Windows 10 ADMX Spreadsheet

Group Policy Settings Reference
Windows 10
This spreadsheet lists the policy settings for computer and user configurations that are included in the Administrative template files (.admx and
Windows Server 10 The policy settings included in this spreadsheet cover Windows 10, Windows Server 2012 R2, Windows Server 2012, Wi
Windows 8.1, Windows 8, Windows 7, Windows Vista with SP1,Windows XP Professional with SP2 or earlier service packs, and Microsoft W
These files are used to expose policy settings when you use the Group Policy Management Console (GPMC) to edit Group Policy Objects (GP
You can use the filtering capabilities that are included in this spreadsheet to view a specific subset of data, based on one value or a combinati
in one or more of the columns. In addition, you can click Custom in the drop-down list of any of the column headings to add additional filtering
To view a specific subset of data, click the drop-down arrow in the column heading of cells that contain the value or combination of values on w
and then click the desired value in the drop-down list. For example, to view policy settings that are available for Windows Server 2012 or Wind
Administrative Template worksheet, click the drop-down arrow next to Supported On, and then click At least Microsoft Windows Server 2
Legal Notice
This document is provided as-is. Information and views expressed in this document, including URL and other Internet Web site references, may change witho
Some examples depicted herein are provided for illustration only and are fictitious.
This document does not provide you with any legal rights to any intellectual property in any Microsoft product. You may copy and use this document for your in
2015 Microsoft Corporation. All rights reserved.
Active Directory, Hyper-V, Microsoft, MS-DOS, Visual Basic, Visual Studio, Windows, Windows NT, Windows Server,
and Windows Vista are trademarks of the Microsoft group of companies.
All other trademarks are property of their respective owners.

nistrative template files (.admx and .adml) delivered with
12 R2, Windows Server 2012, Windows Server 2008 R2, Windows Server 2008,Windows Server 2003 with SP2 or earlier service packs,
er service packs, and Microsoft Windows 2000 with SP5 or earlier service packs.
C) to edit Group Policy Objects (GPOs).
based on one value or a combination of values that are available

headings to add additional filtering criteria within that column.
alue or combination of values on which you want to filter,
for Windows Server 2012 or Windows 8, in the
ast Microsoft Windows Server 2012 or Windows 8.
Web site references, may change without notice.
opy and use this document for your internal, reference purposes.
er service packs,
File Name
activexinstallservice.admx
activexinstallservice.admx
addremoveprograms.admx
allowbuildpreview.admx
appcompat.admx
appcompat.admx
appcompat.admx
appcompat.admx
appcompat.admx
appcompat.admx
appcompat.admx
appcompat.admx
appcompat.admx
appxpackagemanager.admx
appxruntime.admx
appxruntime.admx
appxruntime.admx
appxruntime.admx
appxruntime.admx
appxruntime.admx
appxruntime.admx
attachmentmanager.admx
auditsettings.admx
autoplay.admx
autoplay.admx
autoplay.admx
autoplay.admx
autoplay.admx
autoplay.admx
autoplay.admx
autoplay.admx
avsvalidationgp.admx
biometrics.admx
biometrics.admx
biometrics.admx
biometrics.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
bits.admx
ceipenable.admx
ceipenable.admx
ciphersuiteorder.admx
ciphersuiteorder.admx
com.admx
com.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
controlpanel.admx
controlpanel.admx
controlpanel.admx
controlpanel.admx
controlpaneldisplay.admx
cpls.admx
credentialproviders.admx
credssp.admx
credssp.admx
credssp.admx
credssp.admx
credssp.admx
credssp.admx
credssp.admx
credssp.admx
credssp.admx
credssp.admx
credui.admx
credui.admx
credui.admx
credui.admx
ctrlaltdel.admx
ctrlaltdel.admx
ctrlaltdel.admx
ctrlaltdel.admx
datacollection.admx
datacollection.admx
dcom.admx
dcom.admx
DeliveryOptimization.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
desktop.admx
devicecompat.admx
devicecompat.admx
deviceguard.admx
deviceguard.admx
deviceinstallation.admx
deviceredirection.admx
deviceredirection.admx
devicesetup.admx
devicesetup.admx
devicesetup.admx
devicesetup.admx
devicesetup.admx
devicesetup.admx
devicesetup.admx
devicesetup.admx
devicesetup.admx
dfs.admx
digitallocker.admx
digitallocker.admx
diskdiagnostic.admx
diskdiagnostic.admx
disknvcache.admx
disknvcache.admx
disknvcache.admx
disknvcache.admx
diskquota.admx
diskquota.admx
diskquota.admx
diskquota.admx
diskquota.admx
diskquota.admx
distributedlinktracking.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dnsclient.admx
dwm.admx
dwm.admx
dwm.admx
dwm.admx
dwm.admx
dwm.admx
dwm.admx
dwm.admx
dwm.admx
eaime.admx
eaime.admx
eaime.admx
eaime.admx
eaime.admx
eaime.admx
eaime.admx
eaime.admx
eaime.admx
earlylauncham.admx
edgeui.admx
edgeui.admx
edgeui.admx
edgeui.admx
edgeui.admx
edgeui.admx
edgeui.admx
encryptfilesonmove.admx
enhancedstorage.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
errorreporting.admx
eventforwarding.admx
eventforwarding.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlog.admx
eventlogging.admx
eventviewer.admx
eventviewer.admx
eventviewer.admx
explorer.admx
explorer.admx
explorer.admx
explorer.admx
explorer.admx
explorer.admx
explorer.admx
explorer.admx
externalboot.admx
externalboot.admx
externalboot.admx
filehistory.admx
filerecovery.admx
filerevocation.admx
fileservervssagent.admx
fileservervssprovider.admx
filesys.admx
filesys.admx
filesys.admx
filesys.admx
filesys.admx
filesys.admx
filesys.admx
folderredirection.admx
framepanes.admx
framepanes.admx
fthsvc.admx
gamedvr.admx
gameexplorer.admx
gameexplorer.admx
gameexplorer.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
globalization.admx
grouppolicy-server.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicypreferences.admx
help.admx
help.admx
help.admx
help.admx
helpandsupport.admx
helpandsupport.admx
helpandsupport.admx
helpandsupport.admx
hotspotauth.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
icm.admx
iis.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inkwatson.admx
inkwatson.admx
iscsi.admx
iscsi.admx
iscsi.admx
iscsi.admx
iscsi.admx
iscsi.admx
iscsi.admx
iscsi.admx
iscsi.admx
iscsi.admx
kdc.admx
kdc.admx
kdc.admx
kdc.admx
kdc.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
lanmanserver.admx
lanmanserver.admx
lanmanserver.admx
lanmanserver.admx
lanmanworkstation.admx
leakdiagnostic.admx
linklayertopologydiscovery.admx
linklayertopologydiscovery.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
logon.admx
mediacenter.admx
mediacenter.admx
microsoft-windows-geolocation-wlpa
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
microsoftedge.admx
mmc.admx
mmc.admx
mmc.admx
mmc.admx
mmc.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins.admx
mmcsnapins2.admx
mmcsnapins2.admx
mmcsnapins2.admx
mmcsnapins2.admx
mmcsnapins2.admx
mmcsnapins2.admx
mmcsnapins2.admx
mmcsnapins2.admx
mmcsnapins2.admx
mmcsnapins2.admx
mmcsnapins2.admx
mobilepcmobilitycenter.admx
mobilepcmobilitycenter.admx
mobilepcpresentationsettings.admx
mobilepcpresentationsettings.admx
msched.admx
msched.admx
msched.admx
msdt.admx
msdt.admx
msdt.admx
msi-filerecovery.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
nca.admx
nca.admx
nca.admx
nca.admx
nca.admx
nca.admx
nca.admx
nca.admx
ncsi.admx
ncsi.admx
ncsi.admx
ncsi.admx
ncsi.admx
ncsi.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
netlogon.admx
networkconnections.admx
networkisolation.admx
networkprovider.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
offlinefiles.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
p2p-pnrp.admx
parentalcontrols.admx
passport.admx
passport.admx
passport.admx
passport.admx
passport.admx
passport.admx
passport.admx
passport.admx
passport.admx
passport.admx
passport.admx
passport.admx
passport.admx
passport.admx
passport.admx
pca.admx
pca.admx
pca.admx
pca.admx
pca.admx
pca.admx
pca.admx
peertopeercaching.admx
pentraining.admx
pentraining.admx
performancediagnostics.admx
performanceperftrack.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
power.admx
powershellexecutionpolicy.admx
PreviousVersions.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing.admx
printing2.admx
printing2.admx
printing2.admx
printing2.admx
printing2.admx
printing2.admx
printing2.admx
printing2.admx
printing2.admx
printing2.admx
programs.admx
programs.admx
programs.admx
programs.admx
programs.admx
programs.admx
programs.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
qos.admx
racwmiprov.admx
radar.admx
reagent.admx
reliability.admx
reliability.admx
reliability.admx
reliability.admx
remoteassistance.admx
removablestorage.admx
rpc.admx
rpc.admx
rpc.admx
rpc.admx
rpc.admx
rpc.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
sdiageng.admx
sdiageng.admx
sdiageng.admx
sdiagschd.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
search.admx
searchocr.admx
searchocr.admx
securitycenter.admx
sensors.admx
sensors.admx
sensors.admx
sensors.admx
sensors.admx
sensors.admx
servermanager.admx
servermanager.admx
servermanager.admx
servermanager.admx
servicing.admx
settingsync.admx
settingsync.admx
settingsync.admx
settingsync.admx
settingsync.admx
settingsync.admx
settingsync.admx
settingsync.admx
settingsync.admx
settingsync.admx
setup.admx
setup.admx
shapecollector.admx
shapecollector.admx
sharedfolders.admx
sharedfolders.admx
sharing.admx
sharing.admx
shell-commandprompt-regedittools.a
shellwelcomecenter.admx
sidebar.admx
sidebar.admx
sidebar.admx
sidebar.admx
sidebar.admx
sidebar.admx
skydrive.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
smartcard.admx
snmp.admx
snmp.admx
snmp.admx
soundrec.admx
soundrec.admx
srm-fci.admx
srm-fci.admx
srm-fci.admx
srm-fci.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
startmenu.admx
systemrestore.admx
systemrestore.admx
tabletpcinputpanel.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
tabletshell.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskbar.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
taskscheduler.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
terminalserver-server.admx
terminalserver-winip.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
terminalserver.admx
textinput.admx
thumbnails.admx
thumbnails.admx
thumbnails.admx
touchinput.admx
touchinput.admx
touchinput.admx
touchinput.admx
tpm.admx
tpm.admx
tpm.admx
tpm.admx
tpm.admx
tpm.admx
tpm.admx
tpm.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userdatabackup.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
userprofiles.admx
volumeencryption.admx
w32time.admx
w32time.admx
w32time.admx
w32time.admx
wcm.admx
wcm.admx
wcm.admx
wcm.admx
wdi.admx
wdi.admx
wincal.admx
wincal.admx
windowsanytimeupgrade.admx
windowsanytimeupgrade.admx
windowsbackup.admx
windowsbackup.admx
windowsbackup.admx
windowsbackup.admx
windowsbackup.admx
windowscolorsystem.admx
windowscolorsystem.admx
windowsconnectnow.admx
windowsdefender.admx
windowsexplorer.admx
windowsfileprotection.admx
windowsfirewall.admx
windowsmail.admx
windowsmail.admx
windowsmail.admx
windowsmail.admx
windowsmediadrm.admx
windowsmediaplayer.admx
windowsmessenger.admx
windowsremotemanagement.admx
windowsremoteshell.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
windowsupdate.admx
wininit.admx
wininit.admx
wininit.admx
winlogon.admx
winlogon.admx
winlogon.admx
winlogon.admx
winlogon.admx
winlogon.admx
winlogon.admx
winlogon.admx
winsrv.admx
wlansvc.admx
wordwheel.admx
workfolders-client.admx
workfolders-client.admx
workplacejoin.admx
wpn.admx
wpn.admx
wpn.admx
wpn.admx
wpn.admx
wpn.admx
wpn.admx
wpn.admx
wwansvc.admx
wwansvc.admx
Policy Setting Name Scope
Approved Installation Sites for ActiveX Controls Machine
Establish ActiveX installation policy for sites in Trusted zones Machine
Specify default category for Add New Programs User
Hide the "Add a program from CD-ROM or floppy disk" option User
Hide the "Add programs from Microsoft" option User
Hide the "Add programs from your network" option User
Hide Add New Programs page User
Remove Add or Remove Programs User
Hide the Set Program Access and Defaults page User
Hide Change or Remove Programs page User
Go directly to Components Wizard User
Remove Support Information User
Hide Add/Remove Windows Components page User
Toggle user control over Insider builds Machine
Prevent access to 16-bit applications Machine
Remove Program Compatibility Property Page Machine
Turn off Application Telemetry Machine
Turn off SwitchBack Compatibility Engine Machine
Turn off Application Compatibility Engine Machine
Turn off Program Compatibility Assistant User
Turn off Program Compatibility Assistant Machine
Turn off Steps Recorder Machine
Turn off Inventory Collector Machine
Allow all trusted apps to install Machine
Allow deployment operations in special profiles Machine
Allows development of Windows Store apps and installing them from an in Machine
Disable installing Windows apps on non-system volumes Machine
Prevent users' app data from being stored on non-system volumes Machine
Allow a Windows app to share application data between users Machine
Block launching desktop apps associated with a file. Machine
Block launching desktop apps associated with a file. User
Block launching desktop apps associated with a URI scheme Machine
Block launching desktop apps associated with a URI scheme User
Allow Microsoft accounts to be optional Machine
Turn on dynamic Content URI Rules for Windows store apps Machine
Block launching Windows Store apps with Windows Runtime API access fromMachine
Notify antivirus programs when opening attachments User
Trust logic for file attachments User
Do not preserve zone information in file attachments User
Hide mechanisms to remove zone information User
Default risk level for file attachments User
Inclusion list for high risk file types User
Inclusion list for low file types User
Inclusion list for moderate risk file types User
Include command line in process creation events Machine
Set the default behavior for AutoRun Machine
Set the default behavior for AutoRun User
Prevent AutoPlay from remembering user choices. Machine
Prevent AutoPlay from remembering user choices. User
Turn off Autoplay Machine
Turn off Autoplay User
Disallow Autoplay for non-volume devices Machine
Disallow Autoplay for non-volume devices User
Turn off KMS Client Online AVS Validation Machine
Allow the use of biometrics Machine
Allow users to log on using biometrics Machine
Allow domain users to log on using biometrics Machine
Specify timeout for fast user switching events Machine
Timeout for inactive BITS jobs Machine
Limit the maximum BITS job download time Machine
Limit the maximum network bandwidth for BITS background transfers Machine
Set up a work schedule to limit the maximum network bandwidth used for BMachine
Set up a maintenance schedule to limit the maximum network bandwidth usMachine
Allow BITS Peercaching Machine
Limit the age of files in the BITS Peercache Machine
Limit the BITS Peercache size Machine
Do not allow the computer to act as a BITS Peercaching client Machine
Do not allow the computer to act as a BITS Peercaching server Machine
Limit the maximum network bandwidth used for Peercaching Machine
Set default download behavior for BITS jobs on costed networks Machine
Limit the maximum number of BITS jobs for this computer Machine
Limit the maximum number of BITS jobs for each user Machine
Limit the maximum number of files allowed in a BITS job Machine
Limit the maximum number of ranges that can be added to the file in a BITSMachine
Do not allow the BITS client to use Windows Branch Cache Machine
Allow Corporate redirection of Customer Experience Improvement uploads Machine
Tag Windows Customer Experience Improvement data with Study Identifier Machine
SSL Cipher Suite Order Machine
ECC Curve Order Machine
Download missing COM components User
Download missing COM components Machine
Disable application Sharing User
Prevent Control User
Prevent Sharing User
Prevent Sharing Command Prompts User
Prevent Desktop Sharing User
Prevent Sharing Explorer windows User
Prevent Application Sharing in true color User
Disable Audio User
Prevent changing DirectSound Audio setting User
Disable full duplex Audio User
Prevent receiving Video User
Prevent sending Video User
Limit the bandwidth of Audio and Video User
Allow persisting automatic acceptance of Calls User
Disable Chat User
Disable Whiteboard User
Disable NetMeeting 2.x Whiteboard User
Disable remote Desktop Sharing Machine
Enable Automatic Configuration User
Prevent adding Directory servers User
Prevent automatic acceptance of Calls User
Prevent changing Call placement method User
Disable Directory services User
Prevent receiving files User
Prevent sending files User
Prevent viewing Web directory User
Limit the size of sent files User
Set the intranet support Web page User
Set Call Security options User
Disable the Advanced Calling button User
Hide the Audio page User
Hide the General page User
Hide the Security page User
Hide the Video page User
Hide specified Control Panel items User
Always open All Control Panel Items when opening Control Panel User
Prohibit access to Control Panel and PC settings User
Show only specified Control Panel items User
Disable the Display Control Panel User
Hide Settings tab User
Prevent changing color and appearance User
Prevent changing screen saver User
Enable screen saver User
Force specific screen saver User
Password protect the screen saver User
Screen saver timeout User
Prevent changing desktop background User
Prevent changing sounds User
Prevent changing mouse pointers User
Prevent changing desktop icons User
Prevent changing color scheme User
Prevent changing theme User
Load a specific theme User
Prevent changing visual style for windows and buttons User
Force a specific visual style file or force Windows Classic User
Prohibit selection of visual style font size User
Do not display the lock screen Machine
Prevent changing lock screen image Machine
Prevent enabling lock screen slide show Machine
Prevent enabling lock screen camera Machine
Force a specific background and accent color Machine
Force a specific Start background Machine
Prevent changing start menu background Machine
Force a specific default lock screen image Machine
Apply the default account picture to all users Machine
Assign a default domain for logon Machine
Exclude credential providers Machine
Turn on PIN sign-in Machine
Turn off picture password sign-in Machine
Allow users to select when a password is required when resuming from con Machine
Assign a default credential provider Machine
Allow delegating default credentials Machine
Allow delegating default credentials with NTLM-only server authentication Machine
Allow delegating fresh credentials Machine
Allow delegating fresh credentials with NTLM-only server authentication Machine
Allow delegating saved credentials Machine
Allow delegating saved credentials with NTLM-only server authentication Machine
Deny delegating default credentials Machine
Deny delegating fresh credentials Machine
Deny delegating saved credentials Machine
Restrict delegation of credentials to remote servers Machine
Enumerate administrator accounts on elevation Machine
Require trusted path for credential entry Machine
Do not display the password reveal button Machine
Do not display the password reveal button User
Remove Change Password User
Remove Lock Computer User
Remove Task Manager User
Remove Logoff User
Allow Telemetry Machine
Disable pre-release features or settings Machine
Allow local activation security check exemptions Machine
Define Activation Security Check exemptions Machine
Download Mode Machine
Group ID Machine
Max Upload Bandwidth Machine
Max Cache Size Machine
Max Cache Age Machine
Enable Active Desktop User
Disable Active Desktop User
Prohibit changes User
Add/Delete items User
Prohibit adding items User
Prohibit closing items User
Prohibit deleting items User
Prohibit editing items User
Disable all items User
Allow only bitmapped wallpaper User
Desktop Wallpaper User
Enable filter in Find dialog box User
Hide Active Directory folder User
Maximum size of Active Directory searches User
Prohibit User from manually redirecting Profile Folders User
Hide and disable all items on the desktop User
Remove the Desktop Cleanup Wizard User
Hide Internet Explorer icon on desktop User
Remove Computer icon on the desktop User
Remove My Documents icon on the desktop User
Hide Network Locations icon on desktop User
Remove Properties from the Computer icon context menu User
Remove Properties from the Documents icon context menu User
Do not add shares of recently opened documents to Network Locations User
Remove Recycle Bin icon from desktop User
Remove Properties from the Recycle Bin context menu User
Don't save settings at exit User
Prevent adding dragging dropping and closing the Taskbar's toolbars User
Prohibit adjusting desktop toolbars User
Turn off Aero Shake window minimizing mouse gesture User
Device compatibility settings Machine
Driver compatibility settings Machine
Turn On Virtualization Based Security Machine
Deploy Code Integrity Policy Machine
Prioritize all digitally signed drivers equally during the driver ranking and s Machine
Configure device installation time-out Machine
Prevent creation of a system restore point during device activity that would Machine
Allow remote access to the Plug and Play interface Machine
Allow administrators to override Device Installation Restriction policies Machine
Allow installation of devices using drivers that match these device setup cla Machine
Prevent installation of devices using drivers that match these device setup Machine
Allow installation of devices that match any of these device IDs Machine
Prevent installation of devices that match any of these device IDs Machine
Prevent installation of removable devices Machine
Prevent installation of devices not described by other policy settings Machine
Time (in seconds) to force reboot when required for policy changes to take eMachine
Display a custom message title when device installation is prevented by a po Machine
Display a custom message when installation is prevented by a policy settingMachine
Allow non-administrators to install drivers for these device setup classes Machine
Code signing for device drivers User
Prevent redirection of USB devices Machine
Prevent redirection of devices that match any of these device Ids Machine
Turn off "Found New Hardware" balloons during device installation Machine
Do not send a Windows error report when a generic driver is installed on a Machine
Prevent Windows from sending an error report when a device driver requestsMachine
Configure driver search locations User
Turn off Windows Update device driver search prompt User
Turn off Windows Update device driver search prompt Machine
Specify search order for device driver source locations Machine
Specify the search server for device driver updates Machine
Prevent device metadata retrieval from the Internet Machine
Configure how often a DFS client discovers domain controllers Machine
Do not allow Digital Locker to run User
Do not allow Digital Locker to run Machine
Disk Diagnostic: Configure custom alert text Machine
Disk Diagnostic: Configure execution level Machine
Turn off boot and resume optimizations Machine
Turn off cache power mode Machine
Turn off non-volatile cache feature Machine
Turn off solid state mode Machine
Enable disk quotas Machine
Enforce disk quota limit Machine
Specify default quota limit and warning level Machine
Log event when quota limit is exceeded Machine
Log event when quota warning level is exceeded Machine
Apply policy to removable media Machine
Allow Distributed Link Tracking clients to use domain resources Machine
Connection-specific DNS suffix Machine
DNS servers Machine
Primary DNS suffix Machine
Register DNS records with connection-specific DNS suffix Machine
Register PTR records Machine
Dynamic update Machine
Replace addresses in conflicts Machine
Registration refresh interval Machine
TTL value for A and PTR records Machine
DNS suffix search list Machine
Update security level Machine
Update top level domain zones Machine
Primary DNS suffix devolution Machine
Primary DNS suffix devolution level Machine
Turn off multicast name resolution Machine
Allow DNS suffix appending to unqualified multi-label name queries Machine
Turn off smart multi-homed name resolution Machine
Turn off smart protocol reordering Machine
Allow NetBT queries for fully qualified domain names Machine
Prefer link local responses over DNS when received over a network with hi Machine
Turn off IDN encoding Machine
IDN mapping Machine
Do not allow window animations User
Do not allow window animations Machine
Do not allow Flip3D invocation User
Do not allow Flip3D invocation Machine
Use solid color for Start background Machine
Specify a default color User
Specify a default color Machine
Do not allow color changes User
Do not allow color changes Machine
Turn on misconversion logging for misconversion report User
Turn off saving auto-tuning data to file User
Turn off history-based predictive input User
Turn off Open Extended Dictionary User
Turn off Internet search integration User
Turn off custom dictionary User
Restrict character code range of conversion User
Do not include Non-Publishing Standard Glyph in the candidate list User
Turn on cloud candidate User
Boot-Start Driver Initialization Policy Machine
Turn off switching between recent apps User
Turn off tracking of app usage User
Do not show recent apps when the mouse is pointing to the upper-left corneUser
Search Share Start Devices and Settings don't appear when the mouse is poiUser
Prevent users from replacing the Command Prompt with Windows PowerShell User
Disable help tips Machine
Disable help tips User
Do not automatically encrypt files moved to encrypted folders Machine
Allow only USB root hub connected Enhanced Storage devices Machine
Lock Enhanced Storage when the computer is locked Machine
Do not allow non-Enhanced Storage removable devices Machine
Do not allow password authentication of Enhanced Storage devices Machine
Do not allow Windows to activate Enhanced Storage devices Machine
Configure list of IEEE 1667 silos usable on your computer Machine
Configure list of Enhanced Storage devices usable on your computer Machine
Configure Error Reporting Machine
Display Error Notification Machine
Disable Windows Error Reporting User
Disable Windows Error Reporting Machine
Prevent display of the user interface for critical errors Machine
Disable logging User
Disable logging Machine
Do not send additional data User
Do not send additional data Machine
Do not throttle additional data User
Do not throttle additional data Machine
Send additional data when on battery power User
Send additional data when on battery power Machine
Send data when on connected to a restricted/costed network User
Send data when on connected to a restricted/costed network Machine
Default application reporting settings Machine
List of applications to never report errors for Machine
List of applications to always report errors for Machine
Report operating system errors Machine
Configure Report Archive User
Configure Report Archive Machine
Configure Corporate Windows Error Reporting Machine
List of applications to be excluded User
List of applications to be excluded Machine
Configure Report Queue User
Configure Report Queue Machine
Customize consent settings User
Customize consent settings Machine
Ignore custom consent settings User
Ignore custom consent settings Machine
Configure target Subscription Manager Machine
Configure forwarder resource usage Machine
Back up log automatically when full Machine
Configure log access Machine
Configure log access (legacy) Machine
Control Event Log behavior when the log file reaches its maximum size Machine
Control the location of the log file Machine
Specify the maximum log file size (KB) Machine
Turn on logging Machine
Enable Protected Event Logging Machine
Events.asp program Machine
Events.asp program command line parameters Machine
Events.asp URL Machine
Display the menu bar in File Explorer User
Prevent users from adding files to the root of their Users Files folder. User
Turn off common control and window animations User
Turn off Data Execution Prevention for Explorer Machine
Turn off heap termination on corruption Machine
Set a support web page link Machine
Turn off soft landing help tips User
Do not reinitialize a pre-existing roamed user profile when it is loaded on a Machine
Windows To Go Default Startup Options Machine
Allow hibernate (S4) when starting from a Windows To Go workspace Machine
Disallow standby sleep states (S1-S3) when starting from a Windows to Go Machine
Turn off File History Machine
Configure Corrupted File Recovery behavior Machine
Allow Windows Runtime apps to revoke enterprise data User
Configure maximum age of file server shadow copies Machine
Allow or Disallow use of encryption to protect the RPC protocol messages b Machine
Selectively allow the evaluation of a symbolic link Machine
Do not allow compression on all NTFS volumes Machine
Do not allow encryption on all NTFS volumes Machine
Enable NTFS pagefile encryption Machine
Short name creation options Machine
Disable delete notifications on all volumes Machine
Enable / disable TXF deprecated features Machine
Use localized subfolder names when redirecting Start Menu and My DocumeUser
Do not automatically make all redirected folders available offline User
Do not automatically make specific redirected folders available offline User
Use localized subfolder names when redirecting Start Menu and My DocumeMachine
Enable optimized move of contents in Offline Files cache on Folder Redirect User
Redirect folders on primary computers only User
Redirect folders on primary computers only Machine
Turn on or off details pane User
Turn off Preview Pane User
Configure Scenario Execution Level Machine
Enables or disables Windows Game Recording and Broadcasting Machine
Turn off downloading of game information Machine
Turn off tracking of last play time of games in the Games folder Machine
Turn off game updates Machine
Disallow selection of Custom Locales User
Disallow selection of Custom Locales Machine
Restrict system locales Machine
Disallow copying of user input methods to the system account for sign-in Machine
Restrict user locales User
Restrict user locales Machine
Disallow changing of geographic location User
Disallow changing of geographic location Machine
Disallow user override of locale settings User
Disallow user override of locale settings Machine
Hide Regional and Language Options administrative options User
Hide the geographic location option User
Hide the select language group options User
Hide user locale selection and customization options User
Restricts the UI language Windows uses for all logged users Machine
Restricts the UI languages Windows should use for the selected user User
Force selected system UI language to overwrite the user UI language Machine
Restrict selection of Windows menus and dialogs language User
Turn off offer text predictions as I type User
Turn off insert a space after selecting a text prediction User
Turn off autocorrect misspelled words User
Turn off highlight misspelled words User
Block clean-up of unused language packs Machine
Allow input personalization Machine
Century interpretation for Year 2000 User
Turn off automatic learning User
Turn off automatic learning Machine
Allow asynchronous user Group Policy processing when logging on through Machine
Untrusted Font Blocking Machine
Configure Group Policy Caching Machine
Enable Group Policy Caching for Servers Machine
Configure Logon Script Delay Machine
Enable AD/DFS domain controller synchronization during policy refresh Machine
Turn off Group Policy Client Service AOAC optimization Machine
Configure Direct Access connections as a fast network connection Machine
Change Group Policy processing to run asynchronously when a slow networkMachine
Turn off Local Group Policy Objects processing Machine
Specify startup policy processing wait time Machine
Allow cross-forest user policy and roaming user profiles Machine
Configure software Installation policy processing Machine
Configure disk quota policy processing Machine
Configure EFS recovery policy processing Machine
Configure folder redirection policy processing Machine
Configure Internet Explorer Maintenance policy processing Machine
Configure IP security policy processing Machine
Configure registry policy processing Machine
Configure scripts policy processing Machine
Configure security policy processing Machine
Configure wireless policy processing Machine
Configure wired policy processing Machine
Determine if interactive users can generate Resultant Set of Policy data User
Determine if interactive users can generate Resultant Set of Policy data Machine
Turn off automatic update of ADM files User
Turn off background refresh of Group Policy Machine
Remove users' ability to invoke machine policy refresh Machine
Enforce Show Policies Only User
Configure Group Policy domain controller selection User
Configure Group Policy slow link detection User
Configure Group Policy slow link detection Machine
Set Group Policy refresh interval for computers Machine
Set Group Policy refresh interval for domain controllers Machine
Set Group Policy refresh interval for users User
Set default name for new Group Policy objects User
Create new Group Policy Object links disabled by default User
Always use local ADM files for Group Policy Object Editor Machine
Turn off Resultant Set of Policy logging Machine
Configure user Group Policy loopback processing mode Machine
Specify workplace connectivity wait time for policy processing Machine
Configure Applications preference extension policy processing Machine
Configure Applications preference logging and tracing Machine
Configure Data Sources preference extension policy processing Machine
Configure Data Sources preference logging and tracing Machine
Configure Devices preference extension policy processing Machine
Configure Devices preference logging and tracing Machine
Configure Drive Maps preference extension policy processing Machine
Configure Drive Maps preference logging and tracing Machine
Configure Environment preference extension policy processing Machine
Configure Environment preference logging and tracing Machine
Configure Files preference extension policy processing Machine
Configure Files preference logging and tracing Machine
Configure Folder Options preference extension policy processing Machine
Configure Folder Options preference logging and tracing Machine
Configure Folders preference extension policy processing Machine
Configure Folders preference logging and tracing Machine
Configure Ini Files preference extension policy processing Machine
Configure Ini Files preference logging and tracing Machine
Configure Internet Settings preference extension policy processing Machine
Configure Internet Settings preference logging and tracing Machine
Configure Local Users and Groups preference extension policy processing Machine
Configure Local Users and Groups preference logging and tracing Machine
Configure Network Options preference extension policy processing Machine
Configure Network Options preference logging and tracing Machine
Configure Network Shares preference extension policy processing Machine
Configure Network Shares preference logging and tracing Machine
Configure Power Options preference extension policy processing Machine
Configure Power Options preference logging and tracing Machine
Configure Printers preference extension policy processing Machine
Configure Printers preference logging and tracing Machine
Configure Regional Options preference extension policy processing Machine
Configure Regional Options preference logging and tracing Machine
Configure Registry preference extension policy processing Machine
Configure Registry preference logging and tracing Machine
Configure Scheduled Tasks preference extension policy processing Machine
Configure Scheduled Tasks preference logging and tracing Machine
Configure Services preference extension policy processing Machine
Configure Services preference logging and tracing Machine
Configure Shortcuts preference extension policy processing Machine
Configure Shortcuts preference logging and tracing Machine
Configure Start Menu preference extension policy processing Machine
Configure Start Menu preference logging and tracing Machine
Permit use of Application snap-ins User
Permit use of Applications preference extension User
Permit use of Control Panel Settings (Computers) User
Permit use of Data Sources preference extension User
Permit use of Devices preference extension User
Permit use of Drive Maps preference extension User
Permit use of Environment preference extension User
Permit use of Files preference extension User
Permit use of Folders preference extension User
Permit use of Folder Options preference extension User
Permit use of Ini Files preference extension User
Permit use of Internet Settings preference extension User
Permit use of Local Users and Groups preference extension User
Permit use of Network Options preference extension User
Permit use of Network Shares preference extension User
Permit use of Power Options preference extension User
Permit use of Printers preference extension User
Permit use of Regional Options preference extension User
Permit use of Registry preference extension User
Permit use of Scheduled Tasks preference extension User
Permit use of Services preference extension User
Permit use of Shortcuts preference extension User
Permit use of Start Menu preference extension User
Permit use of Control Panel Settings (Users) User
Permit use of Preferences tab User
Restrict potentially unsafe HTML Help functions to specified folders Machine
Restrict these programs from being launched from Help User
Restrict these programs from being launched from Help Machine
Turn off Data Execution Prevention for HTML Help Executible Machine
Turn off Active Help Machine
Turn off Help Ratings User
Turn off Help Experience Improvement Program User
Turn off Windows Online User
Enable Hotspot Authentication Machine
Restrict Internet communication User
Restrict Internet communication Machine
Turn off Automatic Root Certificates Update Machine
Turn off printing over HTTP User
Turn off printing over HTTP Machine
Turn off downloading of print drivers over HTTP User
Turn off downloading of print drivers over HTTP Machine
Turn off Windows Update device driver searching Machine
Turn off Event Viewer "Events.asp" links Machine
Turn off Help and Support Center "Did you know?" content Machine
Turn off Help and Support Center Microsoft Knowledge Base search Machine
Turn off Internet Connection Wizard if URL connection is referring to Microso Machine
Turn off Registration if URL connection is referring to Microsoft.com Machine
Turn off Windows Error Reporting Machine
Turn off access to all Windows Update features Machine
Turn off Search Companion content file updates Machine
Turn off Internet File Association service User
Turn off Internet File Association service Machine
Turn off access to the Store User
Turn off access to the Store Machine
Turn off Internet download for Web publishing and online ordering wizards User
Turn off Internet download for Web publishing and online ordering wizards Machine
Turn off the "Order Prints" picture task User
Turn off the "Order Prints" picture task Machine
Turn off the "Publish to Web" task for files and folders User
Turn off the "Publish to Web" task for files and folders Machine
Turn off the Windows Messenger Customer Experience Improvement Progra User
Turn off the Windows Messenger Customer Experience Improvement Progra Machine
Turn off Windows Customer Experience Improvement Program Machine
Turn off Windows Network Connectivity Status Indicator active tests Machine
Prevent IIS installation Machine
Audio/Video Player User
Carpoint User
DHTML Edit Control User
Shockwave Flash User
Investor User
Menu Controls User
Microsoft Agent User
Microsoft Chat User
MSNBC User
NetShow File Transfer Control User
Microsoft Scriptlet Component User
Microsoft Survey Control User
Turn off the flip ahead with page prediction feature Machine
Turn off the flip ahead with page prediction feature User
Turn off loading websites and content in the background to optimize perfor Machine
Turn off loading websites and content in the background to optimize perfor User
Allow active content from CDs to run on user machines Machine
Allow active content from CDs to run on user machines User
Check for server certificate revocation Machine
Check for server certificate revocation User
Turn off ClearType Machine
Turn off ClearType User
Turn on Caret Browsing support Machine
Turn on Caret Browsing support User
Turn on Enhanced Protected Mode Machine
Turn on Enhanced Protected Mode User
Turn on 64-bit tab processes when running in Enhanced Protected Mode on Machine
Turn on 64-bit tab processes when running in Enhanced Protected Mode on User
Do not allow ActiveX controls to run in Protected Mode when Enhanced Prot Machine
Do not allow ActiveX controls to run in Protected Mode when Enhanced Prot User
Always send Do Not Track header Machine
Always send Do Not Track header User
Use HTTP 1.1 Machine
Use HTTP 1.1 User
Use HTTP 1.1 through proxy connections Machine
Use HTTP 1.1 through proxy connections User
Allow Internet Explorer to use the HTTP2 network protocol Machine
Allow Internet Explorer to use the HTTP2 network protocol User
Allow fallback to SSL 3.0 (Internet Explorer) Machine
Turn off encryption support Machine
Turn off encryption support User
Do not allow resetting Internet Explorer settings Machine
Do not allow resetting Internet Explorer settings User
Check for signatures on downloaded programs Machine
Check for signatures on downloaded programs User
Allow third-party browser extensions Machine
Allow third-party browser extensions User
Allow Install On Demand (Internet Explorer) Machine
Allow Install On Demand (Internet Explorer) User
Allow Install On Demand (except Internet Explorer) Machine
Allow Install On Demand (except Internet Explorer) User
Automatically check for Internet Explorer updates Machine
Automatically check for Internet Explorer updates User
Allow software to run or install even if the signature is invalid Machine
Allow software to run or install even if the signature is invalid User
Play animations in web pages Machine
Play animations in web pages User
Play sounds in web pages Machine
Play sounds in web pages User
Play videos in web pages Machine
Play videos in web pages User
Turn off Profile Assistant Machine
Turn off Profile Assistant User
Do not save encrypted pages to disk Machine
Do not save encrypted pages to disk User
Empty Temporary Internet Files folder when browser is closed Machine
Empty Temporary Internet Files folder when browser is closed User
Show Content Advisor on Internet Options Machine
Show Content Advisor on Internet Options User
Turn on inline AutoComplete User
Turn off inline AutoComplete in File Explorer User
Go to an intranet site for a one-word entry in the Address bar Machine
Go to an intranet site for a one-word entry in the Address bar User
Turn on script debugging User
Turn off details in messages about Internet connection problems User
Turn off page transitions User
Turn on the display of script errors User
Turn off smooth scrolling User
Turn off configuring underline links User
Turn off phone number detection Machine
Turn off phone number detection User
Subscription Limits User
Disable adding channels User
Disable adding schedules for offline pages User
Disable offline page hit logging User
Disable channel user interface completely User
Disable editing and creating of schedule groups User
Disable editing schedules for offline pages User
Disable removing channels User
Disable removing schedules for offline pages User
Disable all scheduled offline pages User
Disable downloading of site subscription content User
Prevent specifying the code download path for each computer Machine
Prevent choosing default text size User
Disable the Advanced page Machine
Disable the Advanced page User
Disable the Connections page Machine
Disable the Connections page User
Disable the Content page Machine
Disable the Content page User
Disable the General page Machine
Disable the General page User
Disable the Privacy page Machine
Disable the Privacy page User
Disable the Programs page Machine
Disable the Programs page User
Disable the Security page Machine
Disable the Security page User
Send internationalized domain names Machine
Send internationalized domain names User
Turn off sending UTF-8 query strings for URLs Machine
Turn off sending UTF-8 query strings for URLs User
Use UTF-8 for mailto links Machine
Use UTF-8 for mailto links User
Prevent ignoring certificate errors Machine
Prevent ignoring certificate errors User
Turn off sending URL path as UTF-8 User
Prevent specifying background color User
Prevent specifying text color User
Prevent the use of Windows colors User
Prevent specifying cipher strength update information URLs Machine
Start the Internet Connection Wizard automatically User
Turn on ActiveX control logging in Internet Explorer Machine
Turn on ActiveX control logging in Internet Explorer User
Remove "Run this time" button for outdated ActiveX controls in Internet ExplMachine
Remove "Run this time" button for outdated ActiveX controls in Internet ExplUser
Turn off blocking of outdated ActiveX controls for Internet Explorer on speci Machine
Turn off blocking of outdated ActiveX controls for Internet Explorer on speci User
Turn off blocking of outdated ActiveX controls for Internet Explorer Machine
Turn off blocking of outdated ActiveX controls for Internet Explorer User
Add-on List Machine
Add-on List User
Deny all add-ons unless specifically allowed in the Add-on List Machine
Deny all add-ons unless specifically allowed in the Add-on List User
All Processes Machine
All Processes User
Process List Machine
Process List User
Admin-approved behaviors Machine
Admin-approved behaviors User
Install binaries signed by MD2 and MD4 signing technologies Machine
Install binaries signed by MD2 and MD4 signing technologies User
All Processes User
Internet Explorer Processes Machine
Internet Explorer Processes User
Process List User
All Processes User
Process List User
All Processes User
Process List User
All Processes User
Process List User
All Processes User
Process List User
All Processes User
Process List User
All Processes User
Process List User
All Processes User
Process List User
All Processes User
Process List User
All Processes User
Process List User
All Processes User
Process List User
All Processes User
Process List User
Internet Zone Restricted Protocols Machine
Internet Zone Restricted Protocols User
Intranet Zone Restricted Protocols Machine
Intranet Zone Restricted Protocols User
Local Machine Zone Restricted Protocols Machine
Local Machine Zone Restricted Protocols User
Restricted Sites Zone Restricted Protocols Machine
Restricted Sites Zone Restricted Protocols User
Trusted Sites Zone Restricted Protocols Machine
Trusted Sites Zone Restricted Protocols User
Turn off Crash Detection Machine
Turn off Crash Detection User
Allow Microsoft services to provide enhanced suggestions as the user types Machine
Allow Microsoft services to provide enhanced suggestions as the user types User
Turn off Automatic Crash Recovery Machine
Turn off Automatic Crash Recovery User
Turn off Reopen Last Browsing Session Machine
Turn off Reopen Last Browsing Session User
Do not allow users to enable or disable add-ons Machine
Do not allow users to enable or disable add-ons User
Add a specific list of search providers to the user's list of search providers Machine
Add a specific list of search providers to the user's list of search providers User
Turn on menu bar by default Machine
Turn on menu bar by default User
Turn off Favorites bar Machine
Turn off Favorites bar User
Disable caching of Auto-Proxy scripts User
Disable external branding of Internet Explorer User
Disable changing Advanced page settings User
Customize user agent string Machine
Customize user agent string User
Use Automatic Detection for dial-up connections User
Prevent "Fix settings" functionality Machine
Prevent "Fix settings" functionality User
Prevent managing the phishing filter Machine
Prevent managing the phishing filter User
Turn off Managing SmartScreen Filter for Internet Explorer 8 Machine
Turn off Managing SmartScreen Filter for Internet Explorer 8 User
Prevent managing SmartScreen Filter Machine
Prevent managing SmartScreen Filter User
Prevent bypassing SmartScreen Filter warnings Machine
Prevent bypassing SmartScreen Filter warnings User
Prevent bypassing SmartScreen Filter warnings about files that are not co Machine
Prevent bypassing SmartScreen Filter warnings about files that are not co User
Turn off the Security Settings Check feature Machine
Turn off the Security Settings Check feature User
Position the menu bar above the navigation bar User
Prevent changing pop-up filter level Machine
Prevent changing pop-up filter level User
Display error message on proxy script download failure User
Turn on compatibility logging Machine
Turn on compatibility logging User
Enforce full-screen mode Machine
Enforce full-screen mode User
Disable Import/Export Settings wizard Machine
Disable Import/Export Settings wizard User
Turn off browser geolocation Machine
Turn off browser geolocation User
Turn off Adobe Flash in Internet Explorer and prevent applications from usin Machine
Turn off Adobe Flash in Internet Explorer and prevent applications from usin User
Turn off page-zooming functionality Machine
Turn off page-zooming functionality User
Identity Manager: Prevent users from using Identities User
Automatically activate newly installed add-ons Machine
Automatically activate newly installed add-ons User
Turn off add-on performance notifications Machine
Turn off add-on performance notifications User
Turn on ActiveX Filtering Machine
Turn on ActiveX Filtering User
Configure Media Explorer Bar User
Prevent access to Delete Browsing History Machine
