fea
NS!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies\Micro
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Feat
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureContro
VEXINSTALL!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\P
OWNLOAD!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Poli
!iexplore.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microsoft

rentVersion\Internet Settings\Zones\3!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1200, HKLM\Software\Policies\Microsoft \
rentVersion\Internet Settings\Zones\1!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1200, HKLM\Software\Policies\Microsoft \
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1200, HKLM\Softwar
\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1200, H K
LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
entVersion\Internet Settings\Lockdown_Zones\0!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1004, HKLM\Software
rosoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHA
OL!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies\Micros
E_LOCKDOWN!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Softwa
ware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureCo
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl
\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Fea

NS!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies\Micros
Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Featu
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl
EXINSTALL!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\P
WNLOAD!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Polic
!iexplore.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microsoft\

s\3!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion
s\1!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion
tings\Lockdown_Zones\2!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1004, HKCU\Software\Policies\Microsoft\Wi
ternet Settings\Lockdown_Zones\4!1001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1004, HKCU\Software\Policies\Mi
s\3!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\
s\1!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\
tings\Lockdown_Zones\2!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1004, HKLM\Software\Policies\Microsoft\Win
ternet Settings\Lockdown_Zones\4!1001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1004, HKLM\Software\Policies\Mic
osoft\PCHealth\HelpSvc!MicrosoftKBSearch, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport, HKLM\Software\Microsoft\Windows\CurrentVersion\Pol
ewall\DomainProfile\IcmpSettings!AllowInboundRouterRequest, H KLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundTimeExc
ePath, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\Domai nProfile\Logging!LogFileSize
wsFirewall\StandardProfile\IcmpSettings!AllowInboundRouter Request, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutbound
LogFilePath, HKLM\SOFTWARE\Policies\Microsoft\WindowsFire wall\StandardProfile\Logging!LogFileSize

CU\Software\Policies\Microsoft\Windows NT\ Printers!DisableHTTPPrinting, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKCU\Soft
CU\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Settings\Zones\3!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
CU\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Settings\Zones\1!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
gs\Zones\2!1200, HKCU\Software \Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\I
net Settings\Zones\4!1200, H KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1201, HKCU\Software\Policies\Microsoft\Windows\Curren
Version\Internet Settings\Zones\0!1200 , HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1201, HKCU\Software\Policies\Microsoft\Win
n_Zones\0!1004, HKCU\Software\Policies\Microso ft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1200, HKCU\Software\Policies\Microsoft\Windows\Curren
FeatureControl\FEATURE_BEHAVIORS!explorer.exe, H KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe
, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC ontrol\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKCU\Software\Policies\Microsoft\Internet
OWN!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\ FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKCU\Software\Polic
nternet Explorer\Main\FeatureControl\FEATURE_MIME_HAND LING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIM
net Explorer\Main\FeatureControl\FEATURE_MIME_SNIF FING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SN

rosoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJEC T_CACHING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATU
, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC ontrol\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet
osoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ ELEVATION!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATUR
net Explorer\Main\FeatureControl\FEATURE_SECURITYBAND! explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURIT
LL!(Reserved), HKCU\Software\Policies\Microsoft\Internet Explor er\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKCU\Software\Policies\M
Reserved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\ FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKCU\Software\Policies\Micro
KCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\F EATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Exp

M\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Settings\Zones\3!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
M\Software\Policies\Microsoft \Windows\CurrentVersion\Internet Settings\Zones\1!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
gs\Zones\2!1200, HKLM\Software \Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
net Settings\Zones\4!1200, H KLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1201, HKLM\Software\Policies\Microsoft\Windows\Current
Version\Internet Settings\Zones\0!1200 , HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1201, HKLM\Software\Policies\Microsoft\Wind
n_Zones\0!1004, HKLM\Software\Policies\Microso ft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1200, HKLM\Software\Policies\Microsoft\Windows\Curren
eatureControl\FEATURE_BEHAVIORS!explorer.exe, H KLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!iexplore.exe
, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC ontrol\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKLM\Software\Policies\Microsoft\Internet
OWN!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\ FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKLM\Software\Polic
nternet Explorer\Main\FeatureControl\FEATURE_MIME_HAND LING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIM
et Explorer\Main\FeatureControl\FEATURE_MIME_SNIF FING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SN
osoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJEC T_CACHING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATU

, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureC ontrol\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKLM\Software\Policies\Microsoft\Internet
soft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ ELEVATION!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE
et Explorer\Main\FeatureControl\FEATURE_SECURITYBAND! explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITY
L!(Reserved), HKLM\Software\Policies\Microsoft\Internet Explor er\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKLM\Software\Policies\M
Reserved), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\ FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKLM\Software\Policies\Micro
KLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\F EATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Exp

crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones
crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones
U\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings\Lockdown_Zones\2!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti
004, HKCU\Software\Policies\Microsoft\ Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\
crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\
M\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings\Lockdown_Zones\2!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
04, HKLM\Software\Policies\Microsoft\ Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
oft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW, HKLM\Software\P
Settings!AllowOutboundTimeExceeded, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundParameterProblem, HKLM\SOFTW
ile\IcmpSettings!AllowOutboundTimeExceeded, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundParameterProblem, HKL

eWebPnPDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKCU\Sof
ntVersion\Internet Settings\Zones\3!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1402, HKCU\Software\Policies\M icrosoft\Wi
ntVersion\Internet Settings\Zones\1!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1402, HKCU\Software\Policies\M icrosoft\Wi
osoft\Windows\CurrentVersion\Internet Settings\Zones\2!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1402, HKCU\ Software
licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 !1402, HKCU
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone s\0
olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
BEHAVIORS!iexplore.exe
tware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe
plorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe
\FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe
ureControl\FEATURE_MIME_SNIFFING!iexplore.exe
orer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe
tware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe
er\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe
ureControl\FEATURE_SECURITYBAND!iexplore.exe
r.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe
e, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe
Version\Internet Settings\Zones\3!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1402, HKLM\Software\Policies\M icrosoft\Win
Version\Internet Settings\Zones\1!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1402, HKLM\Software\Policies\M icrosoft\Win
osoft\Windows\CurrentVersion\Internet Settings\Zones\2!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1402, HKLM\ Software\
icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 !1402, HKLM\
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zone s\0!1
licies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
BEHAVIORS!iexplore.exe
ware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!iexplore.exe
plorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!iexplore.exe
FeatureControl\FEATURE_MIME_HANDLING!iexplore.exe
reControl\FEATURE_MIME_SNIFFING!iexplore.exe
rer\Main\FeatureControl\FEATURE_OBJECT_CACHING!iexplore.exe
ware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!iexplore.exe
r\Main\FeatureControl\FEATURE_ZONE_ELEVATION!iexplore.exe
reControl\FEATURE_SECURITYBAND!iexplore.exe
.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!iexplore.exe
e, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!iexplore.exe
e\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!iexplore.exe
ernet Settings\Lockdown_Zones\3!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1400, HKCU\Software\Policies\Mic
ernet Settings\Lockdown_Zones\1!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1400, HKCU\Software\Policies\Mic
ws\CurrentVersion\Internet Settings\Lockdown_Zones\2!1201, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1400, HKCU
ernet Settings\Lockdown_Zones\3!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1400, HKLM\Software\Policies\Micro
ernet Settings\Lockdown_Zones\1!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1400, HKLM\Software\Policies\Micro
ws\CurrentVersion\Internet Settings\Lockdown_Zones\2!1201, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1400, HKLM\S
ExitOnMSICW, HKLM\Software\Policies \Microsoft\EventViewer!MicrosoftEventVwrDisableLinks, HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot!DisableR
arameterProblem, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewal l\DomainProfile\IcmpSettings!AllowInboundTimestampRequest, HKLM\SOFTWARE\Policies\Micro
utboundParameterProblem, HKLM\SOFTWARE\Policies\Microsoft\ WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundTimestampRequest, HKLM\SOFTWARE\Po

ovieMaker!WebHelp, HKCU\Software\Policies\M icrosoft\WindowsMovieMaker!WebPublish, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublish
Software\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Zones\3!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1
Software\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Zones\1!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1
Zones\2!1402, HKCU\ Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
Settings\Zones\4 !1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
sion\Internet Settings\Zone s\0!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1405, HKCU\Software\Policies\Microsoft\Window
sion\Internet Settings\Lockdown_Zones\0!1 400, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1402, HKCU\Software\Pol
oftware\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Zones\3!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1
oftware\Policies\M icrosoft\Windows\CurrentVersion\Internet Settings\Zones\1!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1
ones\2!1402, HKLM\ Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
Settings\Zones\4 !1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVers
sion\Internet Settings\Zone s\0!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1405, HKLM\Software\Policies\Microsoft\Windows
ion\Internet Settings\Lockdown_Zones\0!1 400, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1402, HKLM\Software\Polic
00, HKCU\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
00, HKCU\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
ockdown_Zones\2!1400, HKCU\Softw are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKCU\Software\Policies\Microsoft\Window
Settings\Lockdown_Zones\4!1400 , HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1402, HKCU\Software\Policies\Microso
0, HKLM\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
0, HKLM\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
ockdown_Zones\2!1400, HKLM\Softw are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1402, HKLM\Software\Policies\Microsoft\Windows
Settings\Lockdown_Zones\4!1400 , HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1402, HKLM\Software\Policies\Microsof
emCertificates\AuthRoot!DisableRootAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration, HKLM\Software\Policies\Microsoft\
KLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowInboundMaskRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\Doma
Request, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowInboundMaskRequest, HKLM\SOFTWARE\Policies\Microsoft\WindowsFi