Prevent access to Delete Browsing History User
Prevent deleting form data Machine
Prevent deleting form data User
Prevent deleting passwords Machine
Prevent deleting passwords User
Prevent deleting cookies Machine
Prevent deleting cookies User
Prevent deleting websites that the user has visited Machine
Prevent deleting websites that the user has visited User
Prevent deleting download history Machine
Prevent deleting download history User
Prevent deleting temporary Internet files Machine
Prevent deleting temporary Internet files User
Prevent deleting InPrivate Filtering data Machine
Prevent deleting InPrivate Filtering data User
Prevent deleting ActiveX Filtering Tracking Protection and Do Not Track data Machine
Prevent deleting ActiveX Filtering Tracking Protection and Do Not Track data User
Prevent deleting favorites site data Machine
Prevent deleting favorites site data User
Allow deleting browsing history on exit Machine
Allow deleting browsing history on exit User
Prevent running First Run wizard Machine
Prevent running First Run wizard User
Prevent access to Internet Explorer Help Machine
Prevent access to Internet Explorer Help User
Prevent Internet Explorer Search box from appearing Machine
Prevent Internet Explorer Search box from appearing User
Turn off suggestions for all user-installed providers Machine
Turn off suggestions for all user-installed providers User
Turn off the quick pick menu Machine
Turn off the quick pick menu User
Disable Automatic Install of Internet Explorer components Machine
Set tab process growth Machine
Set tab process growth User
Allow Internet Explorer 8 shutdown behavior Machine
Allow Internet Explorer 8 shutdown behavior User
Specify default behavior for a new tab Machine
Specify default behavior for a new tab User
Turn off Tab Grouping User
Turn off Quick Tabs functionality Machine
Turn off Quick Tabs functionality User
Prevent changing the default search provider Machine
Prevent changing the default search provider User
Disable showing the splash screen Machine
Turn off tabbed browsing Machine
Turn off tabbed browsing User
Turn off configuration of pop-up windows in tabbed browsing Machine
Turn off configuration of pop-up windows in tabbed browsing User
Disable Periodic Check for Internet Explorer software updates Machine
Prevent configuration of how windows open Machine
Prevent configuration of how windows open User
Configure Outlook Express User
Pop-up allow list Machine
Pop-up allow list User
Disable changing accessibility settings User
Disable changing Automatic Configuration settings Machine
Disable changing Automatic Configuration settings User
Disable changing Temporary Internet files settings User
Disable changing Calendar and Contact settings User
Disable changing certificate settings User
Disable changing default browser check User
Notify users if Internet Explorer is not the default web browser User
Disable changing color settings User
Disable changing connection settings User
Disable changing connection settings Machine
Disable Internet Connection wizard User
Disable changing font settings User
Disable AutoComplete for forms User
Turn on the auto-complete feature for user names and passwords on forms User
Disable "Configuring History" Machine
Disable "Configuring History" User
Disable changing home page settings User
Disable changing secondary home page settings Machine
Disable changing secondary home page settings User
Disable changing language settings User
Disable changing link color settings User
Disable changing Messaging settings User
Prevent managing pop-up exception list Machine
Prevent managing pop-up exception list User
Turn off pop-up management Machine
Turn off pop-up management User
Disable changing Profile Assistant settings User
Prevent changing proxy settings Machine
Prevent changing proxy settings User
Disable changing ratings settings User
Disable the Reset Web Settings feature User
Prevent the deletion of temporary Internet files and cookies Machine
Prevent the deletion of temporary Internet files and cookies User
Turn off the auto-complete feature for web addresses Machine
Turn off the auto-complete feature for web addresses User
Turn off Windows Search AutoComplete Machine
Turn off Windows Search AutoComplete User
Turn off URL Suggestions Machine
Turn off URL Suggestions User
Search: Disable Find Files via F3 within the browser User
Search: Disable Search Customization User
Security Zones: Use only machine settings Machine
Security Zones: Do not allow users to change policies Machine
Security Zones: Do not allow users to add/delete sites Machine
Disable software update shell notifications on program launch Machine
Restrict search providers to a specific list Machine
Restrict search providers to a specific list User
Prevent participation in the Customer Experience Improvement Program Machine
Prevent participation in the Customer Experience Improvement Program User
Prevent configuration of new tab creation Machine
Prevent configuration of new tab creation User
Make proxy settings per-machine (rather than per-user) Machine
Allow websites to open windows without status bar or Address bar Machine
Allow websites to open windows without status bar or Address bar User
Allow video and animation on a webpage that uses an older media player Machine
Allow video and animation on a webpage that uses an older media player User
Allow scriptlets Machine
Allow scriptlets User
Turn off first-run prompt Machine
Turn off first-run prompt User
Include local path when user is uploading files to a server Machine
Include local path when user is uploading files to a server User
Turn on SmartScreen Filter scan Machine
Turn on SmartScreen Filter scan User
Allow websites to prompt for information by using scripted windows Machine
Allow websites to prompt for information by using scripted windows User
Allow updates to status bar via script Machine
Allow updates to status bar via script User
Turn on Protected Mode Machine
Turn on Protected Mode User
Show security warning for potentially unsafe files Machine
Show security warning for potentially unsafe files User
Allow loading of XAML Browser Applications Machine
Allow loading of XAML Browser Applications User
Allow scripting of Internet Explorer WebBrowser controls Machine
Allow scripting of Internet Explorer WebBrowser controls User
Turn off .NET Framework Setup Machine
Turn off .NET Framework Setup User
Allow loading of XAML files Machine
Allow loading of XAML files User
Allow loading of XPS files Machine
Allow loading of XPS files User
Access data sources across domains Machine
Access data sources across domains User
Allow active scripting Machine
Allow active scripting User
Allow only approved domains to use ActiveX controls without prompt Machine
Allow only approved domains to use ActiveX controls without prompt User
Allow META REFRESH Machine
Allow META REFRESH User
Allow cut copy or paste operations from the clipboard via script Machine
Allow cut copy or paste operations from the clipboard via script User
Allow binary and script behaviors Machine
Allow binary and script behaviors User
Use Pop-up Blocker Machine
Use Pop-up Blocker User
Display mixed content Machine
Display mixed content User
Download signed ActiveX controls Machine
Download signed ActiveX controls User
Download unsigned ActiveX controls Machine
Download unsigned ActiveX controls User
Allow drag and drop or copy and paste files Machine
Allow drag and drop or copy and paste files User
Render legacy filters Machine
Render legacy filters User
Allow file downloads Machine
Allow file downloads User
Allow font downloads Machine
Allow font downloads User
Allow installation of desktop items Machine
Allow installation of desktop items User
Java permissions Machine
Java permissions User
Launching applications and files in an IFRAME Machine
Launching applications and files in an IFRAME User
Logon options Machine
Logon options User
Enable MIME Sniffing Machine
Enable MIME Sniffing User
Enable dragging of content from different domains within a window Machine
Enable dragging of content from different domains within a window User
Enable dragging of content from different domains across windows Machine
Enable dragging of content from different domains across windows User
Navigate windows and frames across different domains Machine
Navigate windows and frames across different domains User
Allow active content over restricted protocols to access my computer Machine
Allow active content over restricted protocols to access my computer User
Do not prompt for client certificate selection when no certificates or only oneMachine
Do not prompt for client certificate selection when no certificates or only oneUser
Automatic prompting for ActiveX controls Machine
Automatic prompting for ActiveX controls User
Automatic prompting for file downloads Machine
Automatic prompting for file downloads User
Run ActiveX controls and plugins Machine
Run ActiveX controls and plugins User
Script ActiveX controls marked safe for scripting Machine
Script ActiveX controls marked safe for scripting User
Don't run antimalware programs against ActiveX controls Machine
Don't run antimalware programs against ActiveX controls User
Initialize and script ActiveX controls not marked as safe Machine
Initialize and script ActiveX controls not marked as safe User
Scripting of Java applets Machine
Scripting of Java applets User
Run .NET Framework-reliant components signed with Authenticode Machine
Run .NET Framework-reliant components signed with Authenticode User
Software channel permissions Machine
Software channel permissions User
Submit non-encrypted form data Machine
Submit non-encrypted form data User
Turn on Cross-Site Scripting Filter Machine
Turn on Cross-Site Scripting Filter User
Run .NET Framework-reliant components not signed with Authenticode Machine
Run .NET Framework-reliant components not signed with Authenticode User
Userdata persistence Machine
Userdata persistence User
Allow script-initiated windows without size or position constraints Machine
Allow script-initiated windows without size or position constraints User
Web sites in less privileged Web content zones can navigate into this zone Machine
Web sites in less privileged Web content zones can navigate into this zone User
Logon options User
Logon options User
Logon options User
Logon options User
Logon options User
Logon options User
Logon options User
Intranet Sites: Include all local (intranet) sites not listed in other zones Machine
Intranet Sites: Include all local (intranet) sites not listed in other zones User
Turn on certificate address mismatch warning Machine
Turn on certificate address mismatch warning User
Locked-Down Internet Zone Template Machine
Locked-Down Internet Zone Template User
Internet Zone Template Machine
Internet Zone Template User
Locked-Down Intranet Zone Template Machine
Locked-Down Intranet Zone Template User
Intranet Zone Template Machine
Intranet Zone Template User
Locked-Down Local Machine Zone Template Machine
Locked-Down Local Machine Zone Template User
Local Machine Zone Template Machine
Local Machine Zone Template User
Locked-Down Restricted Sites Zone Template Machine
Locked-Down Restricted Sites Zone Template User
Restricted Sites Zone Template Machine
Restricted Sites Zone Template User
Locked-Down Trusted Sites Zone Template Machine
Locked-Down Trusted Sites Zone Template User
Trusted Sites Zone Template Machine
Trusted Sites Zone Template User
Intranet Sites: Include all sites that bypass the proxy server Machine
Intranet Sites: Include all sites that bypass the proxy server User
Intranet Sites: Include all network paths (UNCs) Machine
Intranet Sites: Include all network paths (UNCs) User
Site to Zone Assignment List Machine
Site to Zone Assignment List User
Turn on automatic detection of intranet Machine
Turn on automatic detection of intranet User
Turn on Notification bar notification for intranet content Machine
Turn on Notification bar notification for intranet content User
Logon options User
Logon options User
Prevent specifying the hover color User
Prevent specifying the color of links that have not yet been clicked User
Prevent specifying the color of links that have already been clicked User
Turn on the hover color option User
File menu: Disable closing the browser and Explorer windows User
File menu: Disable Save As... menu option User
File menu: Disable Save As Web Page Complete User
File menu: Disable New menu option User
File menu: Disable Open menu option User
Help menu: Remove 'Send Feedback' menu option User
Help menu: Remove 'For Netscape Users' menu option User
Help menu: Remove 'Tip of the Day' menu option User
Help menu: Remove 'Tour' menu option User
Turn off Shortcut Menu User
Hide Favorites menu User
Disable Open in New Window menu option User
Disable Save this program to disk option User
Turn off Print Menu Machine
Turn off Print Menu User
Tools menu: Disable Internet Options... menu option User
Turn off the ability to launch report site problems using a menu option Machine
Turn off the ability to launch report site problems using a menu option User
View menu: Disable Full Screen menu option User
View menu: Disable Source menu option User
Turn off automatic image resizing User
Turn off image display User
Allow Internet Explorer to play media files that use alternative codecs Machine
Allow Internet Explorer to play media files that use alternative codecs User
Allow the display of image download placeholders User
Turn off smart image dithering User
File size limits for Local Machine zone User
File size limits for Intranet zone User
File size limits for Trusted Sites zone User
File size limits for Internet zone User
File size limits for Restricted Sites zone User
Turn on printing of background colors and images User
Turn off background synchronization for feeds and Web Slices Machine
Turn off background synchronization for feeds and Web Slices User
Prevent downloading of enclosures Machine
Prevent downloading of enclosures User
Prevent subscribing to or deleting a feed or a Web Slice Machine
Prevent subscribing to or deleting a feed or a Web Slice User
Prevent automatic discovery of feeds and Web Slices Machine
Prevent automatic discovery of feeds and Web Slices User
Prevent access to feed list Machine
Prevent access to feed list User
Turn on Basic feed authentication over HTTP Machine
Turn on Basic feed authentication over HTTP User
Bypass prompting for Clipboard access for scripts running in any process Machine
Bypass prompting for Clipboard access for scripts running in any process User
Bypass prompting for Clipboard access for scripts running in the Internet Ex Machine
Bypass prompting for Clipboard access for scripts running in the Internet Ex User
Define applications and processes that can access the Clipboard without pr Machine
Define applications and processes that can access the Clipboard without pr User
Prevent configuration of search on Address bar Machine
Prevent configuration of search on Address bar User
Allow native XMLHTTP support Machine
Allow native XMLHTTP support User
Turn off Data URI support Machine
Turn off Data URI support User
Turn off Data Execution Prevention Machine
Do not display the reveal password button Machine
Do not display the reveal password button User
Change the maximum number of connections per host (HTTP 1.1) Machine
Change the maximum number of connections per host (HTTP 1.1) User
Maximum number of connections per server (HTTP 1.0) Machine
Maximum number of connections per server (HTTP 1.0) User
Turn off cross-document messaging Machine
Turn off cross-document messaging User
Turn off the XDomainRequest object Machine
Turn off the XDomainRequest object User
Turn off the WebSocket Object Machine
Turn off the WebSocket Object User
Set the maximum number of WebSocket connections per server Machine
Set the maximum number of WebSocket connections per server User
Turn on automatic signup User
Turn off toolbar upgrade tool Machine
Turn off toolbar upgrade tool User
Turn off Developer Tools Machine
Turn off Developer Tools User
Disable customizing browser toolbars User
Disable customizing browser toolbar buttons User
Configure Toolbar Buttons User
Hide the Command bar Machine
Hide the Command bar User
Hide the status bar Machine
Hide the status bar User
Lock all toolbars Machine
Lock all toolbars User
Lock location of Stop and Refresh buttons Machine
Lock location of Stop and Refresh buttons User
Customize command labels Machine
Customize command labels User
Use large icons for command buttons Machine
Use large icons for command buttons User
Display tabs on a separate row Machine
Display tabs on a separate row User
Prevent specifying the update check interval (in days) Machine
Prevent changing the URL for checking updates to Internet Explorer and InteMachine
Turn off ActiveX Opt-In prompt Machine
Turn off ActiveX Opt-In prompt User
Prevent per-user installation of ActiveX controls Machine
Prevent per-user installation of ActiveX controls User
Specify use of ActiveX Installer Service for installation of ActiveX controls Machine
Specify use of ActiveX Installer Service for installation of ActiveX controls User
Turn on Suggested Sites Machine
Turn on Suggested Sites User
Turn off InPrivate Browsing Machine
Turn off InPrivate Browsing User
Prevent the computer from loading toolbars and Browser Helper Objects wheMachine
Prevent the computer from loading toolbars and Browser Helper Objects wheUser
Turn off collection of InPrivate Filtering data Machine
Turn off collection of InPrivate Filtering data User
Establish InPrivate Filtering threshold Machine
Establish InPrivate Filtering threshold User
Turn off InPrivate Filtering Machine
Turn off InPrivate Filtering User
Establish Tracking Protection threshold Machine
Establish Tracking Protection threshold User
Turn off Tracking Protection Machine
Turn off Tracking Protection User
Add non-default Accelerators User
Add non-default Accelerators Machine
Add default Accelerators User
Add default Accelerators Machine
Turn off Accelerators Machine
Turn off Accelerators User
Restrict Accelerators to those deployed through Group Policy Machine
Restrict Accelerators to those deployed through Group Policy User
Turn on Internet Explorer 7 Standards Mode Machine
Turn on Internet Explorer 7 Standards Mode User
Turn off Compatibility View Machine
Turn off Compatibility View User
Turn on Internet Explorer Standards Mode for local intranet Machine
Turn on Internet Explorer Standards Mode for local intranet User
Turn off Compatibility View button Machine
Turn off Compatibility View button User
Use Policy List of Internet Explorer 7 sites Machine
Use Policy List of Internet Explorer 7 sites User
Use Policy List of Quirks Mode sites Machine
Use Policy List of Quirks Mode sites User
Include updated website lists from Microsoft Machine
Include updated website lists from Microsoft User
Turn off ability to pin sites in Internet Explorer on the desktop Machine
Turn off ability to pin sites in Internet Explorer on the desktop User
Let users turn on and use Enterprise Mode from the Tools menu Machine
Let users turn on and use Enterprise Mode from the Tools menu User
Use the Enterprise Mode IE website list Machine
Use the Enterprise Mode IE website list User
Set default storage limits for websites Machine
Set default storage limits for websites User
Allow websites to store indexed databases on client computers Machine
Allow websites to store indexed databases on client computers User
Set indexed database storage limits for individual domains Machine
Set indexed database storage limits for individual domains User
Set maximum indexed database storage limit for all domains Machine
Set maximum indexed database storage limit for all domains User
Allow websites to store application caches on client computers Machine
Allow websites to store application caches on client computers User
Set application cache storage limits for individual domains Machine
Set application cache storage limits for individual domains User
Set maximum application caches storage limit for all domains Machine
Set maximum application caches storage limit for all domains User
Set application caches expiration time limit for individual domains Machine
Set application caches expiration time limit for individual domains User
Set maximum application cache resource list size Machine
Set maximum application cache resource list size User
Set maximum application cache individual resource size Machine
Set maximum application cache individual resource size User
Start Internet Explorer with tabs from last browsing session Machine
Start Internet Explorer with tabs from last browsing session User
Open Internet Explorer tiles on the desktop Machine
Open Internet Explorer tiles on the desktop User
Set how links are opened in Internet Explorer Machine
Set how links are opened in Internet Explorer User
Install new versions of Internet Explorer automatically Machine
Turn on Site Discovery WMI output Machine
Turn on Site Discovery WMI output User
Turn on Site Discovery XML output Machine
Turn on Site Discovery XML output User
Limit Site Discovery output by Zone Machine
Limit Site Discovery output by Zone User
Limit Site Discovery output by Domain Machine
Limit Site Discovery output by Domain User
Turn off handwriting recognition error reporting User
Turn off handwriting recognition error reporting Machine
Do not allow manual configuration of iSNS servers Machine
Do not allow manual configuration of target portals Machine
Do not allow manual configuration of discovered targets Machine
Do not allow adding new targets via manual configuration Machine
Do not allow changes to initiator iqn name Machine
Do not allow additional session logins Machine
Do not allow changes to initiator CHAP secret Machine
Do not allow connections without IPSec Machine
Do not allow sessions without mutual CHAP Machine
Do not allow sessions without one way CHAP Machine
Provide information about previous logons to client computers Machine
Use forest search order Machine
KDC support for claims compound authentication and Kerberos armoring Machine
Warning for large Kerberos tickets Machine
Request compound authentication Machine
Define host name-to-Kerberos realm mappings Machine
Define interoperable Kerberos V5 realm settings Machine
Require strict KDC validation Machine
Use forest search order Machine
Require strict target SPN match on remote procedure calls Machine
Specify KDC proxy servers for Kerberos clients Machine
Disable revocation checking for the SSL certificate of KDC proxy servers Machine
Fail authentication requests when Kerberos armoring is not available Machine
Support compound authentication Machine
Set maximum Kerberos SSPI context token buffer size Machine
Kerberos client support for claims compound authentication and Kerberos a Machine
Always send compound authentication first Machine
Support device authentication using certificate Machine
Hash Publication for BranchCache Machine
Hash Version support for BranchCache Machine
Cipher suite order Machine
Honor cipher suite order Machine
Cipher suite order Machine
Turn on Mapper I/O (LLTDIO) driver Machine
Turn on Responder (RSPNDR) driver Machine
Do not process the legacy run list User
Do not process the legacy run list Machine
Do not process the run once list User
Do not process the run once list Machine
Always use classic logon Machine
Do not display the Getting Started welcome screen at logon Machine
Run these programs at user logon User
Run these programs at user logon Machine
Always wait for the network at computer startup and logon Machine
Remove Boot / Shutdown / Logon / Logoff status messages Machine
Do not display the Getting Started welcome screen at logon User
Display highly detailed status messages Machine
Hide entry points for Fast User Switching Machine
Turn off Windows Startup sound Machine
Show first sign-in animation Machine
Always use custom logon background Machine
Do not display network selection UI Machine
Do not enumerate connected users on domain-joined computers Machine
Enumerate local users on domain-joined computers Machine
Turn off app notifications on the lock screen Machine
Do not allow Windows Media Center to run User
Do not allow Windows Media Center to run Machine
Turn off Windows Location Provider Machine
Allows you to run scripts like Javascript Machine
Allows you to run scripts like Javascript User
Allows you to let people use autofill on websites Machine
Allows you to let people use autofill on websites User
Allows you to let people send Do Not Track headers Machine
Allows you to let people send Do Not Track headers User
Allows you to configure password manager Machine
Allows you to configure password manager User
Allows you to run pop-ups Machine
Allows you to run pop-ups User
Stops address bar from showing search suggestions Machine
Stops address bar from showing search suggestions User
Allows you to configure SmartScreen Machine
Allows you to configure SmartScreen User
Configure how Microsoft Edge treats cookies Machine
Configure how Microsoft Edge treats cookies User
Allows you to configure the Enterprise Site list Machine
Allows you to configure the Enterprise Site list User
Sends all intranet traffic over to Internet Explorer Machine
Sends all intranet traffic over to Internet Explorer User
Restrict the user from entering author mode User
Restrict users to the explicitly permitted list of snap-ins User
Extended View (Web View) User
ActiveX Control User
Link to Web Address User
AppleTalk Routing User
Authorization Manager User
Certification Authority Policy Settings User
Connection Sharing (NAT) User
DCOM Configuration Extension User
Device Manager User
DHCP Relay Management User
Enterprise PKI User
Event Viewer User
Event Viewer (Windows Vista) User
IAS Logging User
IGMP Routing User
IP Routing User
IPX RIP Routing User
IPX Routing User
IPX SAP Routing User
Logical and Mapped Drives User
Online Responder User
OSPF Routing User
Public Key Policies User
RAS Dialin - User Node User
Remote Access User
Removable Storage User
RIP Routing User
Routing User
Send Console Message User
Service Dependencies User
Shared Folders Ext User
SMTP Protocol User
SNMP User
System Properties User
Group Policy Management User
Group Policy Object Editor User
Group Policy tab for Active Directory Tools User
Resultant Set of Policy snap-in User
Administrative Templates (Computers) User
Administrative Templates (Users) User
Folder Redirection User
Internet Explorer Maintenance User
IP Security Policy Management User
Windows Firewall with Advanced Security User
NAP Client Configuration User
Remote Installation Services User
Scripts (Startup/Shutdown) User
Scripts (Logon/Logoff) User
Security Settings User
Software Installation (Computers) User
Software Installation (Users) User
Wired Network (IEEE 802.3) Policies User
Wireless Network (IEEE 802.11) Policies User
Administrative Templates (Computers) User
Administrative Templates (Users) User
Folder Redirection User
Internet Explorer Maintenance User
Scripts (Startup/Shutdown) User
Scripts (Logon/Logoff) User
Security Settings User
Software Installation (Computers) User
Software Installation (Users) User
Active Directory Domains and Trusts User
Active Directory Sites and Services User
Active Directory Users and Computers User
ADSI Edit User
Certification Authority User
Certificates User
Certificate Templates User
Component Services User
Computer Management User
Device Manager User
Distributed File System User
Disk Defragmenter User
Disk Management User
Event Viewer User
Event Viewer (Windows Vista) User
Failover Clusters Manager User
FAX Service User
FrontPage Server Extensions User
Health Registration Authority (HRA) User
Internet Authentication Service (IAS) User
Internet Information Services User
Indexing Service User
IP Security Policy Management User
IP Security Monitor User
Local Users and Groups User
NAP Client Configuration User
.Net Framework Configuration User
Network Policy Server (NPS) User
Performance Logs and Alerts User
QoS Admission Control User
Remote Desktops User
Routing and Remote Access User
Removable Storage Management User
Security Configuration and Analysis User
Security Templates User
Server Manager User
Services User
Shared Folders User
System Information User
Telephony User
Remote Desktop Services Configuration User
TPM Management User
Windows Firewall with Advanced Security User
Wireless Monitor User
WMI Control User
Group Policy Starter GPO Editor User
Group Policy Management Editor User
Storage Manager for SANs User
Storage Manager for SANS Extension User
Disk Management Extension User
Share and Storage Management User
Share and Storage Management Extension User
DFS Management User
DFS Management Extension User
File Server Resource Manager User
File Server Resource Manager Extension User
Turn off Windows Mobility Center User
Turn off Windows Mobility Center Machine
Turn off Windows presentation settings User
Turn off Windows presentation settings Machine
Automatic Maintenance Activation Boundary Machine
Automatic Maintenance Random Delay Machine
Automatic Maintenance WakeUp Policy Machine
Microsoft Support Diagnostic Tool: Configure execution level Machine
Microsoft Support Diagnostic Tool: Restrict tool download Machine
Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication Machine
Configure MSI Corrupted File Recovery behavior Machine
Allow users to browse for source while elevated Machine
Allow users to use media source while elevated Machine
Allow users to patch elevated products Machine
Always install with elevated privileges User
Always install with elevated privileges Machine
Prohibit use of Restart Manager Machine
Remove browse dialog box for new source Machine
Prohibit flyweight patching Machine
Turn off logging via package settings Machine
Prevent removable media source for any installation User
Turn off Windows Installer Machine
Prevent users from using Windows Installer to install updates and upgrades Machine
Prohibit rollback User
Prohibit rollback Machine
Allow user control over installs Machine
Prohibit non-administrators from applying vendor signed updates Machine
Prohibit removal of updates Machine
Turn off creation of System Restore checkpoints Machine
Prohibit User Installs Machine
Enforce upgrade component rules Machine
Control maximum size of baseline file cache Machine
Specify the types of events Windows Installer records in its transaction log Machine
Prevent Internet Explorer security prompt for Windows Installer scripts Machine
Specify the order in which Windows Installer searches for installation files User
Save copies of transform files in a secure location on workstation Machine
Turn off shared components Machine
Prevent embedded UI Machine
Support Email Address Machine
Friendly Name Machine
User Interface Machine
Prefer Local Names Allowed Machine
DirectAccess Passive Mode Machine
Corporate Resources Machine
IPsec Tunnel Endpoints Machine
Custom Commands Machine
Specify corporate Website probe URL Machine
Specify corporate DNS probe host name Machine
Specify corporate DNS probe host address Machine
Specify corporate site prefix list Machine
Specify domain location determination URL Machine
Specify passive polling Machine
Contact PDC on logon failure Machine
Use initial DC discovery retry setting for background callers Machine
Use maximum DC discovery retry interval setting for background callers Machine
Use final DC discovery retry setting for background callers Machine
Use positive periodic DC cache refresh for background callers Machine
Specify log file debug output level Machine
Specify expected dial-up delay on logon Machine
Specify maximum log file size Machine
Specify negative DC Discovery cache setting Machine
Set Netlogon share compatibility Machine
Specify positive periodic DC Cache refresh for non-background callers Machine
Set scavenge interval Machine
Specify site name Machine
Set SYSVOL share compatibility Machine
Use DNS name resolution with a single-label domain name instead of NetBIOMachine
Use DNS name resolution when a single-label domain name is used by append Machine
Use automated site coverage by the DC Locator DNS SRV Records Machine
Specify DC Locator DNS records not registered by the DCs Machine
Specify Refresh Interval of the DC Locator DNS records Machine
Set TTL in the DC Locator DNS Records Machine
Specify sites covered by the GC Locator DNS SRV Records Machine
Set Priority in the DC Locator DNS SRV records Machine
Set Weight in the DC Locator DNS SRV records Machine
Specify sites covered by the application directory partition DC Locator DNS Machine
Specify sites covered by the DC Locator DNS SRV records Machine
Specify dynamic registration of the DC Locator DNS Records Machine
Try Next Closest Site Machine
Force Rediscovery Interval Machine
Return domain controller address type Machine
Allow cryptography algorithms compatible with Windows NT 4.0 Machine
Do not process incoming mailslot messages used for domain controller lo Machine
Do not use NetBIOS-based discovery for domain controller location when DNMachine
Specify address lookup behavior for DC locator ping Machine
Use urgent mode when pinging domain controllers Machine
Prohibit adding and removing components for a LAN or remote access conneUser
Prohibit access to the Advanced Settings item on the Advanced menu User
Prohibit TCP/IP advanced configuration User
Prohibit installation and configuration of Network Bridge on your DNS doma Machine
Prohibit Enabling/Disabling components of a LAN connection User
Ability to delete all user remote access connections User
Prohibit deletion of remote access connections User
Prohibit access to the Remote Access Preferences item on the Advanced me User
Enable Windows 2000 Network Connections settings for Administrators User
Turn off notifications when a connection has only limited or no connectivity User
Prohibit access to properties of components of a LAN connection User
Ability to Enable/Disable a LAN connection User
Prohibit access to properties of a LAN connection User
Prohibit access to the New Connection Wizard User
Prohibit use of Internet Connection Firewall on your DNS domain network Machine
Ability to change properties of an all user remote access connection User
Prohibit access to properties of components of a remote access connection User
Prohibit connecting and disconnecting a remote access connection User
Prohibit changing properties of a private remote access connection User
Ability to rename all user remote access connections User
Ability to rename LAN connections or remote access connections available toUser
Ability to rename LAN connections User
Prohibit renaming private remote access connections User
Prohibit use of Internet Connection Sharing on your DNS domain network Machine
Prohibit viewing of status for an active connection User
Require domain users to elevate when setting a network's location Machine
Do not show the "local access only" network icon Machine
Route all traffic through the internal network Machine
Internet proxy servers for apps Machine
Intranet proxy servers for apps Machine
Private network ranges for apps Machine
Proxy definitions are authoritative Machine
Subnet definitions are authoritative Machine
Hardened UNC Paths Machine
Subfolders always available offline Machine
Specify administratively assigned Offline Files User
Specify administratively assigned Offline Files Machine
Non-default server disconnect actions User
Non-default server disconnect actions Machine
Default cache size Machine
Allow or Disallow use of the Offline Files feature Machine
Encrypt the Offline Files cache Machine
Event logging level User
Event logging level Machine
Files not cached Machine
Action on server disconnect User
Action on server disconnect Machine
Prevent use of Offline Files folder User
Prevent use of Offline Files folder Machine
Prohibit user configuration of Offline Files User
Prohibit user configuration of Offline Files Machine
Remove "Make Available Offline" command User
Remove "Make Available Offline" command Machine
Remove "Make Available Offline" for these files and folders User
Remove "Make Available Offline" for these files and folders Machine
Turn off reminder balloons User
Turn off reminder balloons Machine
At logoff delete local copy of users offline files Machine
Reminder balloon frequency User
Reminder balloon frequency Machine
Initial reminder balloon lifetime User
Initial reminder balloon lifetime Machine
Reminder balloon lifetime User
Reminder balloon lifetime Machine
Configure Slow link speed Machine
Synchronize all offline files before logging off User
Synchronize all offline files before logging off Machine
Synchronize all offline files when logging on User
Synchronize all offline files when logging on Machine
Synchronize offline files before suspend User
Synchronize offline files before suspend Machine
Turn on economical application of administratively assigned Offline Files Machine
Configure slow-link mode Machine
Limit disk space used by Offline Files Machine
Configure Background Sync Machine
Enable Transparent Caching Machine
Enable file screens Machine
Remove "Work offline" command User
Remove "Work offline" command Machine
Enable file synchronization on costed networks Machine
Turn off Microsoft Peer-to-Peer Networking Services Machine
Turn off Multicast Bootstrap Machine
Turn off PNRP cloud creation Machine
Set PNRP cloud to resolve only Machine
Set the Seed Server Machine
Disable password strength validation for Peer Grouping Machine
Make Family Safety control panel visible on a Domain Machine
Use Microsoft Passport for Work Machine
Use a hardware security device Machine
Use biometrics Machine
Minimum PIN length Machine
Minimum PIN length User
Maximum PIN length Machine
Maximum PIN length User
Use uppercase letters Machine
Use uppercase letters User
Use lowercase letters Machine
Use lowercase letters User
Use special characters Machine
Use special characters User
Use digits Machine
Use digits User
Detect compatibility issues for applications and drivers Machine
Detect application install failures Machine
Detect applications unable to launch installers under UAC Machine
Detect application failures caused by deprecated Windows DLLs Machine
Detect application failures caused by deprecated COM objects Machine
Detect application installers that need to be run as administrator Machine
Notify blocked drivers Machine
Turn on BranchCache Machine
Set percentage of disk space used for client computer cache Machine
Set BranchCache Hosted Cache mode Machine
Set BranchCache Distributed Cache mode Machine
Configure BranchCache for network files Machine
Enable Automatic Hosted Cache Discovery by Service Connection Point Machine
Configure Client BranchCache Version Support Machine
Configure Hosted Cache Servers Machine
Set age for segments in the data cache Machine
Turn off Tablet PC Pen Training User
Turn off Tablet PC Pen Training Machine
Enable/Disable PerfTrack Machine
Critical battery notification action Machine
Low battery notification action Machine
Critical battery notification level Machine
Low battery notification level Machine
Turn off low battery user notification Machine
Select the Power button action (plugged in) Machine
Select the Sleep button action (plugged in) Machine
Select the lid switch action (plugged in) Machine
Select the Start menu Power button action (plugged in) Machine
Select the Power button action (on battery) Machine
Select the Sleep button action (on battery) Machine
Select the lid switch action (on battery) Machine
Select the Start menu Power button action (on battery) Machine
Turn Off the hard disk (plugged in) Machine
Turn Off the hard disk (on battery) Machine
Specify a custom active power plan Machine
Select an active power plan Machine
Prompt for password on resume from hibernate/suspend User
Turn on the ability for applications to prevent sleep transitions (plugged in) Machine
Specify the system hibernate timeout (plugged in) Machine
Require a password when a computer wakes (plugged in) Machine
Specify the system sleep timeout (plugged in) Machine
Turn off hybrid sleep (plugged in) Machine
Turn on the ability for applications to prevent sleep transitions (on battery) Machine
Specify the system hibernate timeout (on battery) Machine
Require a password when a computer wakes (on battery) Machine
Specify the system sleep timeout (on battery) Machine
Turn off hybrid sleep (on battery) Machine
Turn off adaptive display timeout (plugged in) Machine
Turn off adaptive display timeout (on battery) Machine
Turn off the display (plugged in) Machine
Turn off the display (on battery) Machine
Allow standby states (S1-S3) when sleeping (plugged in) Machine
Allow standby states (S1-S3) when sleeping (on battery) Machine
Do not turn off system power after a Windows system shutdown has occurreMachine
Allow automatic sleep with Open Network Files (plugged in) Machine
Allow automatic sleep with Open Network Files (on battery) Machine
Reduce display brightness (plugged in) Machine
Reduce display brightness (on battery) Machine
Specify the display dim brightness (plugged in) Machine
Specify the display dim brightness (on battery) Machine
Turn on desktop background slideshow (plugged in) Machine
Turn on desktop background slideshow (on battery) Machine
Specify the unattended sleep timeout (plugged in) Machine
Specify the unattended sleep timeout (on battery) Machine
Allow applications to prevent automatic sleep (plugged in) Machine
Allow applications to prevent automatic sleep (on battery) Machine
Reserve battery notification level Machine
Turn on Script Execution Machine
Turn on Script Execution User
Turn on Module Logging Machine
Turn on Module Logging User
Turn on PowerShell Transcription Machine
Turn on PowerShell Transcription User
Turn on PowerShell Script Block Logging Machine
Turn on PowerShell Script Block Logging User
Set the default source path for Update-Help Machine
Set the default source path for Update-Help User
Prevent restoring previous versions from backups User
Prevent restoring previous versions from backups Machine
Hide previous versions list for local files User
Hide previous versions list for local files Machine
Prevent restoring local previous versions User
Prevent restoring local previous versions Machine
Hide previous versions list for remote files User
Hide previous versions list for remote files Machine
Prevent restoring remote previous versions User
Prevent restoring remote previous versions Machine
Hide previous versions of files on backup location User
Hide previous versions of files on backup location Machine
Activate Internet printing Machine
Isolate print drivers from applications Machine
Custom support URL in the Printers folder's left pane Machine
Add Printer wizard - Network scan page (Managed network) Machine
Browse the network to find printers User
Always render print jobs on the server Machine
Always rasterize content to be printed using a software rasterizer Machine
Browse a common web site to find printers User
Disallow installation of printers using kernel-mode drivers Machine
Prevent addition of printers User
Prevent deletion of printers User
Add Printer wizard - Network scan page (Unmanaged network) Machine
Only use Package Point and print User
Package Point and print - Approved servers User
Only use Package Point and print Machine
Package Point and print - Approved servers Machine
Computer location Machine
Pre-populate printer search location text Machine
Point and Print Restrictions User
Point and Print Restrictions Machine
Default Active Directory path when searching for printers User
Printer browsing Machine
Execute print drivers in isolated processes Machine
Override print driver execution compatibility setting reported by print driver Machine
Extend Point and Print connection to search Windows Update Machine
Do not allow v4 printer drivers to show printer extensions Machine
Change Microsoft XPS Document Writer (MXDW) default output format to theMachine
Allow job name in event logs Machine
Allow Print Spooler to accept client connections Machine
Automatically publish new printers in Active Directory Machine
Prune printers that are not automatically republished Machine
Directory pruning interval Machine
Directory pruning priority Machine
Directory pruning retry Machine
Log directory pruning retry events Machine
Allow printers to be published Machine
Check published state Machine
Allow pruning of published printers Machine
Hide the Programs Control Panel User
Hide "Programs and Features" page User
Hide "Installed Updates" page User
Hide "Set Program Access and Computer Defaults" page User
Hide "Windows Marketplace" User
Hide "Get Programs" page User
Hide "Windows Features" User
Best effort service type Machine
Controlled load service type Machine
Guaranteed service type Machine
Network control service type Machine
Qualitative service type Machine
Limit outstanding packets Machine
Limit reservable bandwidth Machine
Set timer resolution Machine
Non-conforming packets Machine
Configure Reliability WMI Providers Machine
Allow restore of system to default state Machine
Enable Persistent Time Stamp Machine
Report unplanned shutdown events Machine
Activate Shutdown Event Tracker System State Data feature Machine
Display Shutdown Event Tracker Machine
Turn on session logging Machine
Allow only Windows Vista or later connections Machine
Turn on bandwidth optimization Machine
Customize warning messages Machine
Configure Solicited Remote Assistance Machine
Configure Offer Remote Assistance Machine
Set time (in seconds) to force reboot User
Set time (in seconds) to force reboot Machine
CD and DVD: Deny read access User
CD and DVD: Deny read access Machine
CD and DVD: Deny write access User
CD and DVD: Deny write access Machine
CD and DVD: Deny execute access Machine
Custom Classes: Deny read access User
Custom Classes: Deny read access Machine
Custom Classes: Deny write access User
Custom Classes: Deny write access Machine
Floppy Drives: Deny read access User
Floppy Drives: Deny read access Machine
Floppy Drives: Deny write access User
Floppy Drives: Deny write access Machine
Floppy Drives: Deny execute access Machine
Removable Disks: Deny read access User
Removable Disks: Deny read access Machine
Removable Disks: Deny write access User
Removable Disks: Deny write access Machine
Removable Disks: Deny execute access Machine
All Removable Storage classes: Deny all access User
All Removable Storage classes: Deny all access Machine
Tape Drives: Deny read access User
Tape Drives: Deny read access Machine
Tape Drives: Deny write access User
Tape Drives: Deny write access Machine
Tape Drives: Deny execute access Machine
WPD Devices: Deny read access User
WPD Devices: Deny read access Machine
WPD Devices: Deny write access User
WPD Devices: Deny write access Machine
All Removable Storage: Allow direct access in remote sessions Machine
Enable RPC Endpoint Mapper Client Authentication Machine
Propagate extended error information Machine
Ignore Delegation Failure Machine
Set Minimum Idle Connection Timeout for RPC/HTTP connections Machine
Restrict Unauthenticated RPC clients Machine
Maintain RPC Troubleshooting State Information Machine
Specify maximum wait time for Group Policy scripts Machine
Run legacy logon scripts hidden User
Display instructions in logoff scripts as they run User
Run logon scripts synchronously User
Run logon scripts synchronously Machine
Display instructions in logon scripts as they run User
Run Windows PowerShell scripts first at computer startup shutdown Machine
Run Windows PowerShell scripts first at user logon logoff Machine
Run Windows PowerShell scripts first at user logon logoff User
Display instructions in shutdown scripts as they run Machine
Run startup scripts asynchronously Machine
Display instructions in startup scripts as they run Machine
Allow logon scripts when NetBIOS or WINS is disabled Machine
Configure Security Policy for Scripted Diagnostics Machine
Troubleshooting: Allow users to access and run Troubleshooting Wizards Machine
Troubleshooting: Allow users to access online troubleshooting content on M Machine
Configure Scheduled Maintenance Behavior Machine
Prevent adding UNC locations to index from Control Panel Machine
Prevent adding UNC locations to index from Control Panel User
Allow indexing of encrypted files Machine
Disable indexer backoff Machine
Prevent clients from querying the index remotely Machine
Prevent indexing when running on battery power to conserve energy Machine
Prevent customization of indexed locations in Control Panel Machine
Prevent customization of indexed locations in Control Panel User
Allow use of diacritics Machine
Always use automatic language detection when indexing content and properMachine
Do not allow locations on removable drives to be added to libraries Machine
Don't search the web or display web results in Search Machine
Don't search the web or display web results in Search over metered connectMachine
Set what information is shared in Search Machine
Set the SafeSearch setting for Search Machine
Prevent automatically adding shared folders to the Windows Search index Machine
Prevent adding user-specified locations to the All Locations menu Machine
Prevent the display of advanced indexing options for Windows Search in the Machine
Prevent indexing files in offline files cache Machine
Enable indexing uncached Exchange folders Machine
Enable indexing of online delegate mailboxes Machine
Enable throttling for online mail indexing Machine
Prevent indexing Microsoft Office Outlook Machine
Prevent indexing e-mail attachments Machine
Control rich previews for attachments Machine
Prevent indexing public folders Machine
Indexer data location Machine
Add primary intranet search location Machine
Add secondary intranet search locations Machine
Preview pane location Machine
Set large or small icon view in desktop search results Machine
Stop indexing in the event of limited hard drive space Machine
Prevent unwanted iFilters and protocol handlers Machine
Do not allow web search Machine
Prevent indexing certain paths Machine
Prevent indexing certain paths User
Default indexed paths Machine
Default indexed paths User
Default excluded paths Machine
Default excluded paths User
Prevent indexing of certain file types Machine
Turn off storage and display of search history User
Allow Cortana Machine
Allow search and Cortana to use location Machine
Select OCR language Machine
Force TIFF IFilter to perform OCR for every page in a TIFF document Machine
Turn on Security Center (Domain PCs only) Machine
Turn off sensors User
Turn off sensors Machine
Turn off location User
Turn off location Machine
Turn off location scripting User
Turn off location scripting Machine
Do not display Server Manager automatically at logon Machine
Configure the refresh interval for Server Manager Machine
Do not display Initial Configuration Tasks window automatically at logon Machine
Do not display Manage Your Server page at logon Machine
Specify settings for optional component installation and component repair Machine
Do not sync Machine
Do not sync app settings Machine
Do not sync passwords Machine
Do not sync personalize Machine
Do not sync Apps Machine
Do not sync other Windows settings Machine
Do not sync desktop personalization Machine
Do not sync browser settings Machine
Do not sync on metered connections Machine
Do not sync start settings Machine
Specify Windows Service Pack installation file location Machine
Specify Windows installation file location Machine
Turn off handwriting personalization data sharing Machine
Turn off handwriting personalization data sharing User
Allow DFS roots to be published User
Allow shared folders to be published User
Prevent users from sharing files within their profile. User
Prevent the computer from joining a homegroup Machine
Prevent access to the command prompt User
Prevent access to registry editing tools User
Run only specified Windows applications User
Don't run specified Windows applications User
Do not display the Welcome Center at user logon User
Turn off desktop gadgets User
Turn off desktop gadgets Machine
Restrict unpacking and installation of gadgets that are not digitally signed. User
Restrict unpacking and installation of gadgets that are not digitally signed. Machine
Turn Off user-installed desktop gadgets User
Turn Off user-installed desktop gadgets Machine
Prevent the usage of OneDrive for file storage Machine
Allow certificates with no extended key usage certificate attribute Machine
Allow Integrated Unblock screen to be displayed at the time of logon Machine
Filter duplicate logon certificates Machine
Force the reading of all certificates from the smart card Machine
Allow signature keys valid for Logon Machine
Allow time invalid certificates Machine
Turn on certificate propagation from smart card Machine
Configure root certificate clean up Machine
Turn on root certificate propagation from smart card Machine
Display string when smart card is blocked Machine
Reverse the subject name stored in a certificate when displaying Machine
Prevent plaintext PINs from being returned by Credential Manager Machine
Allow user name hint Machine
Turn on Smart Card Plug and Play service Machine
Notify user of successful smart card driver installation Machine
Allow ECC certificates to be used for logon and authentication Machine
Specify communities Machine
Specify permitted managers Machine
Specify traps for public community Machine
Do not allow Sound Recorder to run User
Do not allow Sound Recorder to run Machine
File Classification Infrastructure: Display Classification tab in File Explorer Machine
File Classification Infrastructure: Specify classification properties list Machine
Customize message for Access Denied errors Machine
Enable access-denied assistance on client for all file types Machine
Clear the recent programs list for new users User
Remove Games link from Start Menu User
Remove Search Computer link User
Remove See More Results / Search Everywhere link User
Add Search Internet link to Start Menu User
Do not search for files User
Do not search Internet User
Do not search programs and Control Panel items User
Do not search communications User
Remove user folder link from Start Menu User
Add the Run command to the Start Menu User
Show QuickLaunch on Taskbar User
Clear history of recently opened documents on exit User
Add Logoff to the Start Menu User
Gray unavailable Windows Installer programs Start Menu shortcuts User
Turn off personalized menus User
Lock the Taskbar User
Add "Run in Separate Memory Space" check box to Run dialog box User
Turn off notification area cleanup User
Remove Balloon Tips on Start Menu items User
Prevent users from customizing their Start Screen User
Clear history of tile notifications on exit User
Pin Apps to Start when installed Machine
Pin Apps to Start when installed User
Start Layout Machine
Start Layout User
Remove and prevent access to the Shut Down Restart Sleep and Hibernat User
Remove common program groups from Start Menu User
Remove Favorites menu from Start Menu User
Remove Search link from Start Menu User
Remove frequent programs list from the Start Menu User
Remove Help menu from Start Menu User
Turn off user tracking User
Remove All Programs list from the Start menu User
Remove Network Connections from Start Menu User
Remove pinned programs list from the Start Menu User
Do not keep history of recently opened documents User
Remove Recent Items menu from Start Menu User
Do not use the search-based method when resolving shell shortcuts User
Do not use the tracking-based method when resolving shell shortcuts User
Remove Run menu from Start Menu User
Remove programs on Settings menu User
Prevent changes to Taskbar and Start Menu Settings User
Remove Default Programs link from the Start menu. User
Remove Documents icon from Start Menu User
Remove Music icon from Start Menu User
Remove Network icon from Start Menu User
Remove Pictures icon from Start Menu User
Remove user's folders from the Start Menu User
Force classic Start Menu User
Remove Clock from the system notification area User
Prevent grouping of taskbar items User
Do not display any custom toolbars in the taskbar User
Remove access to the context menus for the taskbar User
Hide the notification area User
Remove user name from Start Menu User
Remove links and access to Windows Update User
Remove the "Undock PC" button from the Start Menu User
Remove Logoff on the Start Menu User
Remove Homegroup link from Start Menu User
Remove Downloads link from Start Menu User
Remove Recorded TV link from Start Menu User
Remove Videos link from Start Menu User
Prevent users from uninstalling applications from Start User
Change Start Menu power button User
Show "Run as different user" command on Start User
Go to the desktop instead of Start when signing in User
Show the Apps view automatically when the user goes to Start User
Search just apps from the Apps view User
List desktop apps first in the Apps view User
Show Start on the display the user is using when they press the Windows lo User
Turn off Configuration Machine
Turn off System Restore Machine
Turn off AutoComplete integration with Input Panel User
Turn off AutoComplete integration with Input Panel Machine
Prevent Input Panel tab from appearing User
Prevent Input Panel tab from appearing Machine
For tablet pen input dont show the Input Panel icon User
For tablet pen input dont show the Input Panel icon Machine
For touch input dont show the Input Panel icon User
For touch input dont show the Input Panel icon Machine
Turn off password security in Input Panel User
Turn off password security in Input Panel Machine
Include rarely used Chinese Kanji or Hanja characters User
Include rarely used Chinese Kanji or Hanja characters Machine
Turn off tolerant and Z-shaped scratch-out gestures User
Turn off tolerant and Z-shaped scratch-out gestures Machine
Disable text prediction User
Disable text prediction Machine
Do not allow Inkball to run User
Do not allow Inkball to run Machine
Do not allow Windows Journal to be run User
Do not allow Windows Journal to be run Machine
Do not allow printing to Journal Note Writer User
Do not allow printing to Journal Note Writer Machine
Do not allow Snipping Tool to run User
Do not allow Snipping Tool to run Machine
Turn off pen feedback User
Turn off pen feedback Machine
Prevent Back-ESC mapping User
Prevent Back-ESC mapping Machine
Prevent launch an application User
Prevent launch an application Machine
Prevent press and hold User
Prevent press and hold Machine
Turn off hardware buttons User
Turn off hardware buttons Machine
Prevent Flicks Learning Mode User
Prevent Flicks Learning Mode Machine
Prevent flicks User
Prevent flicks Machine
Remove the battery meter User
Remove the networking icon User
Remove the volume control icon User
Remove the Security and Maintenance icon User
Lock all taskbar settings User
Prevent users from adding or removing toolbars User
Prevent users from rearranging toolbars User
Turn off all balloon notifications User
Prevent users from moving taskbar to another screen dock location User
Prevent users from resizing the taskbar User
Turn off taskbar thumbnails User
Remove pinned programs from the Taskbar User
Turn off automatic promotion of notification icons to the taskbar User
Disable showing balloon notifications as toasts. User
Turn off feature advertisement balloon notifications User
Do not display or track items in Jump Lists from remote locations User
Do not allow pinning programs to the Taskbar User
Do not allow pinning items in Jump Lists User
Do not allow taskbars on more than one display User
Show Windows Store apps on the taskbar User
Remove Notifications and Action Center User
Do not allow pinning Store app to the Taskbar User
Prohibit Browse User
Prohibit Browse Machine
Hide Advanced Properties Checkbox in Add Scheduled Task Wizard User
Hide Advanced Properties Checkbox in Add Scheduled Task Wizard Machine
Prohibit Drag-and-Drop User
Prohibit Drag-and-Drop Machine
Prevent Task Run or End User
Prevent Task Run or End Machine
Hide Property Pages User
Hide Property Pages Machine
Prohibit New Task Creation User
Prohibit New Task Creation Machine
Prohibit Task Deletion User
Prohibit Task Deletion Machine
Set ISATAP State Machine
Set ISATAP Router Name Machine
Set 6to4 State Machine
Set 6to4 Relay Name Machine
Set 6to4 Relay Name Resolution Interval Machine
Set Teredo State Machine
Set Teredo Server Name Machine
Set Teredo Refresh Rate Machine
Set Teredo Client Port Machine
Set Teredo Default Qualified Machine
Set IP-HTTPS State Machine
Set Window Scaling Heuristics State Machine
Set IP Stateless Autoconfiguration Limits State Machine
Allow time zone redirection User
Do not allow Clipboard redirection User
Remove remote desktop wallpaper User
Always show desktop on connection User
Allow remote start of unlisted programs Machine
Allow desktop composition for remote desktop sessions Machine
Use RD Connection Broker load balancing Machine
Redirect only the default client printer Machine
Redirect only the default client printer User
Set time limit for logoff of RemoteApp sessions User
Set time limit for logoff of RemoteApp sessions Machine
Do not allow font smoothing Machine
Select the network adapter to be used for Remote Desktop IP Virtualization Machine
Do not use Remote Desktop Session Host server IP address when virtual IP aMachine
Turn off Fair Share CPU Scheduling Machine
Turn off Windows Installer RDS Compatibility Machine
Turn on Remote Desktop IP Virtualization Machine
Use the hardware default graphics adapter for all Remote Desktop Services Machine
Configure image quality for RemoteFX Adaptive Graphics Machine
Configure RemoteFX Adaptive Graphics Machine
Enable Remote Desktop Protocol 8.0 Machine
Select network detection on the server Machine
Select RDP transport protocols Machine
Turn Off UDP On Client Machine
Do not allow passwords to be saved User
Do not allow passwords to be saved Machine
Set client connection encryption level Machine
Always prompt for password upon connection Machine
Require use of specific security layer for remote (RDP) connections Machine
Require user authentication for remote connections by using Network Level Machine
Server authentication certificate template Machine
Set RD Gateway authentication method User
Enable connection through RD Gateway User
Set RD Gateway server address User
Automatic reconnection Machine
Limit maximum color depth Machine
Limit number of monitors Machine
Allow users to connect remotely by using Remote Desktop Services Machine
Limit maximum display resolution Machine
Enforce Removal of Remote Desktop Wallpaper Machine
Deny logoff of an administrator logged in to the console session Machine
Configure keep-alive connection interval Machine
Use the specified Remote Desktop license servers Machine
Hide notifications about RD Licensing problems that affect the RD Session H Machine
Set the Remote Desktop licensing mode Machine
Limit number of connections Machine
Remove "Disconnect" option from Shut Down dialog Machine
Remove Windows Security item from Start menu Machine
Suspend user sign-in to complete app registration Machine
Set rules for remote control of Remote Desktop Services user sessions User
Set rules for remote control of Remote Desktop Services user sessions Machine
Restrict Remote Desktop Services users to a single Remote Desktop Service Machine
Start a program on connection User
Start a program on connection Machine
Do not allow local administrators to customize permissions Machine
Always show desktop on connection Machine
Set Remote Desktop Services User Home Directory Machine
Set path for Remote Desktop Services Roaming User Profile Machine
Use mandatory profiles on the RD Session Host server Machine
Limit the size of the entire roaming user profile cache Machine
License server security group Machine
Prevent license upgrade Machine
Allow audio and video playback redirection Machine
Limit audio playback quality Machine
Allow audio recording redirection Machine
Do not allow Clipboard redirection Machine
Do not allow COM port redirection Machine
Do not set default client printer to be default printer in a session Machine
Use Remote Desktop Easy Print printer driver first Machine
Use Remote Desktop Easy Print printer driver first User
Do not allow drive redirection Machine
Do not allow LPT port redirection Machine
Do not allow supported Plug and Play device redirection Machine
Do not allow client printer redirection Machine
Specify RD Session Host server fallback printer driver behavior Machine
Do not allow smart card device redirection Machine
Allow time zone redirection Machine
Require secure RPC communication Machine
Join RD Connection Broker Machine
Configure RD Connection Broker farm name Machine
Use IP Address Redirection Machine
Configure RD Connection Broker server name Machine
End session when time limits are reached User
End session when time limits are reached Machine
Set time limit for disconnected sessions User
Set time limit for disconnected sessions Machine
Set time limit for active but idle Remote Desktop Services sessions User
Set time limit for active but idle Remote Desktop Services sessions Machine
Set time limit for active Remote Desktop Services sessions User
Set time limit for active Remote Desktop Services sessions Machine
Do not delete temp folders upon exit Machine
Do not use temporary folders per session Machine
Allow .rdp files from unknown publishers User
Allow .rdp files from unknown publishers Machine
Allow .rdp files from valid publishers and user's default .rdp settings User
Allow .rdp files from valid publishers and user's default .rdp settings Machine
Specify SHA1 thumbprints of certificates representing trusted .rdp publisher Machine
Specify SHA1 thumbprints of certificates representing trusted .rdp publisher User
Prompt for credentials on the client computer Machine
Configure server authentication for client Machine
Configure image quality for RemoteFX Adaptive Graphics Machine
Configure RemoteFX Adaptive Graphics Machine
Configure compression for RemoteFX data Machine
Use advanced RemoteFX graphics for RemoteApp Machine
Optimize visual experience for Remote Desktop Service Sessions Machine
Allow RDP redirection of other supported RemoteFX USB devices from this Machine
Configure RemoteFX Machine
Optimize visual experience when using RemoteFX Machine
Enable RemoteFX encoding for RemoteFX clients designed for Windows Ser Machine
Specify default connection URL User
Select network detection on the server Machine
Select RDP transport protocols Machine
Turn Off UDP On Client Machine
Allow Uninstallation of Language Features Machine
Turn off the display of thumbnails and only display icons. User
Turn off the display of thumbnails and only display icons on network folders User
Turn off the caching of thumbnails in hidden thumbs.db files User
Turn off Tablet PC touch input User
Turn off Tablet PC touch input Machine
Turn off Touch Panning User
Turn off Touch Panning Machine
Turn on TPM backup to Active Directory Domain Services Machine
Configure the level of TPM owner authorization information available to the Machine
Configure the list of blocked TPM commands Machine
Ignore the default list of blocked TPM commands Machine
Ignore the local list of blocked TPM commands Machine
Standard User Lockout Duration Machine
Standard User Individual Lockout Threshold Machine
Standard User Total Lockout Threshold Machine
Prevent the user from running the Backup Status and Configuration progra User
Prevent the user from running the Backup Status and Configuration progra Machine
Prevent backing up to local disks User
Prevent backing up to local disks Machine
Prevent backing up to network location User
Prevent backing up to network location Machine
Prevent backing up to optical media (CD/DVD) User
Prevent backing up to optical media (CD/DVD) Machine
Turn off the ability to back up data files User
Turn off the ability to back up data files Machine
Turn off restore functionality User
Turn off restore functionality Machine
Turn off the ability to create a system image User
Turn off the ability to create a system image Machine
Add the Administrators security group to roaming user profiles Machine
Do not check for user ownership of Roaming Profile Folders Machine
Connect home directory to root of the share User
Delete cached copies of roaming profiles Machine
Disable detection of slow network connections Machine
Prompt user when a slow network connection is detected Machine
Exclude directories in roaming profile User
Leave Windows Installer and Group Policy Software Installation Data Machine
Limit profile size User
Only allow local user profiles Machine
Establish timeout value for dialog boxes Machine
Do not log users on with temporary profiles Machine
Maximum retries to unload and update user profile Machine
Prevent Roaming Profile changes from propagating to the server Machine
Wait for remote user profile Machine
Control slow network connection timeout for user profiles Machine
Delete user profiles older than a specified number of days on system restartMachine
Specify network directories to sync at logon/logoff time only User
Do not forcefully unload the users registry at user logoff Machine
Set maximum wait time for the network if a user has a roaming user profile Machine
Set roaming profile path for all users logging onto this computer Machine
Set the schedule for background upload of a roaming user profile's registry fMachine
User management of sharing user name account picture and domain informa Machine
Turn off the advertising ID Machine
Download roaming profiles on primary computers only Machine
Set user home folder Machine
Store BitLocker recovery information in Active Directory Domain Services Machine
Choose how users can recover BitLocker-protected drives (Windows Server Machine
Choose default folder for recovery password Machine
Choose drive encryption method and cipher strength (Windows Vista Wind Machine
Choose drive encryption method and cipher strength Machine
Prevent memory overwrite on restart Machine
Configure pre-boot recovery message and URL Machine
Allow enhanced PINs for startup Machine
Configure use of passwords for operating system drives Machine
Reset platform validation data after BitLocker recovery Machine
Disallow standard users from changing the PIN or password Machine
Provide the unique identifiers for your organization Machine
Validate smart card certificate usage rule compliance Machine
Use enhanced Boot Configuration Data validation profile Machine
Choose how BitLocker-protected operating system drives can be recovered Machine
Enforce drive encryption type on operating system drives Machine
Require additional authentication at startup (Windows Server 2008 and Win Machine
Require additional authentication at startup Machine
Allow network unlock at startup Machine
Configure TPM platform validation profile (Windows Vista Windows Server Machine
Configure TPM platform validation profile for BIOS-based firmware configura Machine
Configure TPM platform validation profile for native UEFI firmware configura Machine
Configure minimum PIN length for startup Machine
Configure use of hardware-based encryption for operating system drives Machine
Enable use of BitLocker authentication requiring preboot keyboard input on Machine
Allow Secure Boot for integrity validation Machine
Choose how BitLocker-protected fixed drives can be recovered Machine
Configure use of passwords for fixed data drives Machine
Deny write access to fixed drives not protected by BitLocker Machine
Allow access to BitLocker-protected fixed data drives from earlier versions Machine
Configure use of smart cards on fixed data drives Machine
Enforce drive encryption type on fixed data drives Machine
Configure use of hardware-based encryption for fixed data drives Machine
Choose how BitLocker-protected removable drives can be recovered Machine
Control use of BitLocker on removable drives Machine
Configure use of passwords for removable data drives Machine
Deny write access to removable drives not protected by BitLocker Machine
Allow access to BitLocker-protected removable data drives from earlier ver Machine
Configure use of smart cards on removable data drives Machine
Enforce drive encryption type on removable data drives Machine
Configure use of hardware-based encryption for removable data drives Machine
Global Configuration Settings Machine
Configure Windows NTP Client Machine
Enable Windows NTP Client Machine
Enable Windows NTP Server Machine
Prohibit connection to non-domain networks when connected to domain aut Machine
Minimize the number of simultaneous connections to the Internet or a Win Machine
Prohibit connection to roaming Mobile Broadband networks Machine
Disable power management in connected standby mode Machine
Diagnostics: Configure scenario retention Machine
Diagnostics: Configure scenario execution level Machine
Turn off Windows Calendar User
Turn off Windows Calendar Machine
Prevent the wizard from running. Machine
Prevent the wizard from running. User
Allow only system backup Machine
Disallow locally attached storage as backup target Machine
Disallow network as backup target Machine
Disallow optical media as backup target Machine
Disallow run-once backups Machine
Prohibit installing or uninstalling color profiles User
Prohibit installing or uninstalling color profiles Machine
Prohibit access of the Windows Connect Now wizards User
Prohibit access of the Windows Connect Now wizards Machine
Configuration of wireless settings using Windows Connect Now Machine
Turn off Auto Exclusions Machine
Allow antimalware service to startup with normal priority Machine
Turn off Windows Defender Machine
Configure local administrator merge behavior for lists Machine
Turn off routine remediation Machine
Define addresses to bypass proxy server Machine
Define proxy server for connecting to the network Machine
Randomize scheduled task times Machine
Allow antimalware service to remain running always Machine
Extension Exclusions Machine
Path Exclusions Machine
Process Exclusions Machine
Turn on protocol recognition Machine
Turn on definition retirement Machine
Define the rate of detection events for logging Machine
IP address range Exclusions Machine
Port number Exclusions Machine
Process Exclusions for outbound traffic Machine
Threat ID Exclusions Machine
Specify additional definition sets for network traffic inspection Machine
Configure local setting override for the removal of items from Quarantine fo Machine
Configure removal of items from Quarantine folder Machine
Turn on behavior monitoring Machine
Turn on Information Protection Control Machine
Turn on network protection against exploits of known vulnerabilities Machine
Scan all downloaded files and attachments Machine
Monitor file and program activity on your computer Machine
Turn on raw volume write notifications Machine
Turn off real-time protection Machine
Turn on process scanning whenever real-time protection is enabled Machine
Define the maximum size of downloaded files and attachments to be scann Machine
Configure local setting override for turn on behavior monitoring Machine
Configure local setting override for monitoring file and program activity on Machine
Configure local setting override to turn off Intrusion Prevention System Machine
Configure local setting override for scanning all downloaded files and attac Machine
Configure local setting override to turn on real-time protection Machine
Configure local setting override for monitoring for incoming and outgoing fileMachine
Configure monitoring for incoming and outgoing file and program activity Machine
Configure local setting override for the time of day to run a scheduled full Machine
Specify the day of the week to run a scheduled full scan to complete remediMachine
Specify the time of day to run a scheduled full scan to complete remediatio Machine
Configure time out for detections requiring additional action Machine
Configure time out for detections in critically failed state Machine
Configure time out for detections in non-critical failed state Machine
Configure time out for detections in recently remediated state Machine
Configure Windows software trace preprocessor components Machine
Configure WPP tracing level Machine
Allow users to pause scan Machine
Specify the maximum depth to scan archive files Machine
Specify the maximum size of archive files to be scanned Machine
Specify the maximum percentage of CPU utilization during a scan Machine
Check for the latest virus and spyware definitions before running a schedul Machine
Scan archive files Machine
Turn on catch-up full scan Machine
Turn on catch-up quick scan Machine
Turn on e-mail scanning Machine
Turn on heuristics Machine
Scan packed executables Machine
Scan removable drives Machine
Turn on reparse point scanning Machine
Create a system restore point Machine
Run full scan on mapped network drives Machine
Scan network files Machine
Configure local setting override for maximum percentage of CPU utilization Machine
Configure local setting override for the scan type to use for a scheduled sca Machine
Configure local setting override for schedule scan day Machine
Configure local setting override for scheduled quick scan time Machine
Configure local setting override for scheduled scan time Machine
Turn on removal of items from scan history folder Machine
Specify the interval to run quick scans per day Machine
Start the scheduled scan only when computer is on but not in use Machine
Specify the scan type to use for a scheduled scan Machine
Specify the day of the week to run a scheduled scan Machine
Specify the time for a daily quick scan Machine
Specify the time of day to run a scheduled scan Machine
Define the number of days after which a catch-up scan is forced Machine
Define the number of days before spyware definitions are considered out of Machine
Define the number of days before virus definitions are considered out of dat Machine
Define file shares for downloading definition updates Machine
Turn on scan after signature update Machine
Allow definition updates when running on battery power Machine
Initiate definition update on startup Machine
Define the order of sources for downloading definition updates Machine
Allow definition updates from Microsoft Update Machine
Allow real-time definition updates based on reports to Microsoft MAPS Machine
Specify the day of the week to check for definition updates Machine
Specify the time to check for definition updates Machine
Allow notifications to disable definitions based reports to Microsoft MAPS Machine
Define the number of days after which a catch-up definition update is requi Machine
Specify the interval to check for definition updates Machine
Check for the latest virus and spyware definitions on startup Machine
Configure local setting override for reporting to Microsoft MAPS Machine
Join Microsoft MAPS Machine
Send file samples when further analysis is required Machine
Specify threats upon which default action should not be taken when detecteMachine
Specify threat alert levels at which default action should not be taken when Machine
Enable headless UI mode Machine
Suppresses reboot notifications Machine
Display notifications to clients when they need to perform actions Machine
Display additional text to clients when they need to perform an action Machine
Hide the common dialog back button User
Hide the dropdown list of recent files User
Hide the common dialog places bar User
Items displayed in Places Bar User
Turn on Classic Shell User
Display confirmation dialog when deleting files User
Allow only per user or approved shell extensions User
Do not track Shell shortcuts during roaming User
Maximum number of recent documents User
Turn off caching of thumbnail pictures User
Remove CD Burning features User
Remove UI to change menu animation setting User
Remove UI to change keyboard navigation indicator setting User
Remove DFS tab User
Hide these specified drives in My Computer User
No Entire Network in Network Locations User
Remove File menu from File Explorer User
Do not allow Folder Options to be opened from the Options button on the Vi User
Remove Hardware tab User
Hides the Manage item on the File Explorer context menu User
Remove Shared Documents from My Computer User
Remove "Map Network Drive" and "Disconnect Network Drive" User
Do not move deleted files to the Recycle Bin User
Do not request alternate credentials User
Remove Security tab User
Remove Search button from File Explorer User
Remove File Explorer's default context menu User
Prevent access to drives from My Computer User
Turn off Windows+X hotkeys User
No Computers Near Me in Network Locations User
Request credentials for network installations User
Maximum allowed Recycle Bin size User
Turn off shell protocol protected mode User
Turn off shell protocol protected mode Machine
Remove the Search the Internet "Search again" link User
Pin Internet search sites to the "Search again" links and the Start menu User
Pin Libraries or Search Connectors to the "Search again" links and the Star User
Verify old and new Folder Redirection targets point to the same share beforeMachine
Disable Known Folders User
Turn off the display of snippets in Content view mode User
Turn off Windows Libraries features that rely on indexed file data User
Turn off display of recent search entries in the File Explorer search box User
Disable binding directly to IPropertySetStorage without intermediate layers. Machine
Disable binding directly to IPropertySetStorage without intermediate layers. User
Turn off numerical sorting in File Explorer Machine
Turn off numerical sorting in File Explorer User
Allow OpenSearch queries in File Explorer Machine
Allow OpenSearch queries in File Explorer User
Allow previewing and custom thumbnails of OpenSearch query results in FileMachine
Allow previewing and custom thumbnails of OpenSearch query results in FileUser
Location where all default Library definition files for users/machines reside. Machine
Location where all default Library definition files for users/machines reside. User
Configure Windows SmartScreen Machine
Show lock in the user tile menu Machine
Show sleep in the power options menu Machine
Show hibernate in the power options menu Machine
Do not show the 'new application installed' notification Machine
Start File Explorer with ribbon minimized Machine
Start File Explorer with ribbon minimized User
Set a default associations configuration file Machine
Allow the use of remote paths in file shortcut icons Machine
Specify Windows File Protection cache location Machine
Limit Windows File Protection cache size Machine
Set Windows File Protection scanning Machine
Hide the file scan progress window Machine
Windows Firewall: Allow authenticated IPsec bypass Machine
Windows Firewall: Define inbound program exceptions Machine
Windows Firewall: Allow local program exceptions Machine
Windows Firewall: Protect all network connections Machine
Windows Firewall: Do not allow exceptions Machine
Windows Firewall: Allow inbound file and printer sharing exception Machine
Windows Firewall: Allow ICMP exceptions Machine
Windows Firewall: Allow logging Machine
Windows Firewall: Prohibit notifications Machine
Windows Firewall: Define inbound port exceptions Machine
Windows Firewall: Allow local port exceptions Machine
Windows Firewall: Allow inbound remote administration exception Machine
Windows Firewall: Allow inbound Remote Desktop exceptions Machine
Windows Firewall: Prohibit unicast response to multicast or broadcast requesMachine
Windows Firewall: Allow inbound UPnP framework exceptions Machine
Windows Firewall: Define inbound program exceptions Machine
Windows Firewall: Allow local program exceptions Machine
Windows Firewall: Protect all network connections Machine
Windows Firewall: Do not allow exceptions Machine
Windows Firewall: Allow inbound file and printer sharing exception Machine
Windows Firewall: Allow ICMP exceptions Machine
Windows Firewall: Allow logging Machine
Windows Firewall: Prohibit notifications Machine
Windows Firewall: Define inbound port exceptions Machine
Windows Firewall: Allow local port exceptions Machine
Windows Firewall: Allow inbound remote administration exception Machine
Windows Firewall: Allow inbound Remote Desktop exceptions Machine
Windows Firewall: Prohibit unicast response to multicast or broadcast requesMachine
Windows Firewall: Allow inbound UPnP framework exceptions Machine
Turn off Windows Mail application User
Turn off Windows Mail application Machine
Turn off the communities features User
Turn off the communities features Machine
Prevent Windows Media DRM Internet Access Machine
Prevent Automatic Updates Machine
Do Not Show First Use Dialog Boxes Machine
Prevent Video Smoothing Machine
Prevent CD and DVD Media Information Retrieval User
Prevent Media Sharing Machine
Prevent Music File Media Information Retrieval User
Prevent Quick Launch Toolbar Shortcut Creation Machine
Prevent Radio Station Preset Retrieval User
Prevent Desktop Shortcut Creation Machine
Allow Screen Saver User
Prevent Codec Download User
Do Not Show Anchor User
Hide Privacy Tab User
Hide Security Tab User
Set and Lock Skin User
Configure HTTP Proxy User
Configure MMS Proxy User
Configure RTSP Proxy User
Hide Network Tab User
Configure Network Buffering User
Streaming Media Protocols User
Do not automatically start Windows Messenger initially Machine
Do not automatically start Windows Messenger initially User
Do not allow Windows Messenger to be run Machine
Do not allow Windows Messenger to be run User
Allow Basic authentication Machine
Allow unencrypted traffic Machine
Disallow Digest authentication Machine
Disallow Negotiate authentication Machine
Disallow Kerberos authentication Machine
Allow CredSSP authentication Machine
Trusted Hosts Machine
Allow remote server management through WinRM Machine
Turn On Compatibility HTTP Listener Machine
Turn On Compatibility HTTPS Listener Machine
Allow Basic authentication Machine
Allow unencrypted traffic Machine
Disallow WinRM from storing RunAs credentials Machine
Disallow Negotiate authentication Machine
Disallow Kerberos authentication Machine
Allow CredSSP authentication Machine
Specify channel binding token hardening level Machine
Allow Remote Shell Access Machine
Specify idle Timeout Machine
MaxConcurrentUsers Machine
Specify maximum amount of memory in MB per Shell Machine
Specify maximum number of processes per Shell Machine
Specify Shell Timeout Machine
Specify maximum number of remote shells per user Machine
Windows Automatic Updates User
Do not display 'Install Updates and Shut Down' option in Shut Down WindowMachine
Do not display 'Install Updates and Shut Down' option in Shut Down WindowUser
Do not adjust default option to 'Install Updates and Shut Down' in Shut Do User
Do not adjust default option to 'Install Updates and Shut Down' in Shut Do Machine
Remove access to use all Windows Update features User
Configure Automatic Updates Machine
Specify intranet Microsoft update service location Machine
Automatic Updates detection frequency Machine
Allow non-administrators to receive update notifications Machine
Allow Automatic Updates immediate installation Machine
Turn on recommended updates via Automatic Updates Machine
Turn on Software Notifications Machine
Enabling Windows Update Power Management to automatically wake up theMachine
s
No auto-restart with logged on users for scheduled automatic updates instalMachine
Always automatically restart at the scheduled time Machine
Re-prompt for restart with scheduled installations Machine
Delay Restart for scheduled installations Machine
Reschedule Automatic Updates scheduled installations Machine
Enable client-side targeting Machine
Allow signed updates from an intranet Microsoft update service location Machine
Do not connect to any Windows Update Internet locations Machine
Defer Upgrade Machine
Turn off legacy remote shutdown interface Machine
Timeout for hung logon sessions during shutdown Machine
Require use of fast startup Machine
Display information about previous logons during user logon Machine
Remove logon hours expiration warnings User
Set action to take when logon hours expire User
Disable or enable software Secure Attention Sequence Machine
Report when logon server was not available during user logon Machine
Report when logon server was not available during user logon User
Custom User Interface User
Sign-in last interactive user automatically after a system-initiated restart Machine
Turn off automatic termination of applications that block or cancel shutdownMachine
Set Cost Machine
Custom Instant Search Internet search provider User
Force automatic setup for all users Machine
Specify Work Folders settings User
Register domain joined computers as devices Machine
Turn off tile notifications User
Turn off toast notifications User
Turn off toast notifications on the lock screen User
Turn off notifications network usage User
Turn off Quiet Hours User
Set the time Quiet Hours begins each day User
Set the time Quiet Hours ends each day User
Turn off calls during Quiet Hours User
Set 3G Cost Machine
Set 4G Cost Machine
Policy Path
Windows Components\ActiveX Installer Service
Windows Components\ActiveX Installer Service
Control Panel\Add or Remove Programs
Windows Components\Data Collection and Preview Builds
Windows Components\Application Compatibility
Windows Components\App Package Deployment
Windows Components\App runtime
Windows Components\Attachment Manager
System\Audit Process Creation
Windows Components\AutoPlay Policies
Windows Components\Software Protection Platform
Windows Components\Biometrics
Network\Background Intelligent Transfer Service (BITS)
Windows Components\Windows Customer Experience Improvement
Windows Components\Windows Customer Experience Improvement
Network\SSL Configuration Settings
Network\SSL Configuration Settings
System
System
Windows Components\NetMeeting\Application Sharing
Windows Components\NetMeeting\Audio & Video
Windows Components\NetMeeting
Windows Components\NetMeeting\Options Page
Control Panel
Control Panel
Control Panel
Control Panel
Control Panel\Display
Control Panel\Display
Control Panel\Personalization
Control Panel\User Accounts
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Credentials Delegation
Windows Components\Credential User Interface
System\Ctrl+Alt+Del Options
System\Distributed COM\Application Compatibility Settings
System\Distributed COM\Application Compatibility Settings
Windows Components\Delivery Optimization
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Active Directory
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Windows Components\Device and Driver Compatibility
Windows Components\Device and Driver Compatibility
System\Device Guard
System\Device Guard
System\Device Installation
System\Device Installation\Device Installation Restrictions
System\Driver Installation
System\Device Redirection\Device Redirection Restrictions
System\Device Redirection\Device Redirection Restrictions
Network
Windows Components\Digital Locker
Windows Components\Digital Locker
System\Troubleshooting and Diagnostics\Disk Diagnostic
System\Troubleshooting and Diagnostics\Disk Diagnostic
System\Disk NV Cache
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Windows Components\Desktop Window Manager
Windows Components\Desktop Window Manager\Window Frame Colo
Windows Components\IME
System\Early Launch Antimalware
Windows Components\Edge UI
System
System\Enhanced Storage Access
Windows Components\Windows Error Reporting
Windows Components\Windows Error Reporting\Advanced Error Repor
Windows Components\Windows Error Reporting\Consent
Windows Components\Event Forwarding
Windows Components\Event Forwarding
Windows Components\Event Log Service\Application
Windows Components\Event Log Service\Security
Windows Components\Event Log Service\Setup
Windows Components\Event Log Service\System
Windows Components\Event Logging
Windows Components\Event Viewer
Windows Components\File Explorer
Windows Components\Portable Operating System
Windows Components\File History
System\Troubleshooting and Diagnostics\Corrupted File Recovery
Windows Components\File Revocation
System\File Share Shadow Copy Agent
System\File Share Shadow Copy Provider
System\Filesystem
System\Filesystem\NTFS
System\Filesystem
System\Folder Redirection
Windows Components\File Explorer\Explorer Frame Pane
Windows Components\File Explorer\Explorer Frame Pane
System\Troubleshooting and Diagnostics\Fault Tolerant Heap
Windows Components\Windows Game Recording and Broadcasting
Windows Components\Game Explorer
System\Locale Services
Control Panel\Regional and Language Options
System
Control Panel\Regional and Language Options\Handwriting personali
Control Panel\Regional and Language Options\Handwriting personali
System\Group Policy
System\Mitigation Options
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy\Logging and tracing
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
Windows Components\Microsoft Management Console\Restricted/Permi
System
System
System
System
Windows Components\Online Assistance
System\Internet Communication Management\Internet Communicatio
Network\Hotspot Authentication
System\Internet Communication Management
System\Internet Communication Management
Windows Components\Internet Information Services
Windows Components\Internet Explorer\Administrator Approved Cont
Windows Components\Internet Explorer\Internet Control Panel\Adva
Windows Components\Internet Explorer\Security Features
Windows Components\Internet Explorer\Internet Control Panel\Cont
Windows Components\Internet Explorer\Internet Control Panel\Cont
Windows Components\Internet Explorer\Internet Settings\AutoCompl
Windows Components\Internet Explorer\Internet Settings\Advanced
Windows Components\Internet Explorer\Offline Pages
Windows Components\Internet Explorer\Corporate Settings\Code D
Windows Components\Internet Explorer\Internet Settings\Display set
Windows Components\Internet Explorer\Internet Control Panel
Windows Components\Internet Explorer\Internet Settings\URL Encod
Windows Components\Internet Explorer\Internet Settings\Componen
Windows Components\Internet Explorer\Internet Settings\Advanced s
Windows Components\Internet Explorer\Security Features\Add-on
Windows Components\Internet Explorer\Security Features\Binary Beha
Windows Components\Internet Explorer\Security Features\Consisten
Windows Components\Internet Explorer\Security Features\Notificatio
Windows Components\Internet Explorer\Security Features\Local Ma
Windows Components\Internet Explorer\Security Features\Mime Sniff
Windows Components\Internet Explorer\Security Features\MK Protocol
Windows Components\Internet Explorer\Security Features\Network P
Windows Components\Internet Explorer\Security Features\Object Cac
Windows Components\Internet Explorer\Security Features\Protection
Windows Components\Internet Explorer\Security Features\Restrict Act
Windows Components\Internet Explorer\Security Features\Restrict F
Windows Components\Internet Explorer\Security Features\Scripted W
Windows Components\Internet Explorer\Security Features\Network Pr
Windows Components\Internet Explorer
Windows Components\Internet Explorer\Delete Browsing History
Windows Components\Internet Explorer\Internet Control Panel\Secur
Windows Components\Internet Explorer\Internet Control Panel\Securi
Windows Components\Internet Explorer\Internet Control Panel\Secu
Windows Components\Internet Explorer\Browser menus
Windows Components\Internet Explorer\Persistence Behavior
Windows Components\RSS Feeds
Windows Components\Internet Explorer\Application Compatibility\Cl
Windows Components\Internet Explorer\Security Features\AJAX
Windows Components\Internet Explorer\Toolbars
Windows Components\Internet Explorer\Internet Settings\Component U
Windows Components\Internet Explorer\Internet Settings\Component U
Windows Components\Internet Explorer\Privacy
Windows Components\Internet Explorer\Accelerators
Windows Components\Internet Explorer\Compatibility View
Windows Components\Internet Explorer\Internet Control Panel\Gener
Windows Components\Internet Explorer\Internet Settings
System\iSCSI\iSCSI Target Discovery
System\iSCSI\General iSCSI
System\iSCSI\General iSCSI
System\iSCSI\iSCSI Security
System\KDC
System\KDC
System\KDC
System\KDC
System\KDC
System\Kerberos
System\Kerberos
System\Kerberos
System\Kerberos
System\Kerberos
System\Kerberos
System\Kerberos
System\Kerberos
System\Kerberos
System\Kerberos
System\Kerberos
System\Kerberos
System\Kerberos
Network\Lanman Server
Network\Lanman Workstation
System\Troubleshooting and Diagnostics\Windows Memory Leak Dia
Network\Link-Layer Topology Discovery
Network\Link-Layer Topology Discovery
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System
System
System
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
Windows Components\Windows Media Center
Windows Components\Windows Media Center
Windows Components\Location and Sensors\Windows Location Provi
Windows Components\Microsoft Edge
Windows Components\Microsoft Management Console
Windows Components\Microsoft Management Console
Windows Components\Microsoft Management Console\Restricted/Perm
Windows Components\Microsoft Management Console\Restricted/Per
Windows Components\Microsoft Management Console\Restricted/Permit
Windows Components\Windows Mobility Center
Windows Components\Windows Mobility Center
Windows Components\Presentation Settings
Windows Components\Presentation Settings
Windows Components\Maintenance Scheduler
System\Troubleshooting and Diagnostics\Microsoft Support Diagnosti
System\Troubleshooting and Diagnostics\MSI Corrupted File Recover
Windows Components\Windows Installer
Network\DirectAccess Client Experience Settings
Network\Network Connectivity Status Indicator
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon\DC Locator DNS Records
System\Net Logon
System\Net Logon
Network\Network Connections
Network\Network Isolation
Network\Network Provider
Network\Offline Files
Network\Microsoft Peer-to-Peer Networking Services
Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resol
Network\Microsoft Peer-to-Peer Networking Services
Windows Components\Family Safety
Windows Components\Microsoft Passport for Work
Windows Components\Microsoft Passport for Work\PIN Complexity
System\Troubleshooting and Diagnostics\Application Compatibility D
Network\BranchCache
Network\BranchCache
Network\BranchCache
Network\BranchCache
Network\BranchCache
Network\BranchCache
Network\BranchCache
Network\BranchCache
Network\BranchCache
Windows Components\Tablet PC\Tablet PC Pen Training
Windows Components\Tablet PC\Tablet PC Pen Training
System\Troubleshooting and Diagnostics\Windows Boot Performance
System\Troubleshooting and Diagnostics\Windows Standby/Resume
System\Troubleshooting and Diagnostics\Windows System Responsiv
System\Troubleshooting and Diagnostics\Windows Shutdown Perform
System\Troubleshooting and Diagnostics\Windows Performance PerfT
System\Power Management\Notification Settings
System\Power Management\Button Settings
System\Power Management\Hard Disk Settings
System\Power Management\Hard Disk Settings
System\Power Management
System\Power Management\Sleep Settings
System\Power Management\Video and Display Settings
System
Windows Components\Windows PowerShell
Windows Components\File Explorer\Previous Versions
Printers
Printers
Printers
Printers
Control Panel\Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Control Panel\Programs
Network\QoS Packet Scheduler\DSCP value of conforming packets
Network\QoS Packet Scheduler\DSCP value of non-conforming packe
Network\QoS Packet Scheduler
Network\QoS Packet Scheduler\Layer-2 priority value
Windows Components\Windows Reliability Analysis
System\Troubleshooting and Diagnostics\Windows Resource Exhausti
System\Recovery
System
System
System
System\Remote Assistance
System\Removable Storage Access
System\Remote Procedure Call
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Troubleshooting and Diagnostics\Scripted Diagnostics
System\Troubleshooting and Diagnostics\Scheduled Maintenance
Windows Components\Search
String Not Found\OCR
String Not Found\OCR
Windows Components\Security Center
Windows Components\Location and Sensors
System\Server Manager
System
System
Windows Components\Sync your settings
System
System
Shared Folders
Shared Folders
Windows Components\Network Sharing
Windows Components\HomeGroup
System
System
System
System
Windows Components\Desktop Gadgets
Windows Components\OneDrive
Windows Components\Smart Card
Network\SNMP
Network\SNMP
Network\SNMP
Windows Components\Sound Recorder
Windows Components\Sound Recorder