sion\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKCU\Software\Microsoft\Windows\Curren
ersion\Internet Settings\Zones\3!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1407, HKCU\Software\Po licies\Microsoft\Windo
ersion\Internet Settings\Zones\1!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1407, HKCU\Software\Po licies\Microsoft\Windo
oft\Windows\CurrentVersion\Internet Settings\Zones\2!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!140 7, HKCU\Software\Po
es\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \Zones\4!1407, HKCU\So
ftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti ngs\Zones\0!140
nes\0!1402, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersi
sion\Internet Settings\Zones\3!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1407, HKLM\Software\Po licies\Microsoft\Window
sion\Internet Settings\Zones\1!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1407, HKLM\Software\Po licies\Microsoft\Window
t\Windows\CurrentVersion\Internet Settings\Zones\2!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!140 7, HKLM\Software\Poli
s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings \Zones\4!1407, HKLM\Soft
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti ngs\Zones\0!1407
es\0!1402, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3! 14
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1! 14
tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\L
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1405, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte rnet
t\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3! 140
t\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1! 140
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\Lo
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1405, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte rnet S
LM\Software\Policies\Microsoft\ SearchCompanion!DisableContentFileUpdates, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, HKLM\Softwa
Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundPacketT ooBig
RE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings! AllowOutboundPacketTooBig
ware\Microsoft\Windows\CurrentVersion\Polic ies\Explorer!NoOnlinePrintsWizard, HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP, HKCU\Software\Microsoft\Win
ware\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!160
ware\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!160
es\2!140 7, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
ttings \Zones\4!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio
n\Internet Setti ngs\Zones\0!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1601, HKCU\Software\Policies\Microsoft\Windows\C
Microsoft\Windows\CurrentVersion\I nternet Settings\Lockdown_Zones\0!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zon
ware\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1604,
ware\Po licies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1604,
s\2!140 7, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet S
ngs \Zones\4!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion
Internet Setti ngs\Zones\0!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1601, HKLM\Software\Policies\Microsoft\Windows\Cu
Microsoft\Windows\CurrentVersion\I nternet Settings\Lockdown_Zones\0!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone
Settings\Lockdown_Zones\3! 1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1407, HKCU\Software\Policies\Microsof
Settings\Lockdown_Zones\1! 1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1407, HKCU\Software\Policies\Microsof
rrentVersion\Internet Setting s\Lockdown_Zones\2!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKCU\Softw
ndows\CurrentVersion\Inte rnet Settings\Lockdown_Zones\4!1406, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1407, H
ettings\Lockdown_Zones\3! 1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1407, HKLM\Software\Policies\Microsoft\
ettings\Lockdown_Zones\1! 1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1407, HKLM\Software\Policies\Microsoft\
entVersion\Internet Setting s\Lockdown_Zones\2!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1407, HKLM\Softw
dows\CurrentVersion\Inte rnet Settings\Lockdown_Zones\4!1406, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1407, HK
ableHTTPPrinting, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSe
P, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting, H
on\Internet Settings\Zones\3!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1606, HKCU\Sof tware\Policies\Microsoft\Windows\
on\Internet Settings\Zones\1!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1606, HKCU\Sof tware\Policies\Microsoft\Windows\
Windows\CurrentVersion\Internet Settings\Zones\2!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon es\2!1606, HKCU\Software\Policie
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1606, HKCU\Softw
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intern et Settings\Zones\0!1606,
nternet Settings\Lockdown_Zones\0!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1601, HKCU\Software\Policies
\Internet Settings\Zones\3!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1606, HKLM\Sof tware\Policies\Microsoft\Windows\C
\Internet Settings\Zones\1!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1606, HKLM\Sof tware\Policies\Microsoft\Windows\C
ndows\CurrentVersion\Internet Settings\Zones\2!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon es\2!1606, HKLM\Software\Policies
crosoft\Windows\CurrentVersion\Internet Settings\Zones\4!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1606, HKLM\Softwar
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intern et Settings\Zones\0!1606, H
ternet Settings\Lockdown_Zones\0!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1601, HKLM\Software\Policies \M
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet S
KCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1601, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet S
own_Zones\2!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1601, HKCU\Software\Policies\Microsoft\Wind ows\Cu
ngs\Lockdown_Zones\4!1407, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1601, HKCU\Software\Policies\Mi crosoft\Wi
KLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Se
KLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1601, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Se
wn_Zones\2!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1601, HKLM\Software\Policies\Microsoft\Wind ows\Curr
gs\Lockdown_Zones\4!1407, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1601, HKLM\Software\Policies\Mi crosoft\Win
ndows\DriverSearching!DontSe archWindowsUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess, HKLM\Software\Policies
\Printers!DisableHTTPPrinting, HKCU\S oftware\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMake
s\2!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
ngs\Zones\4!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
tern et Settings\Zones\0!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1607, HKCU\Software\Policies\Microsoft\Windows\Curr
1601, HKCU\Software\Policies \Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
2!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setti
gs\Zones\4!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
rn et Settings\Zones\0!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1607, HKLM\Software\Policies\Microsoft\Windows\Curren
601, HKLM\Software\Policies \Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
dows\CurrentVersion\ Internet Settings\Lockdown_Zones\3!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1606, HK
dows\CurrentVersion\ Internet Settings\Lockdown_Zones\1!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1606, HK
Policies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdo
Software\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1604, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
ows\CurrentVersion\ Internet Settings\Lockdown_Zones\3!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1606, HKL
ows\CurrentVersion\ Internet Settings\Lockdown_Zones\1!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1606, HKL
olicies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
oftware\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1604, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Access, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKLM\Software\Policies
s\Microsoft\WindowsMovieMaker!CodecDownload, HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp, HKCU\Software\Policies\Microsoft\WindowsMovieMake
nternet Settings\Zones\3!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1609, HKCU\Software\Policies\Microsoft\Windows\Cur
nternet Settings\Zones\1!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1609, HKCU\Software\Policies\Microsoft\Windows\Cur
dows\CurrentVersion\Internet Settings\Zones\2!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett ings\Zones\2!1609, HKCU\Software\Policies\M
osoft\Windows\CurrentVersion\Internet Settings\Zones\4!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\I nternet Settings\Zones\4!1609, HKCU\Software\
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersio n\Internet Settings\Zones\0!1609, HKC
osoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z ones\0!
ernet Settings\Zones\3!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1609, HKLM\Software\Policies\Microsoft\Windows\Curre
ernet Settings\Zones\1!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1609, HKLM\Software\Policies\Microsoft\Windows\Curre
ws\CurrentVersion\Internet Settings\Zones\2!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett ings\Zones\2!1609, HKLM\Software\Policies\Mic
oft\Windows\CurrentVersion\Internet Settings\Zones\4!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\I nternet Settings\Zones\4!1609, HKLM\Software\P
olicies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio n\Internet Settings\Zones\0!1609, HKLM
oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z ones\0!16
gs\Lockdown_Zones\3!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1607, HKCU\Software\Policie s\Microsoft\Win
gs\Lockdown_Zones\1!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1607, HKCU\Software\Policie s\Microsoft\Win
Version\Internet Settings\Lockdown_Zones\2!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1607, HK CU\Software\
s\CurrentVersion\Internet Settings\Lockdown_Zones\4!1606, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone s\4!1607, HKCU
s\Lockdown_Zones\3!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1607, HKLM\Software\Policie s\Microsoft\Wind
s\Lockdown_Zones\1!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1607, HKLM\Software\Policie s\Microsoft\Wind
ersion\Internet Settings\Lockdown_Zones\2!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1607, HK LM\Software\P
CurrentVersion\Internet Settings\Lockdown_Zones\4!1606, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zone s\4!1607, HKLM\S
ebHelp, HKLM\Software\Policies\Micro soft\WindowsMovieMaker!WebPublish, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard, HK
s\Microsoft\WindowsMovieMaker!WebPublis h
1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
\Zones\4!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
rnet Settings\Zones\0!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentV
t Settings\Lockdown_Z ones\0!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1608, HKCU\Software\Policies\Micros
09, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
ones\4!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
et Settings\Zones\0!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVe
Settings\Lockdown_Z ones\0!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1608, HKLM\Software\Policies\Microsof
Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting
ones\2!1607, HK CU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1608, HKCU\Software\Policies\Microsoft\Windows\CurrentV
ckdown_Zone s\4!1607, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1608, HKCU\Software\Policies\Microsoft\Windows
ftware\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L
ftware\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L
nes\2!1607, HK LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1608, HKLM\Software\Policies\Microsoft\Windows\CurrentVer
down_Zone s\4!1607, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1608, HKLM\Software\Policies\Microsoft\Windows\C
Explorer!NoPublishingWizard, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
net Settings\Zones\3!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 3!1803, HKCU\Software\Policies\Microsoft\Windows\Curren
net Settings\Zones\1!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 1!1803, HKCU\Software\Policies\Microsoft\Windows\Curren
s\CurrentVersion\Internet Settings\Zones\2!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\2!1803, HKCU\Software\Policies\Micro
ft\Windows\CurrentVersion\Internet Settings\Zones\4!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet Settings\Zones\4!1803, HKCU\Software\Pol
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1802, HKCU\Software\Policies\Microsoft\Windows\Curre ntVersion\Internet Settings\Zones\0!1803, HKCU\
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentV ersion\Interne
et Settings\Zones\3!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 3!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVe
et Settings\Zones\1!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 1!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVe
CurrentVersion\Internet Settings\Zones\2!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\2!1803, HKLM\Software\Policies\Microso
Windows\CurrentVersion\Internet Settings\Zones\4!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet Settings\Zones\4!1803, HKLM\Software\Polici
es\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1802, HKLM\Software\Policies\Microsoft\Windows\Curre ntVersion\Internet Settings\Zones\0!1803, HKLM\So
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet
\CurrentVersion\Internet Settings\Lockdown_Zones\3!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\3!1800, HKCU\S
\CurrentVersion\Internet Settings\Lockdown_Zones\1!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\1!1800, HKCU\S
es\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1609, HKCU\Software\Policies\Microsoft\Windows\CurrentVers ion\Internet Settings\Lo
CurrentVersion\Internet Settings\Lockdown_Zones\3!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\3!1800, HKLM\So
CurrentVersion\Internet Settings\Lockdown_Zones\1!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\1!1800, HKLM\So
s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zo
re\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1609, HKLM\Software\Policies\Microsoft\Windows\CurrentVers ion\Internet Settings\Lock
ft\Windows\CurrentVersion\Policies\ Explorer!NoOnlinePrintsWizard, HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP, HKLM\Software\Policies\Microsoft\PCHealth
3, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Z
nes\4!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
t Settings\Zones\0!1803, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVers
indows\CurrentV ersion\Internet Settings\Lockdown_Zones\0!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1802, H
es\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1809, HKLM\Sof
es\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1809, HKLM\Sof
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon
s\4!1803, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
dows\CurrentV ersion\Internet Settings\Lockdown_Zones\0!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1802, HK
kdown_ Zones\3!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1802, HKCU\Software\Policies\Microsoft\Windows\C
kdown_ Zones\1!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1802, HKCU\Software\Policies\Microsoft\Windows\C
n\Internet Settings\Lockdown_Zones\2!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1802, HKCU\Software\Policie
entVers ion\Internet Settings\Lockdown_Zones\4!1800, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1802, HKCU\Softwa
own_ Zones\3!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1802, HKLM\Software\Policies\Microsoft\Windows\Cu
own_ Zones\1!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1802, HKLM\Software\Policies\Microsoft\Windows\Cu
nternet Settings\Lockdown_Zones\2!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1802, HKLM\Software\Policies\
tVers ion\Internet Settings\Lockdown_Zones\4!1800, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1802, HKLM\Software
ware\Policies\Microsoft\PCHealth\HelpSvc!Headlines, HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch, HKLM\Software\Policies\Microsoft\PCHeal t
Settings\Zones\3!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\3!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
Settings\Zones\1!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\1!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
urrentVersion\Internet Settings\Zones\2!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersi on\Internet Settings\Zones\2!1A00, HKCU\Software\Policies\Microso
Windows\CurrentVersion\Internet Settings\Zones\4!1809, HKCU\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\Zones\4!1A00, HKCU\Software\Policie
s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1809, HKCU\Software\Policies\Microsoft\Windo ws\CurrentVersion\Internet Settings\Zones\0!1A00, HKCU\Sof
tings\Lockdown_Zones\0!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1803, HKCU\Software\ Policies\Microsoft\W
ettings\Zones\3!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\3!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
ettings\Zones\1!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Setting s\Zones\1!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
entVersion\Internet Settings\Zones\2!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersi on\Internet Settings\Zones\2!1A00, HKLM\Software\Policies\Microsoft\W
dows\CurrentVersion\Internet Settings\Zones\4!1809, HKLM\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\Zones\4!1A00, HKLM\Software\Policies\M
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1809, HKLM\Software\Policies\Microsoft\Windo ws\CurrentVersion\Internet Settings\Zones\0!1A00, HKLM\Softw
gs\Lockdown_Zones\0!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1803, HKLM\Software\ Policies\Microsoft\Win
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1803, HKCU\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Loc
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1803, HKCU\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Loc
s\2!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1803, HKCU\Software\Policies\Micros oft\Windows\CurrentVersio
wn_Zones\4!1802, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1803, HKCU\Software\Pol icies\Microsoft\Windows\Curr
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1803, HKLM\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Lockd
e\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1803, HKLM\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Lockd
!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1803, HKLM\Software\Policies\Micros oft\Windows\CurrentVersion\I
n_Zones\4!1802, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1803, HKLM\Software\Pol icies\Microsoft\Windows\Curren
are\Policies\Microsoft\PCHeal th\ErrorReporting!DoReport, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith, HKLM\Software\Policie
es\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00, HKCU\Sof
es\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1C00, HKCU\Sof
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon
\4!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Se
ettings\Zones\0!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion
U\Software\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00, HKLM\Softwa
Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1C00, HKLM\Softwa
LM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
ngs\Zones\0!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\In
oftware\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
nt Version\Internet Settings\Lockdown_Zones\3!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1809, HKCU\Softwa
nt Version\Internet Settings\Lockdown_Zones\1!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1809, HKCU\Softwa
ros oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2
ol icies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1804, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdow
Version\Internet Settings\Lockdown_Zones\3!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1809, HKLM\Software\
Version\Internet Settings\Lockdown_Zones\1!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1809, HKLM\Software\
s oft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1
icies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1804, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_
penWith, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!Exi tOnM
ttings\Zones\3!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersi
ttings\Zones\1!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersi
entVersion\Internet Settings\Zones\2!1C00, HKCU\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings\Zones\2!1E05, HKCU\Software\Policies\Microsoft\W
dows\CurrentVersion\Internet Settings\Zones\4!1C00, HKCU\Software\Policies\Microsoft\ Windows\CurrentVersion\Internet Settings\Zones\4!1E05, HKCU\Software\Policies\M
icrosoft\Windows\CurrentVersion\Internet Settings\Zones\0!1C00, HKCU\Software\Policies\Microso ft\Windows\CurrentVersion\Internet Settings\Zones\0!1E05, HKCU\Softwa
ws\CurrentVersion\Internet Settings\Lockdown_Zones\0!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo ckdown_Zones\0!1A00, HKC
gs\Zones\3!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\
gs\Zones\1!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\
Version\Internet Settings\Zones\2!1C00, HKLM\Software\Policies\Microsoft\Windows\Curr entVersion\Internet Settings\Zones\2!1E05, HKLM\Software\Policies\Microsoft\Win
ws\CurrentVersion\Internet Settings\Zones\4!1C00, HKLM\Software\Policies\Microsoft\ Windows\CurrentVersion\Internet Settings\Zones\4!1E05, HKLM\Software\Policies\Mic
osoft\Windows\CurrentVersion\Internet Settings\Zones\0!1C00, HKLM\Software\Policies\Microso ft\Windows\CurrentVersion\Internet Settings\Zones\0!1E05, HKLM\Software
\CurrentVersion\Internet Settings\Lockdown_Zones\0!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lo ckdown_Zones\0!1A00, HKLM\S
wn_Zones\3!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HKCU\Software \Policies\Microsoft\Windows\Curre
wn_Zones\1!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HKCU\Software \Policies\Microsoft\Windows\Curre
rnet Settings\Lockdown_Zones\2!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2! 1A00, HKCU\Software\Policies\Mi
ersion\Internet Settings\Lockdown_Zones\4!1809, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd own_Zones\4!1A00, HKCU\Software\P
_Zones\3!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00, HKLM\Software \Policies\Microsoft\Windows\Current
_Zones\1!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A00, HKLM\Software \Policies\Microsoft\Windows\Current
et Settings\Lockdown_Zones\2!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2! 1A00, HKLM\Software\Policies\Micro
ion\Internet Settings\Lockdown_Zones\4!1809, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockd own_Zones\4!1A00, HKLM\Software\Poli
et Connection Wizard!Exi tOnMSICW, HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks, HKLM\SOFTWARE\Policies\Microsoft\SystemCertific
1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin
ngs\Zones\0!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\In
o ckdown_Zones\0!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A04, HKCU\Software\Policies\Microsoft\Window
\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2