System\File Classification Infrastructure
System\File Classification Infrastructure
System\Access-Denied Assistance
System\Access-Denied Assistance
Start Menu and Taskbar
System\System Restore
System\System Restore
Windows Components\Tablet PC\Input Panel
Windows Components\Tablet PC\Accessories
Windows Components\Tablet PC\Cursors
Windows Components\Tablet PC\Cursors
Windows Components\Tablet PC\Hardware Buttons
Windows Components\Tablet PC\Pen Flicks Learning
Windows Components\Tablet PC\Pen Flicks Learning
Windows Components\Tablet PC\Pen UX Behaviors
Windows Components\Tablet PC\Pen UX Behaviors
Windows Components\Task Scheduler
Network\TCPIP Settings\IPv6 Transition Technologies
Network\TCPIP Settings\Parameters
Network\TCPIP Settings\Parameters
Windows Components\Remote Desktop Services\Remote Desktop Sess
Windows Components\Remote Desktop Services\Remote Desktop Ses
Windows Components\Remote Desktop Services\Remote Desktop Con
Windows Components\Remote Desktop Services\RD Gateway
Windows Components\Remote Desktop Services\RD Licensing
Windows Components\Remote Desktop Services\RD Licensing
Windows Components\Remote Desktop Services\RemoteApp and Des
Windows Components\Text Input
Windows Components\Tablet PC\Touch Input
System\Trusted Platform Module Services
Windows Components\Backup\Client
System\User Profiles
Windows Components\BitLocker Drive Encryption
Windows Components\BitLocker Drive Encryption\Operating System
Windows Components\BitLocker Drive Encryption\Fixed Data Drives
Windows Components\BitLocker Drive Encryption\Removable Data D
System\Windows Time Service
System\Windows Time Service\Time Providers
Network\Windows Connection Manager
System\Troubleshooting and Diagnostics
System\Troubleshooting and Diagnostics
Windows Components\Windows Calendar
Windows Components\Windows Calendar
Windows Components\Add features to Windows 10
Windows Components\Add features to Windows 10
Windows Components\Backup\Server
Windows Components\Windows Color System
Windows Components\Windows Color System
Network\Windows Connect Now
Windows Components\Windows Defender\Exclusions
Windows Components\Windows Defender
Windows Components\Windows Defender\Network Inspection Syste
Windows Components\Windows Defender\Network Inspection System
Windows Components\Windows Defender\Quarantine
Windows Components\Windows Defender\Quarantine
Windows Components\Windows Defender\Real-time Protection
Windows Components\Windows Defender\Remediation
Windows Components\Windows Defender\Reporting
Windows Components\Windows Defender\Scan
Windows Components\Windows Defender\Signature Updates
Windows Components\Windows Defender\MAPS
Windows Components\Windows Defender\Threats
Windows Components\Windows Defender\Threats
Windows Components\Windows Defender\Client Interface
Windows Components\File Explorer\Common Open File Dialog
System\Windows File Protection
Network\Network Connections\Windows Firewall
Network\Network Connections\Windows Firewall\Domain Profile
Network\Network Connections\Windows Firewall\Standard Profile
Windows Components\Windows Mail
Windows Components\Windows Media Digital Rights Management
Windows Components\Windows Media Player
Windows Components\Windows Media Player\Playback
Windows Components\Windows Media Player\Playback
Windows Components\Windows Media Player\User Interface
Windows Components\Windows Media Player\Networking
Windows Components\Windows Messenger
Windows Components\Windows Remote Management (WinRM)\WinRM
Windows Components\Windows Remote Shell
System
Windows Components\Windows Update
Windows Components\Shutdown Options
Windows Components\Shutdown Options
System\Shutdown
Windows Components\Windows Logon Options
System
System\Shutdown Options
Network\WLAN Service\WLAN Media Cost
Windows Components\Instant Search
Windows Components\Work Folders
Windows Components\Work Folders
Windows Components\Device Registration
Start Menu and Taskbar\Notifications
Network\WWAN Service\WWAN Media Cost
Network\WWAN Service\WWAN Media Cost
Registry Information Supported On
HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInsta At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInst At least Windows Vista
HKCU\Software\Microsoft\Windows\CurrentVersion\PoWindows Server 2003 Windows XP and
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2003 Windows XP and
HKCU\Software\Microsoft\Windows\CurrentVersion\ Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows\PreviewBAt least Windows 10 Server Windows
HKLM\Software\Policies\Microsoft\Windows\AppCo At least Windows Server 2003
HKLM\Software\Policies\Microsoft\Windows\AppCom At least Windows Server 2003
HKLM\Software\Policies\Microsoft\Windows\AppCom At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\AppCom At least Windows Server 2003
HKCU\Software\Policies\Microsoft\Windows\AppCom At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\AppCom At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Appx!Al At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Appx!Al At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Appx!A At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Appx!R At least Windows 8.1 Update 2
HKLM\Software\Policies\Microsoft\Windows\Appx!R At least Windows 8.1 Update 2
HKLM\Software\Policies\Microsoft\Windows\Curren At least Windows 10 Server Windows
HKLM\Software\Microsoft\Windows\CurrentVersion\Pol
At least Windows Server 2012 Window
HKCU\Software\Microsoft\Windows\CurrentVersion\Pol
At least Windows Server 2012 Window
HKLM\Software\Microsoft\Windows\CurrentVersion\PoAt least Windows Server 2012 Window
HKCU\Software\Microsoft\Windows\CurrentVersion\PoAt least Windows Server 2012 Window
HKLM\Software\Microsoft\Windows\CurrentVersion\PAt least Windows Server 2012 R2 Win
HKLM\Software\Microsoft\Windows\CurrentVersion\ At least Windows 10 Server Windows
HKCU\Software\Microsoft\Windows\CurrentVersion\PAt least Windows XP Professional with
HKCU\Software\Microsoft\Windows\CurrentVersion\PoAt least Windows XP Professional with
HKLM\Software\Microsoft\Windows\CurrentVersion\PAt least Windows Vista
HKCU\Software\Microsoft\Windows\CurrentVersion\PAt least Windows Vista
HKLM\Software\Microsoft\Windows\CurrentVersion\PAt least Windows 2000
HKCU\Software\Microsoft\Windows\CurrentVersion\PAt least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Explore At least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\Explore At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows NT\CurreAt least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Biometrics!EnabAt least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Biometrics\Crede At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Biometrics\CredAt least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Biometrics\CredAt least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\BITS!Job Windows XP or Windows Server 2003 or
HKLM\Software\Policies\Microsoft\Windows\BITS!M At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\BITS!E Windows XP SP2 or Windows Server 200
HKLM\Software\Policies\Microsoft\Windows\BITS\Th Windows 7 or computers with BITS 3.5
HKLM\Software\Policies\Microsoft\Windows\BITS\Th Windows 7 or computers with BITS 3.5
HKLM\Software\Policies\Microsoft\Windows\BITS!En At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\BITS!Ma At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\BITS!Dis At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\BITS!Di At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\BITS\Tra Windows 8 or Windows Server 2012 or
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\BITS!Di Windows 7 or computers with BITS 3.5
HKLM\Software\Policies\Microsoft\SQMClient!Corp At least Windows Vista
HKLM\Software\Policies\Microsoft\SQMClient\Windo At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Cryptography\C At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Cryptography\C At least Windows Server Technical Pr
HKCU\Software\Policies\Microsoft\Windows\App M At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\App M At least Windows 2000
HKCU\Software\Policies\Microsoft\Conferencing!No at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!NoA at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!NoS at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!N at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!NoT at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!NoF at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!NoR at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!M at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!Persat least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!NoC at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!N at least Windows NetMeeting v3.0
HKLM\Software\Policies\Microsoft\Conferencing!No at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!Use at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!NoDat least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!NoRe at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!Maxat least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!Int at least Windows NetMeeting v3.0
HKCU\Software\Policies\Microsoft\Conferencing!Call at least Windows NetMeeting v3.0
HKCU\Software\Microsoft\Windows\CurrentVersion\Po At least Windows 2000
HKCU\Software\Microsoft\Windows\CurrentVersion\Po At least Windows Server 2003 operati
HKCU\Software\Microsoft\Windows\CurrentVersion\Pol At least Windows 2000
HKCU\Software\Microsoft\Windows\CurrentVersion\ At least Windows 2000
HKCU\Software\Policies\Microsoft\Windows\Control At least Windows 2000 Service Pack 1
HKCU\Software\Policies\Microsoft\Windows\Contro At least Windows 2000 Service Pack 1
HKCU\Software\Policies\Microsoft\Windows\Person At least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\Persona At least Windows Server 2008 R2 or W
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2008 Windows Server
HKCU\Software\Microsoft\Windows\CurrentVersion\PAt least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Windows\Personal At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Persona At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Persona At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\Persona At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\Personal Windows Server 2012 R2 Windows 8.1
HKLM\Software\Policies\Microsoft\Windows\Personal At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\Person At least Windows Server 2012 Window
HKLM\Software\Microsoft\Windows\CurrentVersion\Po At least Windows Vista
HKLM\Software\Microsoft\Windows\CurrentVersion\ At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\System At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\System!D At least Windows 10 Server Windows
HKLM\Software\Policies\Microsoft\Windows\Credenti At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Creden At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Credenti At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Credent At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Credent At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\CredUI! At least Windows Server 2012 Windows
HKCU\Software\Policies\Microsoft\Windows\CredUI! At least Windows Server 2012 Windows
HKLM\Software\Policies\Microsoft\Windows\DataColl At least Windows 10 Server Windows
HKLM\Software\Policies\Microsoft\Windows\Preview At least Windows 10 Server Windows
HKLM\Software\Policies\Microsoft\Windows NT\DCO At least Windows XP Professional with
HKLM\Software\Policies\Microsoft\Windows NT\DCO At least Windows XP Professional with
HKLM\SOFTWARE\Policies\Microsoft\Windows\Deli At least Windows 10 or Windows 10 RT
HKLM\SOFTWARE\Policies\Microsoft\Windows\DeliveAt least Windows 10 or Windows 10 RT
HKLM\SOFTWARE\Policies\Microsoft\Windows\Deliv At least Windows 10 or Windows 10 RT
HKLM\SOFTWARE\Policies\Microsoft\Windows\Deliv At least Windows 10 or Windows 10 RT
HKLM\SOFTWARE\Policies\Microsoft\Windows\Deli At least Windows 10 or Windows 10 RT
HKCU\Software\Policies\Microsoft\Windows\DirectoryAt least Windows 2000
HKCU\Software\Policies\Microsoft\Windows\DirectoryWindows 2000 only
HKCU\Software\Policies\Microsoft\Windows\Director At least Windows 2000
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2003 and Windows XP
HKCU\Software\Microsoft\Windows\CurrentVersio At least Windows Server 2003 operati
HKCU\Software\Microsoft\Windows\CurrentVersio Windows Server 2003 Windows XP and
HKCU\Software\Microsoft\Windows\CurrentVersion\PAt least Windows 2000 Service Pack 3
HKCU\Software\Microsoft\Windows\CurrentVersio At least Windows Server 2003 operati
HKLM\System\CurrentControlSet\Policies\Microsoft\ At least Windows Server 2012 Window
HKLM\System\CurrentControlSet\Policies\Microsoft\ At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceAt least Windows 10 Server Windows
HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceAt least Windows 10 Server Windows
HKLM\Software\Policies\Microsoft\Windows\DeviceInsAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\DeviceInsAt least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\DeviceInAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\DeviceI Windows Server 2008 Windows 7 and
HKLM\Software\Policies\Microsoft\Windows\DeviceI At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\DeviceInsAt least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\DriverInsAt least Windows Vista
HKCU\Software\Policies\Microsoft\Windows NT\DriveWindows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows\DeviceRedAt least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\DeviceReAt least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\DeviceI At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\DeviceI At least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\Driver Windows Server 2008 Windows Server
HKCU\Software\Policies\Microsoft\Windows\Driver Windows Server 2008 Windows Server
HKLM\Software\Policies\Microsoft\Windows\Driver Windows Server 2008 Windows Server
HKLM\Software\Policies\Microsoft\Windows\DriverS At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\DriverSeAt least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\Devi At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\System\DFSClie At least Windows Server 2003 operati
HKCU\SOFTWARE\Policies\Microsoft\Windows\DigitalAt least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\DigitalAt least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\ Windows Server 2008 with Desk
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\ Windows Server 2008 with Desk
HKLM\Software\Policies\Microsoft\Windows\NvCac At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\NvCac At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\NvCach At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\NvCach At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows NT\Disk At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows NT\Dis At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows NT\Dis At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Syste Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows NT\DN Windows XP Professional only
HKLM\Software\Policies\Microsoft\Windows NT\DNS Windows XP Professional only
HKLM\Software\Policies\Microsoft\System\DNSClien At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows NT\DNS At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows NT\DNSCAt least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows NT\DNSClWindows XP Professional only
HKLM\Software\Policies\Microsoft\Windows NT\DNSClAt least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows NT\DNS At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows NT\DN At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows NT\DNS At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows NT\DNSCAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows NT\DNS At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows NT\DNS At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows NT\DNSCAt least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows NT\DN At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows NT\DNSCAt least Windows Server 2012 Window
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!D At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!D At least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!D Windows Server 2008 Windows 7 and
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!D Windows Server 2008 Windows 7 and
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!D At least Windows Server 2012 Window
HKCU\software\policies\microsoft\ime\shared!misco At least Windows Server 2012 Window
HKCU\software\policies\microsoft\ime\imejp!SaveAuAt least Windows Server 2012 Window
HKCU\software\policies\microsoft\ime\imejp!UseHis At least Windows Server 2012 Window
HKCU\software\policies\microsoft\ime\shared!Open At least Windows Server 2012 Window
HKCU\software\policies\microsoft\ime\shared!Searc At least Windows Server 2012 Window
HKCU\software\policies\microsoft\ime\shared!UserDiAt least Windows Server 2012 Window
HKCU\software\policies\microsoft\ime\imejp!CodeA At least Windows Server 2012 Window
HKCU\software\policies\microsoft\ime\imejp!ShowO At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\InputMethod\Sett At least Windows Server 2012 R2 Win
HKLM\System\CurrentControlSet\Policies\EarlyLauncAt least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Windows\EdgeUI! At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Windows\EdgeUI! At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Windows\EdgeUI! At least Windows Server 2012 R2 Win
HKCU\Software\Policies\Microsoft\Windows\EdgeUI! At least Windows Server 2012 R2 Win
HKCU\Software\Policies\Microsoft\Windows\Edge At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\EdgeUI!DAt least Windows Server 2012 R2 Win
HKCU\Software\Policies\Microsoft\Windows\EdgeUI!DAt least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\Enhan At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Enhan At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Enhanc At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\EnhanceAt least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\PCHealth\Error Windows Server 2003 and Windows XP
HKLM\Software\Policies\Microsoft\PCHealth\ErrorR Windows Server 2003 and Windows XP
HKCU\SOFTWARE\Policies\Microsoft\Windows\Window At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\Window At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windo At least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\Windows\Window At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\Window At least Windows Server 2008 R2 or W
HKCU\SOFTWARE\Policies\Microsoft\Windows\Window At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\Window At least Windows Server 2012 Window
HKCU\SOFTWARE\Policies\Microsoft\Windows\Window At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\Window At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\PCHealth\ErrorRe Windows Server 2003 and Windows XP
HKLM\Software\Policies\Microsoft\PCHealth\ErrorRepWindows Server 2003 and Windows XP
HKLM\Software\Policies\Microsoft\PCHealth\ErrorRepo
Windows Server 2003 and Windows XP
HKLM\Software\Policies\Microsoft\PCHealth\ErrorRepWindows Server 2003 and Windows XP
HKCU\Software\Policies\Microsoft\Windows\WindowsAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\WindowsAt least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windo At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\EventL At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\EventLo At least Windows Vista
HKLM\System\CurrentControlSet\Services\EventLog At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\EventLogAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\EventLog\At least Windows Vista
HKLM\System\CurrentControlSet\Services\EventLog At least Windows Vista
HKLM\System\CurrentControlSet\Services\EventLo At least Windows Vista
HKLM\System\CurrentControlSet\Services\EventLo At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\EventLo At least Windows Server Technical Pr
HKLM\Software\Policies\Microsoft\EventViewer!Micr At least Windows XP Professional with
HKLM\Software\Policies\Microsoft\EventViewer!Mi At least Windows XP Professional with
HKLM\Software\Policies\Microsoft\EventViewer!Micr At least Windows XP Professional with
HKCU\Software\Microsoft\Windows\CurrentVersion\Po At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Explore At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Explor At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Explorer At least Windows Server 2008 R2 or W
HKCU\Software\Microsoft\Windows\CurrentVersion\SAt least Windows 10 or Windows 10 RT
HKLM\Software\Policies\Microsoft\Windows\Explorer Unknown
HKLM\Software\Policies\Microsoft\PortableOperati At least Windows Server 2012 Window
HKLM\System\CurrentControlSet\Policies\Microsoft At least Windows Server 2012 Window
HKLM\System\CurrentControlSet\Policies\Microsoft At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\FileHisto At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\ At least Windows Vista
HKCU\Software\Policies\Microsoft\Windows\FileRevo At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\fssA At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\fssProv! At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Filesys At least Windows Vista
HKLM\System\CurrentControlSet\Policies!NtfsDisab At least Windows Server 2008 R2 or W
HKLM\System\CurrentControlSet\Policies!NtfsDisabl At least Windows Server 2008 R2 or W
HKLM\System\CurrentControlSet\Policies!NtfsEncrypAt least Windows Server 2008 R2 or W
HKLM\System\CurrentControlSet\Policies!NtfsDisa At least Windows Server 2008 R2 or W
HKLM\System\CurrentControlSet\Policies!DisableDelAt least Windows Server 2008 R2 or W
HKLM\System\CurrentControlSet\Policies!NtfsEnabl At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Windows\System\ At least Windows Vista
HKCU\Software\Policies\Microsoft\Windows\NetCac At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Windows\NetC At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\System\ At least Windows Vista
HKCU\Software\Policies\Microsoft\Windows\System At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Windows\System At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\ At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Game At least Windows 10 or Windows 10 RT
HKLM\Software\Policies\Microsoft\Windows\Game At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\GameUXAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Game At least Windows Vista
HKCU\Software\Policies\Microsoft\Control Panel\Int At least Windows Vista
HKLM\Software\Policies\Microsoft\Control Panel\In At least Windows Vista
HKLM\Software\Policies\Microsoft\Control Panel\Int At least Windows Vista
HKLM\Software\Policies\Microsoft\Control Panel\Int At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Control Panel\Inte At least Windows Vista
HKLM\Software\Policies\Microsoft\Control Panel\Inte At least Windows Vista
HKCU\Software\Policies\Microsoft\Control Panel\In At least Windows Vista
HKLM\Software\Policies\Microsoft\Control Panel\In At least Windows Vista
HKLM\Software\Policies\Microsoft\Control Panel\Int At least Windows Vista
HKCU\Software\Policies\Microsoft\Control Panel\In At least Windows Vista
HKLM\Software\Policies\Microsoft\MUI\Settings!Pre At least Windows Vista
HKCU\Software\Policies\Microsoft\Control Panel\De At least Windows Vista
HKLM\Software\Policies\Microsoft\MUI\Settings!Mac At least Windows Vista
HKCU\Software\Policies\Microsoft\Control Panel\De At least Windows 2000
HKLM\Software\Policies\Microsoft\Control Panel\In At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\InputPersonalizat At least Windows Server Technical Pr
HKCU\Software\Policies\Microsoft\Control Panel\Int At least Windows 2000
HKCU\SOFTWARE\Policies\Microsoft\InputPersonalizat At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\InputPersonalizat At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\System At least Windows Server 2008
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\MitiAt least Windows 10 Server Windows
HKLM\Software\Policies\Microsoft\Windows\System At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\Syste At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\System! At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\System! At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\System! At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\System At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\System! At least Windows Server 2003
HKLM\Software\Policies\Microsoft\Windows\Group At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Grou At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Grou At least Windows Vista
HKCU\Software\Policies\Microsoft\Windows\System! At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\System At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Windows\Group P Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows\Syste At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Windows\Group PoAt least Windows 2000
HKCU\Software\Policies\Microsoft\Windows\Group PoAt least Windows 2000
HKCU\Software\Policies\Microsoft\Windows\System! At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\System! At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\System At least Windows 2000
HKCU\Software\Policies\Microsoft\Windows\System! At least Windows 2000
HKCU\Software\Policies\Microsoft\Windows\Group P At least Windows 2000
HKCU\Software\Policies\Microsoft\Windows\Group P At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Group P Windows Server 2003 and Windows XP
HKLM\Software\Policies\Microsoft\Windows\Group At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Grou At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{6A712058 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{0DA274B At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{17C6249 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{1612b55c- At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{1b767e9a At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{2EA1A81B At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{35141B6B At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{3BAE7E51 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{3EC4E9D At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{3BFAE46A At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{516FC62 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{5C935941 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{79F92669 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{949FB894 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{BFCBBEB0 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{9AD2BAF At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{A8C42CE At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{B9CCA4D At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{BEE07A6A At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{CAB5455 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{CC5746A9 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{CEFFA6E2 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{CF848D48 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{127537A At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{45B01F1C At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\System! At least Internet Explorer 6 Service Pa
HKCU\Software\Policies\Microsoft\Windows\System! At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\System! At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\System At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Assistance\Client At least Windows Vista
HKCU\Software\Policies\Microsoft\Assistance\Client At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Hotspot At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\InternetManagem At least Windows XP Professional with
HKLM\Software\Policies\Microsoft\InternetManagem At least Windows XP Professional with
HKLM\Software\Policies\Microsoft\SystemCertifica At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Windows NT\Print At least Windows XP Professional with
HKLM\Software\Policies\Microsoft\Windows NT\Print At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Windows NT\Pri At least Windows XP Professional with
HKLM\Software\Policies\Microsoft\Windows NT\Pri At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Driver Windows Server 2008 Windows Server
HKLM\Software\Policies\Microsoft\EventViewer!Micr At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Interne At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Registra At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\PCHealth\ErrorRe At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Windo At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\SearchCompanionAt least Windows Server 2003 operati
HKLM\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2008 Windows Server
HKCU\Software\Policies\Microsoft\Windows\Explor At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Explor At least Windows Server 2012 Window
HKLM\Software\Microsoft\Windows\CurrentVersion\PAt least Windows Server 2003 operati
HKLM\Software\Microsoft\Windows\CurrentVersion\Po At least Windows Server 2003 operati
HKLM\Software\Microsoft\Windows\CurrentVersion\Po At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Messenger\Client! At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Messenger\Client!At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\SQMClient\Windo At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Network At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows NT\IIS!Pre Windows Server 2003 only
HKCU\Software\Policies\Microsoft\Windows\Curren At least Internet Explorer 5.0
HKLM\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 10.0 on Win
HKCU\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 10.0 on Win
HKLM\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 11.0
HKCU\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 11.0
HKLM\Software\Policies\Microsoft\Internet Exp At least Internet Explorer 6.0 in Win
HKCU\Software\Policies\Microsoft\Internet Exp At least Internet Explorer 6.0 in Win
HKLM\Software\Policies\Microsoft\Windows\CurrentVe At least Internet Explorer 6.0 in Wind
HKCU\Software\Policies\Microsoft\Windows\CurrentVe At least Internet Explorer 6.0 in Wind
HKLM\Software\Policies\Microsoft\Internet Explore At least Internet Explorer 8.0
HKCU\Software\Policies\Microsoft\Internet Explore At least Internet Explorer 8.0
HKLM\Software\Policies\Microsoft\Internet Explorer\ At least Internet Explorer 10.0
HKCU\Software\Policies\Microsoft\Internet Explorer\ At least Internet Explorer 10.0
HKLM\SOFTWARE\Policies\Microsoft\Windows\Current At least Internet Explorer 8.0
HKCU\SOFTWARE\Policies\Microsoft\Windows\Current At least Internet Explorer 8.0
HKLM\SOFTWARE\Policies\Microsoft\Windows\Current At least Internet Explorer 8.0
HKCU\SOFTWARE\Policies\Microsoft\Windows\Current At least Internet Explorer 8.0
HKLM\SOFTWARE\Policies\Microsoft\Windows\Current At least Internet Explorer 11.0 on Win
HKCU\SOFTWARE\Policies\Microsoft\Windows\Current At least Internet Explorer 11.0 on Win
HKLM\Software\Policies\Microsoft\Windows\CurrentVAt least Internet Explorer 7.0
HKCU\Software\Policies\Microsoft\Windows\CurrentVe At least Internet Explorer 8.0
HKLM\Software\Policies\Microsoft\Internet Explore At least Internet Explorer 6.0 in Wind
HKCU\Software\Policies\Microsoft\Internet Explore At least Internet Explorer 6.0 in Wind
HKLM\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 6.0 in Wind
HKCU\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 6.0 in Wind
HKLM\Software\Policies\Microsoft\Internet Explorer Only Internet Explorer 6.0 in Windows
HKCU\Software\Policies\Microsoft\Internet Explorer Only Internet Explorer 6.0 in Windows
HKLM\Software\Policies\Microsoft\Internet Explore Only Internet Explorer 6.0 in Windows
HKCU\Software\Policies\Microsoft\Internet Explore Only Internet Explorer 6.0 in Windows
HKLM\Software\Policies\Microsoft\Internet Explore At least Internet Explorer 6.0 in Win
HKCU\Software\Policies\Microsoft\Internet Explore At least Internet Explorer 6.0 in Win
HKLM\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 6.0 in Wind
HKCU\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 6.0 in Wind
HKLM\Software\Policies\Microsoft\Internet Explore At least Internet Explorer 6.0 in Wind
HKCU\Software\Policies\Microsoft\Internet Explore At least Internet Explorer 6.0 in Wind
HKLM\Software\Policies\Microsoft\Internet Explorer\ Only Internet Explorer 6.0 in Windows
HKCU\Software\Policies\Microsoft\Internet Explorer\ Only Internet Explorer 6.0 in Windows
HKLM\Software\Policies\Microsoft\Internet Explorer Only Internet Explorer 6.0 in Windows
HKCU\Software\Policies\Microsoft\Internet Explorer Only Internet Explorer 6.0 in Windows
HKLM\Software\Policies\Microsoft\Windows\Current At least Internet Explorer 6.0 in Wind
HKCU\Software\Policies\Microsoft\Windows\CurrentVAt least Internet Explorer 6.0 in Wind
HKLM\Software\Policies\Microsoft\Windows\CurrentVe At least Internet Explorer 6.0 in Wind
HKCU\Software\Policies\Microsoft\Windows\CurrentVe At least Internet Explorer 6.0 in Wind
HKCU\SOFTWARE\Policies\Microsoft\Windows\Curre At least Internet Explorer 7.0
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrenOnly Internet Explorer 4.0
HKCU\Software\Policies\Microsoft\Internet Explorer\ Only Internet Explorer 5.0 through Int
HKLM\Software\Policies\Microsoft\Internet Explor At least Internet Explorer 11.0
HKCU\Software\Policies\Microsoft\Internet Explor At least Internet Explorer 11.0
HKCU\Software\Policies\Microsoft\Internet Explorer Only Internet Explorer 5.0 and Interne
HKCU\Software\Policies\Microsoft\Internet Explorer\ Only Internet Explorer 5.0 and Interne
HKLM\Software\Policies\Microsoft\Windows\Current At least Internet Explorer 7.0
HKCU\Software\Policies\Microsoft\Windows\CurrentVAt least Internet Explorer 7.0
HKLM\Software\Policies\Microsoft\Windows\CurrentVe At least Internet Explorer 7.0
HKCU\Software\Policies\Microsoft\Windows\CurrentVe At least Internet Explorer 7.0
HKCU\Software\Policies\Microsoft\Internet Connect At least Internet Explorer 7.0. Not su
HKLM\Software\Microsoft\Windows\CurrentVersion\PAt least Internet Explorer 8.0
HKCU\Software\Microsoft\Windows\CurrentVersion\PAt least Internet Explorer 8.0
HKLM\Software\Microsoft\Windows\CurrentVersion\Po At least Internet Explorer 8.0
HKCU\Software\Microsoft\Windows\CurrentVersion\Po At least Internet Explorer 8.0
HKLM\Software\Microsoft\Windows\CurrentVersion\Po At least Internet Explorer 6.0 in Win
HKCU\Software\Microsoft\Windows\CurrentVersion\Po At least Internet Explorer 6.0 in Win
HKLM\Software\Microsoft\Windows\CurrentVersion\Pol At least Internet Explorer 6.0 in Win
HKCU\Software\Microsoft\Windows\CurrentVersion\Pol At least Internet Explorer 6.0 in Win
HKLM\Software\Policies\Microsoft\Internet Explo At least Internet Explorer 6.0 in Win
HKCU\Software\Policies\Microsoft\Internet Explo At least Internet Explorer 6.0 in Win
HKLM\Software\Policies\Microsoft\Internet Expl At least Internet Explorer 6.0 in Win
HKLM\Software\Policies\Microsoft\Windows\CurrentVAt least Internet Explorer 6.0 in Win
HKCU\Software\Policies\Microsoft\Windows\CurrentVAt least Internet Explorer 6.0 in Win
HKLM\Software\Policies\Microsoft\Internet Explor At least Internet Explorer 6.0 in Win
HKCU\Software\Policies\Microsoft\Internet Explor At least Internet Explorer 6.0 in Win
HKCU\Software\Policies\Microsoft\Internet Expl At least Internet Explorer 6.0 in Win
HKCU\Software\Policies\Microsoft\Internet Expl At least Internet Explorer 6.0 in Win
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentV At least Internet Explorer 6.0 in Win
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentV At least Internet Explorer 6.0 in Win
HKLM\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 6.0 in Win
HKCU\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 6.0 in Win
HKLM\Software\Policies\Microsoft\Internet Explorer\ Only Internet Explorer 7.0
HKCU\Software\Policies\Microsoft\Internet Explorer\ Only Internet Explorer 7.0
HKLM\Software\Policies\Microsoft\Internet Explorer! At least Internet Explorer 10.0 on Win
HKCU\Software\Policies\Microsoft\Internet Explorer! At least Internet Explorer 10.0 on Win
HKCU\Software\Policies\Microsoft\Windows\CurrentVOnly Internet Explorer 5.0 and Interne
HKCU\Software\Policies\Microsoft\Internet Explore Only Internet Explorer 6.0
HKLM\Software\Policies\Microsoft\Internet Explorer Only Internet Explorer 7.0 and Interne
HKLM\Software\Policies\Microsoft\Internet Explorer Only Internet Explorer 8.0
HKCU\Software\Policies\Microsoft\Internet Explorer Only Internet Explorer 8.0
HKLM\Software\Policies\Microsoft\Internet Explorer\ Only Internet Explorer 5.0 and Interne
HKLM\Software\Policies\Microsoft\Internet Explore Internet Explorer 7.0 to Internet Explo
HKCU\Software\Policies\Microsoft\Internet Explore Internet Explorer 7.0 to Internet Explo
HKLM\Software\Policies\Microsoft\Internet Explore Internet Explorer 7.0 to Internet Explo
HKCU\Software\Policies\Microsoft\Internet Explore Internet Explorer 7.0 to Internet Explo
HKLM\Software\Policies\Microsoft\Internet Explo At least Internet Explorer 7.0
HKCU\Software\Policies\Microsoft\Internet Explo At least Internet Explorer 7.0
HKLM\Software\Policies\Microsoft\Internet Explorer Only Internet Explorer 5.0 and Interne
HKCU\Software\Microsoft\Outlook Express!BlockEx Only Internet Explorer 6.0
HKCU\Software\Policies\Microsoft\Internet Explorer\CAt least Internet Explorer 5.0
HKCU\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 5.0. Not su
HKCU\Software\Policies\Microsoft\Internet Explorer At least Internet Explorer 5.0. Not su
HKCU\Software\Policies\Microsoft\Internet Explorer\COnly Internet Explorer 5.0 and Interne
HKLM\Software\Policies\Microsoft\Internet Explorer\ Only Internet Explorer 5.0 through Int
HKCU\Software\Policies\Microsoft\Windows\Current At least Internet Explorer 5.0
HKCU\Software\Policies\Microsoft\Internet Explorer\ROnly Internet Explorer 5.0 and Interne
HKLM\Software\Policies\Microsoft\Windows\CurrentVe At least Internet Explorer 5.0
HKLM\Software\Microsoft\Windows\CurrentVersion\ Only Internet Explorer 5.0 and Interne
HKLM\Software\Policies\Microsoft\Internet Explo At least Internet Explorer 7.0. Not su
HKCU\Software\Policies\Microsoft\Internet Explo At least Internet Explorer 7.0. Not su
HKLM\Software\Policies\Microsoft\Windows\CurrentVAt least Internet Explorer 7.0 in Windo
HKCU\Software\Policies\Microsoft\Windows\CurrentVAt least Internet Explorer 7.0 in Windo
HKLM\Software\Policies\Microsoft\Windows\CurrentVOnly Internet Explorer 6.0 in Windows
HKCU\Software\Policies\Microsoft\Windows\CurrentVOnly Internet Explorer 6.0 in Windows
HKLM\Software\Policies\Microsoft\Windows\Current At least Internet Explorer 7.0 in Windo
HKCU\Software\Policies\Microsoft\Windows\Current At least Internet Explorer 7.0 in Windo
HKLM\Software\Policies\Microsoft\Windows\Current At least Internet Explorer 6.0 in Win
HKCU\Software\Policies\Microsoft\Windows\Current At least Internet Explorer 6.0 in Win
HKLM\Software\Policies\Microsoft\Windows\Current Only Internet Explorer 6.0 in Windows
HKCU\Software\Policies\Microsoft\Windows\Current Only Internet Explorer 6.0 in Windows
HKLM\Software\Policies\Microsoft\Windows\CurrentVe
At least Internet Explorer 6.0 in Win
HKCU\Software\Policies\Microsoft\Windows\CurrentVe
HKCU\Software\Policies\Microsoft\Internet Explore Only Internet Explorer 5.0 and Interne
HKCU\Software\Policies\Microsoft\Internet Explore Only Internet Explorer 5.0 and Interne
HKCU\SOFTWARE\Policies\Microsoft\Internet ExploreAt least Internet Explorer 7.0
HKLM\Software\Policies\Microsoft\Internet Expl At least Internet Explorer 10.0
HKCU\Software\Policies\Microsoft\Internet Expl At least Internet Explorer 10.0
HKCU\Software\Policies\Microsoft\IEAK!NoAutomati At least Internet Explorer 7.0
HKCU\Software\Microsoft\Windows\CurrentVersion\Po Only Internet Explorer 5.0 and Interne
HKLM\Software\Policies\Microsoft\Internet Expl At least Internet Explorer 8.0
HKCU\Software\Policies\Microsoft\Internet Expl At least Internet Explorer 8.0
HKLM\Software\Policies\Microsoft\Internet Explor Internet Explorer 8.0 to Internet Explo
HKCU\Software\Policies\Microsoft\Internet Explor Internet Explorer 8.0 to Internet Explo
HKLM\Software\Microsoft\Windows\CurrentVersion\Po At least Internet Explorer 8.0
HKCU\Software\Microsoft\Windows\CurrentVersion\Po At least Internet Explorer 8.0
HKLM\Software\Policies\Microsoft\Windows\AxInstal At least Internet Explorer 8.0
HKCU\Software\Policies\Microsoft\Windows\AxInstal At least Internet Explorer 8.0
HKCU\Software\Policies\Microsoft\Internet Explorer\GP
At least Internet Explorer 8.0
HKLM\Software\Policies\Microsoft\Internet Explorer\GP
HKCU\Software\Policies\Microsoft\Internet Explorer\GP
HKLM\Software\Policies\Microsoft\Internet Explorer\GAt least Internet Explorer 8.0
HKLM\Software\Policies\Microsoft\Internet Explorer\AAt least Internet Explorer 8.0
HKCU\Software\Policies\Microsoft\Internet Explorer\AAt least Internet Explorer 8.0
HKLM\Software\Policies\Microsoft\Internet Explorer\AAt least Internet Explorer 8.0
HKCU\Software\Policies\Microsoft\Internet Explorer\AAt least Internet Explorer 8.0
HKLM\Software\Policies\Microsoft\Internet Explorer Internet Explorer 8.0 to Internet Explo
HKCU\Software\Policies\Microsoft\Internet Explorer Internet Explorer 8.0 to Internet Explo
HKLM\Software\Policies\Microsoft\Internet Explor Internet Explorer 8.0 to Internet Explo
HKCU\Software\Policies\Microsoft\Internet Explor Internet Explorer 8.0 to Internet Explo
HKLM\Software\Microsoft\Internet Explorer\WMITele At least Internet Explorer 8.0
HKCU\Software\Microsoft\Internet Explorer\WMITele At least Internet Explorer 8.0
HKLM\Software\Microsoft\Internet Explorer\WMITel At least Internet Explorer 8.0
HKCU\Software\Microsoft\Internet Explorer\WMITel At least Internet Explorer 8.0
HKLM\Software\Microsoft\Internet Explorer\WMITele At least Internet Explorer 8.0
HKCU\Software\Microsoft\Internet Explorer\WMITele At least Internet Explorer 8.0
HKLM\Software\Microsoft\Internet Explorer\WMITel At least Internet Explorer 8.0
HKCU\Software\Microsoft\Internet Explorer\WMITel At least Internet Explorer 8.0
HKCU\Software\Policies\Microsoft\Windows\Handwri At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Handwri At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\iSCSI!Co At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\iSCSI!NeAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\iSCSI! At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\iSCSI!ResAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\iSCSI!Re At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\iSCSI!R At least Windows Vista
HKLM\Software\Microsoft\Windows\CurrentVersion\PAt least Windows Server 2008 R2 or W
HKLM\Software\Microsoft\Windows\CurrentVersion\ At least Windows Server 2012 Window
HKLM\Software\Microsoft\Windows\CurrentVersion\PAt least Windows Server 2012 Window
HKLM\Software\Microsoft\Windows\CurrentVersion At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Netlogon\Param At least Windows Server 2012 Window
HKLM\System\CurrentControlSet\Control\Lsa\Kerbe At least Windows Server 2003 operati
HKLM\Software\Microsoft\Windows\CurrentVersion\ At least Windows Server 2012 R2 Win
HKLM\Software\Microsoft\Windows\CurrentVersion\PAt least Windows Server Technical Pr
HKLM\Software\Policies\Microsoft\Windows\Lanman At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Lanman At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Lanman At least Windows Server 2012 R2 Win
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{ At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\LLTD!En At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\LLTD!E At least Windows Vista
HKLM\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2003 and versions of
HKLM\Software\Microsoft\Windows\CurrentVersion\ Windows 2000 only
HKLM\Software\Microsoft\Windows\CurrentVersion\Po At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows NT\Curr At least Windows Server 2003 operati
HKLM\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2003 Windows XP and
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows 2000 only
HKLM\Software\Microsoft\Windows\CurrentVersion\PWindows operating systems from Wind
HKLM\Software\Policies\Microsoft\Windows\Syste Windows Server 2008 R2 and Windows
HKLM\Software\Policies\Microsoft\Windows\Syste At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\WindowsMediaCe At least Windows Vista
HKLM\Software\Policies\Microsoft\WindowsMediaCe At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Locati Windows Server 2012 Windows 8 Wind
HKLM\Software\Policies\Microsoft\MicrosoftEdge\Int Only Microsoft Edge 1.0
HKCU\Software\Policies\Microsoft\MicrosoftEdge\Int Only Microsoft Edge 1.0
HKLM\Software\Policies\Microsoft\MicrosoftEdge\M Only Microsoft Edge 1.0
HKCU\Software\Policies\Microsoft\MicrosoftEdge\M Only Microsoft Edge 1.0
HKLM\Software\Policies\Microsoft\MicrosoftEdge\Ma Only Microsoft Edge 1.0
HKCU\Software\Policies\Microsoft\MicrosoftEdge\Ma Only Microsoft Edge 1.0
HKLM\Software\Policies\Microsoft\MicrosoftEdge\M Only Microsoft Edge 1.0
HKCU\Software\Policies\Microsoft\MicrosoftEdge\M Only Microsoft Edge 1.0
HKLM\Software\Policies\Microsoft\MicrosoftEdge\ Only Microsoft Edge 1.0
HKCU\Software\Policies\Microsoft\MicrosoftEdge\S Only Microsoft Edge 1.0
HKLM\Software\Policies\Microsoft\MicrosoftEdge\Phi Only Microsoft Edge 1.0
HKCU\Software\Policies\Microsoft\MicrosoftEdge\Phi Only Microsoft Edge 1.0
HKLM\Software\Policies\Microsoft\MicrosoftEdge\MaiOnly Microsoft Edge 1.0
HKCU\Software\Policies\Microsoft\MicrosoftEdge\MaiOnly Microsoft Edge 1.0
HKLM\Software\Policies\Microsoft\MicrosoftEdge\MaiOnly Microsoft Edge 1.0
HKCU\Software\Policies\Microsoft\MicrosoftEdge\MaiOnly Microsoft Edge 1.0
HKCU\Software\Policies\Microsoft\MMC!RestrictAut At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC!RestrictToPe At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{B708457 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{C96401CF At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{C96401D At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{1AA7F83 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{1F5EEC0 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{3F276EB4 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{C2FE450 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{9EC88934 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{90087284 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{634BDE40 At least Windows Vista
HKCU\Software\Policies\Microsoft\MMC\{394C052 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\FX:{b05566 At least Windows Vista
HKCU\Software\Policies\Microsoft\MMC\{2E19B602 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{6E8E008 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\FX:{6d8880 At least Windows Vista
HKCU\Software\Policies\Microsoft\MMC\{34AB8E82 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{B52C1E5 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{5880CD5C At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{243E20B At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{DAB1A26 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{BD95BA6 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{03f1f940- At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{7AF60DD At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{0F3621F At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{E12BBB5 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{8FC0B734 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{D70A2BE Windows Server 2003 Windows XP and
HKCU\Software\Policies\Microsoft\MMC\{6DC3804 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{0F6B957D At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{0F6B957E At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{88E729D At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{FC715823 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{0E75241 At least Windows Vista
HKCU\Software\Policies\Microsoft\MMC\FX:{a1bc4 At least Windows Vista
HKCU\Software\Policies\Microsoft\MMC\{3060E8C At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{40B6664F At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{40B66650 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{803E14A At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{942A8E4F At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{06993B1 At least Windows Vista
HKCU\Software\Policies\Microsoft\MMC\{2DA6AA7 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8A At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AF At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{c40d66a0- At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{d524927d- At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{40B66660 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{40B66661 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{fe883157- At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{7E45546F At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{1BC972D At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{EBC53A3 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{D967F82 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{E355E538 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{1C5DACF At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{de751566- At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{53D6AB1 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{A994E107 At least Windows Server 2003
HKCU\Software\Policies\Microsoft\MMC\{C9BC92D At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{74246bfc- At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{677A2D9 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{43668E21 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{8EAD3A1 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{975797F At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\FX:{D2779 At least Windows Vista
HKCU\Software\Policies\Microsoft\MMC\{753EDB4 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{FF5903A8 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\FX:{89cc9 At least Windows Vista
HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0 Windows Server 2003 only
HKCU\Software\Policies\Microsoft\MMC\{A841B6C At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{95AD72F At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{57C596D At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{5D6179C At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\FX:{a1bc4 At least Windows Vista
HKCU\Software\Policies\Microsoft\MMC\{18BA713 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\FX:{6630f2 At least Windows Vista
HKCU\Software\Policies\Microsoft\MMC\{7478EF6 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{FD57D29 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{3D5D035 At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\MMC\{1AA7F83 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{3CB6973 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{011BE22D At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\FX:{18ea3f At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{45ac8c63- At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{E26D02A At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{B91B600 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\FX:{7d383 At least Windows Vista
HKCU\Software\Policies\Microsoft\MMC\{23DC5869 At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\{9FE24B92 At least Windows Server 2008
HKCU\Software\Policies\Microsoft\MMC\{C11D2F3B At least Windows Server 2008
HKCU\Software\Policies\Microsoft\MMC\FX:{317cdc At least Windows Server 2003 R2
HKCU\Software\Policies\Microsoft\MMC\FX:{317cdc At least Windows Server 2003 R2
HKCU\Software\Policies\Microsoft\MMC\{dbfca500- At least Windows 2000
HKCU\Software\Policies\Microsoft\MMC\FX:{813C1 At least Windows Server 2003 R2
HKCU\Software\Policies\Microsoft\MMC\FX:{f9f63d At least Windows Server 2003 R2
HKCU\Software\Policies\Microsoft\MMC\FX:{671ee At least Windows Server 2003 R2
HKCU\Software\Policies\Microsoft\MMC\FX:{f78fba At least Windows Server 2003 R2
HKCU\Software\Policies\Microsoft\MMC\FX:{f8abd4 At least Windows Server 2003 R2
HKCU\Software\Policies\Microsoft\MMC\FX:{f8abd4 At least Windows Server 2003 R2
HKLM\Software\Policies\Microsoft\Windows\Task Sc At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Task S At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Task S At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\Script At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Install At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Install At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Installe At least Windows 2000
HKCU\Software\Policies\Microsoft\Windows\Installer At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Installer At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Installe Windows Installer v4.0
HKLM\Software\Policies\Microsoft\Windows\Installer Windows Installer v3.0
HKLM\Software\Policies\Microsoft\Windows\Install Windows Installer v4.0
HKLM\Software\Policies\Microsoft\Windows\Installer Windows Installer v3.0
HKLM\Software\Policies\Microsoft\Windows\Installe At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Installer!Microsoft Windows XP or Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Install Windows Installer v3.0
HKCU\Software\Policies\Microsoft\Windows\Installe At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Install Unknown
HKLM\Software\Policies\Microsoft\Windows\Install Unknown
HKLM\SOFTWARE\Policies\Microsoft\Windows\NetworAt least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\NetwoAt least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\Net At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Network At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\NetworkC At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\NetworkC At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Netlogon\Param At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Netlogon\Paramet At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Netlogon\Parame At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Netlogon\Paramet At least Windows Server 2003
HKLM\Software\Policies\Microsoft\Netlogon\Parame At least Windows Server 2003
HKLM\Software\Policies\Microsoft\Netlogon\Paramet At least Windows Server 2003
HKLM\Software\Policies\Microsoft\Netlogon\Parame At least Windows Server 2003
HKLM\Software\Policies\Microsoft\Netlogon\Paramet At least Windows Server 2012 R2 or W
HKLM\Software\Policies\Microsoft\Netlogon\Paramet At least Windows Vista
HKLM\Software\Policies\Microsoft\Netlogon\Paramet At least Windows Vista
HKLM\Software\Policies\Microsoft\Netlogon\Parame At least Windows Vista
HKLM\Software\Policies\Microsoft\Netlogon\Paramet At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Netlogon\Param At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Netlogon\Parame At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Windows\Netw Microsoft Windows Server 2003 Windo
HKCU\Software\Policies\Microsoft\Windows\Networ Microsoft Windows Server 2003 Windo
HKLM\Software\Policies\Microsoft\Windows\Networ At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Windows\Networ Windows Server 2003 Windows XP and
HKCU\Software\Policies\Microsoft\Windows\Networ At least Windows 2000 Service Pack 1
HKCU\Software\Policies\Microsoft\Windows\Network At least Windows 2000 Service Pack 1
HKCU\Software\Policies\Microsoft\Windows\Networ Windows Server 2003 and Windows XP
HKCU\Software\Policies\Microsoft\Windows\Networ Microsoft Windows XP Professional wi
HKLM\Software\Policies\Microsoft\Windows\Network Windows Server 2003 and Windows XP
HKCU\Software\Policies\Microsoft\Windows\Netwo Microsoft Windows Server 2003 Windo
HKCU\Software\Policies\Microsoft\Windows\Netwo Windows Server 2003 Windows XP and
HKCU\Software\Policies\Microsoft\Windows\Netwo At least Windows 2000 Service Pack 1
HKLM\Software\Policies\Microsoft\Windows\Networ Microsoft Windows Server 2003 Windo
HKCU\Software\Policies\Microsoft\Windows\Network Microsoft Windows Server 2003 Windo
HKLM\Software\Policies\Microsoft\Windows\Networ At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Networ At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\NetworAt least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\NetwoAt least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\Network At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Network At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\NetCac Windows Server 2003 Windows XP and
HKCU\Software\Policies\Microsoft\Windows\NetCach At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\NetCach At least Windows 2000
HKCU\Software\Policies\Microsoft\Windows\NetCach Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows\NetCach Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows\NetCac At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Windows\NetCac Windows Server 2003 Windows XP and
HKCU\Software\Policies\Microsoft\Windows\NetCach At least Windows 2000
HKCU\Software\Policies\Microsoft\Windows\NetCach At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\NetCach At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\NetCa Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows\NetCac Windows XP Professional only
HKLM\Software\Policies\Microsoft\Windows\NetCac At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\NetCa At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\NetCac At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\NetCach At least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\NetCach At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\NetCach At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\NetCac At least Windows Server 2012 Window
HKLM\Software\policies\Microsoft\Peernet!Disabled At least Windows XP Professional with
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6 At least Windows XP Professional with
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv At least Windows XP Professional with
HKLM\Software\policies\Microsoft\Peernet!Ignore At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\PassportForWor At least Windows 10 Server or Window
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ At least Windows 10 Server or Window
HKLM\SOFTWARE\Policies\Microsoft\PassportForWo At least Windows 10 Server or Window
HKCU\SOFTWARE\Policies\Microsoft\PassportForWo At least Windows 10 Server or Window
HKLM\SOFTWARE\Policies\Microsoft\PassportForWo At least Windows 10 Server or Window
HKCU\SOFTWARE\Policies\Microsoft\PassportForWo At least Windows 10 Server or Window
HKCU\SOFTWARE\Policies\Microsoft\PassportForWor At least Windows 10 Server or Window
HKLM\SOFTWARE\Policies\Microsoft\PassportForWorkAt least Windows 10 Server or Window
HKCU\SOFTWARE\Policies\Microsoft\PassportForWorkAt least Windows 10 Server or Window
HKLM\Software\Policies\Microsoft\Windows\AppCom At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\PeerDist\Servic At least Windows 7 or Windows Server
HKLM\SOFTWARE\Policies\Microsoft\PeerDist\CacheM At least Windows 7 or Windows Server
HKLM\SOFTWARE\Policies\Microsoft\PeerDist\Hoste At least Windows 7 or Windows Server
HKLM\SOFTWARE\Policies\Microsoft\PeerDist\Coope At least Windows 7 or Windows Server
HKLM\Software\Policies\Microsoft\Windows\NetCac At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\PeerDist\Hoste At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\PeerDist\ServiceAt least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\PeerDist\HostedAt least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\PeerDist\Retrie At least Windows Server 2012 Window
HKCU\SOFTWARE\Policies\Microsoft\PenTraining!Dis Windows Vista only
HKLM\SOFTWARE\Policies\Microsoft\PenTraining!Dis Windows Vista only
HKLM\Software\Policies\Microsoft\Power\PowerSe At least Windows Vista
HKLM\Software\Policies\Microsoft\Power\PowerSet At least Windows Vista
HKLM\Software\Policies\Microsoft\Power\PowerSe Windows Vista only
HKLM\Software\Policies\Microsoft\Power\PowerSe Windows Vista only
HKLM\Software\Policies\Microsoft\Power\PowerSett At least Windows Vista
HKLM\Software\Policies\Microsoft\Power\PowerSett At least Windows Vista
HKCU\Software\Policies\Microsoft\Windows\Syste Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows NT!Don At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Power\PowerSet At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Power\PowerSe At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\PowerShe At least Microsoft Windows 7 or Wind
HKCU\Software\Policies\Microsoft\Windows\PowerShe At least Microsoft Windows 7 or Wind
HKLM\Software\Policies\Microsoft\Windows\PowerS At least Microsoft Windows 7 or Wind
HKCU\Software\Policies\Microsoft\Windows\PowerS At least Microsoft Windows 7 or Wind
HKLM\Software\Policies\Microsoft\Windows\PowerShe At least Microsoft Windows 7 or Wind
HKCU\Software\Policies\Microsoft\Windows\PowerShe At least Microsoft Windows 7 or Wind
HKLM\Software\Policies\Microsoft\Windows\PowerShAt least Microsoft Windows 7 or Wind
HKCU\Software\Policies\Microsoft\Windows\PowerSh At least Microsoft Windows 7 or Wind
HKLM\Software\Policies\Microsoft\Windows\PowerS At least Microsoft Windows 7 or Wind
HKCU\Software\Policies\Microsoft\Windows\PowerS At least Microsoft Windows 7 or Wind
HKCU\Software\Policies\Microsoft\PreviousVersions Supported Windows Vista through Win
HKLM\Software\Policies\Microsoft\PreviousVersions Supported Windows Vista through Win
HKCU\Software\Policies\Microsoft\PreviousVersions! Supported Windows Vista through Win
HKCU\Software\Policies\Microsoft\PreviousVersions! Supported Windows Vista through Win
HKLM\Software\Policies\Microsoft\PreviousVersions! Supported Windows Vista through Win
HKCU\Software\Policies\Microsoft\PreviousVersion At least Windows Vista
HKLM\Software\Policies\Microsoft\PreviousVersion At least Windows Vista
HKCU\Software\Policies\Microsoft\PreviousVersions At least Windows Vista
HKLM\Software\Policies\Microsoft\PreviousVersions At least Windows Vista
HKCU\Software\Policies\Microsoft\PreviousVersions Supported Windows Vista through Win
HKLM\Software\Policies\Microsoft\Windows NT\Print Windows 2000 only
HKLM\Software\Policies\Microsoft\Windows NT\PrinteAt least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows NT\Print Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows NT\Prin At least Windows Vista
HKCU\Software\Policies\Microsoft\Windows NT\Prin At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows NT\Print At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Windows NT\Print Windows Server 2003 Windows XP and
HKCU\Software\Policies\Microsoft\Windows NT\Prin Windows Server 2008 and Windows Vi
HKCU\Software\Policies\Microsoft\Windows NT\Print Windows Server 2008 and Windows Vi
HKLM\Software\Policies\Microsoft\Windows NT\Print At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows NT\PrinteAt least Windows 2000
HKLM\Software\Policies\Microsoft\Windows NT\Print At least Windows 2000
HKCU\Software\Policies\Microsoft\Windows NT\Print Supported Windows XP SP1 through W
HKLM\Software\Policies\Microsoft\Windows NT\Print At least Windows Vista
HKCU\Software\Policies\Microsoft\Windows NT\Print At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows NT\PrinteAt least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows NT\Print At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows NT\Pri At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows NT\Pr At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows NT\Prin At least Windows Server 2003
HKLM\Software\Policies\Microsoft\Windows NT\Prin At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows NT\Print At least Windows Server 2003 operati
HKCU\Software\Microsoft\Windows\CurrentVersion\ At least Windows Vista
HKCU\Software\Microsoft\Windows\CurrentVersion\ Windows Vista only
HKLM\Software\Policies\Microsoft\Windows\Psched\ At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Psched At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Psched!NAt least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Psched! At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Psched\UAt least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Psched\UAt least Windows Server 2003 operati
HKLM\SOFTWARE\Policies\Microsoft\Windows\ReliabiAt least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\WinREWindows Server 2008 R2 and Windows
HKLM\Software\Policies\Microsoft\Windows NT\Relia At least Windows Server 2003
HKLM\Software\Policies\Microsoft\PCHealth\ErrorRe Windows Server 2003 only
HKLM\Software\Policies\Microsoft\Windows NT\Relia Windows Server 2003 only
HKLM\Software\Policies\Microsoft\Windows NT\Reli At least Windows Server 2003 operati
HKLM\Software\policies\Microsoft\Windows NT\Term At least Windows Vista
HKLM\Software\policies\Microsoft\Windows NT\TermiAt least Windows Server 2003 operati
HKLM\Software\policies\Microsoft\Windows NT\TermiAt least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Windows\Remova At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Remov At least Windows Vista
HKCU\Software\Policies\Microsoft\Windows\Remov At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Remov At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Remova At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Remova At least Windows Vista
HKCU\Software\Policies\Microsoft\Windows\Remo At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Remo At least Windows Vista
HKCU\Software\Policies\Microsoft\Windows\Remo At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Remo At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows NT\Rpc! At least Windows XP Professional with
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!EAt least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!I At least Windows Server 2003
HKLM\Software\Policies\Microsoft\Windows NT\Rp At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows NT\Rpc! At least Windows XP Professional with
HKLM\Software\Policies\Microsoft\Windows NT\Rpc! At least Windows Server 2003 operati
HKLM\Software\Microsoft\Windows\CurrentVersion\ At least Windows 2000
HKLM\Software\Microsoft\Windows\CurrentVersion\Po At least Windows Server 2008 R2 or W
HKCU\Software\Microsoft\Windows\CurrentVersion\Po At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\ScripteAt least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\Sched At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\Wind Any version of Microsoft Windows with
HKCU\SOFTWARE\Policies\Microsoft\Windows\Wind Any version of Microsoft Windows with
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windo Microsoft Windows Vista or any versio
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windo Any version of Microsoft Windows with
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windo Microsoft Windows XP Windows Server
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windo Any version of Microsoft Windows with
HKLM\SOFTWARE\Policies\Microsoft\Windows\Window Microsoft Windows Vista or any versio
HKLM\SOFTWARE\Policies\Microsoft\Windows\Wind Microsoft Windows 8 or later
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windo Microsoft Windows 8.1 or later
HKLM\SOFTWARE\Policies\Microsoft\Windows\Wind Microsoft Windows 8.1 or later
HKLM\SOFTWARE\Policies\Microsoft\Windows\Wind Microsoft Windows 8.1. Not supported
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windo Microsoft Windows 8.1. Not supported
HKLM\SOFTWARE\Policies\Microsoft\Windows\Wind Microsoft Windows 8.1. Not supported
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windo Any version of Microsoft Windows wit
HKLM\SOFTWARE\Policies\Microsoft\Windows\Window Microsoft Windows XP or Windows Serv
HKLM\SOFTWARE\Policies\Microsoft\Windows\Window Microsoft Windows Vista or later
HKLM\SOFTWARE\Policies\Microsoft\Windows\Window Any version of Microsoft Windows with
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windo Microsoft Windows XP or Windows Serv
HKLM\SOFTWARE\Policies\Microsoft\Windows\Window Microsoft Windows Vista or any versio
HKLM\SOFTWARE\Policies\Microsoft\Windows\Window Microsoft Windows XP or Windows Serv
HKLM\SOFTWARE\Policies\Microsoft\Windows\Wind Microsoft Windows XP Windows Server
HKLM\SOFTWARE\Policies\Microsoft\Windows\Wind Microsoft Windows XP Windows Server
HKLM\SOFTWARE\Policies\Microsoft\Windows\Window Microsoft Windows XP Windows Server
HKCU\SOFTWARE\Policies\Microsoft\Windows\Window Any version of Microsoft Windows with
HKCU\SOFTWARE\Policies\Microsoft\Windows\Explor Microsoft Windows 8 or later
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windo At least Windows Server Technical Pr
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windo At least Windows Server Technical Pr
HKLM\Software\Policies\Microsoft\Windows NT\Secu At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Windows\Locatio At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Locatio At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Serve At least Windows Server 2008
HKLM\Software\Policies\Microsoft\Windows\Server\ At least Windows Server 2008
HKLM\Software\Policies\Microsoft\Windows\Server\ Windows Server 2008 and Windows Ser
HKLM\Software\Policies\Microsoft\Windows NT\Cur At least Windows Server 2003
HKLM\Software\Policies\Microsoft\Windows\Setting At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\SettingS At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Settin At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\Settin At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Setting At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows NT\Setu At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows NT\Setu At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\TabletP At least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\TabletP At least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows NT\Shar At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Windows NT\Shar At least Windows Server 2003 operati
HKCU\Software\Microsoft\Windows\CurrentVersion\PoAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\HomeG At least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\System At least Windows 2000
HKCU\Software\Microsoft\Windows\CurrentVersion\PoAt least Windows 2000
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows Vista only
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2008 Windows 7 and
HKLM\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2008 Windows 7 and
HKCU\Software\Microsoft\Windows\CurrentVersion\ Windows Server 2008 Windows 7 and
HKLM\Software\Microsoft\Windows\CurrentVersion\ Windows Server 2008 Windows 7 and
HKLM\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2008 Windows 7 and
HKLM\Software\Policies\Microsoft\Windows\OneDri At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartC At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCa At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertPr At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertPr At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertPro At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCa At least Windows Vista Service Pack 1
HKLM\SOFTWARE\Policies\Microsoft\Windows\Smart At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\ScPnP At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\ScPnP!At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows\Smart At least Windows Server 2008 R2 or W
HKLM\Software\Policies\SNMP\Parameters\ValidCom At least Windows Server 2003 operati
HKLM\Software\Policies\SNMP\Parameters\Permitte At least Windows Server 2003 operati
HKLM\Software\Policies\SNMP\Parameters\TrapConfigAt least Windows Server 2003 operati
HKCU\SOFTWARE\Policies\Microsoft\SoundRecorder At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\SoundRecorder At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\FCI!E At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\FCI!CentAt least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\ADR\ At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\ExplorAt least Windows Server 2012 Window
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2008 Windows 7 Wind
HKCU\Software\Policies\Microsoft\Windows\Explor At least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\Explore Windows Server 2008 R2 and Windows
HKCU\Software\Microsoft\Windows\CurrentVersion\PoWindows Server 2008 Windows 7 and
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2008 and Windows Vi
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2008 Windows Serve
HKCU\Software\Microsoft\Windows\CurrentVersion\Po Windows Server 2008 Windows Server
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2003 and Windows XP
HKCU\Software\Policies\Microsoft\Windows\Explorer At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Explorer Windows Server 2012 R2 Windows 8.1
HKCU\Software\Policies\Microsoft\Windows\Explorer Windows Server 2012 R2 Windows 8.1
HKLM\Software\Policies\Microsoft\Windows\Explorer At least Windows 10 Server Windows
HKCU\Software\Policies\Microsoft\Windows\Explorer At least Windows 10 Server Windows
HKCU\Software\Microsoft\Windows\CurrentVersion\Po Windows Server 2003 and Windows XP
HKCU\Software\Microsoft\Windows\CurrentVersion\Po Windows Server 2008 Windows Server
HKCU\Software\Microsoft\Windows\CurrentVersion\ At least Windows Server 2003 operati
HKCU\Software\Microsoft\Windows\CurrentVersion\ Windows Server 2008 Windows Serve
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2012 R2 Windows 8.1
HKCU\Software\Microsoft\Windows\CurrentVersion\Po Windows Server 2012 R2 Windows 8.1
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows Server 2012 R2 Windows 8.1
HKCU\Software\Microsoft\Windows\CurrentVersion\ Windows Server 2008 Windows Serve
HKCU\Software\Microsoft\Windows\CurrentVersion\ Windows Server 2003 and Windows XP
HKCU\Software\Microsoft\Windows\CurrentVersion\ At least Windows 2000 through Windo
HKCU\Software\Policies\Microsoft\Windows\Explor Windows Server 2008 R2 and Windows
HKCU\Software\Policies\Microsoft\Windows\Explorer At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Windows\Explore At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Windows\Explore Windows Server 2012 R2 Windows 8.1
HKCU\Software\Policies\Microsoft\Windows\Explor Windows Server 2012 R2 Windows 8.1
HKCU\Software\Policies\Microsoft\Windows\Explore Windows Server 2012 R2 Windows 8.1
HKLM\Software\Policies\Microsoft\Windows NT\Syst At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows NT\Syst At least Windows Server 2008 R2 or W
HKCU\software\policies\microsoft\TabletTip\1.7!Dis Windows Server 2008 Windows 7 and
HKLM\software\policies\microsoft\TabletTip\1.7!Dis Windows Server 2008 Windows 7 and
HKCU\software\policies\microsoft\TabletTip\1.7!Dis Windows Server 2008 Windows 7 and
HKLM\software\policies\microsoft\TabletTip\1.7!Dis Windows Server 2008 Windows 7 and
HKCU\software\policies\microsoft\TabletTip\1.7!HideWindows Server 2008 Windows 7 and
HKLM\software\policies\microsoft\TabletTip\1.7!HideWindows Server 2008 Windows 7 and
HKCU\software\policies\microsoft\TabletTip\1.7!Hid Windows Server 2008 Windows 7 and
HKLM\software\policies\microsoft\TabletTip\1.7!Hid Windows Server 2008 Windows 7 and
HKCU\software\policies\microsoft\TabletTip\1.7!Pas At least Windows Vista
HKLM\software\policies\microsoft\TabletTip\1.7!Pas At least Windows Vista
HKCU\software\policies\microsoft\TabletTip\1.7!Inc At least Windows Vista
HKLM\software\policies\microsoft\TabletTip\1.7!Inc At least Windows Vista
HKCU\software\policies\microsoft\TabletTip\1.7!Scr Windows Vista only
HKLM\software\policies\microsoft\TabletTip\1.7!Scr Windows Vista only
HKCU\software\policies\microsoft\TabletTip\1.7!Disa At least Windows Server 2008 R2 or W
HKLM\software\policies\microsoft\TabletTip\1.7!Disa At least Windows Server 2008 R2 or W
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableWindows Vista only
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableWindows Vista only
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableAt least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!Disabl At least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!Disabl At least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!Disabl At least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnO Windows Server 2008 Windows 7 and
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnO Windows Server 2008 Windows 7 and
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!Prev At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!Prev At least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PrevenAt least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!Preve At least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!Preve At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!Preve At least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOf At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOf At least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PrevenWindows Server 2008 Windows 7 and
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PrevenWindows Server 2008 Windows 7 and
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventWindows Server 2008 Windows 7 and
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!Prevent Windows Server 2008 Windows 7 and
HKCU\Software\Microsoft\Windows\CurrentVersion\PAt least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\Explorer At least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\Explorer At least Windows Server Technical Pr
HKCU\Software\Policies\Microsoft\Windows\Explor At least Windows Server 2012 R2 Win
HKCU\Software\Policies\Microsoft\Windows\Explorer At least Windows Server Technical Pr
HKCU\Software\Policies\Microsoft\Windows\Explorer At least Windows Server 2012 R2 Win
HKCU\Software\Policies\Microsoft\Windows\Task Sc Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows\Task Sc Windows Server 2003 Windows XP and
HKCU\Software\Policies\Microsoft\Windows\Task Sch Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows\Task SchWindows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows\TCPIP\v At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6T
At least Windows Server 2008 R2 or W
HKLM\System\CurrentControlSet\Services\Tcpip\Pa At least Windows Vista Service Pack 1
HKLM\System\CurrentControlSet\Services\Tcpip\Par At least Windows Server 2008 R2 or W
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Ter At least Windows Server 2008
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Server 2008
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Te At least Windows Server 2008
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Server 2008
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Ter Windows Server 2008 R2 only
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Server 2008
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Server 2008 R2
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Server 2008 R2
HKLM\SOFTWARE\Policies\Microsoft\Windows\Sess At least Windows Server 2008 R2
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Server 2008 R2
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\T At least Windows Server Technical Pre
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerWindows 7 with Service Pack 1
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term Windows 7 with Service Pack 1
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Ter At least Windows Server 2003 operati
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Server 2003 operati
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Te At least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Server 2003 operati
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerWindows Server 2008 Windows Server
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Te At least Windows Server 2003 operati
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows XP and Windows Ser
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Server 2003 with Ser
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Server 2003 with Ser
HKLM\Software\Microsoft\Windows\CurrentVersion\PAt least Windows 2000 Terminal Servic
HKLM\Software\Microsoft\Windows\CurrentVersion\PoAt least Windows 2000 Terminal Servic
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows 8 Enterprise or Win
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Ter Windows Server 2008 R2 Windows Ser
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerWindows Server 2008 R2 Windows Ser
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Te At least Windows Server 2003
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Te At least Windows Server 2003 with Ser
HKLM\Software\Policies\Microsoft\Windows NT\TermiAt least Windows Server 2003
HKLM\Software\Policies\Microsoft\Windows NT\Term At least Windows Server 2003
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Server 2003 operati
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TermiAt least Windows Server 2008 or Wind
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\TermiAt least Windows Server 2008 or Wind
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TermiWindows Server 2003 with Service Pa
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Server 2003 Enterpri
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Server 2003 Enterpri
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Server 2003 Enterpri
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Server 2003 Enterpri
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Te At least Windows Server 2003 operati
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Te At least Windows Server 2003 operati
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Vista with Service Pa
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Vista with Service Pa
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Vista with Service Pa
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Vista with Service Pa
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Ter At least Windows Vista with Service Pa
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Vista with Service Pa
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Te At least Windows Vista with Service Pa
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\T At least Windows Server 2012 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term Windows 7 or Windows Server 2008 R2
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows 7 with Service Pack
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term Windows 7 or Windows Server 2008 R2
HKLM\Software\Policies\Microsoft\Windows NT\Term Windows 7 or Windows Server 2008 R2
HKCU\SOFTWARE\Policies\Microsoft\Workspaces!De At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\TerAt least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Term At least Windows 8 or Windows RT
HKLM\Software\Microsoft\Windows\CurrentVersion\Po At least Windows 10 Server Windows
HKCU\Software\Policies\Microsoft\Windows\Explor Windows Vista Service Pack 1
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOf Windows Server 2008 Windows 7 and
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOf Windows Server 2008 Windows 7 and
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOf Windows Server 2008 R2 and Windows
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOf Windows Server 2008 R2 and Windows
HKLM\Software\Policies\Microsoft\TPM!ActiveDirect At least Windows Vista
HKLM\Software\Policies\Microsoft\TPM!OSManagedAAt least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Tpm\BlockedC At least Windows Vista
HKLM\Software\Policies\Microsoft\TPM\BlockedCommAt least Windows Vista
HKLM\Software\Policies\Microsoft\TPM\BlockedCommAt least Windows Vista
HKLM\Software\Policies\Microsoft\Tpm!StandardUserAt least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Windows\Backup\ Windows Vista only
HKLM\Software\Policies\Microsoft\Windows\Backup\ Windows Vista only
HKCU\Software\Policies\Microsoft\Windows\Backup\ At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Backup\ At least Windows Vista
HKCU\Software\Policies\Microsoft\Windows\Backup\CAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\Backup\CAt least Windows Vista
HKCU\Software\Policies\Microsoft\Windows\System!EAt least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\System!LAt least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\System! Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows\System!PAt least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\System! Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows\System! At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\System!SAt least Windows 2000
HKCU\Software\Policies\Microsoft\Windows\System At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\System At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Advertis At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\Syste At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\FVE!ActiveDirect Windows Server 2008 and Windows Vi
HKLM\SOFTWARE\Policies\Microsoft\FVE!UseRecove Windows Server 2008 and Windows Vi
HKLM\SOFTWARE\Policies\Microsoft\FVE!DefaultRec At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\FVE!Encryption Windows Server 2008 Windows 7 and
HKLM\SOFTWARE\Policies\Microsoft\FVE!Encryption At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\FVE!MorBehavior Windows Server 2012 R2 Windows 8.1
HKLM\Software\Policies\Microsoft\FVE!RecoveryKey At least Windows 10 Server or Window
HKLM\Software\Policies\Microsoft\FVE!UseEnhancedAt least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\FVE!OSPassphras At least Windows Server 2012 or Wind
HKLM\Software\Policies\Microsoft\FVE!TPMAutoReseAt least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\FVE!DisallowSta At least Windows Server 2012 or Wind
HKLM\Software\Policies\Microsoft\FVE!Identification At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\FVE!CertificateOI At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\FVE!OSUseEnhance At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\FVE!OSRecover At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\FVE!OSEncrypti At least Windows Server 2012 or Wind
HKLM\SOFTWARE\Policies\Microsoft\FVE!EnableNonTWindows Server 2008 and Windows Vi
HKLM\SOFTWARE\Policies\Microsoft\FVE!UseAdvanc At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\FVE!OSManage At least Windows Server 2012 or Wind
HKLM\SOFTWARE\Policies\Microsoft\FVE\PlatformVal Windows Server 2008 Windows 7 and
HKLM\SOFTWARE\Policies\Microsoft\FVE\OSPlatform At least Windows Server 2012 or Wind
HKLM\SOFTWARE\Policies\Microsoft\FVE\OSPlatform At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\FVE!MinimumPIN At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\FVE!OSHardware At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\FVE!OSEnablePre At least Windows Server 2012 or Wind
HKLM\Software\Policies\Microsoft\FVE!OSAllowSecurAt least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\FVE!FDVRecove At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\FVE!FDVPassphra At least Windows Server 2008 R2 or W
HKLM\System\CurrentControlSet\Policies\Microsof At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\FVE!FDVDiscove At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\FVE!FDVAllowUserAt least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\FVE!FDVEncryptAt least Windows Server 2012 or Wind
HKLM\SOFTWARE\Policies\Microsoft\FVE!FDVHardwar At least Windows Server 2012 or Wind
HKLM\SOFTWARE\Policies\Microsoft\FVE!RDVRecoveAt least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\FVE!RDVConfigur At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\FVE!RDVPassphra At least Windows Server 2008 R2 or W
HKLM\System\CurrentControlSet\Policies\Microsof At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\FVE!RDVDiscove At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\FVE!RDVAllowUse At least Windows Server 2008 R2 or W
HKLM\SOFTWARE\Policies\Microsoft\FVE!RDVEncryp At least Windows Server 2012 or Wind
HKLM\SOFTWARE\Policies\Microsoft\FVE!RDVHardwaAt least Windows Server 2012 or Wind
HKLM\Software\Policies\Microsoft\W32Time\Config! At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\W32time\Paramet At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\W32time\TimePro At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\W32Time\TimeProAt least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\WcmSvcAt least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\WcmSv At least Windows Server 2012 Window
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!DAt least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!S At least Windows Vista
HKLM\Software\Microsoft\Windows\CurrentVersion\PWindows Vista only
HKLM\Software\Policies\Microsoft\Windows\Backup At least Windows Server 2008
HKLM\Software\Policies\Microsoft\Windows\Backup\ At least Windows Server 2008
HKLM\Software\Policies\Microsoft\Windows\Backu At least Windows Server 2008
HKCU\Software\Policies\Microsoft\Windows\WindowsCAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\WindowsCAt least Windows Vista
HKCU\Software\Policies\Microsoft\Windows\WCN\UI At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\WCN\UI At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\WCN\Re At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows Defende At least Windows Server Technical Pr
HKLM\Software\Policies\Microsoft\Windows Defende At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows Defende At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows Defend At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows DefenderAt least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows DefenderAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows Defend At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows Defen At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows Defend At least Windows Vista
HKCU\Software\Microsoft\Windows\CurrentVersion\Pol
Windows Server 2008 Windows Server
HKCU\Software\Microsoft\Windows\CurrentVersion\PoAt least Windows Server 2003 operati
HKCU\Software\Microsoft\Windows\CurrentVersion\ Windows XP Professional only
HKCU\Software\Microsoft\Windows\CurrentVersion\PAt least Windows Server 2003
HKCU\Software\Microsoft\Windows\CurrentVersion\Po Windows Server 2003 Windows XP and
HKCU\Software\Microsoft\Windows\CurrentVersion\Po Windows Server 2003 Windows XP and
HKCU\Software\Microsoft\Windows\CurrentVersion\Po At least Windows XP Professional with
HKLM\Software\Microsoft\Windows\CurrentVersion\Po At least Windows XP Professional with
HKLM\Software\Policies\Microsoft\Windows\Explo At least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\Explor At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\CurrentVAt least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\CurrentVAt least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Current At least Windows Server 2008 R2 or W
HKCU\Software\Policies\Microsoft\Windows\Current At least Windows Server 2008 R2 or W
HKLM\Software\Policies\Microsoft\Windows\Explorer!At least Windows Server 2012 Window
HKCU\Software\Policies\Microsoft\Windows\Explorer!At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Explore At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows NT\Windo Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\Windows NT\Wind Windows Server 2003 Windows XP and
HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\IAt least Windows XP Professional with
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewallAt least Windows XP Professional with
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewalAt least Windows XP Professional with
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\ At least Windows XP Professional with
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa At least Windows XP Professional with
HKCU\SOFTWARE\Policies\Microsoft\Windows Mail! At least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows Mail! At least Windows Vista
HKCU\SOFTWARE\Policies\Microsoft\Windows Mail!DAt least Windows Vista
HKLM\SOFTWARE\Policies\Microsoft\Windows Mail! At least Windows Vista
HKLM\Software\Policies\Microsoft\WMDRM!DisableOAt least Windows Server 2003
HKLM\Software\Policies\Microsoft\WindowsMediaPl Windows Media Player 9 Series and lat
HKLM\Software\Policies\Microsoft\WindowsMediaPla Windows Media Player 9 Series and lat
HKCU\Software\Policies\Microsoft\WindowsMediaPl Windows Media Player 9 Series and lat
HKLM\Software\Policies\Microsoft\WindowsMediaPla Windows Media Player 11 for Windows
HKCU\Software\Policies\Microsoft\WindowsMediaPla Windows Media Player 9 Series and lat
HKCU\Software\Policies\Microsoft\WindowsMediaPla Windows Server 2003 Windows XP and
HKLM\Software\Policies\Microsoft\WindowsMediaPla Windows Media Player 9 Series and lat
HKCU\Software\Policies\Microsoft\WindowsMediaPl Windows Media Player 9 Series and lat
HKCU\Software\Policies\Microsoft\WindowsMediaPl Windows Media Player for Windows XP
HKCU\Software\Policies\Microsoft\WindowsMediaP Windows Server 2003 Windows XP and
HKCU\Software\Policies\Microsoft\WindowsMediaPla Windows Media Player for Windows XP
HKCU\Software\Policies\Microsoft\WindowsMediaPla Windows Server 2003 Windows XP and
HKCU\Software\Policies\Microsoft\WindowsMediaPl Windows Media Player for Windows XP
HKLM\Software\Policies\Microsoft\Messenger\Client At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Messenger\Client At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Messenger\Client At least Windows Server 2003 operati
HKCU\Software\Policies\Microsoft\Messenger\Client At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\WinRM\CAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\WinRM\ClAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\WinRM\Se At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\WinRM\SAt least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\WinRM\ At least Windows Vista
HKLM\Software\Policies\Microsoft\Windows\WinRM At least Windows Vista
HKCU\Software\Microsoft\Windows\CurrentVersion\PWindows XP Professional only
HKLM\Software\Policies\Microsoft\Windows\Wind Windows 7 Windows Server 2008 R2 W
HKCU\Software\Policies\Microsoft\Windows\Windo Windows 7 Windows Server 2008 R2 W
HKCU\Software\Policies\Microsoft\Windows\Windo Windows 7 Windows Server 2008 R2 W
HKLM\Software\Policies\Microsoft\Windows\Windo Windows 7 Windows Server 2008 R2 W
HKCU\Software\Microsoft\Windows\CurrentVersion At least Windows XP Professional Ser
HKLM\Software\Policies\Microsoft\Windows\Windo Windows XP Professional Service Pack
HKLM\Software\Policies\Microsoft\Windows\Windo At least Windows XP Professional Ser
HKLM\Software\Policies\Microsoft\Windows\Window At least Windows XP Professional Ser
HKLM\Software\Policies\Microsoft\Windows\Windo At least Windows XP Professional Ser
HKLM\Software\Policies\Microsoft\Windows\Wind At least Windows Vista through Windo
HKLM\Software\Policies\Microsoft\Windows\Window Windows Server 2008 Windows 7 and
HKLM\Software\Policies\Microsoft\Windows\Wind Windows Server 2008 Windows 7 and
HKLM\Software\Policies\Microsoft\Windows\Wind Windows XP Professional Service Pack
HKLM\Software\Policies\Microsoft\Windows\Windo At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\Windo Windows 7 Windows Server 2008 R2
HKLM\Software\Policies\Microsoft\Windows\Window At least Windows Server 2003 operati
HKLM\Software\Policies\Microsoft\Windows\Windo At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\Windo At least Windows 10 Server Windows
HKLM\Software\Microsoft\Windows\CurrentVersion\Po
At least Windows Vista
HKCU\Software\Microsoft\Windows\CurrentVersion\Po
At least Windows Vista
HKCU\Software\Microsoft\Windows\CurrentVersion\Po
At least Windows 2000
HKLM\Software\Policies\Microsoft\Windows\Wireless At least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\WorkFoldAt least Windows 8.1 or Windows RT 8
HKCU\Software\Policies\Microsoft\Windows\WorkFol At least Windows 8.1 or Windows RT 8
HKLM\Software\Policies\Microsoft\Windows\Workpla At least Windows Server 2012 R2 or W
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentV At least Windows Server 2012 Window
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentV At least Windows Server 2012 Window
HKCU\SOFTWARE\Policies\Microsoft\Windows\Current At least Windows Server 2012 Window
HKCU\SOFTWARE\Policies\Microsoft\Windows\Current At least Windows Server 2012 Window
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrenAt least Windows Server 2012 R2 Win
HKCU\SOFTWARE\Policies\Microsoft\Windows\Current At least Windows Server 2012 R2 Win
HKLM\Software\Policies\Microsoft\Windows\WwanSvAt least Windows Server 2012 Window
HKLM\Software\Policies\Microsoft\Windows\WwanSvAt least Windows Server 2012 Window
Help Text New in Windows 10
This policy setting determines which A 0
This policy setting controls the insta
Specifies the category of programs t
Removes the "Add a program from CD-R
Removes the "Add programs from Micro
Prevents users from viewing or insta
Removes the Add New Programs button
Prevents users from using Add or Rem
Removes the Set Program Access and D
Removes the Change or Remove Program
Prevents users from using Add or Re
Removes links to the Support Info di
Removes the Add/Remove Windows Comp
This policy setting determines whethe 1
Specifies whether to prevent the MS- 0
This policy controls the visibility o
The policy controls the state of the
The policy controls the state of the
This policy controls the state of th
This setting exists only for backwar
This policy setting controls the stat
This policy setting controls the stat
This policy setting controls the state
This policy setting allows you to man
This policy setting allows you to ma
Allows or denies development o
This policy setting allows yo 1
Prevent users' app data from m
Manages a Windows app's ability to sh
This policy setting lets you control 0
This policy setting lets you control
This policy setting lets you control w
This policy setting lets you turn on
This policy setting controls 1
This policy setting allows you to man 0
This policy setting allows you to con
This policy setting allows you to mana
This policy setting allows you to confi
This policy setting allows you to conf
This policy setting determines what i
This policy setting sets the default
This policy setting sets the default
This policy setting allows you to pre
This policy setting allows you to turn
This policy setting disallows AutoPlay
This policy setting disallows AutoPlay
This policy setting lets you opt-o 1
This policy setting allows or prevent 0
This policy setting determines whethe
This policy setting determines wheth
This policy setting specifies the num
This policy setting specifies the numb
This policy setting limits the amount
This policy setting limits the network
This policy setting limits the networ
This policy setting determines if the
This policy setting limits the maximum
This policy setting limits the maximum
This policy setting specifies whether
This policy setting defines
This policy setting limits the number
This setting affects whether the BITS
If you enable this setting all Custom
This policy setting will enable taggi
This policy setting determines the cip
This policy setting determines the p 1
This policy setting directs the syst 0
This policy setting directs the syst
Disables the application sharing feat
Prevents users from allowing others
Prevents users from sharing anything
Prevents users from sharing command
Prevents users from sharing the whole
Prevents users from sharing Explorer
Prevents users from sharing applicati
Disables the audio feature of NetMeet
Prevents user from changing the Dire
Disables full duplex mode audio. Us
Prevents users from receiving video.