05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Z
\Zones\0!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
ckdown_Zones\0!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1A04, HKLM\Software\Policies\Microsoft\Windows\C
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
Zones\4!1A00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A04, HKCU\Software\Policies\Microsoft\Windows\CurrentVe
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
cies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Z
0, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Interne
es\4!1A00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1A04, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration, H KLM\So
gs\Zones\3!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Zones\3!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\I
gs\Zones\1!2001, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Zones\1!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\I
Version\Internet Settings\Zones\2!2001, HKCU\Software\Policies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Zones\2!2004, HKCU\Software\Policies\Microsoft\Win
s\CurrentVersion\Internet Settings\Zones\4!2001, HKCU\Software\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\Zones\4!2004, HKCU\Software\Policies\Micr
osoft\Windows\CurrentVersion\Internet Settings\Zones\0!2001, HKCU\Software\Policies \Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2004, HKCU\Software\
tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1C00, HKCU\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\
Zones\3!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Zones\3!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
Zones\1!2001, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Zones\1!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
sion\Internet Settings\Zones\2!2001, HKLM\Software\Policies\Microsoft\Wind ows\CurrentVersion\Internet Settings\Zones\2!2004, HKLM\Software\Policies\Microsoft\Window
CurrentVersion\Internet Settings\Zones\4!2001, HKLM\Software\Policies\Mi crosoft\Windows\CurrentVersion\Internet Settings\Zones\4!2004, HKLM\Software\Policies\Microso
ft\Windows\CurrentVersion\Internet Settings\Zones\0!2001, HKLM\Software\Policies \Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2004, HKLM\Software\Pol
are\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!1C00, HKLM\Software\Policies\Microsoft\Windows\ CurrentVersion\Internet Settings\Loc
rsion\Internet Settings\Lockdown_Zones\3!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\3!1E05, HKCU\Software\P
rsion\Internet Settings\Lockdown_Zones\1!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\1!1E05, HKCU\Software\P
ft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\2!1E
s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1C00, HKCU\Software\Policies\Microsoft\Windows\Cur rentVersion\Internet Settings\Lockdown_Z
on\Internet Settings\Lockdown_Zones\3!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\3!1E05, HKLM\Software\Polic
on\Internet Settings\Lockdown_Zones\1!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\L ockdown_Zones\1!1E05, HKLM\Software\Polic
Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!1C00, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\ Internet Settings\Lockdown_Zones\2!1E05
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!1C00, HKLM\Software\Policies\Microsoft\Windows\Cur rentVersion\Internet Settings\Lockdown_Zone
ntrol!NoRegistration, H KLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTT
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!21
04, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Z
\Zones\0!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intern
CurrentVersion\Internet Settings\Lockdown_Zones\0!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2000, HKCU\Soft
tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2101
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon
nes\0!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
rentVersion\Internet Settings\Lockdown_Zones\0!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2000, HKLM\Softwa
ones\3!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVer
ones\1!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVer
Settings\Lockdown_Zones\2!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2000, HKCU\Software\Policies\Microsof
on\Internet Settings\Lockdown_Zones\4!1E05, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2000, HKCU\Software\Policies
es\3!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
es\1!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersio
ettings\Lockdown_Zones\2!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2000, HKLM\Software\Policies\Microsoft\W
nternet Settings\Lockdown_Zones\4!1E05, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2000, HKLM\Software\Policies\M
Windows NT\Printers!DisableHTTPPrinting, HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload, HKLM\Software\Policies\Microsof t\Windows\
Zones\3!2101, HKCU\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Zones\3!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
Zones\1!2101, HKCU\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Zones\1!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Inte
sion\Internet Settings\Zones\2!2101, HKCU\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Zones\2!2102, HKCU\Software\Policies\Microsoft\Window
urrentVersion\Internet Settings\Zones\4!2101, HKCU\Software\Pol icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2102, HKCU\Software\Policies\Microso
t\Windows\CurrentVersion\Internet Settings\Zones\0!2101, HKCU\Software\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2102, HKCU\Software\Pol
down_Zones\0!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2001, HKCU\S oftware\Policies\Microsoft\Windows\Cu
es\3!2101, HKLM\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Zones\3!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
es\1!2101, HKLM\Software\Policies\Microsoft\Windows\Current Version\Internet Settings\Zones\1!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
n\Internet Settings\Zones\2!2101, HKLM\Software\Policies\Micros oft\Windows\CurrentVersion\Internet Settings\Zones\2!2102, HKLM\Software\Policies\Microsoft\Windows\C
entVersion\Internet Settings\Zones\4!2101, HKLM\Software\Pol icies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2102, HKLM\Software\Policies\Microsoft\W
indows\CurrentVersion\Internet Settings\Zones\0!2101, HKLM\Software\ Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2102, HKLM\Software\Policies
wn_Zones\0!2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2001, HKLM\S oftware\Policies\Microsoft\Windows\Curre
s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2001, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zo
s\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2001, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zo
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2001, HKCU\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet S
\4!2000, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2001, HKCU\Soft ware\Policies\Microsoft\Windows\CurrentVersion
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2001, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zone
Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2001, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Lockdown_Zone
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2001, HKLM\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Sett
2000, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2001, HKLM\Soft ware\Policies\Microsoft\Windows\CurrentVersion\In
e\Policies\Microsof t\Windows\DriverSearching!DontSearchWindowsUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess, H
oft\Windows\CurrentVersion\Internet Settings\Zones\3!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2201, HKCU\Software\Polic
oft\Windows\CurrentVersion\Internet Settings\Zones\1!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2201, HKCU\Software\Polic
tware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2201
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zon
nes\0!2102, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2200, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Windows\CurrentVersion\Internet Settings\Zones\3!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!2201, HKLM\Software\Policies\
Windows\CurrentVersion\Internet Settings\Zones\1!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1!2201, HKLM\Software\Policies\
M\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
\0!2102, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2200, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Sett
Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown
n\Internet Settings\Lockdown_Zones\3!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2100, HKCU\Software\Policies
n\Internet Settings\Lockdown_Zones\1!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2100, HKCU\Software\Policies
indows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2100, HK
crosoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4!2004, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4
ows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2004, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2!2100, HKLM
isableWindowsUpdateAccess, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload, HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHe lp
es\3!2201, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Zones\3!2300, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
es\1!2201, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Zones\1!2300, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet
n\Internet Settings\Zones\2!2201, HKCU\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2300, HKCU\Software\Policies\Microsoft\Windows\C
entVersion\Internet Settings\Zones\4!2201, HKCU\Soft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2300, HKCU\Software\Policies\Microsoft\W
indows\CurrentVersion\Internet Settings\Zones\0!2201, HKCU\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2300, HKCU\Software\Policie
Version\Internet Settings\Lockdown_Zones\0!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set tings\Lockdown_Zones\0!2101, HKCU\Software
3!2201, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Zones\3!2300, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set
1!2201, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Settings\Zones\1!2300, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set
ernet Settings\Zones\2!2201, HKLM\Software\Policie s\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2!2300, HKLM\Software\Policies\Microsoft\Windows\Curre
ersion\Internet Settings\Zones\4!2201, HKLM\Soft ware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4!2300, HKLM\Software\Policies\Microsoft\Wind
ows\CurrentVersion\Internet Settings\Zones\0!2201, HKLM\S oftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!2300, HKLM\Software\Policies\Mi
sion\Internet Settings\Lockdown_Zones\0!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Set tings\Lockdown_Zones\0!2101, HKLM\Software\Po
3!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2101, HKCU\ Software\Policies\Microsoft\Windows\CurrentVersion\
1!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2101, HKCU\ Software\Policies\Microsoft\Windows\CurrentVersion\
gs\Lockdown_Zones\2!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\2!2101, HKCU\Software\Policies\Microsoft\Win
net Settings\Lockdown_Zones\4!2100, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin gs\Lockdown_Zones\4!2101, HKCU\Software\Policies\Mic
100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!2101, HKLM\ Software\Policies\Microsoft\Windows\CurrentVersion\Inte
100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1!2101, HKLM\ Software\Policies\Microsoft\Windows\CurrentVersion\Inte
Lockdown_Zones\2!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_ Zones\2!2101, HKLM\Software\Policies\Microsoft\Window
Settings\Lockdown_Zones\4!2100, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin gs\Lockdown_Zones\4!2101, HKLM\Software\Policies\Microso
Computer/User
Policy
Node
Machine Computer Configuration\Windows Settings\Account
Enforce password
Policies\Password
history Policy
Maximum
Policies\Password
password age Policy
Minimum
Policies\Password
password age Policy
Minimum
Policies\Password
password lengthPolicy
Password
Policies\Password
must meet complexity
Policy requirement
Store passwords
Policies\Password
using reversible
Policy encryption for all users in the domain
Account lockout
Policies\Account
duration Lockout Policy
Account
Policies\Account
lockout threshold
Lockout Policy
Reset lockout
Policies\Account
counter after
Lockout Policy
Machine Computer Configuration\Windows Settings\Local
Enforce Policies\Kerberos
user logon restrictions
Policy
Maximum
Policies\Kerberos
lifetime for service
Policy ticket
Maximum
Policies\Kerberos
lifetime for user
Policy
ticket
Maximum
Policies\Kerberos
lifetime for user
Policy
ticket renewal
Maximum
Policies\Kerberos
tolerance forPolicy
computer clock synchronization
Audit account
Policies\Audit
logon events
Policy
Audit
Policies\Audit
account management
Policy
Audit
Policies\Audit
directory service
Policy
access
Audit
Policies\Audit
logon eventsPolicy
Audit
Policies\Audit
object accessPolicy
Audit
Policies\Audit
policy changePolicy
Audit
Policies\Audit
privilege usePolicy
Audit
Policies\Audit
process tracking
Policy
Audit
Policies\Audit
system eventsPolicy
Access this
Policies\User
computer from
Rights
the Assignment
network
Act as
Policies\User
part of the operating
Rights Assignment
system
AddPolicies\User
workstations Rights
to a domain
Assignment
Adjust
Policies\User
memory quotas
RightsforAssignment
a process
Allow
Policies\User
log on locally
Rights Assignment
Allow
Policies\User
log on through
Rights
Terminal
Assignment
Services
Backup
Policies\User
files and directories
Rights Assignment
Bypass
Policies\User
traverse checking
Rights Assignment
Change
Policies\User
the system
Rights
time Assignment
Create
Policies\User
a pagefile Rights Assignment
Create
Policies\User
a token object
Rights Assignment
Create
Policies\User
global objects
Rights Assignment
Create
Policies\User
permanentRights
sharedAssignment
objects
Debug
Policies\User
programs Rights Assignment
DenyPolicies\User
access to this
Rights
computer
Assignment
from the network
DenyPolicies\User
log on as a batch
Rightsjob
Assignment
DenyPolicies\User
log on as a service
Rights Assignment
DenyPolicies\User
log on locally
Rights Assignment
DenyPolicies\User
log on through
Rights
Terminal
Assignment
Services
Enable
Policies\User
computer and
Rights
user
Assignment
accounts to be trusted for delegation
Force
Policies\User
shutdown from
Rights
a remote
Assignment
system
Generate
Policies\User
securityRights
audits Assignment
Impersonate
Policies\User
a client
Rights
afterAssignment
authentication
Increase
Policies\User
scheduling
Rights
authority
Assignment
LoadPolicies\User
and unload device
Rights drivers
Assignment
LockPolicies\User
pages in memory
Rights Assignment
Log Policies\User
on as a batchRights
job Assignment
Log Policies\User
on as a service
Rights Assignment
Log Policies\User
on locally Rights Assignment
Manage
Policies\User
auditing and
Rights
security
Assignment
log
Modify
Policies\User
firmware environment
Rights Assignment
values
Perform
Policies\User
volume maintenance
Rights Assignment
tasks
Profile
Policies\User
single process
Rights Assignment
Profile
Policies\User
system performance
Rights Assignment
Remove
Policies\User
computerRights
from docking
Assignment
station
Replace
Policies\User
a processRights
level token
Assignment
Restore
Policies\User
files and directories
Rights Assignment
ShutPolicies\User
down the system
Rights Assignment
Synchronize
Policies\User
directory
Rights
service
Assignment
data
TakePolicies\User
ownership ofRights
files orAssignment
other objects
Accounts:
Policies\Security
Administrator account
Options
status
Accounts:
Policies\Security
Guest account
Options
status
Accounts:
Policies\Security
Limit local Options
account use of blank passwords to console logon only
Accounts:
Policies\Security
Rename administrator
Options account
Accounts:
Policies\Security
Rename guest
Options
account
Audit:
Policies\Security
Audit the accesss
Options
of global system objects
Audit:
Policies\Security
Audit the use ofOptions
Backup and Restore privilege
Audit:
Policies\Security
Shut down system
Options
immediately if unable to log security audits
DCOM:
Policies\Security
Machine AccessOptions
Restrictions in Security Descriptor Definition Language (SDDL) syntax
DCOM:
Policies\Security
Machine LaunchOptions
Restrictions in Security Descriptor Definition Language (SDDL) syntax
Devices:
Policies\Security
Allow undockOptions
without having to log on
Devices:
Policies\Security
Allowed to format
Options
and eject removable media
Devices:
Policies\Security
Prevent users
Options
from installing printer drivers
Devices:
Policies\Security
Restrict CD-ROM
Options
access to locally logged-on user only
Devices:
Policies\Security
Restrict floppy
Options
access to locally logged-on user only
Devices:
Policies\Security
Unsigned driver
Options
installation behavior
Domain
Policies\Security
controller: Allow
Options
server operators to schedule tasks
Domain
Policies\Security
controller: LDAP
Options
server signing requirements
Domain
Policies\Security
controller: Refuse
Options
machine account password changes
Domain
Policies\Security
member: Digitally
Options
encrypt or sign secure channel data (always)
Domain
Policies\Security
member: Digitally
Options
encrypt secure channel data (when possible)
Domain
Policies\Security
member: Digitally
Options
sign secure channel data (when possible)
Domain
Policies\Security
member: Disable
Options
machine account password changes
Domain
Policies\Security
member: Maximum
Optionsmachine account password age
Domain
Policies\Security
member: Require
Options
strong (Windows 2000 or later) session key
Interactive
Policies\Security
logon: Do Options
not display last user name
Interactive
Policies\Security
logon: Do Options
not require CTRL+ALT+DELETE
Interactive
Policies\Security
logon: Message
Options
text for users attempting to logon
Interactive
Policies\Security
logon: Message
Options
title for users attempting to logon
Interactive
Policies\Security
logon: Number
Options
of previous logons to cache (in case domain controller is not available)
Interactive
Policies\Security
logon: Prompt
Options
user to change password before expiration
Interactive
Policies\Security
logon: Require
Options
Domain Controller authentication to unlock workstation
Interactive
Policies\Security
logon: Require
Options
smart card
Interactive
Policies\Security
logon: Smart
Options
card removal behavior
Microsoft
Policies\Security
network client:
Options
Digitally sign communications (always)
Microsoft
Policies\Security
network client:
Options
Digitally sign communications (if server agrees)
Microsoft
Policies\Security
network client:
Options
Send unencrypted password to third-party SMB servers
Microsoft
Policies\Security
network server:
Options
Amount of idle time required before suspending session
Microsoft
Policies\Security
network server:
Options
Digitally sign communications (always)
Microsoft
Policies\Security
network server:
Options
Digitally sign communications (if client agrees)
Microsoft
Policies\Security
network server:
Options
Disconnect clients when logon hours expire
Network
Policies\Security
access: AllowOptions
anonymous SID/Name translation
Network
Policies\Security
access: Do not
Options
allow anonymous enumeration of SAM accounts
Network
Policies\Security
access: Do not
Options
allow anonymous enumeration of SAM accounts and shares
Network
Policies\Security
access: Do not
Options
allow storage of credentials or .NET Passports for network authentication
Network
Policies\Security
access: Let Everyone
Options permissions apply to anonymous users
Network
Policies\Security
access: NamedOptions
Pipes that can be accessed anonymously
Network
Policies\Security
access: Remotely
Options
accessible registry paths
Network
Policies\Security
access: Remotely
Options
accessible registry paths
Network
Policies\Security
access: Remotely
Options
accessible registry paths and subpaths
Network
Policies\Security
access: Restrict
Options
anonymous access to Named Pipes and Shares
Network
Policies\Security
access: Shares
Options
that can be accessed anonymously
Network
Policies\Security
access: Sharing
Options
and security model for local accounts
Network
Policies\Security
security: Do Options
not store LAN Manager hash value on next password change
Network
Policies\Security
security: Force
Options
logoff when logon hours expire
Network
Policies\Security
security: LANOptions
Manager authentication level
Network
Policies\Security
security: LDAP
Options
client signing requirements
Network
Policies\Security
security: Minimum
Options
session security for NTLM SSP based (including secure RPC) clients
Network
Policies\Security
security: Minimum
Options
session security for NTLM SSP based (including secure RPC) servers
Recovery
Policies\Security
console: Allow
Options
automatic administrative logon
Recovery
Policies\Security
console: Allow
Options
floppy copy and access to all drives and all folders
Shutdown:
Policies\Security
Allow system
Options
to be shut down without having to log on
Shutdown:
Policies\Security
Clear virtual
Options
memory pagefile
System
Policies\Security
cryptography:Options
Use FIPS compliant algorithms for encryption, hashing, and signing
System
Policies\Security
Cryptography: Options
Force strong key protection for user keys stored on the computer
System
Policies\Security
objects: Default
Options
owner for objects created by members of the Administrators group
System
Policies\Security
objects: Require
Options
case insensitivity for non-Windows subsystems
System
Policies\Security
objects: Strengthen
Optionsdefault permissions of internal system objects (e.g., Symbolic Links)
System
Policies\Security
settings: Optional
Options
subsystems
System
Policies\Security
settings: UseOptions
Certificate Rules on Windows Executables for Software Restriction Policies
Machine Computer Configuration\Windows Settings\Security
Maximum application
Settings\Event
log size
Log
Maximum Settings\Event
security logLog
size
Maximum Settings\Event
system log Log
size
PreventSettings\Event
local guests group
Log from accessing application log
local guests group
Log from accessing security log
local guests group
Log from accessing system log
Retain Settings\Event
application log Log
security log Log
system log Log
Retention
Settings\Event
method for application
Log log
Retention
Settings\Event
method for security
Log log
Retention
Settings\Event
method for system
Log log
Restricted Groups
Settings\Restricted Groups
System Services
Settings\System Services
Registry Settings\Registry
File SystemSettings\File System
Wireless Network
Settings\Wireless
(IEEE 802.11)
Network
Policies(IEEE 802.11) Policies
Encrypting Settings\Public
File System Key Policies
Automatic
Settings\Public
Certificate Request
Key Policies
Settings
TrustedSettings\Public
Root Certification
Key Authorities
Policies
Enterprise
Settings\Public
Trust Key Policies
Autoenrollment
Settings\Public
Settings
Key Policies
Machine Computer Configuration\Windows Settings\Security Settings\Software Restriction Policies
Disallowed
Settings\Software Restriction Policies\Security Levels
Unrestricted
New Certificate
Settings\Software
Rule Restriction Policies\Additional Rules
New HashSettings\Software
New Internet
Settings\Software
Zone Rule Restriction Policies\Additional Rules
New PathSettings\Software
Enforcement
Settings\Software Restriction Policies
Designated
Settings\Software
File Types Restriction Policies
TrustedSettings\Software
Publishers Restriction Policies
Client (Respond
Settings\IP
Only) Security Policies
SecureSettings\IP
Server (Require
Security
Security)
Policies
ServerSettings\IP
(Request Security)
Security Policies
User User Configuration\Windows Settings\Security