Prevents users from sending video if
Limits the bandwidth audio and video
Make the automatic acceptance of inc
Disables the Chat feature of NetMeet
Disables the T.126 whiteboard featur
Disables the 2.x whiteboard feature
Disables the remote desktop sharing f
Configures NetMeeting to download se
Prevents users from adding directory (
Prevents users from turning on autom
Prevents users from changing the way
Disables the directory feature of Net
Prevents users from receiving files f
Prevents users from sending files to
Prevents users from viewing director
Limits the size of files users can sen
Sets the URL NetMeeting will displa
Sets the level of security for both o
Disables the Advanced Calling button
Hides the Audio page of the Tools Opt
Hides the General page of the Tools O
Hides the Security page of the Tools
Hides the Video page of the Tools Opt
This setting allows you to display o
This policy setting controls the defau
Disables all Control Panel programs a
This policy setting controls which C
Disables the Display Control Panel.I
Removes the Settings tab from Displa
Disables the Color (or Window Color)
Prevents the Screen Saver dialog from
Enables desktop screen savers.If you
Specifies the screen saver for the us
Determines whether screen savers use
Specifies how much user idle time mus
Prevents users from adding or changi
Prevents users from changing the so
Prevents users from changing the mou
Prevents users from changing the desk
This setting forces the theme color
This setting disables the theme galle
Specifies which theme file is applied
Prevents users or applications from
This setting allows you to force a sp
Prevents users from changing the size
This policy setting controls whether
Prevents users from changing the bac
Disables the lock screen slide show s
Disables the lock screen camera togg
Forces Windows to use the specified c
Forces the Start screen to use one of
Prevents users from changing the look
This setting allows you to force a sp
This policy setting allows an adminis
This policy setting specifies a defau
This policy setting allows the admini
This policy setting allows the admini 1
This policy setting applies to appli 0
This policy setting applies to appli
When running in restricted mode part
This policy setting requires the user
This policy setting prevents users f
This policy setting disables or remov
This policy setting determines the am 1
This policy setting determines the lev
Allows you to specify that local comp 0
Allows you to view and change a list
Set this policy to configure the us 1
Set this policy to specify an arbitra
Set this policy to define a cap for th
Set this policy to define the max cach
Set this policy to define the max time
Enables Active Desktop and prevents u 0
Disables Active Desktop and prevents
Prevents the user from enabling or d
Adds and deletes specified Web conten
Prevents users from adding Web conte
Prevents users from removing Web con
Prevents users from deleting Web con
Prevents users from changing the pro
Removes Active Desktop content and p
Permits only bitmap images for wallp
Specifies the desktop background ("wa
Displays the filter bar above the resu
Hides the Active Directory folder in
Specifies the maximum number of obje
Prevents users from changing the path
Removes icons shortcuts and other d
Prevents users from using the Deskto
Removes the Internet Explorer icon f
This setting hides Computer from the
Removes most occurrences of the My
Removes the Network Locations icon f
This setting hides Properties on the
This policy setting hides the Prope
Remote shared folders are not added
Removes most occurrences of the Recy
Removes the Properties option from th
Prevents users from saving certain c
Prevents users from manipulating desk
Prevents users from adjusting the len
Prevents windows from being minimize
Changes behavior of Microsoft bus dri
Changes behavior of 3rd-party driver
Specifies whether Virtualization Base
Deploy Code Integrity PolicyThis poli 1
This policy setting allows you to dete 0
This policy setting allows you to all
This policy setting allows you to det
This policy setting allows you to spec
This policy setting allows you to spe
This policy setting allows you to prev
This policy setting establishes the am
This policy setting allows you to disp
This policy setting allows you to dis
This policy setting specifies a list
Determines how the system responds wh
This policy setting prevents redirect
This policy setting prevents redirecti
This policy setting allows you to tur
Windows has a feature that sends "gene
Windows has a feature that allows a d
This setting configures the location
Specifies whether the administrator
Specifies whether the administrator
This policy setting allows you to sp
Specifies whether Digital Locker can
Specifies whether Digital Locker can
This policy setting substitutes custo
This policy setting determines the ex
This policy setting turns off the boo
This policy setting turns off power s
This policy setting turns off all sup
This policy setting turns off the sol
This policy setting turns on and tur
This policy setting specifies the def
This policy setting extends the disk
Specifies that Distributed Link Track
Specifies a connection-specific DNS s
Defines the DNS servers to which a co
Specifies the primary DNS suffix used
Specifies if a computer performing d
Specifies if DNS client computers wil
Specifies if DNS dynamic update is e
Specifies whether dynamic updates sho
Specifies the interval used by DNS cl
Specifies the value of the time to li
Specifies the DNS suffixes to attach
Specifies the security level for dyn
Specifies if computers may send dyna
Specifies if the DNS client performs
Specifies if the devolution level tha
Specifies that link local multicast
Specifies that computers may attach s
Specifies that a multi-homed DNS clie
Specifies that the DNS client should
Specifies that NetBIOS over TCP/IP (N
Specifies that responses from link lo
Specifies whether the DNS client sho
Specifies whether the DNS client shou
This policy setting controls the appe
This policy setting controls the appe
This policy setting controls the Start
This policy setting controls the abil
This policy setting allows you to res
This policy setting allows you to inc
This policy setting controls the cloud 1
This policy setting allows you to spe 0
If you enable this setting users will
This policy setting prevents Windows f
This policy setting allows you to pr
Disables help tips that Windows shows
Disables help tips that Windows shows
This policy setting prevents File Expl
This policy setting configures wheth
This policy setting locks Enhanced S
This policy setting allows you to crea
This policy setting configures how er
This policy setting controls whether u
This policy setting turns off Windows
This policy setting prevents the displ
This policy setting controls whether e
This policy setting controls Windows E
This policy setting specifies applicat
This policy setting controls the beha
This policy setting controls the beha
This policy setting specifies a corpo
This policy setting limits Windows Er
This policy setting limits Windows Er
This policy setting determines the b
This policy setting determines the b
This policy setting determines the co
This policy setting determines the co
This policy setting determines the be
This policy setting determines the be
This policy setting allows you to co
This policy setting controls resource
This policy setting controls Event Lo
This policy setting specifies the sec
This policy setting specifies the secu 1
This policy setting controls Event Lo 0
This policy setting controls the locat
This policy setting specifies the max
This policy setting turns on logging.I
This policy setting specifies the sec 1
This policy setting lets you configur 1
This is the program that will be invo 0
This specifies the command line para
This is the URL that will be passed t
This policy setting configures File E
This policy setting allows administrat
This policy is similar to settings di
Disabling data execution prevention c
Disabling heap termination on corrupt
Sets the target of the More Informati
Disabling soft landing messages 1
This policy setting allows administra
This policy setting controls whether 0
Specifies whether the PC can use th
Specifies whether the PC can use st
Windows Runtime applications can pro
This policy setting configures the m
Determines whether the RPC protocol
Symbolic links can introduce vulnerab
Compression can add to the processing
Encryption can add to the processing
Encrypting the page file prevents mal
These settings provide control over
Delete notification is a feature that n
TXF deprecated features included sav
This policy setting allows the admin
This policy setting allows you to cont
This policy setting shows or hides th
Hides the Preview Pane in File Explor
This policy setting permits or prohib
Windows Game Recording and Broadcast 1
Manages download of game box art and 0
Tracks the last play time of games in
Manages download of game update inf
This policy setting prevents a user fr
This policy setting prevents a user fr
This policy setting restricts the per
This policy prevents automatic
This policy setting restricts users on
This policy setting restricts users on
This policy setting prevents users fro
This policy setting prevents users fro
This policy setting prevents the user
This policy setting removes the Admin
This policy setting removes the optio
This policy setting removes the optio
This policy setting removes the regio
This policy setting restricts the Win
This policy setting restricts the Win
This policy setting controls which UI
This policy setting restricts users t
This policy turns off the offe
This policy turns off the inse
This policy turns off the auto
This policy turns off the high
This policy setting controls
This policy enables the autom 1
This policy setting determines how pr 0
This policy setting turns off
This policy setting allows Microsoft
This security feature provides a glob 1
This policy setting allows yo 0
This policy setting allows yo
Enter 0 to disable Logon
Enabling this setting will cause the
This policy setting prevents the Grou
This policy directs Group Policy proc
This policy setting prevents Local Gr
This policy setting specifies how lon
This policy setting allows user-based
This policy setting determines when s
This policy setting determines when
This policy setting determines when f
This policy setting determines when r
Prevents the system from updating the
This policy setting prevents Group Po
This policy setting prevents administ
This policy setting determines which
This policy setting defines a slow co
This policy setting specifies how oft
This policy setting allows you to se
This policy setting allows you to cre
This policy setting lets you always u
This setting allows you to enable or
This policy setting directs the syste
This policy setting specifies how lon
This policy setting allows you to per
This policy setting allows you to perm
This policy setting allows you
This policy setting allows you
This policy setting allows you to exc
This policy setting specifies whethe
This policy setting defines whether
This policy setting allows you to re
This policy setting turns off the Wi
This policy setting turns off the act
"This policy setting prevents installa
Designates the Audio/Video Player Act
Designates the Microsoft Network (MSN
This ActiveX control enables users to
Designates Shockwave flash as an admi
Designates a set of Microsoft Network
Designates a set of Microsoft Active
Designates the Microsoft Agent Active
Designates the Microsoft Chat ActiveX
Designates a set of MSNBC controls a
Designates NetShow File Transfer Cont
Designates Microsoft Scriptlet Compon
Designates Microsoft Survey Control a
This policy setting prevents the text
This policy setting prevents the text
Enhanced Protected Mode provides add
Enhanced Protected Mode provides add
This policy setting prevents ActiveX
This policy setting prevents ActiveX
This policy setting allows you to blo
This policy setting allows you to tu 0
This policy setting allows you to tu
This policy setting shows the Content
This policy setting shows the Content
This policy setting let you turn off I
This policy allows the user to go dire
This policy allows the user to go dire
This policy setting specifies if as y
This policy setting specifies how you
Restricts the amount of information
Prevents users from adding channels
Prevents users from specifying that
Prevents channel providers from recor
Prevents users from viewing the Chann
Prevents users from adding editing or
Prevents users from editing an existi
Prevents users from disabling channel
Prevents users from clearing the prec
Disables existing schedules for down
Prevents content from being download
This policy setting prevents the use
Removes the Advanced tab from the in
Removes the Advanced tab from the in
Removes the Connections tab from the
Removes the Connections tab from the
If you enable this policy setting use
If you enable this policy setting use
Removes the General tab from the int
Removes the General tab from the int
Removes the Privacy tab from the inte
Removes the Privacy tab from the inte
Removes the Programs tab from the in
Removes the Programs tab from the in
Removes the Security tab from the int
Removes the Security tab from the int
This policy setting determines whether 1
This policy setting determines whether
This policy setting allows you to sto
This policy setting allows you to sto
This policy setting allows you to ens
This policy setting allows you to ens
For each zone the Binary and Scripted
For each zone the Binary and Scripted
Internet Explorer contains dynamic bi
Internet Explorer uses Multipurpose I
Internet Explorer uses Multipurpose I
Internet Explorer uses Multipurpose In
Internet Explorer places zone restric
The MK Protocol Security Restriction p
The MK Protocol Security Restriction
The MK Protocol Security Restriction
Internet Explorer may be configured to
Internet Explorer may be configured to
File Explorer and Internet Explorer m
File Explorer and Internet Explorer m
Internet Explorer may be configured t
Internet Explorer may be configured t
This policy setting defines whether a
Internet Explorer places restrictions
This policy setting enables applicati
This policy setting enables blocking o
This policy setting enables applicatio
This policy setting enables applicatio
Internet Explorer allows scripts to p
For each zone the Network Protocol Lo
This policy setting allows Internet E
This policy setting turns off Automat
This policy setting turns off Automat
This policy setting allows you to add
Prevents automatic proxy scripts whic
Prevents branding of Internet program
Prevents users from changing setting
This policy setting allows you to cus
Specifies that Automatic Detection wi
This policy setting allows the user t
This policy setting allows the user t
This policy setting turns off the Secu
This policy setting turns off the Secu
This policy setting positions the me
Specifies that error messages will be
This policy setting logs information
This policy setting logs information
This policy setting allows you to en
This policy settings disables the Impo
This policy settings disables the Impo
This policy setting turns off Adobe Fl
This policy setting turns off Adobe Fl
Prevents users from configuring uniqu
This policy setting prevents Internet
This policy setting controls the Activ
This policy setting controls the Activ
Allows Administrators to enable and d
This policy setting prevents users fr
In Internet Explorer 9 and Internet Ex
In Internet Explorer 9 and Internet Ex
This policy setting allows the automa
This policy setting allows the automa
This policy setting prevents the Sear
This policy setting prevents the Sear
Prevents Internet Explorer from auto
This policy setting allows you to rev
This policy setting allows you to rev
Prevents the Internet Explorer splash
This policy setting allows you to def
Prevents Internet Explorer from check
Allows Administrators to enable and d
If you enable this policy the user ca
This setting specifies to automatical
This setting specifies to automatical
Prevents users from changing the brow
Prevents users from changing the def
Prevents users from changing certific
Prevents Microsoft Internet Explorer
This policy setting allows you to cho
Prevents users from changing dial-up
Prevents users from changing dial-up
Prevents users from running the Inte
Prevents users from changing font set
This AutoComplete feature suggests po
This AutoComplete feature can remem
This setting specifies the number of
This setting specifies the number of
The Home page specified on the Gener
Secondary home pages are the defaul
Secondary home pages are the defaul
Prevents users from changing language
Prevents users from changing the colo
You can allow pop-ups from specific w
You can allow pop-ups from specific w
Prevents users from changing Profile
This policy setting specifies if a use
This policy setting specifies if a use
Prevents users from changing ratings
Prevents users from restoring default
This policy setting is used to manage
This policy setting is used to manage
This AutoComplete feature suggests p
This AutoComplete feature suggests p
This policy setting turns off URL Sug
This policy setting turns off URL Sug
Disables using the F3 key to search i
Makes the Customize button in the Sea
Applies security zone information to
Prevents users from changing security
Prevents users from adding or removin
Specifies that programs using the Mic
Applies proxy settings to all users o
This policy setting allows the playin
This policy setting controls the firs
This policy setting controls whether o
This policy setting allows you to m
This policy setting allows you to set
This policy setting manages whether us
This policy controls whether or not the
This policy setting controls whether l
This policy setting controls whether l
This template policy setting allows y
This policy setting allows you to manage a list of sites that you want to associate with a particular sec
This policy setting allows you to manage a list of sites that you want to associate with a particular sec
This policy setting enables intranet
This policy setting enables intranet
This policy setting causes a Notifica
This policy setting causes a Notifica
This policy setting makes hyperlinks c
Prevents users from closing Microsoft
Prevents users from saving Web pages
Prevents users from saving the compl
Prevents users from opening a new br
Prevents users from opening a file o
Prevents users from sending feedback
Prevents users from displaying tips
Prevents users from viewing or changi
Prevents users from running the Inte
This policy setting prevents the shor
Prevents users from adding removing e
Prevents using the shortcut menu to
Prevents users from saving a program
Prevents users from opening the Inte
Prevents users from displaying the br 0
Prevents users from viewing the HTM
This policy setting specifies that yo
Limits the amount of storage that a p
This policy setting allows users to
This policy setting allows you to byp
This policy setting allows the user
This policy setting allows the user
This policy setting allows you to hid
This policy setting allows you to chan
This policy setting allows you to ch
The WebSocket object allows websites
The WebSocket object allows websites
This policy setting allows you to cha
This policy setting allows you to cha
Prevents users from determining which
Prevents users from determining whic
Specifies which buttons will be displa
This policy setting allows you to sh
This policy setting allows you to sh
This policy setting allows you to show
This policy setting allows you to show
This policy setting allows you to loc
This policy setting allows you to loc
This policy setting allows you to lo
This policy setting allows you to lo
This policy setting allows you increa
This policy setting allows you increa
This policy setting controls the Sugg
This policy setting controls the Sugg
This policy setting allows you to est
This policy setting restricts the lis
This policy setting restricts the lis
This policy setting controls the Comp
This policy setting controls how Inte
This policy setting controls how Inte
Compatibility View determines how Int
Compatibility View determines how Int
This policy controls the website compa
This policy controls the website compa
This policy setting lets you decide w 1
This policy setting lets you decide w
This policy setting lets you specify
This policy setting lets you specify
This policy setting sets data storage 0
This policy setting sets data storage
This policy setting allows websites t
This policy setting sets the data sto
This policy setting sets the data sto
This policy setting sets file storage
This policy setting sets file storage
This policy setting sets the file sto
This policy setting sets the file sto
This policy setting sets the number of
This policy setting sets the number of
This policy setting sets the maximum
This policy setting sets the maximum s
This policy setting sets the maximum s
This policy setting configures what I
This policy setting configures what I
This policy setting configures Interne
This policy setting allows you to ma 1
This policy setting allows you to control which site zones are included in the discovery functionality of
This policy setting allows you to control which site zones are included in the discovery functionality of
Turns off the handwriting recognition 0
Turns off the handwriting recognition
If enabled then new iSNS servers ma
If enabled then new target portals m
If enabled then discovered targets m
If enabled then new targets may not
If enabled then do not allow the in
If enabled then only those sessions t
If enabled then do not allow the ini
If enabled then only those connection
If enabled then only those sessions
If enabled then only those sessions
This policy setting defines the list o
This policy setting configures the Ke
This policy setting controls the Kerb
This policy setting defines the list o
This policy setting configures the K
This policy setting controls configu
This policy setting controls whethe
Support for device authentication usi 1
This policy setting specifies whether 0
This policy setting determines the ci 1
This policy setting determines how th
This policy setting determines the ci
This policy setting changes the opera
This policy setting changes the opera
This policy setting ignores the custo
This policy setting ignores the custo
This policy setting ignores customize
This policy setting ignores customize
This policy is not available in this v
This policy setting hides the welcom
This policy setting specifies additio
This policy setting specifies additio
This policy setting suppresses system
This policy setting hides the welcom
This policy is not available in this v
This policy setting ignores Windows
This policy setting prevents connect
This policy setting allows local user
This policy setting allows or prevent
This policy setting allows or prevent
This setting lets you decide whether t 1
This setting lets you decide whether t
This setting lets you decide whether p
This setting lets you decide whether p
This setting lets you decide whether
This settings lets you decide how Mic
This settings lets you decide how Mic
Prevents users from entering author 0
Lets you selectively permit or prohib
Permits or prohibits use of this snap-
This policy setting permits or prohibi
Permits or prohibits use of the Group
This policy setting allows y
This policy setting allows y
This policy setting allows
This policy setting restricts the too
This policy setting configures Micros
This policy setting allows users to s
This policy setting allows users to i
This policy setting allows users to p
This policy setting directs Windows I
This policy setting directs Windows I
This policy setting controls Windows
This policy setting prevents u
This policy setting controls the abili
This policy setting controls Windows
This policy setting restricts the use
This policy setting prohibits Windows
This policy setting prohibits Windows
This policy setting permits users to
This policy setting controls the abi
This policy setting prevents Windows
This policy setting causes the Windo
This policy controls the perce
Specifies the types of events
This policy setting allows Web-based
This policy setting specifies the ord
This policy setting saves copies of t
This policy setting controls the abi
Specifies the e-mail address to be u
Specifies the string that appears for
Specifies whether an entry for Direct
Specifies whether the user has Conne
Specifies whether NCA service runs in
Specifies resources on your intranet
Specifies the IPv6 addresses of the e
Specifies commands configured by th
This policy setting enables you to sp
This policy setting enables you to s
This policy setting enables you to s
This policy setting enables you to spe
This policy setting enables you to sp
This Policy setting enables you to sp
This policy setting determines the am
This policy setting determines the m
This policy setting determines when r
This policy setting determines when a
This policy setting specifies the lev
This policy setting specifies the add
This policy setting specifies the amo
This policy setting determines when a
This policy setting determines the i
This policy setting specifies the Act
This policy setting determines whic
This policy setting specifies the Ref
This policy setting specifies the val
This policy setting specifies the sit
This policy setting specifies the Pri
This policy setting specifies the Wei
This policy setting determines if dyn
This policy setting enables DC Locato
This policy setting determines the in
This policy setting detremines the ty
This policy setting configures how a
This policy setting configures whethe
Determines whether administrators ca
Determines whether the Advanced Sett
Determines whether users can configu
Determines whether a user can instal
Determines whether users can delete
Determines whether users can delete
Determines whether the Remote Accces
Determines whether settings that exi
Determines whether Administrators an
Determines whether users can enable/
Determines whether users can change t
Determines whether users can use the
Prohibits use of Internet Connection
Determines whether a user can view a
Determines whether users can view an
Determines whether users can connect
Determines whether users can view an
Determines whether nonadministrators
Determines whether users can rename
Determines whether nonadministrators
Determines whether users can rename t
Determines whether users can view the
Specifies whether or not the "local a
This setting does not apply to deskt
This policy setting configures secure 1
Makes subfolders available offline wh 0
This policy setting lists network file
This policy setting lists network file
Determines how computers respond when
Determines how computers respond when
Limits the percentage of the computer
Determines which events the Offline F
Determines which events the Offline F
Lists types of files that cannot be u
Determines whether network files rema
Determines whether network files rema
Disables the Offline Files folder.This
Disables the Offline Files folder.This
Prevents users from enabling disablin
Prevents users from enabling disablin
Hides or displays reminder balloons a
Hides or displays reminder balloons a
Deletes local copies of the user's off
Determines how often reminder balloo
Determines how often reminder balloo
Determines how long the first remind
Determines how long the first remind
Determines how long updated reminder
Determines how long updated reminder
Configures the threshold value at whi
Determines whether offline files are
This policy setting controls the netw
This policy setting limits the amount
This policy setting controls when bac
This policy setting enables administra
This policy setting removes the "Work
This policy setting removes the "Work
This setting turns off Microsoft Peer-
This setting disables PNRP protocol f
This policy setting enables or disab
This policy setting limits a node to
This setting sets the seed server for
By default when a Peer Group is creat
Microsoft Passport for Work is an alt 1
A Trusted Platform Module (TPM) provid
Microsoft Passport for Work enables u
Minimum PIN length configures the mi
Minimum PIN length configures the mi
Maximum PIN length configures the ma
Maximum PIN length configures the ma
Use this policy setting to configure t
Use this policy setting to configure th
Use this policy setting to configure th
This policy setting configures the Pr 0
This policy setting is used only when
Turns off Tablet PC Pen Training.If yo
Turns off Tablet PC Pen Training.If yo
Determines the execution level for Wi
Determines the execution level for W
This policy setting specifies the acti
This policy setting specifies the acti
This policy setting specifies the perce
This policy setting specifies the perc
This policy setting turns off the user
This policy setting specifies the act
This policy setting specifies the per
This policy setting specifies the ac
This policy setting manages whether o
This policy setting manages whether o
This policy setting allows applicatio
This policy setting allows applicatio
This policy setting lets you configure
This policy setting lets you configure
This policy setting lets you c
This policy setting lets you c
This policy setting enables lo 1
This policy setting enables lo
This policy setting allows you to set 0
This policy setting lets you suppress
This policy setting lets you hide the
This policy setting lets you hide the
This policy setting lets you hide the l
This policy setting lets you hide the l
This setting lets you suppress the Res
This setting lets you suppress the Res
This policy setting lets you hide ent
This policy setting lets you hide ent
Internet printing lets you display pri
Determines if print driver components
By default the Printers folder includ
If you enable this policy setting it s
Allows users to use the Add Printer W
When printing through a print server
Determines whether the XPS Rasteriza
Adds a link to an Internet or intrane
Determines whether printers using ker
Prevents users from using familiar met
If this policy setting is enabled it p
This policy sets the maximum number o
This policy restricts clients computer
Restricts package point and print to
This policy restricts clients computer
Restricts package point and print to
If this policy setting is enabled it s
Enables the physical Location Trackin
This policy setting controls the clie
This policy setting controls the clie
Specifies the Active Directory locatio
Announces the presence of shared prin
This policy determines if v4 printer d
Microsoft XPS Document Writer (MXDW)
This policy controls whether th 1
This policy controls whether the prin 0
Determines whether the Add Printer Wiz
Determines whether the pruning servic
Specifies how often the pruning servic
Sets the priority of the pruning threa
Specifies how many times the pruning s
Specifies whether or not to log events
Determines whether the computer's share
Directs the system to periodically veri
Determines whether the domain control
This setting prevents users from usi
This setting prevents users from acce
This setting removes the Set Program
This setting prevents users from acc
Prevents users from viewing or instal
Specifies an alternate Layer-3 Differ
Specifies the maximum number of outs
Determines the percentage of connecti
Determines the smallest unit of time
Specifies an alternate link layer (Lay
Specifies an alternate link layer (La
This policy setting allows the Window
Determines the execution level for Wi
Requirements: Windows 7 Descri
This policy setting allows the system
This policy setting defines when the
The Shutdown Event Tracker can be di
This policy setting enables Remote As
This policy setting allows you to imp
This policy setting lets you customi
This policy setting configures the am
This policy setting configures the am
This policy setting denies read acces
This policy setting denies write acce
This policy setting denies execute ac
Configure access to all removable sto
Configure access to all removable sto
This policy setting denies write acces
This policy setting denies write acces
This policy setting grants normal us
This policy setting controls the idle
This policy setting controls how the
This policy setting determines how lo
This policy setting hides the instruc
This policy setting displays the instr
This policy setting displays the inst
This policy setting lets the system ru
This policy setting allows user logon
This policy setting allows users to a
This policy setting allows users who
Determines whether scheduled diagnost
Enabling this policy prevents users f
Enabling this policy prevents users f
This policy setting allows encrypted
If enabled the search indexer backoff
If enabled clients will be unable to
If enabled the indexer pauses wheneve
If enabled Search and Indexing Optio
If enabled Search and Indexing Optio
This policy setting allows words that
This policy setting configures how W
This policy setting allows you to ena
This policy setting hides or displays
If enabled files on network shares ma
Enabling this policy allows indexing
Enabling this policy allows indexing
When using Microsoft Office Outlook i
Enable this policy to prevent indexin
Enable this policy setting to prevent
Enabling this policy defines a semicolo
Enable this policy to prevent indexin
Store indexer database in this directo
Enabling this policy allows you to a
Enabling this policy allows you to a
Enabling this policy allows you to se
Enabling this policy allows you to sp
Enabling this policy prevents indexi
Enabling this policy prevents Windows
Enabling this policy removes the opt
If you enable this policy setting you
If you enable this policy setting you
Enabling this policy allows you to edi
This policy setting prevents search q
This policy setting specifies whether Cortana is allowed on
1 the device. If you enable or don't configu
This policy setting specifies whether search and Cortana can provide location aware search and Corta
This policy setting allows selection
This Group Policy setting lets 0
This policy setting turns off t
This policy setting turns off scr
This policy setting turns off scr
This policy setting specifies the net
Prevent syncing to and from this PC.
Prevent the "app settings" group from
Prevent the "passwords" group from sy
Prevent the "personalize" group from
Prevent the "AppSync" group f
Prevent the "Other Windows settings"
Prevent the "desktop personalization"
Prevent the "browser" group from sync
Prevent syncing to and from this PC w
Prevent the "Start layout" grou
Specifies an alternate location for W
Specifies an alternate location for W
Turns off data sharing from the handw
Turns off data sharing from the handw
Disables the Windows registry editor
Limits the Windows programs that use
Prevents Windows from running the pr
This policy setting prevents the disp
This policy setting lets you prevent 1
This policy setting lets you allow ce 0
This policy setting lets you determin
This policy settings lets you configur
This policy setting lets you allow sig
This policy setting permits those cert
This policy setting lets you reverse
This policy setting prevents plaintex
This policy setting lets you determin
This policy setting configures a lis
This policy setting determines the p
This policy setting allows trap conf
Specifies whether Sound Recorder can
Specifies whether Sound Recorder can
This policy setting controls whether t
This policy setting controls which set
This policy setting specifies the mes
This Group Policy Setting should be s
If you enable this policy setting the
If you enable this policy the start m
If you enable this policy the "See al
If you enable this policy a
If you enable this policy a "Search th
If you enable this policy the start me
If you enable this policy the start m
If you enable this policy the start me
If you enable this setting the Run c
Clear history of recently opened doc
This policy only applies to the clas
Displays Start menu shortcuts to part
Disables personalized menus.Windows
This setting affects the taskbar whic
Lets users run a 16-bit program in a
This setting affects the notification
Hides pop-up text on the Start menu a
If you enable this setting the system
This policy setting allows pinning ap
This policy setting allows pinning ap
Specifies the Start layout for users.
Specifies the Start layout for users.
This policy setting prevents users
Removes items in the All Users profi
Prevents users from adding the Favor
This policy setting allows you to rem
If you enable this setting the freque
If you enable this setting the "Pinn
Prevents the operating system and ins
Removes the Recent Items menu from t
This policy setting prevents the syste
This policy setting prevents the syste
Allows you to remove the Run command
This policy setting allows you to remo
Hides all folders on the user-specifi
This setting affects the presentatio
Prevents the clock in the system notif
This setting affects the taskbar butt
This setting affects the taskbar.The
This setting affects the notification
If you enable this setting the "Undo
If you enable this policy the Start
This policy setting allows you to remo
If you enable this setting users cann
Set the default action of the power b
This policy setting shows or hides th
This policy setting allows users to g
This policy setting allows the Apps v
This policy setting allows desktop ap
This policy setting allows the Start
Allows you to disable System Restore
Allows you to disable System Restore.
Turns off the integration of applicati
Turns off the integration of applicati
Prevents Input Panel tab from appeari
Prevents Input Panel tab from appeari
Prevents the Tablet PC Input Panel ic
Adjusts password security settings i
Adjusts password security settings i
Includes rarely used Chinese Kanji an
Includes rarely used Chinese Kanji an
Turns off both the more toler
Turns off both the more toler
Prevents the Touch Keyboard and Handw
Prevents the Touch Keyboard and Handw
Prevents start of InkBall game.If you
Prevents start of InkBall game.If you
Prevents start of Windows Journal.If
Prevents start of Windows Journal.If
Prevents printing to Journal Note Write
Prevents printing to Journal Note Write
Prevents the snipping tool from runnin
Prevents the snipping tool from runnin
Disables visual pen action feedback e
Disables visual pen action feedback e
Removes the Back->ESC mapping that n
Removes the Back->ESC mapping that n
Prevents the user from launching an
Prevents the user from launching an
Prevents press and hold actions on har
Prevents press and hold actions on har
Turns off Tablet PC hardware buttons.
Turns off Tablet PC hardware buttons.
Makes pen flicks learning mode unavail
Makes pen flicks learning mode unavail
Makes pen flicks and all related featu
Makes pen flicks and all related featu
This policy setting allows you to lock
This policy disables the functionality 1
This policy setting allows you to tur 0
This policy setting allows users to s 1
This policy setting removes Notificati
Limits newly scheduled to items on t 0
Limits newly scheduled to items on t
This setting removes the "Open advanc
This setting removes the "Open advanc
Prevents users from adding or removi
Prevents users from adding or removi
Prevents users from starting and sto
Prevents users from starting and sto
Prevents users from viewing and chan
Prevents users from viewing and chan
Prevents users from creating new tas
Prevents users from creating new tas
Prevents users from deleting tasks f
Prevents users from deleting tasks f
This policy setting allows you to sele
This policy setting specifies the IP
Fair Share CPU Scheduling dynamically
This policy setting enables system a
Controls whether a user can save pas
Controls whether passwords can be sa
Specifies whether to require the use
Specifies the authentication method t
If you enable this policy setting whe
Specifies the address of the RD Gatew
Specifies whether to allow Remote De
This policy setting allows you to li
This policy setting allows you to c
Specifies whether desktop wallpaper
This policy setting allows you to ent
Specifies whether Remote Desktop Ser
Specifies whether to remove the Wind
If you enable this policy setting adm
If you enable this policy setting adm
Configures Remote Desktop Services to
Configures Remote Desktop Services to
Specifies whether Remote Desktop Serv
This policy setting allows you to lim
This policy setting allows you to li
Specifies whether a Remote Desktop S
This policy setting allows you t
This policy setting allows you to pe
This policy setting specifies the de
This policy setting controls whether 1
This policy setting allows you to con 0
Turns off the caching of thumbnails in
Turn off Tablet PC touch inputTurns of
Turn off Tablet PC touch inputTurns of
Turn off Panning Turns off touch
Turn off Panning Turns off touch
This policy setting configures how m
This setting lets you prevent users 1
This setting lets you prevent users
This setting lets you prevent users fr
This setting lets you prevent users fr
This policy setting lets you prevent u
This policy setting lets you prevent u
This policy setting lets you prevent
This policy setting lets you prevent
This setting lets you disable the data
This setting lets you disable the data
This setting lets you disable file rest
This setting lets you disable file rest
This setting lets you disable the creat
This setting lets you disable the creat
This policy setting adds the Administr 0
This policy setting disables the more
This policy setting restores the def
This policy setting disables the dete
This policy setting provides users wi
This policy setting lets you exclude
This setting determines if roaming us
This policy setting controls how long
This policy setting will automaticall
This policy setting determines how ma
This policy setting determines if the
This policy setting controls how long
This policy setting sets the schedule
This setting prevents users from mana
This policy setting turns off the adve
This policy setting controls on a pe
This policy setting controls computer
This policy setting lets you configu 1
This policy setting allows you to con 0
This policy setting specifies the co
This policy setting allows you to ass
This policy setting allows you to asso
This policy setting controls the use
This policy setting specifies a set
This policy setting prevents compute
This policy setting prevents computer
This policy setting prevents clients
This policy setting specifies that
This policy setting determines the da
Windows Calendar is a feature that a
Windows Calendar is a feature that a
By default Add features to Windows 10
By default Add features to Windows 10
This policy setting affects the ability
This policy setting affects the ability
This policy setting prohibits access
This policy setting prohibits access
This policy setting allows the config
Allows an administrator to specify if 1
This policy setting controls the load 0
This policy setting turns off Window
This policy setting allows you to
This policy if defined will prevent a
This policy setting allows you specif
This policy setting allows you to di
This policy setting limits the rate at
This policy if defined will prevent n
This policy setting defines a list o
This policy setting defines processe
This policy setting defines threats
This policy setting defines addition
This policy setting configures a local
This policy setting defines the numbe
This policy setting allows you to confi
This policy setting controls whether r
This policy setting turns off real-ti
This policy setting defines the maxim
This policy setting configures the ti
This policy setting configures the tim
This policy configures Windows soft
This policy allows you to configure tr
This policy setting allows you to crea
This policy setting defines the numbe
This policy setting allows you to 1
This policy setting allows you to def 0
This policy setting allows you to defi
This policy setting allows you to enab
This policy setting allows you to defi
This policy setting allows you to joi
This policy setting configures 1
This policy setting customize which r 0
This policy setting allows you 1
This policy setting allows user
This policy setting allows you to conf 0
Hide the Back button in the Open dia
Removes the list of most recently use
Removes the shortcut bar from the Op
Configures the list of items displaye
This setting allows an administrator
Allows you to have File Explorer disp
This setting is designed to ensure t
"This policy setting allows you to s
Disables the "Hide keyboard navigatio
Removes all computers outside of the
Removes the File menu from My Comput
Removes the Hardware tab.This settin
Removes the Manage item from the Fi
Prevents users from using File Explo
When a file or folder is deleted in Fi
Prevents users from submitting altern
Removes the Security tab from File Exp
Removes shortcut menus from the desk
Prevents users from using My Computer
Turn off Windows+X hotkeys.Keyboards
Prompts users for alternate logon cre
Limits the percentage of a volume's d
If you enable this policy the "Intern
This policy setting allows up to five
Disables suggesting recent queries fo
Changes the behavior of IShellFolder:
Changes the behavior of IShellFolder:
This policy setting allows you to have
This policy setting allows you to have
Shows or hides lock from the user til
Shows or hides sleep from the power o
Shows or hides hibernate from the po
This policy removes the end-user notif
This policy specifies the path to a fi
This policy setting specifies an alte
This policy setting specifies the ma
This policy setting hides the file sc
Allows unsolicited incoming messages
Allows you to view and change the pro
Allows administrators to use the Wind
Turns on Windows Firewall.If you enab
Specifies that Windows Firewall block
Allows inbound file and printer shari
Defines the set of Internet Control
Allows Windows Firewall to record inf
Prevents Windows Firewall from displ
Allows you to view and change the inb
Allows remote administration of this
Allows this computer to receive inbo
Prevents this computer from receivin
Allows this computer to receive unso
Allows you to view and change the pro
Turns on Windows Firewall.If you enab
Specifies that Windows Firewall block
Allows inbound file and printer shari
Defines the set of Internet Control
Allows Windows Firewall to record inf
Prevents Windows Firewall from displ
Allows you to view and change the inb
Allows remote administration of this
Allows this computer to receive inbo
Prevents this computer from receivin
Allows this computer to receive unso
Denies or allows access to the Window
Denies or allows access to the Window
Windows Mail will not check your ne
Windows Mail will not check your ne
Prevents Windows Media Digital Right
This policy setting allows a screen s
Prevents the anchor window from bein
This policy setting prevents Windows 1
This policy setting prevents Windows
This policy setting turns on or turns
This policy setting turns on or turns
This policy setting configures access
This policy setting configures the ma
This policy setting is deprecated and
This setting controls automatic upda
This setting allows you to remove ac
Specifies whether this computer will 0
Specifies an intranet server to host 1
Specifies the hours that Windows will
Specifies whether Automatic Updates s
Specifies whether Automatic Updates
Specifies whether the Windows Update
Specifies that to complete a schedule
If you enable this policy a restart t
Specifies the amount of time f
Specifies the amount of time for Auto
Specifies the amount of time for Auto
Specifies the target group name or na
Even when Windows Update is configur
If you enable this policy setting in
This policy setting controls the leg
This policy setting configures the nu
This policy setting controls the use o
This policy controls whether the log
This policy controls which action wi
This policy controls whether the logg
This policy controls whether the logg
Specifies an alternate user interface
This policy setting configures the cos
Set up the menu name and URL for the
This policy setting specifies the Wor
This setting lets you configure how
This policy setting blocks a
This policy setting specifies t
This policy setting specifies t
This policy setting blocks voi
Status Policy Path
Computer Configuration\Windows Settings\Account Policies\Password Policy

Computer Configuration\Windows Settings\Account Policies\Account Lockout Policy
Computer Configuration\Windows Settings\Local Policies\Kerberos Policy
Computer Configuration\Windows Settings\Local Policies\Audit Policy
Computer Configuration\Windows Settings\Local Policies\User Rights Assignment
Computer Configuration\Windows Settings\Local Policies\Security Options
Computer Configuration\Windows Settings\Security Settings\Event Log
Computer Configuration\Windows Settings\Security Settings\Restricted Groups
Computer Configuration\Windows Settings\Security Settings\System Services
Computer Configuration\Windows Settings\Security Settings\Registry
Computer Configuration\Windows Settings\Security Settings\File System
Policy Name
Enforce password history

Maximum password age
Minimum password age
Minimum password length
Password must meet complexity requirement
Store passwords using reversible encryption for all users in the domain
Account lockout duration
Account lockout threshold
Reset lockout counter after
Enforce user logon restrictions
Maximum lifetime for service ticket
Maximum lifetime for user ticket
Maximum lifetime for user ticket renewal
Maximum tolerance for computer clock synchronization
Audit account logon events
Audit account management
Audit directory service access
Audit logon events
Audit object access
Audit policy change
Audit privilege use
Audit process tracking
Audit system events
Access this computer from the network
Access Credential Manager as a trusted caller
Act as part of the operating system
Add workstations to a domain
Adjust memory quotas for a process
Allow log on locally
Allow log on through Remote Desktop Services
Backup files and directories
Bypass traverse checking
Change the system time
Change the time zone
Create a pagefile
Create a token object
Create global objects
Create permanent shared objects
Create Symbolic Links
Debug programs
Deny access to this computer from the network
Deny log on as a batch job
Deny log on as a service
Deny log on locally
Deny log on through Remote Desktop Services
Enable computer and user accounts to be trusted for delegation
Force shutdown from a remote system
Generate security audits
Impersonate a client after authentication
Increase a process working set
Increase scheduling priority
Load and unload device drivers
Lock pages in memory
Log on as a batch job
Log on as a service
Log on locally
Manage auditing and security log
Modify an object label
Modify firmware environment values
Perform volume maintenance tasks
Profile single process
Profile system performance
Remove computer from docking station
Replace a process level token
Restore files and directories
Shut down the system
Synchronize directory service data
Take ownership of files or other objects
Accounts: Administrator account status
Accounts: Block Microsoft accounts
Accounts: Guest account status
Accounts: Limit local account use of blank passwords to console logon only
Accounts: Rename administrator account
Accounts: Rename guest account
Audit: Audit the accesss of global system objects
Audit: Audit the use of Backup and Restore privilege
Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy categ
Audit: Shut down system immediately if unable to log security audits
DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax
DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax
Devices: Allow undock without having to log on
Devices: Allowed to format and eject removable media
Devices: Prevent users from installing printer drivers
Devices: Restrict CD-ROM access to locally logged-on user only
Devices: Restrict floppy access to locally logged-on user only
Devices: Unsigned driver installation behavior
Domain controller: Allow server operators to schedule tasks
Domain controller: LDAP server signing requirements
Domain controller: Refuse machine account password changes
Domain member: Digitally encrypt or sign secure channel data (always)
Domain member: Digitally encrypt secure channel data (when possible)
Domain member: Digitally sign secure channel data (when possible)
Domain member: Disable machine account password changes
Domain member: Maximum machine account password age
Domain member: Require strong (Windows 2000 or later) session key
Interactive logon: Do not display last user name
Interactive Logon: Display user information when session is locked
Interactive logon: Do not require CTRL+ALT+DEL
Interactive logon: Machine account lockout threshold
Interactive logon: Machine inactivity limit
Interactive logon: Message text for users attempting to logon
Interactive logon: Message title for users attempting to logon
Interactive logon: Number of previous logons to cache (in case domain controller is not available)
Interactive logon: Prompt user to change password before expiration
Interactive logon: Require Domain Controller authentication to unlock workstation
Interactive logon: Require smart card
Interactive logon: Smart card removal behavior
Microsoft network client: Digitally sign communications (always)
Microsoft network client: Digitally sign communications (if server agrees)
Microsoft network client: Send unencrypted password to third-party SMB servers
Microsoft network server: Amount of idle time required before suspending session
Microsoft network server: Attempt S4U2Self to obtain claim information
Microsoft network server: Digitally sign communications (always)
Microsoft network server: Digitally sign communications (if client agrees)
Microsoft network server: Disconnect clients when logon hours expire
Microsoft network server: Server SPN target name validation level
Network access: Allow anonymous SID/Name translation
Network access: Do not allow anonymous enumeration of SAM accounts
Network access: Do not allow anonymous enumeration of SAM accounts and shares
Network access: Do not allow storage of passwords and credentials for network authentication
Network access: Let Everyone permissions apply to anonymous users
Network access: Named Pipes that can be accessed anonymously
Network access: Remotely accessible registry paths
Network access: Remotely accessible registry paths and sub-paths
Network access: Restrict anonymous access to Named Pipes and Shares
Network access: Shares that can be accessed anonymously
Network access: Sharing and security model for local accounts
Network security: Do not store LAN Manager hash value on next password change
Network security: Force logoff when logon hours expire
Network security: LAN Manager authentication level
Network security: LDAP client signing requirements
Network security: Minimum session security for NTLM SSP based (including secure RPC) clients
Network security: Minimum session security for NTLM SSP based (including secure RPC) servers
Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers
Network security: Restrict NTLM: Incoming NTLM traffic
Network security: Restrict NTLM: Audit Incoming NTLM Traffic
Network security: Restrict NTLM: NTLM authentication in this domain
Network security: Restrict NTLM: Audit NTLM authentication in this domain
Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication
Network security: Restrict NTLM: Add server exceptions in this domain
Network security: Allow LocalSystem NULL session fallback
Network security: Allow Local System to use computer identity for NTLM
Network security: Allow PKU2U authentication requests to this computer to use online identities.
Network security: Configure encryption types allowed for Kerberos
Recovery console: Allow automatic administrative logon
Recovery console: Allow floppy copy and access to all drives and all folders
Shutdown: Allow system to be shut down without having to log on
Shutdown: Clear virtual memory pagefile
System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing
System cryptography: Force strong key protection for user keys stored on the computer
System objects: Default owner for objects created by members of the Administrators group
System objects: Require case insensitivity for non-Windows subsystems
System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links)
System settings: Optional subsystems
System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies
User Account Control: Admin Approval Mode for the Built-in Administrator account
User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode
User Account Control: Behavior of the elevation prompt for standard users
User Account Control: Detect application installations and prompt for elevation
User Account Control: Only elevate executables that are signed and validated
User Account Control: Only elevate UIAccess applications that are installed in secure locations
User Account Control: Run all administrators in Admin Approval Mode
User Account Control: Switch to the secure desktop when prompting for elevation
User Account Control: Virtualize file and registry write failures to per-user locations
User Account Control: Allow UIAccess applications to prompt for elevation without using the secure
Maximum application log size
Maximum security log size
Maximum system log size
Prevent local guests group from accessing application log
Prevent local guests group from accessing security log
Prevent local guests group from accessing system log
Retain application log
Retain security log
Retain system log
Retention method for application log
Retention method for security log
Retention method for system log
Restricted Groups
System Services
Registry
File System
Supported On
At least Windows XP SP2, Windows Server 2003

At least Windows Vista, Windows Server 2008
Only Windows XP SP2
Windows XP SP2, Windows Server 2003
Windows 8, Windows Server 2012
Only Windows XP SP2, Windows Server 2003
At least Windows 7, Windows Server 2008 R2
Windows XP SP2, Windows Server 2003
Registry Settings
Password Policy security settings are not registry keys.

Account Lockout Policy security settings are not registry keys.
Kerberos Policy security settings are not registry keys.
Audit Policy security settings are not registry keys.
User Rights security settings are not registry keys
Not a registry key
Not a registry key
Not a registry key
MACHINE\System\CurrentControlSet\Control\Lsa\LimitBlankPasswordUse
Not a registry key
Not a registry key
MACHINE\System\CurrentControlSet\Control\Lsa\AuditBaseObjects
MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditing
MACHINE\System\CurrentControlSet\Control\Lsa\SCENoApplyLegacyAuditPolicy
MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail
MACHINE\SOFTWARE\policies\Microsoft\windows
NT\DCOM\MachineAccessRestriction
MACHINE\SOFTWARE\policies\Microsoft\windows
NT\DCOM\MachineLaunchRestriction
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UndockWitho
utLogon
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateDASD
MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print
Services\Servers\AddPrinterDrivers
MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon\AllocateCDRoms
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateFloppies
MACHINE\Software\Microsoft\Driver Signing\Policy
MACHINE\System\CurrentControlSet\Control\Lsa\SubmitControl
MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrit
y
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RefusePassword
Change
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrS
eal
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SealSecureChan
nel
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SignSecureChan
nel
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DisablePasswor
dChange
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPassw
ordAge
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireStrongKe
y
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayL
Machine\Software\Microsoft\Windows\CurrentVersion\Policies\System,
value=DontDisplayLockedUserId
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCAD
Not a registry key
Not a registry key
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeT
ext
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeC
aption
NT\CurrentVersion\Winlogon\CachedLogonsCount
NT\CurrentVersion\Winlogon\PasswordExpiryWarning
NT\CurrentVersion\Winlogon\ForceUnlockLogon
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ScForceOptio
n
NT\CurrentVersion\Winlogon\ScRemoveOption
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\Requi
reSecuritySignature
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\Enabl
eSecuritySignature
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\Enabl
ePlainTextPassword
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoDiscon
nect
Not a registry key
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSe
curitySignature
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSec
uritySignature
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableForc
edLogOff
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\SmbServer
NameHardeningLevel
Not a registry key
MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM
MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous
MACHINE\System\CurrentControlSet\Control\Lsa\DisableDomainCreds
MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessio
nPipes
MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPath
s\Machine
MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPath
s\Machine
nShares
nShares
MACHINE\System\CurrentControlSet\Control\Lsa\ForceGuest
MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash
Not a registry key
MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel
MACHINE\System\CurrentControlSet\Services\LDAP\LDAPClientIntegrity
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinClientSec
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\RestrictSendingNTLMTraffic
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\RestrictReceivingNTLMTraff
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\AuditReceivingNTLMTraffic
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RestrictNTLMInD
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\AuditNTLMInDom
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\ClientAllowedNTLMServers
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DCAllowedNTLMS
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\allownullsessionfallback
MACHINE\System\CurrentControlSet\Control\Lsa\UseMachineId
MACHINE\System\CurrentControlSet\Control\Lsa\pku2u\AllowOnlineID
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Par
ameters\SupportedEncryptionTypes
NT\CurrentVersion\Setup\RecoveryConsole\SecurityLevel
NT\CurrentVersion\Setup\RecoveryConsole\SetCommand
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ShutdownWit
houtLogon
MACHINE\System\CurrentControlSet\Control\Session Manager\Memory
Management\ClearPageFileAtShutdown
MACHINE\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy
MACHINE\Software\Policies\Microsoft\Cryptography\ForceKeyProtection
MACHINE\System\CurrentControlSet\Control\Lsa\NoDefaultAdminOwner
MACHINE\System\CurrentControlSet\Control\Session
Manager\Kernel\ObCaseInsensitive
MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode
MACHINE\System\CurrentControlSet\Control\Session Manager\SubSystems\optional
MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\AuthenticodeEn
abled
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\FilterAdministratorTo
ken
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBeha
viorAdmin
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBeha
viorUser
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableInstallerDetec
tion
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ValidateAdminCodeS
ignatures
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableSecureUIAPat
hs
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\PromptOnSecureDe
sktop
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableVirtualization
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableUIADesktopT
oggle
Event Log security settings are not registry keys.
Restricted Groups policy settings are not registry keys.
System Services policy settings are not registry keys.
not a registry key
File System policy settings are not registry keys.
Help Text
Enforce password history

Maximum
This security password age
setting determines the number of unique new passwords that have to be associated with a user account before an old password can be reused. T
Minimum
This password age
This securitypolicy enables settingadministrators
determines thetoperiod enhance of time (in days)
security that a password
by ensuring that old passwordscan be used arebefore
not reused the system requires the user to change it. You can set passwo
continually.
can
Minimum be any value between
password length 0 and 998 days.
This security setting determines the period of time (in days) that a password must be used before the user can change it. You can set a value between 1 and 9
Default:
Password
Note:
This It is amust
security securitymeetbest
setting complexity
practicethe
determines requirements
to least
have passwords expire every that30a to 90 days,for depending on yourmay environment. This way, an attacker has a limited1 andamount charo
The minimum password age must be lessnumber than theofMaximum characters password password
age, unless athe
user account
maximum password contain.ageYou is set canto set a value
0, indicating ofthat
between
passwords 14 neve
will
24 on passwords
Store domain controllers. using reversible encryption
This
Default:
Default:
0 on security 42. setting
stand-alone determines whether passwords must meet complexity requirements.
servers.
Configure the minimum password age to be more than 0 if you want Enforce password history to be effective. Without a minimum password age, users can cy
Account
This
choose lockout
security
a new duration
setting
password. determinesFor thiswhetherreason, the operating
Enforce password system storesispasswords
history set to 1 by using default. reversible encryption.
If
7
Note: this policy
on domain
By default, iscontrollers.
enabled,
member passwords
computers must meet
follow thethe following
configuration minimum
of their domain requirements:controllers.
Account
This
0
Toon lockout
security
stand-alone
maintain the threshold
setting determines
servers.
effectiveness number ofhistory,
of applications
the password minutes doa not
locked-out
allow account remains locked out before automatically becoming unlocked. The enabling
available range
This
Default:
Not contain policy provides
the user's support
account for name or partsthat of theuseuser's
protocols full namethatpasswords
require
that exceed
to be changed
knowledge of the user's
two consecutive
immediatelypassword
characters
afterfor they were
authenticationjust changed
purposes. by also
Storing the
passwords Miu
Reset
This
Be at account
security
least six lockout
setting
characters counter
determines in after
length the number of failed logon attempts that causes a user account to be locked out. A locked-out account cannot be used until it i
If
Note:
1
This an account
By default,
on policy
domain lockoutmember
is controllers.
required threshold
when is defined,
computers
using followthe theaccount
Challenge-Handshake configurationlockout ofduration
their domain
Authentication must
Protocolbe greater
controllers.
(CHAP) than or equal to the
authentication resetremote
through time. access or Internet Authentication Serv
Contain
Enforce characters
user logon from three
restrictions of the following four categories:
This
0
Failed on security
stand-alone setting determines
servers. (Athe number of minutes that must elapse afterbeena failed logon attempt before the failed logon attempt counter is reset screen to 0 badsav lo
Default:password
English
Default:
uppercase
None, because
Disabled.
attempts
charactersthis against
policy workstations
through
settingZ) only has or member
meaningservers when an that have
Account lockoutlocked using
threshold either CTRL+ALT+DELETE
is specified. or password-protected
Maximum
English
This lifetime
lowercase for service
characters ticket
(a through z)
If an security
Note:
Default:
Base account
By0.
10 default,
digits
setting
lockout
(0 member
determines
through threshold iswhether
computers
9) defined,
followthethisKerberos
the reset time
configurationV5mustKeyofDistribution
be thanCenter
lessdomain
their (KDC)
orcontrollers.
equal to thevalidates
Accountevery lockout request
duration. for a session ticket against the user rights pol
Maximum
This security
Non-alphabetic lifetime
setting for user
determines
characters ticket the maximum
(for example, !, $, #,amount
%) of time (in minutes) that a granted session ticket can be used to access a particular service. The setting
Default:
Default: Enabled.
None, because this policy setting only has meaning when an Account lockout threshold is specified.
Complexity
Maximum requirements
lifetime userare
fordetermines ticketenforced
renewal when passwords are changed or created.
This security setting
If a client presents an expired session ticket when it requests the maximum amount of timea(in hours) that
connection toaauser's
server,ticket-granting
the server returns ticketan (TGT)
errormay be used.
message. The client must request a new ses
Maximum
connection
This security tolerance
expires
setting for
during computer
determines the theclock
connection. synchronization
period of time (in days) during which a user's ticket-granting ticket (TGT) may be renewed.
Default: 10 hours.
Audit
Default:
This account
security
600 logon events
minutes
setting determines
(10 hours).the maximum time difference (in minutes) that Kerberos V5 tolerates between the time on the client clock and the time on the
Default: 7 days.
Audit
This account
security management
setting determines whether
To
Enabled prevent on"replay
domain attacks,"
controllers. Kerberos V5 the
usesOS timeaudits
stamps eachastime partthis of itscomputer
protocolvalidates
definition. anFor accounts
time stamps credentials.
to work properly, the clocks of the client and the do
Audit
difference
Disabled
This directory
securityon between service
stand-alone
setting access
adetermines
client clockwhether
servers. and the to domain
audit controller
each event clock
of is less management
account than the maximum on a time difference
computer. Examples that isofspecified in this policy, any
account management events timeinclude:
stamp that is
Account logon events are generated whenever a computer validates the credentials of an account for which it is authoritative. Domain members and non-dom
Audit
so
This
Important
Note: there logonis
security
By noevents
default, corresponding
setting determines logoff event
whether for
thethe account
OS logon
audits user attempts events. to access Active Directory objects. Audit is only generated for objects that have system a
A user account ormember
group iscomputers
created, follow
changed, orconfiguration
deleted. of their domain controllers.
Audit
A
This user object
account
security accessis
setting renamed,
isdetermines disabled,
whether or enabled.
If
The
This
A
thisadministrator
policy is
setting
password
setting
is not
set or can defined, the
specifyonwhether
persistent
changed. pre Vistato the
administrator
audit OS
platforms. audits
can
only each
Ifspecify
successes,
you instance
whether
configure only this toofaudit
failures,a user
setting only
both attempting
and successes,
successes
then restart to and
log
only on
the to or toor
failures,
failures,
computer, log
both off
tothis
not to
successes this these
audit
setting computer.
andevents
reverts failures, orallto(i.e.
to theatdefault not audit these
neither
value. succes ev
Audit
This policy
security change
setting determines whether
If youoff
Log
Default:
If
Default:Success
define
events
Success. this
auditing
5 minutes. arepolicy
generatedsetting, you
is enabled,whenever an audit entry athe
can specify OSwhether
logged audits
on user
is generated
user attempts
toaccount's
audit successes,
each timelogon
to access
any session
auditnon-Active
account is
failures,
terminated.
successfully
orDirectory thisobjects.
not Ifaudit
accesses
the event
policy Audit
setting
a Directory
type isisat
only
all.generated
Success
defined,
object thatthe
for objects
audits
hasadministrator
generate
a matching SACL
that
can have
an syste
audit
specify
specifie we
Auditsecurity
This privilegesetting use determines whether the OS audits each instance of attempts to change user rights assignment policy, audit policy, account policy, or trust
The
Default:
Default: administrator
Success. can specify whether to audit only successes, only failures, both successes and failures, or to not audit these events at all (i.e. neither succes
If Failure
Audit auditing
process is enabled, an audit entry is generated each time any user unsuccessfully attempts to access a Directory object that has a matching SACL sp
tracking
This
The security
administrator setting can determines
specify whether whether to audit each instance only of a user exercising a user right.
If
Success Success onauditing
domain iscontrollers.
enabled, an audittoentry audit isonly successes,
generated each timefailures, any account both successfully
successes and failures,a or
accesses to not audit these
non-Directory objectevents
that has at aallmatching
(i.e. neither
SACL succes
spec
Audit
Default:
This
No system
security
auditing on events
setting
member determines
servers. whether the OS audits process-related events such as process creation, process termination, handle duplication, and indirect
If Success
If you define this policy
auditing is setting, an
enabled, youauditcan entry
specify is whether
generated to when
audit successes,
an attempted audit failures,
change to or not
user audit
rights this type ofpolicy,
assignment eventauditat all.policy,
Success or audits
trust generate
policy is an aud
successfu
If
Access Failurethis auditing is enabled, from theannetwork audit entry is generated each time any user unsuccessfully attempts to access a non-Directory object that has a matching SAC
This
Success
If this securityon computer
policy settingiscontrollers.
domain
setting determines
defined, thewhether the OScan
administrator audits any of
specify the following
whether to audit events:
only successes, only failures, both successes and box
failures, clear
or to not
To
If set
Failure
Undefined this value
auditing
for can tois
a memberNo auditing,
enabled, computer.an in the Properties
audit entry dialog
is generated box
when for anthisattempted
policy setting,
change selectto userthe Define these policy
rights assignment settings
policy, check
audit policy, orand trust policy theisaudit
Successthese
attempted and ev
b
Note
This that
user you
setting isright used byset
determines a SACL which
Credential on a file
users system
and object
groups are using
allowed the Security
to connect tab toin that
the object's
computer Properties
over the
Manager during Backup/Restore. No accounts should have this privilege, as it is only assigned to Winlogon. Users saved cre dialog
network. box.
Remote Desktop Services are not affected by this
If Attempted
Success system
auditing time
is change
enabled, an audit entry is generated each time the OS performs one of these process-related activities.
Default:
Act
Default: as part
Attempted
Default:
No of auditing.
the operating
security
No auditing. systemsystem startup or shutdown
Note:
If Attempt Remoteto load Desktop
extensible Services was calledcomponents
authentication Terminal Services in previous versions of Windows Server.
Add Failure
Audits auditing
workstations
areon not is enabled,
to domain
generated for use an audit theentry
ofimpersonate is generated
following useruser each
rights, timeif the
even successOS fails to perform
audits one of these activities.for Audit privilege use. Enabling auditing of th
This
Success
Loss userof right
audited allows
domain events a process
due
controllers. to
to auditing system any failure without authentication. Theorprocess
failure audits are specified
can therefore gain access to the same local resources as that us
Default
No Security
auditing on workstations
log onsize exceeding
member and
servers. servers:
a configurable warning threshold level.
Adjust
Default:
This memory
No
security quotas
auditing
setting for
determines a processwhich groups
Administrators
Bypass
Processes traverse
that checking
require this privilege should useorthe users can add workstations
LocalSystem account, which to a already
domain.includes this privilege, rather than using a separate user account with
Backup
Debug
passwords
Allow log Operators
programs
If thisprivilege
policyoninsetting
locally
plaintext.is defined, the administrator can specify whether tocanaudit only successes,
This
This
Users
Create security
a token determines
setting who can change the maximum memory
objectis valid only on domain controllers. By default, any authenticated user that be consumed byhas a only
process.failures, both successes and failures, or to not audit these ev
this right and can create up to 10 computer accounts in the dom
Allow
Everyone
Replace
This
Caution
If Successlog
logon on
process through
auditing level
rightisdetermines Remote
token
is enabled, Desktop
whichan users Services
can interactively
auditDomain
entry is generatedlog each on to time thisthe computer.
OS performs Logons oneinitiated byactivities
pressing CTRL+ALT+DEL sequence on the attached keyb
This
Adding
Generateuser right
a computer
security defined
account
audits in theto theDefault
domain allowsController the computer Group toPolicy
participate object in(GPO)
Active and inofthe
Directorybased
theselocal security successfully.
networking.policy of workstations
For example, adding and servers.
a workstation to a dom
Back
This up files
security and
setting directories
determines
Back
Default
Default
Assigningupon
If Failure
Note: This
files
on domain
auditing and
userdirectories
workstations
this
privilege iscontrollers:
right and
enabled,
is useful beanawhich
can servers: security
audit users
entry isorgenerated
Administrators
risk. groups have
Only
but itassign
can eachbethis
permission
userthe
time rightOStotolog on asusers.
trusted
attempts a Remote
inand fails toDesktop
perform Services
one of these client. activities.
Default:
Administrators
Restore
Bypass
Backup Authenticated
files
traverse
Operators andchecking Users for
directories on system
domaintuning, controllers. misused, for example, a denial-of-service attack.
This user right Users
Default:
Authenticated determines which users can bypass file and directory, registry, and other persistent object permissions for the purposes of backing up the system
Users.
Default:
Default: None.
Administrators
Change
Note:
Enterprise
Caution
This user the
Users system
who
Domain
right have time the Create
Controllers
determines which Computer
users Objects directory
can traverse permission trees on even
the Activethough Directory
the user computers
mayinnot container
have can alsooncreate
permissions computerdirectory.
accountsThis in the domain
Specifically,
Local
On
permissions
Everyone Service
workstation this
on and user
the right is
servers:
computers similar to granting
Administrators,
container have thecreator
Remote
the following
Desktop as permissions
Users.
the owner oftothe thecomputer
user or group
account. question
If a useron has files andthe
allpermissions traversed
folders
on the oncontainer
the system: privilege
and also has the A
d
Default
Success
Change
Network onondomain
the domain
Time
Service. controllers:
Zone controllers. Account Operators
This
On
This user
domain
Pre-Windows
Incorrectly right
user Folder/Execute
Administrators
No auditing right determines
controllers:
on2000
editing is defined
member registry
in which
Administrators.
Compatible
the themay
servers. users
Access and groups
severely
Default Domain damage canyour
Controller change
Groupthe
system. timeobject
Before
Policy and
makingdate on the
changes
(GPO) andinternal
intothe clock
thelocal
registry,of the
youcomputer.
security should
policy of backUsers thatvalued
up any
workstations areandassigned
data onthis
servers. theuser right
computer
Traverse File
Create
Backup
This user a pagefile
Operators
right determines
Data inwhich users Domain
and groups can change
List
This Folder/Read
user
Important
Default
Print onright
Operators is defined
workstations andthe Default
servers: Controller Groupthe timeobject
Policy zone used (GPO) byand
the in computer
the localfor displaying
security policy theoflocal time, which
workstations andisservers.
the computer's syste
Read
Create Attributes
a token object
Administrators
This
Server
This user
user right is
Operators.
right determines
defined inwhich
the users Domain
Default and groups can callGroup
Controller an internalPolicy application programming interface (API)policy
to create and change the size of a page file. Th
Read
Default
This
Backup
Extended
on
setting doesAttributes
workstations
Operators not have and anyservers:
effect on Windows 2000 computers that object
have not (GPO)
beenand in the to
updated local security
Service Pack 2. of the workstations and servers.
Create
Readsecurity
This global
Permissions
Administrators objectsdetermines which accounts can be used by processes to create a token that can then be used to get access to any local resources when t
setting
For
Users information
Default: Administrators,about how Users to specify a paging file size for a given drive, see To change the size of the virtual memory paging file.
Local
Create
Everyone Service
permanent shared objects
This
Caution
This security right is used internally whether
setting determines users can createUnless global objects that aredo available to allthis sessions. Users
to a can user,still create or objects
processthat arethan
specific
LocaltoSyst
thei
Localuser
Default: Administrators.
Service by the operating system. it is necessary, not assign user right group, other
Create
Default
This Symbolic
on
userService domain
right Links
controllers:
determines which
Network
Caution
Assigning
Caution
Administrators this user right can be aaccounts
security risk. can Since
be used thereby processes
is no way to tobe create
sure athat directory
a userobject is backing usingup the object
data, manager.
stealing data, or copying data to be distributed,
Debug
This
Server programs
privilege
Operators determines if the user canoperating
create a system symbolic linkisfrom thetocomputer he iscomponents
logged on to.
This
Default user
Assigning on right
onthisdomain is used internally
controllers:
user right can be aby the and useful kernel-mode that extend the object namespace. Because components th
Default
Assigning
Local
Denyuser Service
access
Administrators
workstations
this touser
thisright
computer
and
can servers: a security
befrom security
the network
risk.
risk. Assign
Administrators Do not this assign user thisrightuser onlyrightto to
trusted
any user,users. group, or process that you do not want to take over the system.
This
Backup
Default: right
Operators.
Administrator
None determines which users can attach a debugger to any process or to the kernel. Developers who are debugging their own applications do not ne
Default:
Authenticated
Default: None.Users
Deny
This
Everyone log
security on as a batch job
settingcontrollers:Administrators
determines which users are prevented from accessing a computer over the network. This policy setting supersedes the Access this compu
Caution
Default
WARNING: on domain
This privilege should only be given to trusted users. Symbolic links can expose security vulnerabilities in applications that arent designed to hand
Local
Deny Service
log
Administrators
Backup on
Operatorsas a service
This
Default:
Network security
Guest
Service setting determines which accounts are prevented from being able to log on as a batch job. This policy setting supersedes the Log on as a batch jo
Assigning
Local
Server
Note Service this
Operators user right can be a security risk. Only assign this user right to trusted users.
Pre-Windows
This security 2000 Compatible
setting determines Access
which service accounts are prevented
Network
This
Default:setting Service
None. can be used in conjunction a symlink filesystem setting thatfrom can registering
be manipulated a process with the as command
a service. This policytosetting
line utility controlsupersedes
the kinds ofthe Log onthat
symlinks as aa
Default:
Service Administrators
Note: This security setting does not apply to the System, Local Service, or Network Service accounts.
Default: None.
Deny log on locally
Deny log on through
This security setting determines Remote Desktop which Services users are prevented from logging on at the computer. This policy setting supersedes the Allow log on locally policy settin
Enable
This computer
security setting anddetermines
user accounts which tousers
be trusted and groups for delegation are prohibited from logging on as a Remote Desktop Services client.
Important
Force
This shutdown
security from a remote system
setting determines which users can set the Trusted for Delegation setting on a user or computer object.
Default:
If you apply None. this security policy to the Everyone group, no one will be able to log on locally.
Generate
This security security
setting auditsdetermines
The user
Important or object that is grantedwhich users are
this privilege mustallowed havetowrite shutaccessdown atocomputerthe account fromcontrol
a remote flagslocation
on the on user the ornetwork.
computerMisuse object.ofAthis serveruserprocess
right can result on
running in
Default:
Impersonate None. a client after authentication
This user
This security right setting
is determines which accounts can be used by a process to add entries
andto the security log. The security log is usedand to trace unauthorized syst
This
log
This user
security
setting right
audits
does is defined
defined haveinany
notworking
in the Default
the effect
Default Domain Controller
onDomain
Windows Controller
2000 computers
Group
Group Policy Policy object
that object
have not
(GPO)
(GPO) beenand
in
in the
updated the to local
local security
security
Service Pack
policy
policy of workstations
2. of workstations and servers.
servers.
Increase
Assigning athis
process privilege to a userset allows programs running on behalf of that user to impersonate a client. Requiring this user right for this kind of impersonation
Default:
Caution
Increase
Default:
This privilegescheduling
Local Service
determines priority which user accounts can increase or decrease the size of a processs working set.
Caution
Network Service.
Increase
On
Load
Misuse of a
workstations
and process
unload
this user and working
device servers:
right, set
drivers
or of Administrators.
thewhichTrusted for Delegation
This securitycontrollers:
On domain setting determines accounts can use setting, a process could
withmakeWritethe network
Property vulnerable
access to anotherto sophisticated
process to increaseattacks using Trojan horse
the execution programs
priority assigned thatto
Assigning this user rightAdministrators, can be a security Server risk.Operators.
Only assign this user right to trusted users.
This
Lock
This
Default:privilege
pages
user indetermines
right memory
Administratorsdetermines onwhich whichuser
domain users accounts
controllers.can dynamicallycan increase load or and decrease the sizedrivers
unload device of a processs
or other code working in toset.
kernel mode. This user right does not apply to Plug
Default: Administrators.
Default:
Log on as a batch jobdetermines which accounts can use a process to keep data in physical memory, which prevents the system from paging the data to virtual
This
Default:
Caution security
Users setting
Log on as a service
Administrators
This security setting allows a user toset beoflogged on by means of a batch-queue facility andinisphysical
provided onlymemory.
for compatibilitypages with olderresident
versionsand of Windows.
Default:
The
Localworking
Assigning None.
Service thisset user of aright process can be is the
a security memory
risk. Do pages not assign currently
this user visiblerightto totheany process
user, group, RAM
or process that you Thesedo not want toare take over the available for
system.
Log
This
Network on locally
securityService setting allows a security principal to log on as a service. Services can be configured to run under the Local System, Local Service, or Networkuse Se
For example,
Warning: when athe
Increasing user submits
working setasize job by formeans
a process of the task scheduler,
decreases the amount the task scheduler
of physical memorylogs that user on
available toasthea rest
batch of user rather than as an interactive
the system.
Default
Service
Manage on workstations
auditing and and
security servers:
log Administrators.
Determines
Default setting:which None. users can log on to the computer.
Modify
Default
Note:
This
Default: By an
on
security object
domain
default, setting
Administrators label
controllers:
services determines that are whichstarted users by can
the Service
specify object Controlaccess Manager have options
auditing the built-in Service group
for individual added such
resources, to theiras access tokens.
files, Active Component
Directory objects, Object Mo
and reg
Important
Administrators
Backupfirmware
Modify Operators. environment values
This
Print
In
This privilege
Operators
addition,
security a userdetermines can also which usera accounts
impersonate antoaccess can modify token ifthe
any integrity
of the labelauditing
following of objects,
conditions such asFor
exist. files, registry keys, or
beprocesses owned byobject
otheraccess
users. Proces
Modifying thissetting
settingdoes may not affect allowcompatibilityuser enable
with clients, file and object
services, access
and applications. in For
general.
compatibility such auditing
information toabout enabled, the
this setting, Audit
see Allow setting
log on locally (h
Perform
This securityvolume setting maintenance
determines taskswho can modify firmware environment values. Firmware environment variables are settings stored in the nonvolatile RAM of n
Default:
The can
You access None
view token
audited thatevents is being in impersonated
the security log is of
forthe thisEventuser.Viewer. A user with this privilege can also view and clear the security log.
Default:
Profile
The single
user, in this process logon session, created the access tokencan by logging on to the network withvolume,
explicit such credentials.
Thisx86-based
On security setting
computers, determines which users and groups runthat maintenance tasks on by a as remote
right is defragmentation.
The
Default:requested
Administrators.level is lessthe than only firmware
Impersonate, environment
such as Anonymous value orcan be modified
Identify. assigning this user the Last Known Good Configuration setting,
Profile
On
Because
This system
OnItanium-based
workstations
security of performance
setting
these computers,
and servers:
determines
factors, users bootwhich
do information
Administrators,
not users
usually can is use
Backup
need stored in
performance
this user nonvolatile
Operators, right. Power RAM.
monitoring Users, Users
tools must
Users,to be assigned
and
monitor Guest.
the this user right
performance of to run bootcfg.exe
nonsystem processes. and to change the Defa
Use
On
Onallcaution
computers,
domain when
controllers: assigning
this user this is
right
Account user required
Operators, right. Users with
toAdministrators,
install orthisupgrade user
Backup right
Windows. can exploreand
Operators, disks and
Print extend files in to memory that contains
Operators. other data. When the exten
Remove
This securitycomputer from
setting determines docking station
which users can use performance monitoring tools toSDK. monitor the performance of system processes.
Default:
For more
Default: Administrators,
information,
Administrators Powerfor
search users.
"SeImpersonatePrivilege" in the Microsoft Platform
Note:
Replace This a security setting
process level does not affect who can modify the system environment variables and user environment variables that are displayed on the Advanc
token
This security setting determines whether a user can undock a portable computer from its docking station without logging on.
Default:
WarningAdministrators.
Restore
Default:
This files and directories
Administrators.
If thissecurity
policy issetting enabled, determines
the user which must log user onaccounts
before removing can call the the CreateProcessAsUser()
portable computer from its application
docking station. programming interface
If this policy (API) so the
is disabled, thatuserone mayservice can star
remove the
If you enable
Shut security
down thesetting this
system setting, programs that previously had the Impersonate privilege may lose it, and they may not run.
This
Default: Network Service, determines LocalUsers, which
Service. users can bypass file, directory, registry, and other persistent objects permissions when restoring backed up files and di
Default: Administrators, Power Users
Synchronize
This securitythis directory
setting service data
Specifically, userdetermines
right is similar which users who
to granting theare loggedpermissions
following on locally to to thethe computer
user or group can shut down theon
in question operating
all files andsystem
folders using onthetheShut
system: Down command. M
Take
This ownership
security of files
setting determines or other objects
which users and Operators,
groups have the authority to synchronize all directory service data. This is also known as Active Directory syn
Default
Traverse onFolder/Execute
Workstations: Administrators,
File Backup Users.
Accounts:
This
Writesecurity Administrator account status
setting determines which users can take ownership of any securable object in the system, including Active Directory objects, files and folders, prin
Defaults:
Default onNone. Servers: Administrators, Backup Operators.
Accounts:
This security Block setting Microsoft determines accounts whether the local Administrator account is enabled or disabled.
Caution
Default on Guest
Accounts: Domain controllers:
account status Administrators, Backup Operators, Server Operators, Print Operators.
This
Notes policy setting prevents users from adding new Microsoft accounts on this computer.
Assigning this user right can be a security risk. Since owners users with of objects
this userhave rightfullcan control
overwrite of them,
registryonlysettings,
assign this hideuser
data, right
andtogain trusted users. of system objects,
ownership
Accounts:
This security Limit settinglocaldetermines
account useif of theblank Guest passwords
account isoption, toenabled
consoleor logon only
disabled.
If
If you
you select
try to the
reenable Users the cant add Microsoft
Administrator account accounts
after it has been users will notand
disabled, be able
if the tocurrent
createAdministrator
ne Microsoft accounts password on thisnot
does computer,
meet the switch
password a local account to
requirements
Default:
Accounts: Administrators.
Rename administrator account
This security
Disabling
Default: the
Disabled. setting
Administrator determines account whether can become local accounts a maintenance that are not issue password
under certain protected can be used to log on from locations other than the physical computer
circumstances.