Enterprise
Settings\Public
Trust Key Policies
User User Configuration\Windows Settings\SecurityAutoenrollment
Settings\PublicSettings
Key Policies
User User Configuration\Windows Settings\Security Settings\Software Restriction Policies
User User Configuration\Windows Settings\SecurityDisallowed
User User Configuration\Windows Settings\SecurityUnrestricted
User User Configuration\Windows Settings\SecurityNew
Settings\Software
Certificate RuleRestriction Policies\Additional Rules
Settings\Software
Hash Rule Restriction Policies\Additional Rules
Settings\Software
Internet Zone Rule
Restriction Policies\Additional Rules
Settings\Software
Path Rule Restriction Policies\Additional Rules
User User Configuration\Windows Settings\SecurityEnforcement
Settings\Software Restriction Policies
User User Configuration\Windows Settings\SecurityDesignated
Settings\Software
File Types
Restriction Policies
User User Configuration\Windows Settings\SecurityTrusted
Settings\Software
Publishers Restriction Policies
Supported On Registry Settings
Windows XP SP2, Windows Server 2003 Password Policy security settings are not registry keys.
Windows XP SP2, Windows Server 2003 Account Lockout Policy security settings are not registry keys.
Windows XP SP2, Windows Server 2003 Kerberos Policy security settings are not registry keys.
Windows XP SP2, Windows Server 2003 Audit Policy security settings are not registry keys.
Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys
Windows Server 2003 User Rights security settings are not registry keys
Windows XP SP2 User Rights security settings are not registry keys
Windows XP SP2, Windows Server 2003 Not a registry key
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\LimitBlankPasswordUse
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\AuditBaseObjects
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditing
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail
Windows XP SP2, Windows Server 2003 MACHINE\SOFTWARE\policies\Microsoft\windows NT\DCOM\MachineAccessRestriction
Windows XP SP2, Windows Server 2003 MACHINE\SOFTWARE\policies\Microsoft\windows NT\DCOM\MachineLaunchRestriction
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UndockWithoutLogon
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateDASD
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers\AddPrinterDrivers
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateCDRoms
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateFloppies
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Driver Signing\Policy
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\SubmitControl
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrity
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RefusePasswordChange
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SealSecureChannel
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SignSecureChannel
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DisablePasswordChange
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPasswordAge
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireStrongKey
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLastUserName
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCAD
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CachedLogonsCount
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\PasswordExpiryWarning
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ForceUnlockLogon
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ScForceOption
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ScRemoveOption
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\RequireSecuritySignature
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnableSecuritySignature
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnablePlainTextPassword
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoDisconnect
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableForcedLogOff
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\DisableDomainCreds
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionPipes
Windows XP SP2 MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths\Machine
Windows Server 2003 MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths\Machine
Windows Server 2003 MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths\Machine
Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionShares
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionShares
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\ForceGuest
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LDAP\LDAPClientIntegrity
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinClientSec
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SecurityLevel
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SetCommand
Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ShutdownWithoutLogon
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management\ClearPageFileAtShutdown
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy
Windows Server 2003 MACHINE\Software\Policies\Microsoft\Cryptography\ForceKeyProtection
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\NoDefaultAdminOwner
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel\ObCaseInsensitive
Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode
Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\SubSystems\optional
Windows Server 2003 MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\AuthenticodeEnabled
Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys.
Windows XP SP2, Windows Server 2003 Restricted Groups policy settings are not registry keys.
Windows XP SP2, Windows Server 2003 System Services policy settings are not registry keys.
Windows XP SP2, Windows Server 2003 not a registry key
Windows XP SP2, Windows Server 2003 File System policy settings are not registry keys.
Windows Server 2003 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\ {0ACDD40C
Windows XP SP2, Windows Server 2003 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\EFS\Certificates\ for certificates ad
Windows Server 2003 HKEY_Local_Machine\Software\Policies\Microsoft\SystemCertificates\ACRS
Windows Server 2003 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\
Windows Server 2003 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Trust\CTLs\
Windows XP SP2, Windows Server 2003 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography\AutoEnrollment
After a software restriction policy is applied, software restriction policies use these registry keys to store thesoftwa
Windows XP SP2, Windows Server 2003 Software restriction policies use these registry keys to store thesoftware restriction policy configuration: HKEY_LO
Certificate rules for computer software restriction policies are stored in this registry key:
Windows XP SP2, Windows Server 2003 Software restriction policies use these registry keys to store the software restriction policy configuration: HKEY_L
Allowed: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPublishers\Certific
Windows XP SP2, Windows Server 2003 Disallowed: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
Windows XP SP2, Windows Server 2003
Windows XP SP2, Windows Server 2003 HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Trust\CTLs\

Windows XP SP2, Windows Server 2003 HKEY_CURRENT_USER\Software\Policies\Microsoft\Cryptography\AutoEnrollment
After a software restriction policy is applied, software restriction policies use these registry keys to store the softw
Windows Server 2003 Software restriction policies use these registry keys to store the software restriction policy configuration: HKEY_C
Allowed Certificate rules use key: HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\SystemCertificates\T
Windows Server 2003 Disallowed Certificate rules use key: HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\SystemCertificate
Notes: For more information about Windows Server 2003 security settings, see the Windows Server 2003 Help on the Microsoft Web site at
For more information about Windows XP security settings, see the Windows XP Help, and search for "Security Settings Descriptions."
For information about security features in Windows XP Service Pack 2, see the "Managing Windows XP Service Pack 2 Features Using Grou
Comments
For information about the set of security technologies included in Windows XP Service Pack 2, see
"Changes to Functionality in Microsoft Windows XP Service Pack 2" on the Microsoft TechNet Web site at http://go.microsoft.com/fwlink/?Lin
ot registry keys.
ot registry keys.
ot registry keys.
Important: Kerberos policies are used for domain user accounts. They determine Kerberos-related settings, such as ticket lifetimes and enforcement. Kerbero
See also the Log on locally policy setting in Windows XP SP2, described later in this worksheet.
Important: This setting does not have any effect on Windows 2000 computers that have not been updated to Service Pack 2.
Important: This setting does not have any effect on Windows 2000 computers that have not been updated to Service Pack 2.
Note: Misuse of this privilege, or of the Trusted for Delegation setting, could make the network vulnerable to sophisticated attacks using Trojan horse program
Note: In Windows 2000 Server, Windows 2000 Professional, Windows XP Professional, and the Windows Server 2003 family, the Task Scheduler automatica
Note: See also the corresponding Windows Server 2003 Allow log on locally policy setting, earlier in this worksheet.
Lsa\LimitBlankPasswordUse
Lsa\AuditBaseObjects
Lsa\FullPrivilegeAuditing
Lsa\CrashOnAuditFail
dows NT\DCOM\MachineAccessRestriction
dows NT\DCOM\MachineLaunchRestriction
ntVersion\Policies\System\UndockWithoutLogon
urrentVersion\Winlogon\AllocateDASD
Print\Providers\LanMan Print Services\Servers\AddPrinterDrivers
urrentVersion\Winlogon\AllocateCDRoms
urrentVersion\Winlogon\AllocateFloppies
Lsa\SubmitControl
s\NTDS\Parameters\LDAPServerIntegrity
s\Netlogon\Parameters\RefusePasswordChange
Important: In order to take advantage of this policy on member workstations and servers, all domain controllers that constitute the member’s domain must be
In order to take advantage of this policy on domain controllers, All domain controllers in the same domain, as well as all trusted domains, must be running Win
s\Netlogon\Parameters\SealSecureChannel
s\Netlogon\Parameters\SignSecureChannel
s\Netlogon\Parameters\DisablePasswordChange
Important: This setting applies to Windows 2000 computers, but it is not available through the Security Configuration Manager tools on these computers.
s\Netlogon\Parameters\RequireStrongKey
ntVersion\Policies\System\DontDisplayLastUserName
ntVersion\Policies\System\DisableCAD
ntVersion\Policies\System\LegalNoticeText
ntVersion\Policies\System\LegalNoticeCaption
urrentVersion\Winlogon\CachedLogonsCount
urrentVersion\Winlogon\PasswordExpiryWarning
Important: This setting applies to Windows 2000 computers, but it is not available through the Security Configuration Manager tools on these computers.
Important: This setting will apply to any computers running Windows 2000 through changes in the registry, but the security setting is not viewable through the
urrentVersion\Winlogon\ScRemoveOption
Important: For this policy to take effect on computers running Windows 2000, client-side packet signing must also be enabled. For more information, search
s\LanmanWorkstation\Parameters\EnableSecuritySignature
s\LanmanWorkstation\Parameters\EnablePlainTextPassword
s\LanManServer\Parameters\AutoDisconnect
Important: For this policy to take effect on computers running Windows 2000, server-side packet signing must also be enabled. For more information, search
s\LanManServer\Parameters\EnableSecuritySignature
s\LanManServer\Parameters\EnableForcedLogOff
Important: This policy has no impact on domain controllers. For more information, search for "Security Settings Descriptions" in the Windows Server 2003 He
Lsa\RestrictAnonymous
Lsa\DisableDomainCreds
Lsa\EveryoneIncludesAnonymous
s\LanManServer\Parameters\NullSessionPipes
Important: The Network access: Remotely accessible registry paths security setting that appears on computers running Windows XP corresponds to the
Important: This security setting is not available on earlier versions of Windows. The security setting that appears on computers running Windows XP, Netwo
Important: On Windows XP, this security setting was called "Network access: Remotely accessible registry paths." If you configure this setting on a member o
s\LanManServer\Parameters\NullSessionShares
s\LanManServer\Parameters\NullSessionShares
Important: This setting only affects computers running Windows XP Professional which are not joined to a domain.
This policy will have no impact on computers running Windows 2000. For more information, search for "Security Setting Descriptions" in the Windows Server 2
Important: Windows 2000 Service Pack 2 (SP2) and above offer compatibility with authentication to previous versions of Windows, such as Microsoft Window
This setting can affect the ability of computers running Windows 2000 Server, Windows 2000 Professional, Windows XP, and the Windows Server 2003 family
Important: This setting can affect the ability of computers running Windows 2000 Server, Windows 2000 Professional, Windows XP Professional, and the Win
s\LDAP\LDAPClientIntegrity
Warning: This setting will apply to any computers running Windows 2000 through changes in the registry but the security setting will not be viewable through t
Warning: This setting will apply to any computers running Windows 2000 through changes in the registry but the security setting will not be viewable through
urrentVersion\Setup\RecoveryConsole\SecurityLevel
urrentVersion\Setup\RecoveryConsole\SetCommand
ntVersion\Policies\System\ShutdownWithoutLogon
Session Manager\Memory Management\ClearPageFileAtShutdown
Lsa\FIPSAlgorithmPolicy
graphy\ForceKeyProtection
Lsa\NoDefaultAdminOwner
Session Manager\Kernel\ObCaseInsensitive
Session Manager\ProtectionMode
Session Manager\SubSystems\optional
ws\Safer\CodeIdentifiers\AuthenticodeEnabled
Note: This setting does not appear in the Local Computer Policy object.
Important: Modifying this setting may affect compatibility with clients, services, and applications. For compatibility information about this setting, see the "Even
Notes: This setting does not appear in the Local Computer Policy object.
This security setting affects only computers running Windows 2000, Windows Server 2003, and Windows XP.
A user must possess the Manage auditing and security log user right to access the security log.
A user must possess the Manage auditing and security log user right to access the security log.
This setting
Note: Group Policydoes
setsnot appearkey
a registry in the Local
which Computer
is checked byPolicy object.user operations. The key is:
EFS during
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\EFS\EfsConfiguration
Windows NT\CurrentVersion\Winlogon\GPExtensions\ {0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63} (Domain Controller and Target)
In the case of local computers that are not members of a domain, local policy is not available for disabling EFS. However, a different registry key may be set to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS\EfsConfiguration
osoft\SystemCertificates\ACRS
es\Microsoft\SystemCertificates\Root\Certificates\
es\Microsoft\SystemCertificates\Trust\CTLs\
es\Microsoft\Cryptography\AutoEnrollment
ftware restriction policies use these registry keys to store thesoftware restriction policy configuration: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safe
This setting is a default rule that, if ON, prevents software from running unless a more specific rule allows the software to run. For more information about softw
on policies are stored in this registry key:
A default rule that, when ON, allows all software to run unless a specific disallow rule overrides it. For more information about software restriction policies, sear
RE\Policies\Microsoft\SystemCertificates\TrustedPublishers\Certificates\
WARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\
keys to store the software restriction policy configuration: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer
icrosoft\SystemCertificates\Trust\CTLs\
icrosoft\Cryptography\AutoEnrollment
ftware restriction policies use these registry keys to store the software restriction policy configuration: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safe
This setting is a default rule that, if ON, prevents software from running unless a more specific rule allows the software to run. For more information about softw
A default rule that, when ON, allows all software to run unless a specific disallow rule overrides it. For more information about software restriction policies, sear
RENT_USER\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPublishers\Certificates\
URRENT_USER\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates\
keys to store the software restriction policy configuration: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows
r 2003 Help on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=18174, and search for "Security Settings Descriptions."
r "Security Settings Descriptions."
XP Service Pack 2 Features Using Group Policy" white paper on the Microsoft TechNet Web site at http://go.microsoft.com/fwlink/?LinkId=31974.
site at http://go.microsoft.com/fwlink/?LinkId=29126.
h as ticket lifetimes and enforcement. Kerberos policies do not exist in Local Computer Policy.
phisticated attacks using Trojan horse programs that impersonate incoming clients and use their credentials to gain access to network resources.
r 2003 family, the Task Scheduler automatically grants this right as necessary.
that constitute the member’s domain must be running Windows NT 4.0 Service Pack 6 or higher.
l as all trusted domains, must be running Windows NT 4.0 Service Pack 6 or higher.
ation Manager tools on these computers.
ration Manager tools on these computers.