If you select the Users cant add or log on with Microsoft accounts option, existing Microsoft account users will not be able to log on to Windows. Selecting thi
Accounts:
Workstations
This security Rename and servers:
setting guest
determines account
Administrators,
whether a Backup
differentOperators.
accountwill name
Default:
Under
Note: Enabled.
Safe Mode boot, theisdisabled Administrator account onlyisbe associated
enabledSharing ifwith
the the security
machine identifier (SID)
is non-domain for the
forjoined andaccount
thereisare Administrator.
setno toother
Guestlocal
Renaming
active the w
adminis
If you If
Domain
Audit:
the
disable
Audit
Guest
controllers:
the doaccount
oraccess Administrators,
not configure
of global
disabled this
system
Backup and the
policyobjects
security
Operators,
(recommended), option
Serverusers Network willAccess:
Operators. be able to use Microsoft and Security accounts Modelwith local accounts
Windows. Only, network logo
This security
Default: setting determines whether a different account name is associated with the security identifier (SID) for the account "Guest." Renaming the well-kn
Administrator.
Default: Disabled.
Audit:
This Audit the
security
Warning: settinguse of Backup and
determines whetherRestore privilege
to audit the access of global system objects.
Default: Guest.
Audit:
This Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings.
If thissecurity
Computerspolicythat issetting
enabled,
are not determines
it causes
in physically whether
system secure to audit
objects,
locations the
such use asofmutexes,
should allalways
user privileges,
events,
enforcesemaphores including
strong passwordBackup
and DOS anddevices,
policies Restore,
for all to when
be user
local theaccounts.
created Auditwithprivilege
a default use
Otherwise, systempolicy is inwith
access
anyone effect.
control
physi E
Audit:
Windows Shut
If you apply down
thisand
Vista system
securitylater immediately
policy
versions to theof if unableallow
Everyone
Windows to
group,logauditsecurity one audits
no policy willto bebe able
managed to log in onathrough
more Remote
precise wayDesktop
using Services.
audit policy subcategories. Setting audit policy at
If you disableconfiguring
Note: this policy,this thensecurity
use of the Backup or Restore notprivilege is not audited even Windows.
when Audit privilege use is enabled.
using When
DCOM: subcategories
Machine Access without requiringsetting,
Restrictions a change
in Security
changes
toDescriptor
Group will Policy, take
Definition
effect
there is auntil
new you restart
registry value in Windows Vista and later versions, SCENoApplyLegacyAuditPo
This
Notessecurity setting determines whether the system shuts down if it isLanguage
unable to log (SDDL) syntax
security events.
Note: OnDisabled.
Default: Windows versions prior to Windows Vista configuring this security setting, changes will not take effect until you restart Windows. Enabling this setting
DCOM:
If
This Machine
the category level Launch audit Restrictions
policy set here in Security
is or notgroups Descriptor
consistent withDefinition
the events Language
that are(SDDL) currently syntax
being generated, the cause might to be that this registry key is set.
If thispolicy
This security
setting setting
does setting determines
not is enabled,
affect which
logons it that users
causes usethe domainsystem can
to stop
accounts. access if a DCOM
securityapplication
audit cannot remotely
be logged or locally.
for anyThis reason.setting is used
Typically, an control
event fails the to attack surface
be logged of the
when the
Default:
Devices:
It is possibleDisabled.
Allow for undock
applications without having
that use to
remote log on
interactive logons to bypass this setting.
Default:
This
You policy
can Disabled
use setting
this determines
policy setting which
to specify users or groups
access permissions can launch to allorthe
activate
computers DCOMtoapplications
particular remotely
users for or locally.
DCOM This setting
applications in is used
the to control
enterprise. When theyouattack su
specif
If the security log is full and an existing entry cannot be overwritten, and this security option is enabled, the following Stop error appears:
Devices:
Denysecurity
This Allowed
privileges settingontoboth format local
determines and eject
access was removable
and remote media
access.
Note:
You can Remote
use this Desktopsetting to grant whether
Services access calledtoa all
portable
Terminal
the computerscomputer
Services tocan
inusers be undocked
previousof DCOM versions without having
of Windows
applications. Whento log
Server.you on.define
If this thispolicy is enabled,
setting, and specifylogon the is not required
users and an
or groups thate
STOP: C0000244
Devices:
launch, Prevent
remote {Auditlocal
users
launch, Failed}
from installing
activation, printer
and drivers
remote when
activation. connecting to shared printers
The
This registry
security
Default:
An attempt tosettings
Enabled. setting
generate determines
thata are created
security whoaudit is
asallowed
a resulttoofformat
failed. enabling andthe ejectDCOM:removableMachine NTFS Accessmedia. Restrictions
This capability in Security
can be Descriptor
given to: Definition Language (SDDL) synta
existing
Devices:
To recover, registry
Restrict
an settings
CD-ROM
administrator areaccess
no
must longerlogto effective,
locally
on, and
logged-on
archive the iflogyou
user make
only
(optional), changes
clear to the
the log, existing
and reset settings,
this computer
option as accessUntil
desired. permissions for users are not changed. Uso
For
The aregistry
computer
Administrators settings to print that toarea shared
created printer,
as a result the driverof this forpolicy
that shared printer must
take precedence over be theinstalled
previous on the local settings
registry computer. Thisthis
in this security
security
area. Remote setting
setting is reset,
determines
Procedure no
Callwhousers,
is allo
Services
Caution
Devices:
Administrators
The
Note:possible
This security
On Restrict and
values
setting floppy
Interactive
for thisaccess
determines policy to
Users locally
setting
whether alogged-on
are:
CD-ROM user only thistosecurity
is accessible both local and remote users simultaneously.
Default
The onWindows
possible valuesversions
servers: Enabled.
for this Group prior to Windows
Policy setting Vistaare:configuring setting, changes will not take effect until you restart Windows.
Disabling
Devices:
Default on this
Unsigned policy
workstations: may
driver tempt users
installation
Disabled to try
behavior and physically remove the laptop from its docking station using methods other than the external hardware eject but
This

If security
Default:
Blank. This
This setting
policy
represents is determines
not defined
the local whether
and
security only removable
Administrators
policy way floppy
of deletingmedia
have this are
the accessible
ability.
policy enforcement to both local
key. and
This remote
value users
deletes simultaneously.
the policyisand then sets and it as Notisdefined state.
this
Default:
Blank.policyThisisrepresents
Disabled. enabled, itthe allows
localonly security the interactively
policy way of logged-on
deleting user to access
the policy removable
enforcement key.CD-ROM
This value media.
deletes If this
thepolicy
policy and enabled
then sets itnotoone loggedstate.
Not defined on in
Domain
This controller:
security setting Allow server
determines operators
what happens to schedule
when antasksattempt is made to install a device driver (by means of Setup API) that has not been tested by the Win
If
this
SDDL.
Default: policyThisispolicy
isenabled,
the is notit defined
Security allows only
Descriptor andthe interactively
Definition Language logged-on user to to
is notrepresentation access removable
of locally
the groups floppy
and media.you
privileges If this policywhen
specify is enabled
you enableand no one
this is logged on intera
policy.
SDDL.This
Notes

Domain This is theLDAP
controller: Security serverDescriptor
signing
CD-ROM
Definition
requirements
access
Language restricted
representation the
of the groups logged-on user.
and privileges you specify when you enable this policy.
This
The securityare: setting determines if Server Operators are allowed to submit jobs by means of the AT schedule facility.
Notoptions
Default: This policy
Defined. This is is not
the defined
default value. and floppy disk drive access is not restricted to the locally logged-on user.

This
Not
This setting
Defined.
security does This
setting notisdetermines
affect
the defaultthe ability value.
whether to add a localserver printer.requires signing to be negotiated with LDAP clients, as follows:
Note:
Silently
This This security
succeed
setting setting
does not affect Administrators. only affects thethe ATLDAPschedule facility; it does not affect the Task Scheduler facility.
Note
Default: This policy is not defined, which means that the system treats it as disabled.
Warn
Note
None: but allow
Data signing is
If the administrator installation
is denied
not required permission in order to to bind with
access DCOM theapplications
server. If thedue client requests
to the changes datamade signing, to DCOMthe server supportsthe
in Windows, it. administrator can use the DCOM:
Do
If thenotadministrator
Require
application allow toinstallation
signature: is denied
Unless
the administrator access
TLS\SSL and users. istobeing
activate doand
Toused, this,thelaunchLDAPthe
open DCOM
data DCOM: applications
signing optiondue
Machine must
Access to be
the changes made
negotiated.
Restrictions to DCOM
in Security in this version
Descriptor Definition of Language
Windows, this (SDDL)policy setti
syntax
Default:
This restores Warncontrol but allow of theinstallation.
DCOM application to the administrator and specified users. To do this, open the DCOM: Machine Launch Restrictions in Security D
Default: This policy is not defined, which has the same effect as None.
Domain controller: Refuse machine account password changes
Domain
This security member: setting Digitally
determines encrypt or signdomain
whether secure controllers
channel data will(always)
refuse requests from member computers to change computer account passwords. By default,
Domain
This member:
security setting Digitally
determines encrypt secureall
whether channel
secure data
channel (when possible)
traffic initiated
If it is enabled, this setting does not allow a domain controller to accept anyby the domain
changes member must
to a computer account'sbe signed password. or encrypted.
Domain
This member:
security Digitally
setting determines sign secure
whether channel
a domain data (when
member possible)
attempts to that,
negotiate
When
Default: a This
computer policyjoins is not a defined,
domain, a computer
which means account
that theissystem created. After
treats whenencryption
it as Disabled. the systemfor all secure
starts, it useschannel the computer traffic that account it initiates.
password to create a secure
Domain
This member:
security setting Disable
determines machine account
whether a password
domain member changes attempts to negotiate signing for all secure channel traffic that it initiates.
When a computer
This setting determines joins awhether domain, oranot computer
all secure account
channel is created.
traffic initiated After that, by the when domainthe system member starts,
meets it uses
minimum the computer account password
security requirements. to create
Specifically a secure
it determin
Domain
Determines
the Domain member: whether
Controller Maximum
a in
domain
which machine
member
case account
the periodically
level of password
signing changes age encryption
and its computer account
depends on password.
the version Ifstarts,
this
of thesetting
Domain isthe enabled,
Controller theand domain member
the settings ofdoes
the not attempt
following twotop
When
This setting determines whether or not the domain member attempts to negotiate encryption for all secure channel traffic that it initiates. If enabled, theadomain
a computer joins a domain, a computer account is created. After that, when the system it uses computer account password to create secure
Domain
This
negotiate member:
security secure setting Require
channeldetermines stronghow
encryption. (Windows often a 2000
domain or later)
member session will key
attempt to change its computer account password.
Default:
Domain
This setting Disabled.
member: determines Digitally encrypt
whether orsecure
not thechannel domain data member (when possible)
attempts to negotiate signing for all secure channel traffic that it initiates. If enabled, the domain me
Interactive
Domain
This security logon:
member: setting Do not display
Digitally
determines sign secure last user
whether channelnamedata
128-bit key (when
strength possible)
is required for encrypted secure channel data.
Default:
This
Notessecurity 30 days.
Enabled. setting determines whether the name of the last user to log on to the computer is displayed in the Windows logon screen.
Default:
Interactive Enabled.
Logon: Display user information
If this policy
Default:
When a Enabled.
computer is enabled, joins athe name
domain, of the lastwhen
a computer user session
to
account successfully is locked on is not displayed in the Logon Screen. .
is created.log After that, when the system starts, it uses the computer account password to create a secure
Important
This security setting should not be enabled. Computer account passwords are used to establish secure channel communications between members and doma
Interactive logon: Do not require CTRL+ALT+DEL
Notes:
If this
This
Notes:
Depending policy
setting is
shoulddisabled, not bethe used name in of
an the
attempt last user
to to
support log on is
dual-boot displayed. scenariosthat thatthe usedomain the same computer account. If youwith want to the
dual-boot
settingstwo of installations tha
This
Interactiveis no on
Theresetting known whatreason
applies version
to Windows for ofdisabling
Windows
2000 is running
computers,
this setting.but on itthe
Besides domain
is not available
unnecessarilycontroller throughreducing the Security
the potential member
Configuration is communicating
confidentiality Manager leveltools of the and
onsecure
these computers.
channel, the parameters
disabling this settin
policylogon:
This Machine account threshold.
If thesecurity setting
Domain determines
member: whether
Digitally encryptpressing or sign CTRL+ALT+DEL
secure channel is data
required before
(always) is aenabled,
user canthen log this
on. policy is assumed to be enabled regardless of its curr
Thethismachine
Default:
If Disabled.
policy islockout
enabled, policy is
theencrypt enforced
policy Domain only onand
member: those machines
Digitally sign that
securehavechannel Bitlocker enabled for protecting OS volumes. Please ensure that appropriate recove
Domain
Interactive
Note: member:
controllers
Domain logon: Digitally
are
Machine
controllers alsoare domain
inactivity ormembers
also Domain sign
limit.
domain secure
members channel
establish data
and establish secure(always) channels
secure withdata
channels other (when
with(when domain possible)
otherpossible) controllers
domain
is assumed
controllersin the same
in
to bedomain
thebesame
enabled asregardless
domain wellas aswell
domainof its current
asits controllers
domain
settin
contro in
If
If this
this policy
Domain policy
member: is
is enabled,
enabledDigitally the
on apolicy
computer,
encrypt secure a user member:
channel is notdata Digitally
required (whensign topossible)secure
press channel
CTRL+ALT+DEL data to log on. Not having is assumed to press to enabled
CTRL+ALT+DEL regardlessleavesofusers current settin
susceptibl
This
Logon security
Interactive information setting
logon: determines
transmitted
Message text overthe number
the
forisusers secure of
attempting failed
channel logonis attempts
always that
encrypted causes the
regardless machine
of whether to be locked
encryption out. of A locked
ALL other out machine
secure channelcan only
traffic be isrecovered
negotiated by o
Some
Windows or all of theinactivity
notices information of athat
logon transmitted
session, and over if to
thethelog on
secure
amount channel
of inactive will be exceeds
time encrypted. theThis policy limit,
inactivity setting then determines
the screen whether
saver will or not run,128-bit
lockingkey thestrength
session.i
If this policy is disabled, any user is required to press CTRL+ALT+DEL before logging on to Windows (unless they are using a smart card for Windows logon).
Interactive
Failed
This password
If thissecurity
setting logon:
setting
is Message
attempts
enabled, specifiesthen title
against a for
thetext users
workstations
message
secure attempting
channel that is to
or will
member logbe
displayed
not on
servers to users
established that whenhave
unless been
they locked
log
128-bit on. using either
encryption can CTRL+ALT+DELETE
be performed. If this setting or password is disabled,protected then screen
the keysav str
Default: not enforced.
Default on domain-computers:
Interactive logon: Number of Disabled.
previous logons to cache (in case domain controller is not available)
This
The
This
Default security
machine
texton setting
lockout
is stand-alone
often used for allows
policy the
is specification
enforced
legal reasons,
computers: Enabled. only of
on a title
those to appear
machines in the
that title
have bar of
Bitlocker the window
enabled that
for contains
protecting
for example, to warn users about the ramifications of misusing company information or to warn them that their actions the
OS Interactive
volumes. logon:
Please Message
ensure text
that the for users
appropriate attemptrec
Default: Disabled.
Interactive
All previous logon:
users' Prompt
logon user to change
information is password
cached locally beforeso that, expiration
in the event that a domain controller is unavailable during subsequent logon attempts, they are a
Default:
Default: No
No message.
message.
Important
Interactive
Determines logon:
how far Require
in advance Domain Controller
(in days) authentication
users are thatunlock
to
Windows cannot connect to a server to confirm yourwarned logon settings. theirYou password
have been is about logged to expire.
on using With this advance
previously stored warning,
accountthe user has time
information. If you tochanged
constructyou ap
In order
Interactive to take advantage
logon: Require of
smart this cardto unlock a locked computer.and
policy on member workstations servers, all domain controllers that constitute the member's domain must be running Win
Logon
Default: information
14 days. must be provided For domain accounts, this security setting determines whether a domain controller must be c
In
If aorder
domain to takecontrolleradvantage of this policy
is unavailable and on domain
a user's logoncontrollers,
information all domain
is not cached,controllers the in usertheissame prompteddomain with asthis wellmessage:
as all trusted domains must run Windows 200
Interactive
This security logon: Smart card removal behavior
setting requires users to log on to a computer using a smart card.
Default: Disabled.
The system
Microsoft cannotclient:
network log you on now
Digitally signbecausecommunicationsthe domain(always) <DOMAIN_NAME> is not available.
This securityare:
The options setting determines what happens when the smart card for a logged-on user is removed from the smart card reader.
Important
Microsoft
In
Thisthissecurity
policynetworksetting,
setting client:
a value Digitally
determines sign communications
of 0whether
disables logon signing
packet caching. (ifisAny
server
requiredvalue agrees)
above
by the SMB 50 only clientcaches component.50 logon attempts.
The
Enabled:options Users are: can to only log on to the computers,
computer using aissmart card.
This setting
Microsoft applies
network client: Windows
Send 2000
unencrypted password but it not
to attempts
connect toavailable through the Security Configuration Manager tools on these computers.
This
Default:
The security
Disabled.
server25 Users setting
message can determines
log
block on to the
(SMB) whether
computer
protocol the SMB any
using
provides client
themethod.
basis for Microsoft to third-party
negotiate SMBpacket
file SMB
and print
serverssigning.
sharing and many other networking operations, such as remote Windo
No Action
Default: Disabled.
Microsoft
If thisserver network
security setting server: Amountthe
is enabled, of idle
Server timeMessagerequiredBlock before(SMB) suspending redirector a session
The
If
Lock
this
Workstation
setting message
is enabled, block the(SMB) Microsoft protocol network providesclientthe willbasis for Microsoft
not communicate fileisand
with
allowed to send and
print sharing
a Microsoft
plaintext
network server manypasswords other networking
unless
to non-Microsoft SMB
that serveroperations, agrees to perform such servers
asSMB remotethat do not
Windo
packet sig
Force
Microsoft
Important Logoff
network server: Attempt S4U2Self to obtain claim information
This
Sending
this security
Disconnect setting
unencryptedif a Remote determines
passwords
Desktop the aamount
isServicessecurity ofrisk.
continuous idle time that must pass in a Server Message Block (SMB) session before the session is suspended
session
If
Default: setting
Disabled. is enabled, the Microsoft network client will ask the server to perform SMB packet signing upon session setup. If packet signing has been enabled
Microsoft
This security
setting network setting
will server:
apply istotothis
anyDigitally
support computers sign communications
clients running
running a aversion
Windows (always)
of Windows
2000 throughprior changes to Windows
in the 8session.
Consumer
registry, butIfthe Preview
security that are trying
setting is notthe to access
viewable aisfile share that require
Administrators
Default:
If you Lockcan
Disabled.
click use
Workstation policy
in thetowhose control
Properties when dialog computer
box be forinthis suspends
policy, the an workstation
inactive SMB client activity resumes, sessionthrough the Security
automatically reestaCo
server
Default:
Microsoft
Important will support
Enabled.
network client
server: principals
Digitally accounts
sign communications may (if required
client a domain
agrees) which has clientiscomputers locked when andthe smart controllers
domain card is removed, runningallowing a version users to leave
of Windows the
priora
This security setting determines whether packet signing is by the SMB server component.
For
If you this policy
click Force setting,
Logoff a value
inDisconnect
the of 0 meansdialog
Properties to disconnect
boxlogon for the an idle
this policy, sessionthecan as quickly
user as is reasonably
is automatically logged possible.
off when Thesmart
the maximum card isvalue removed. is 99999, which is 208 days;
Microsoft
This
Notes
This
For setting
security network
should
setting server:
be set
determines to automatic
whether clients
(default)
the when
SMB so that
server hours
willfile expire
server
negotiate SMB automatically
packet signing evaluate
with whether
clients thatclaimsrequest areTo it.needed for the user.SMB An administrator wou
The thisserverpolicy messageto take effect
block on
(SMB) computers
protocol running
provides Windows
the basis 2000, client-side
for Microsoft filepacket
and print signingsharing must andalsomany be enabled.
other networking enable client-side
operations, such as packet
remote signing,
Windo
Default:This
Computers
Microsoft networkpolicy
that have is not
this defined,
policy set which
will means
not be that
able tothe system
communicate treats it
with as 15
computers minutes that fordo servers
not haveand undefined
server-side for
packet workstations.
signing enabled. By default, server-sid
If you
This
When
All
The
click
security
enabled
Windows Disconnectthisserver:
setting
operating security aServer
ifsystems
determines Remote
setting SPNDesktop
whether
will
support target
cause
both name
Services
toprovides
disconnect
athe validation
Windows
client-side session,
users SMB level
filewho removal
serverare
component to ofexamine
the
connected and smart
a tothe card
the access
server-side disconnects
local computer
token
SMB the
ofmany
an session
outside
andcomponent. authenticated their
To without
usernetwork
take loggingclient
account's
advantage the user
valid
of off.
logon
principal
SMB packetThis
hours.
and allowsThis
determine
signing, the
setti
both ui
If thisserver
Server-side
which
Microsoft setting
have
message
packet
network is enabled,
claim-based client:
block
signing the(SMB)
can
access
Digitally
be
Microsoft protocol
enabled
control
sign network
policy
on
communications
computers
server
applied.
the willbasis
running
not
(always)
for Microsoft
Windows
communicate
- Controls
file
2000
with
whether
and a andprint
Microsoft
or not
sharing
later
the
by setting
network
client-side
Microsoft
client SMB
other
unless networking
network
that client
component
server: operations,
agrees
requires
Digitally such
sign
to perform
packet
as
signing. SMBremote
communicationspacket Windo sig(
Network
Server-side
The
Note:server access:packet
message Allow anonymous
signing
block can be
(SMB) SID/name
enabled
protocol on translation
computers
provides the running Windows NT 4.0 of Service Pack 3 other
and later by setting the following registry value to 1:
When
Microsoft
If
Remote
thisnetwork
this setting policy Desktop
isclient:
is enabled, enabled,Services
Digitallyit causes
the Microsoft
was
sign called
client Terminal
sessions
communications
network
HKLM\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature server with (ifbasis
Services
will the for
server
negotiate
file
in agrees)
SMB previousand printer
Service
SMB -packet to besharing
versions
Controls forcibly
whether
signing
and
Windows
as
many
disconnected
or Server.
not
requested the by networking
when
client-side
the client.the client's
SMB operations,
That logon
component
is,
such
hours
if packet has aspacket
remote
expire.
signing has
Windows
signing
been enabled.
adm
enabled
Default:
Network
If thissecurity
Microsoft access:
settingnetwork is Do
disabled, not allow
server: the
Digitally anonymous
Windows sign file enumeration
server
communications will not of SAM
attempt
(always) accounts
to obtain aidentifier
- Controls claim-enabled
whether or access
not attributes
the token
server-side forSMB the component
client principal. requires packet signing.
This
This setting determines if an anonymous user can request security (SID) for another user.
thissecurity
Default:
If
Microsoft
Default:
Server-side
This
policy network
Enabled
setting
ispolicy
disabled,
on
isdetermines
server: notan
domain
defined,
established
Digitally the
controllers signlevel
which of validation
means
client
communications
only.
that the
session isa allowed
SMB
system
(if clientservertreats
to beperforms
agrees) it as
maintainedNo on
- Controls the
action.
95 after
service
orwhether orprincipal
the client's the name
98. logon
not hours
server-side (SPN)have provided
SMB expired.
component by the SMB client when
has packet signing trying
enabledto e
Network
Disabled
This
Default:
If security
server-side for packet
access:
Automatic.member
setting
SMB Do signing
not
signing allow
servers.
determines
cannot
is anonymous
what
required,
be enabled
additional
a client
on computers
enumerationpermissions
will not be ofable
SAM running
willto accounts
be
Windows
granted
establish and
a forshares
anonymous
session
Windows
with that connections
server unless to the
it computer.
has client-side SMB signing enabled. By default,
If
Onthis
The
Enabled policy
options
Windows for is
are:
domainenabled,
Vista a user with
controllers.
and above: For this knowledgesetting to ofwork,
an administrator's
thewill Smart Card SIDRemoval
could contact Policy a computer thatbehas this policy enabled and use the SID to get the admi
Default
Similarly,
Network
Important
Notes on if Windows
client-side
access: Vista:
SMB
Do determines
not allow Enabled.
signing
storage is required,
of credentials that client orenumeration not be
.NET Passports ablefortonetwork
establish a service
session must
authentication with servers started. that do not have packet signing enabled. By defau
This
Default
Windows security
onallows
If server-side setting
Windows
SMB anonymousXP:and
signing Disabled users
ismember whether
enabled, to servers:
perform anonymous
SMB packet certain activities,
signing will be such of SAM accounts
as enumerating
negotiated with clients and
the thatshares
names have is allowed.
of client-side
domain accounts SMB signing and network enabled. shares. This is convenient, fo
Default
No on
validation workstations
- validation ofcan the permissions
SPN will performancenotapply Disabled.
be performed by
Notes
Network
Using
This
Default
For SMB
on
Windows access:
security packet
setting
domain2000 Let Everyone
signing
determines
controllers:
servers degrade
whether
Enabled.
tousers
negotiate Stored
signing User
with to anonymous
up
Names
Windows toSMB15theandNT
SMB on
users
percentPasswords
4.0
server.
clients,file service
saves
the a following transactions.
passwords, registry credentials,
value must orbe .NET
Toset Passports on thefor
to advantage
1 network later
server use
running when it gains2000 dom
All
This
Windows
Windows security allowsoperating
option anonymous systems
allows additional
support
to both
perform
restrictions
acertain
client-side
to be placedactivities, component
such
on- anonymous as and
enumerating server-side
connections the names SMB
as follows: of component.
domain accounts take and of SMB
shares. packet
This isWindows
signing,
convenient, both fo
Microsoft
Network
All
Validate
Windows network
ifaccess:
provided
operating client:
Namedby Digitally
pipes
client
systems - thethat sign
support
SMBcan communications
be
server
both accessed
awill
client-side
validate (always)
anonymously
SMB
theare SPN Controls
componentprovided whether
andby athe or notclient
server-side
SMB the client-side
SMBand component.
allow SMB
a session component
To take to be requires packet
advantage
established of SMB signing.
if it matches
packet signing,
the SMBboth ser
This
If security
it is enabled, setting
thisclient:determines
setting prevents what additional
thecommunications
Stored User Namespermissions and agrees)granted
Passwords for anonymous
from storing connections to the computer.
Notes
Microsoft
Default:
Enabled:Disabled.
Microsoft network
network
Do not allow client: Digitally
Digitally
enumeration
sign
sign of communications
SAM accounts.
(if server
(always)
This option- -Controls
replaces
- Controls
whether
Everyone or notpasswords
whether theorclient-side
not the and credentials.
client-side
SMB SMB component
component requires has
packet packet
signing.signing enabled.
Network
Microsoft
This
Require
Microsoft access:
security network
match
network setting
fromRemotely
server:
determines
client
client: - accessible
Digitally
the
Digitally SMB sign
which
sign registry
communications
communication
client MUST
communications paths send a
(if(always)
sessions
SPN
server name Controls
(pipes)
agrees) in will
session
- whether
have
Controls setup, orwith
attributes
whether notAuthenticated
and the
and
theor server-side
permissions
SPN
not thename
UsersSMB that
provided
client-side
incomponent
the security
allow
SMB MUST anonymous
componentmatch
permissions
requires thehas packet
access.
SMB
forsigning.
packetserver
resources.
that enabled.
signing is beingfo
Windows
Disabled:
Note:
All When
Windows allows
Noconfiguringanonymous
additional
operating this
systems users
restrictions.
security toRely
support perform
setting,
both acertain
on default
changes
client-side activities,
permissions.
will(always)
(ifnot
SMB take such as enumerating
effect
component untiland you restart the Windows.
a server-side names orSMB of the
domain
component. accounts and network shares. This is convenient,
Microsoft
Microsoft
Network
set,
network
network
access:
anonymous
server:
server:
Remotely
users can
Digitally
Digitally
accessible
only access
sign
sign communications
communications
registry
those paths
resources and
client
subpaths
for which
agrees)
-the
Controls - Controls
anonymous whether whether
user or nothas the
been
not
server-side
explicitly SMB To
server-side
given
take
SMB
component
permission.
advantage
componentrequires ofhasSMB
packet packet
packet signing. signing,
signing both
enabled
This
For
If security
more
Microsoft
server-side
Default:
Microsoft None.
No setting
information
network SMBclient:
validation
network determines
about
signing
server: isStored
Digitally which
required,
Digitally User
sign
sign registry
Names
communications
acommunications
client will keys
and not can be be
Passwords,
(always)
able
(if accessed
client see
to-agrees)
Controls
establish over
Stored -a the network,
User
whether
session
Controls Names
orwithnot
whether regardless
and
the
that of unless
Passwords.
orclient-side
server,
not the the users
SMB
server-side or groups
it component
has client-side
SMB listed
requires
component SMB in thepacketaccess
signing
has control
signing.
enabled.
packet signing Bylistenabled
(ACL)
default,
Default
Microsoft
If on
server-side workstations:
network SMB client:
signing Enabled.
Digitally
is enabled, sign accesscommunications
SMB packet signing (if server
willand beagrees)
negotiated - Controls
with clientswhether that orhave
not the client-side
client-side SMB SMB signingcomponent enabled. has packet signing enabled.
Network
If
If server-side
This
thissecurity
Default access:
policy
on SMB
issetting Restrict
enabled,
server:Disabled. signing
determines
theanonymous
isEveryone
required,
which a client
registry
SID towill
is added Named
paths nottoand be
the Pipes
able
subpaths
token to that Shares
establish
can be aaccessed
is created session
forservice with
over
anonymous that
the server
network, unless
connections. regardless itInhasthis client-side
of
case,the users
anonymousSMB signing
or groups users enabled.
listed
are in abletheBy default,
toaccess
access co
Default:
Microsoft
Using
All SMB
Windows
Similarly, Disabled.
ifnetwork
packet
operating
client-side server:
signingsystems
SMB Digitally
cansigningimpose sign
support communications
upboth
is required, to aa 15 client(always)
percent
client-side
that performance
SMB
will - Controls
notcomponent
be ablehittoon whether
and file ora not
a server-side
establish theSMB server-side
transactions.
session withcomponent.
servers SMB component
thatThisdo not setting requires
haveaffects packetthe packet
serversigning.
signing SMB behavior,
enabled. By defau a
Network
Microsoft
When
If server-side access:
network
enabled, SMB Shares
thisserver:
security
signing thatis can be
Digitally
setting
enabled, sign accessed
communications
restricts
SMB anonymously
anonymous
packet signing (if client
access
will be agrees)
to shares
negotiated - and
Controls
pipes
with whether
to
clients the that orhave
settingsnot the for: server-side
client-side SMB SMB
signing component
enabled. has packet signing enabled
Default:
Important Disabled.
System\\CurrentControlSet\\Control\\ProductOptions
If server-side SMB signingsigning can is required, a performance
client will notup beto able
Using
Network SMB packet
access: Sharing and degrade
security model forthat
local accounts 15 to establish
percent on file a session
servicewith that server unless it has client-side SMB signing enabled. By default,
transactions.
This
Network security
access: setting Named determines
System\\CurrentControlSet\\Control\\Server
Similarly, if client-side SMB pipes signing which
that is
can network
required,
be accessedshares
Applications client canwill
anonymously accessed
not be able by anonymous
to establishusers. a session with servers that do not have packet signing enabled. By defau
System\\CurrentControlSet\\Control\\Print\\Printers
This policy has
Software\\Microsoft\\Windows
If server-side SMB no impact
signing onis domain
enabled, controllers.
NT\\CurrentVersionSMB packet signing will bepassword
negotiated with clients that have client-side SMB signing enabled.
Network
Important
This access:
security: Shares
Do not thatstore can LAN beManager
accessed hash
anonymously
valuethat on next change
Usingsecurity setting determines
System\\CurrentControlSet\\Services\\Eventlog
Default:
Default: SMBNone packet
Enabled. specified.signing can impose how network
up to alogons 15 percent use local
performance accounts hit onare fileauthenticated.
service transactions. If this setting is set to Classic, network logons that use local acc
Software\\Microsoft\\OLAP
Network
Caution security: Force logoffServer when logon hours expire
This
For
If this security
this policyis
setting setting
Software\\Microsoft\\Windowstoset
take todetermines
effect on
Guest only, if,network
at the next
computers
NT\\CurrentVersion\\Print running
logons password
thatWindowsusechange,
local 2000, the LANare
server-side
accounts Manager packet
automatically(LM) hash
signing mapped valuealso
must forthe
to the
beGuest new password
enabled. account. To enable Byis stored.
using The
server-side
the LMSMB
Guest hash is relatively
packet
model, can hw
yousigning
Microsoft
Network network LAN
security:
Software\\Microsoft\\Windows server: ManagerDigitally sign communications
authentication
NT\\CurrentVersion\\Windows level your (if server agrees)
This security
Incorrectly setting
editing thedetermines
registry may whether
severely to disconnect
damage users system.who are Before connected
making to the local
changes to computer
the registry, outside
you should their user backaccount's
up any valued valid logon data on hours. This setti
the computer
Default on domain
This security computers:
System\\CurrentControlSet\\Control\\ContentIndex
Note: setting istonot Classic.
available on earlier versions of
Network
Default
For
This on
Windows security:
security 2000LDAP
Windows
setting Vista:
servers client
determines Enabled signing
negotiate
which requirements
signing
challenge/response with Windows NTWindows.
authentication 4.0 clients, The thesecurity
following setting
registry thatvalue
appears must onbe computers
set to 1 on running
the Windows Windows
level 2000
XP,server:
"Network acc
System\\CurrentControlSet\\Control\\Terminal
Default
When
Default:
Default
on
this stand-alone
policy is
on Windows XP: Disabled. enabled,computers: it causes Guest client only
HKLM\System\CurrentControlSet\Services\lanmanserver\parameters\enableW9xsecuritysignature
Server
sessions with the SMB serverprotocol to be forcibly is used for
disconnectednetwork logons.
when theThis choice
client's logon affectshours theexpire. of authentication pro
Network security: Minimum session security for Server\\UserConfig
NTLM SSP based (including secure RPC) clients
This
Send security setting determines the level of data signing that is requested onnever
behalfuse of clients issuing LDAP BIND domain requests, as follows:
this LM
Important & NTLM responses:
If policy is disabled,
System\CurrentControlSet\Control\ProductOptions
Important
Computers that have anpolicy
thisNTLMv2
Clients
established
set will
use
not
LM
client and
communicate
NTLM authentication
Server\\DefaultUserConfiguration
session is allowed
with to be maintained
computers
and
that doand notafter have
NTLMv2
theclient-side
client's session
logon packet
security;
hours have enabled.
signing expired. controllers
Client-side
accept LM, NTLM, and NT
packet
Network
Send LM security:
& NTLM
Software\\Microsoft\\Windows
This security setting Minimum
-
System\CurrentControlSet\Control\Serveruse
allows session security
session
NT\\CurrentVersion\\Perflib
a client to require for
securitythe NTLM
Applications if
negotiation SSP
negotiated: based
ofare (including
Clients
128-bit use LM
encryption secure RPC)
NTLM
and/or servers
authentication and
NTLMv2 session security. These values are use NTLMv2 session security
dependent if thesigning
server
on
can
the LANsuppo be
M
None:
Send
With The
NTLM
the GuestLDAPresponse
onlyBIND model,
System\\CurrentControlSet\\Services\\SysmonLogrequest
only: Clients
any is
userissued
use who with
NTLMcan the
accessoptions
authentication your that only
computer specified
and overuse theby
NTLMv2the
network caller.
session
(including security if
anonymous the server Internetsupports users) it; domain
can access controllers
your sharedaccept LM,
resources NT
Default:
Windows Enabled.
Software\Microsoft\Windows
Negotiate signing:
2000 If Transport
Service Pack NT\CurrentVersion
Layer
(SP2)toSecurity/Secure
2Clients and above offer Sockets
compatibility Layer (TLS\SSL)
with authentication has nottobeen previous started, the LDAP
versions of BINDThese
Windows, request
such isit;initiated
as Microsoft with the LDAP
Windows NT data
4.0. siM
Send
This security
NTLMv2 setting
response allows
System\\CurrentControlSet\\Services\\CertSvc
Require NTLMv2 session only: a server use
require NTLMv2 the negotiation
authentication of 128-bit
only and
encryption
use NTLMv2 and/or session
NTLMv2 security
session if the
security.
server supports values domain
are dependent
controllers on accept
the LAN LM
Require
This
Note:
Send signature:
setting
NTLMv2 canresponse Thisthe
affect is security:
the
ability same of The
computers connection
as Negotiate running will Windows
signing. failHowever,
if NTLMv2 2000 if protocol
the
Server,LDAP is server's
not negotiated.
Windows intermediate
2000 Professional, saslBindInProgress
Windows XP,theandresponse the Windows does not indicate
Server 2003 thatfamily
LDA
Note: This security settingonly\\refuse
System\\CurrentControlSet\\Services\\Wins
Require 128-bit encryption: The connection
behaves asLM: an Clients will fail
account use NTLMv2
if strong
policy. Forencryptionauthentication
domain (128-bit)
accounts, only andcan
is not
there use
negotiated.
be NTLMv2
only one session
account security
policy.ifThe server
account supports
policy must it; domain
be defined controller
in th
Require
Send NTLMv2
NTLMv2 session
response security:
only\\refuse The LM connection
& NTLM: will
Clients fail if
use message
NTLMv2 integrity is
authentication
servers that are joined to a domain (for example, member computers) also receive the same account policy for their local accounts. However, local account po not negotiated.
only and use NTLMv2 session security if the server supports it; domain
Caution
Require
This
Caution 128-bit
setting doesencryption.
not affect interactiveThe connection logons willthatfailare if strong
performed encryption remotely (128-bit)
by using is not such negotiated.
services as Telnet or Remote Desktop Services. Remote Desktop Se
Default: No requirements.
Important
If youpolicy
Default:
This setNo
Incorrectly the server
requirements.
will
editing have theto Require
noregistry
impactmay signature,
on computers
severely you must also
running
damage Windows
your set the2000.
system. client.
Before Notmaking
settingchangesthe clienttoresults in a loss
the registry, youofshould connection back with up any thevalued
server.data on the computer
Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers
Network
This policy security:
settingRestrict allows you NTLM: to deny Incoming or audit NTLM outgoing trafficNTLM traffic from this Windows 7 or this Windows Server 2008 R2 computer to any Windows remote s
Network
This security: Restrict NTLM: AuditorIncoming NTLM NTLM Traffic traffic.
If youpolicy selectsetting "Allowallows all" or you do not to deny configure allowthisincoming
policy setting, the client computer can authenticate identities to a remote server by using NTLM authentication.
Network
setting Restrict
allows NTLM:
you to auditNTLM incomingauthentication NTLM in
traffic.this domain
If
If you you select
select "Allow "Audit all," all" or thedoclientnot configure
computerthis logspolicy an event setting, for each the server NTLMwill allow all NTLM
authentication requestauthentication
to a remote requests.
server. This allows you to identify those servers re
Network
setting Restrict
allows NTLM:
you to denyAuditorNTLM allow authentication
NTLM authentication in this domain within a domain from this domain controller. This policy does not affect interactive logon to
If
If you
you select
select "Disable",
"Deny all or do not
domain configurethe
accounts," thisserverpolicywill setting,
deny the
NTLM server will not log events
authentication requests forforincoming
domain NTLM
logon traffic.
and display anYou NTLM
If
Networkyou select security:"DenyRestrict all," theNTLM: client computer Add remote cannot server authenticate
exceptions identities
for NTLM toauthentication
a remote server by using NTLM authentication. can blocked
use the error,"Network but allow
security: loc
This
If you policy
select setting
"Disabled" allows or you
do to audit
not configure NTLMthis authentication
policy setting, in the a domain
domain from this domain
controller will controller.
allow all NTLM pass-through authentication requests within the domain
If
If you select
youpolicy
select "Enable allauditing for domain accounts", the server will log events for NTLM frompass-through authentication
and displayrequests an NTLMthat woulderror.be blocked when the "
Network
This
This policy is"Deny
security: supported
setting Restrict
allows
accounts,"
on NTLM:
youat to least the
Add
create
server
Windowsserver
an this
will
7 or
exception
deny
exceptions
Windows NTLM
list of
authentication
in remote
this
Server domain 2008 R2.
servers
requests
to whichwill clients
incoming traffic
areevents
allowed toNTLM
use NTLM authentication
blocked
if domain.
the "Network Security: Re
If
If you select "Disable" or do not configure policy setting, the domain controller not log for authentication in this
If you
Network
This
select
youpolicy
select
security:
is
"Deny
"Enable
supported
forauditing
Allow
domainfor
LocalSystem
on atare
accounts
least all Windows
accounts",
NULL
to domain
sessionthe
7this
servers"
server
or Windowsfallback will the logdomain
Server events2008
controller
for all NTLM will authentication
deny all NTLM requests authentication that would logonbe attempts
blockedtowhen all servers
the "Networkin the domainSecurit
This
Note:
If you policy
Audit
configure setting
and block
this allows events
policy you to
setting, create
recorded
you an exception
can on
define a listofofremote
computer
list servers
in theservers in this R2.
"NTLMBlock" domain
to which toclients
Log which
located clients
are under are
allowed theallowed
to Applications
use to useauthentication.
NTLM NTLM
and pass-through
Services authentication if the "
Log/Microsoft/Windows/Secu
If you
If you select