he security setting is not viewable through the Security Configuration Manager tool set.
so be enabled. For more information, search for "Security Settings Descriptions" in the Windows Server 2003 Help.
lso be enabled. For more information, search for "Security Settings Descriptions" in the Windows Server 2003 Help.
Descriptions" in the Windows Server 2003 Help.
ters running Windows XP corresponds to the Network access: Remotely accessible registry paths and subpaths security policy setting on members of the Windows Ser
s on computers running Windows XP, Network access: Remotely accessible registry paths corresponds to the Network access: Remotely accessible registry paths a
s." If you configure this setting on a member of the Windows Server 2003 family that is joined to a domain, this setting is inherited by computers running Wi ndows XP, but wil
ain.
Setting Descriptions" in the Windows Server 2003 Help.
ersions of Windows, such as Microsoft Windows NT 4.0.
ows XP, and the Windows Server 2003 family to communicate with computers running Windows 95 and Windows 98. For more information, search for "Secur ity Setting Des
sional, Windows XP Professional, and the Windows Server 2003 family to communicate with computers running Windows NT 4.0 and earlier over the network. For exa mple,
security setting will not be viewable through the Security Configuration Manager tool set. For more information, search for "Security Setting Descriptions " in the Windows Se
e security setting will not be viewable through the Security Configuration Manager tool set. For more information, search for "Security Setting Descriptions" in the Windows Se
y information about this setting, see the "Event Log: Maximum security log size" section in KB 823659 "Client, service, and program incompatibilities that may occur when yo
However, a different registry key may be set to disable EFS. If the key is set to a DWORD value of 0x01, EFS will be disabled. Registry key:
SOFTWARE\Policies\Microsoft\Windows\Safer and HKEY_CURRENT_USER\Software\Policie s\Microsoft\Windows

tware to run. For more information about software restriction policies, search for "Software Restriction Policies Technical Reference" in t he Group Policy Collection of the Win
mation about software restriction policies, search for "Software Restriction Policies Technical Reference" in the Group Policy Collection o f the Windows Server 2003 Technica
SOFTWARE\Policies\Microsoft\Windows\Safer and HKEY_CURRENT_USER\Software\Polici es\Microsoft\Windows

tware to run. For more information about software restriction policies, search for "Software Restriction Policies Technical Reference" in t he Group Policy Collection of the Win
mation about software restriction policies, search for "Software Restriction Policies Technical Reference" in the Group Policy Collection o f the Windows Server 2003 Technica
criptions."
wlink/?LinkId=31974.
on members of the Windows Server 2003 family.
tely accessible registry paths and subpaths security option on members of the Windows Server 2003 family.
ers running Wi ndows XP, but will appear as the "Network access: Remotely accessible registry paths" security option.
search for "Secur ity Setting Descriptions" in the Windows Server 2003 Help.
over the network. For exa mple, at the time of this writing, computers running Windows NT 4.0 SP4 and earlier did not support NTLMv2. Computers running Windows 95 and
Descriptions " in the Windows Server 2003 Help.

Description s" in the Windows Server 2003 Help.
tibilities that may occur when you modify security settings and user rights assignments" (http://go.microsoft.com/fwlink/?LinkId=35271) at the Microsoft website.
Group Policy Collection of the Windows Server 2003 Technical Reference on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=38997. For more information abo
he Windows Server 2003 Technical Reference on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=38997. For more information about using software restriction
Group Policy Collection of the Windows Server 2003 Technical Reference on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=38997. For more information abo
he Windows Server 2003 Technical Reference on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=38997. For more information about using software restriction
omputers running Windows 95 and Windows 98 did not support NTLM. For compatibility information about this setting, see Network security: Lan Manager authentication lev
he Microsoft website.
=38997. For more information about using software restriction policies, search for "Software Restriction Policies" in the Windows Server 2003 Help on the Microsoft Web site
on about using software restriction policies, search for "Software Restriction Policies" in the Windows Server 2003 H elp on the Microsoft Web site at http://go.microsoft.com/f
=38997. For more information about using software restriction policies, search for "Software Restriction Policies" in the Windows Server 2003 Help on the Microsoft Web site
on about using software restriction policies, search for "Software Restriction Policies" in the Windows Server 2003 H elp on the Microsoft Web site at http://go.microsoft.com/f
Lan Manage r authentication level (http://go.microsoft.com/fwlink/?LinkId=24278) at the Microsoft website.
03 Help on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=18174.
eb site at http://go.microsoft.com/fwlink/?LinkId=18174.
03 Help on the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=18174.

eb site at http://go.microsoft.com/fwlink/?LinkId=18174.
Computer/User
Policy
Node
Path
Machine Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy
Machine Computer Configuration\Windows Settings\Security Settings\Account Policies\Account Lockout Policy
Machine Computer Configuration\Windows Settings\Security Settings\Account Policies\Kerberos Policy
Machine Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy
Machine Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment

Machine Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
Machine Computer Configuration\Windows Settings\Security Settings\Event Log\Settings for Event Logs
Machine Computer Configuration\Windows Settings\Security Settings\Restricted Groups
Machine Computer Configuration\Windows Settings\Security Settings\System Services
Machine Computer Configuration\Windows Settings\Security Settings\Registry
Machine Computer Configuration\Windows Settings\Security Settings\File System
Machine Computer Configuration\Windows Settings\Security Settings\Public Key Policies
Machine Computer Configuration\Windows Settings\Security Settings\IP Security Policies
User User Configuration\Windows Settings\Security Settings\Public Key Policies
Full Policy Name
Enforce password history
Maximum password age
Minimum password age
Minimum password length
Passwords must meet complexity requirements of the installed password filter
Store password using reversible encryption for all users in the domain
Account lockout duration
Account lockout threshold
Reset account lockout counter after
Enforce user logon restrictions
Maximum lifetime for service ticket
Maximum lifetime for user ticket
Maximum lifetime for user ticket renewal
Maximum tolerance for computer clock synchronization
Audit account logon events
Audit account management
Audit directory service access
Audit logon events
Audit object access
Audit policy change
Audit privilege use
Audit process tracking
Audit system events
Access this computer from the network
Act as part of the operating system
Add workstations to domain
Back up files and directories
Bypas traverse checking
Change the system time
Create a pagefile
Create a token object
Create global objects
Create permanent shared objects
Debug programs
Deny access to this computer from the network
Deny logon as a batch job
Deny logon as a service
Deny logon locally
Enable computer and user accounts to be trusted for delegation
Force shutdown from a remote system
Generate security audits
Impersonate a client after authentication
Increase quotas
Increase scheduling priority
Load and unload device drivers
Lock pages in memory
Log on as a batch job
Log on as a service
Log on locally
Manage auditing and security log
Modify firmware environment variables
Profile single process
Profile system performance
Remove computer from docking station
Replace a process level token
Restore files and directories
Shut down the system
Synchronize directory service data
Take ownership of files or other objects
Additional restrictions for anonymous connections
Allow server operators to schedule tasks (domain controllers only)
Allow system to be shut down without having to log on
Allowed to eject removable NTFS media
Amount of idle time required before disconnecting a session
Audit the access of global system objects
Audit use of Backup and Restore privilege
Automatically log off users when logon time expires
Automatically log off users when logon time expires (local)
Clear virtual memory pagefile when system shuts down
Digitally sign client communications (always)
Digitally sign client communications (always)
Digitally sign client communications (when possible)
Digitally sign server communications (when possible)
Disable CTRL+ALT+DEL requirement for logon
Do not display last user name in logon screen
LAN Manager authentication level
Message text for users attempting to log on
Message title for users attempting to log on
Number of previous logons to cache (in case domain controller is not available)
Prevent system maintenance of computer account password
Prevent users from installing printer drivers
Prompt user to change password before expiration
Recovery Console: Allow automatic administrative logon
Recovery Console: Allow floppy copy and access to all drives and folders
Rename administrator account
Rename guest account
Restrict CD-ROM access to locally logged-on user only
Secure channel: Digitally encrypt or sign secure channel data (always)
Secure channel: Digitally encrypt secure channel data (when possible)
Secure channel: Digitally sign secure channel data (when possible)
Secure channel: Require strong (Windows 2000 or later) session key
Secure system partition (for RISC platforms only)
Send unencrypted password to connect to third-party SMB servers
Shut down system immediately if unable to log security audits
Smart card removal behavior
Strengthen default permissions of global system objects (e.g. Symbolic links)
Unsigned driver installation behavior
Unsigned non-driver installation behavior
Maximum application log size
Maximum security log size
Maximum system log size
Restrict guest access to application log
Restrict guest access to security log
Restrict guest access to system log
Retain application log
Retain security log
Retain system log
Retention method for application log
Retention method for security log
Retention method for system log
Shut down the computer when the security audit log is full
Restricted Groups
System Services
Registry
File System
Encrypted Data Recovery Agents
Automatic Certificate Request Settings
Trusted Root Certification Authorities
Enterprise Trust
Client (Respond Only)
Secure Server (Require Security)
Server (Request Security)
Enterprise Trust
Registry Settings Comments
Password Policy security settings are not registry keys. For more information about Windows 2000 Security Settings, see the
Password Policy security settings are not registry keys.
Account Lockout Policy security settings are not registry keys.
Kerberos Policy security settings are not registry keys.
Audit Policy security settings are not registry keys.
User Rights security settings are not registry keys
User Rights security settings are not registry keys For more information about User Rights policy settings, see Appendix

MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous
MACHINE\System\CurrentControlSet\Control\Lsa\SubmitControl
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ShutdownWithoutLogon
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateDASD
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoDisconnect
MACHINE\System\CurrentControlSet\Control\Lsa\AuditBaseObjects
MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditing
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableForcedLogOff
MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management\ClearPageFileAtShutdown
MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters\RequireSecuritySignature
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnableSecuritySignature
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCAD
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLastUserName
MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CachedLogonsCount
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DisablePasswordChange
MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers\AddPrinterDrivers
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\PasswordExpiryWarning
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SecurityLevel
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SetCommand
Not a registry key
Not a registry key
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateCDRoms
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SealSecureChannel
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SignSecureChannel
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireStrongKey
Important: This policy was used with Beta versions of Windows 2000
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnablePlainTextPassword
MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ScRemoveOption
MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode
MACHINE\Software\Microsoft\Driver Signing\Policy
MACHINE\Software\Microsoft\Non-Driver Signing\Policy
Event Log security settings are not registry keys.
Restricted Groups policy settings are not registry keys.
System Services policy settings are not registry keys.
Not a registry key
File System policy settings are not registry keys.
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\EFS\Certificates
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ACRS
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates\
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Trust\CTLs\
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Trust\CTLs\
ws 2000 Security Settings, see the Windows 2000 Group Policy Reference in the Windows 2000 Server Resource Kit on the Microsoft Web site at http://go.microsoft.com/fwlin
ghts policy settings, see Appendix B of the "Microsoft Windows 2000 Security Hardening Guide" at http://www.microsoft.com/technet/security/prodtech/windows2000/win2khg
th Beta versions of Windows 2000 that ran on RISC platforms. However, the released versions of Windows 2000 do not run on RISC platforms; therefore, this setting has no e
site at http://go.microsoft.com/fwlink/?LinkId=16196.
y/prodtech/windows2000/win2khg/appxb.mspx.
ms; therefore, this setting has no effect on Windows 2000.

Group Policy Settings - Windows 2003 SP2

Diunggah oleh

Informasi Dokumen

Hak Cipta

Format Tersedia

Bagikan dokumen Ini

Bagikan atau Tanam Dokumen

Opsi Berbagi

Apakah menurut Anda dokumen ini bermanfaat?

Apakah konten ini tidak pantas?

Hak Cipta:

Format Tersedia

Group Policy Settings - Windows 2003 SP2

Diunggah oleh

Hak Cipta:

Format Tersedia

Group Policy Settings Reference

Windows Server 2003 Service Pack 2

Turn off Microsoft Peer-to-Peer Networking Services

dowsMediaPlayer\Protocols\HTTP!ProxyType, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!AutodetectProxy, HKCU\Software\ Policies\Microsof

es\Microsoft\WindowsMediaPlayer\Protocols!Multicast, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!UDP, HKCU\Software\Policies \Microsoft\Windows

s NT\Printers\PointAndPrint!InForest, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!TrustedServers, HKCU\Software\Pol icies\Microsoft\Windows NT

Version\Policies\Explorer!NoPublishingWizard, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices, HKCU\Software\Mi crosoft\Windows\Cu

CurrentVersion\Policies\System!ProfileQuotaMessage, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxProfileSize, HKCU\Softw are\Microsoft\Wind

Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

CurrentVersion\Policies\comdlg32\Placesbar!Place1, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place2, HKCU\So ftware\Microsoft\W

TS!MaxTransferRateOnSchedule, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBandwidthValidFrom, HKLM\Software\Policies\Microsoft\Windows\BIT S!MaxBandw

cies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Loggin g!LogDrop

licies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\ Logging!Log

ealth\ErrorReporting\DW!DWNoFileCollection, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoSecondLevelCollection, HKLM\Softwar e\Policies\Micro

ware\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\Group Policy\

M\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\Gro

Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\Group

M\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoBackgroundPolicy, HKLM\Software\Policies\Microsoft\Windo ws\G

ig!HoldPeriod, HKLM\Software\Policies\Microsoft\W32Time\Config!LargePhaseOffset, HKLM\Software\Policies\Microsoft\W32Time\Config!MaxAllowedPh aseOffset, HKLM\

ft\Windows NT\Terminal Services!KeepAliveInterval

icies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip

\Microsoft\Windows NT\Terminal Services!FallbackPrintDriverType

Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Setti

\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Setti

ate, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKCU\Software\Policie s\Microsoft\Windows\Curren

re\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\M ain\FeatureControl\

oftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Ex plorer\Main\Feat

ftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Expl orer\Main\Feature

ved), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Micro soft\

ftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Ex plorer\Main\Feature

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKCU\Software\Policies\Microsoft \Internet E

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKCU\Software\Policies\Microsoft\Int ernet Ex

Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\F

Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Fe

ed), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKCU\Software\Policies\M icrosoft\Int

d), HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKCU\Software\Policies\Micro soft\Inte

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKCU\Software\Policies\Microsoft \Internet E

ws\CurrentVersion\Policies\Explorer!Btn_Back, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Btn_Forward, HKCU\Software\M icrosoft\Windows\Curr

\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!Internet, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Setti

\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!Intranet, HKLM\Software\Policies\Microsoft\Windows \CurrentVersion\Internet Setti

ate, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!Trusted Sites, HKLM\Software\Policie s\Microsoft\Windows\Curren

oftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Ex plorer\Main\Featu

ftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Expl orer\Main\Feature

ftware\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Ex plorer\Main\Feature

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!explorer.exe, HKLM\Software\Policies\Microsoft \Internet E

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!explorer.exe, HKLM\Software\Policies\Microsoft\Int ernet Ex

Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\F

Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!explorer.exe, HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Fe

ed), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!explorer.exe, HKLM\Software\Policies\M icrosoft\Int

d), HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!explorer.exe, HKLM\Software\Policies\Micro soft\Inte

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!explorer.exe, HKLM\Software\Policies\Microsoft \Internet E

CU\Software\ Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseProxy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!UseBrowserProx

are\Policies \Microsoft\WindowsMediaPlayer\Protocols!UDPPorts, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!TCP, HKCU\Software\Policies\Microsof

Pol icies\Microsoft\Windows NT\Printers\PointAndPrint!ServerList

KCU\Softw are\Microsoft\Windows\CurrentVersion\Policies\System!IncludeRegInProQuota, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!WarnUser, H

oft\Windows\BIT S!MaxBandwidthValidTo, HKLM\Software\Policies\Microsoft\Windows\BITS!UseSystemMaximum, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTr

omainProfile\Loggin g!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogSuccessfulConnections, HKLM\SOFTWARE

licies\Microsoft\Win dowsFirewall\StandardProfile\IcmpSettings!AllowRedirect, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowIn

l\StandardProfile\ Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogSuccessfulConnections, HKLM\SOFTW

HKLM\Softwar e\Policies\Microsoft\PCHealth\ErrorReporting!ForceQueueMode, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWFileTreeRoot, HKLM\S

crosoft\Windo ws\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoGPOListChanges

Policies\Microsoft\Windo ws\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoGPOListChanges

cies\Microsoft\Windo ws\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoGPOListChanges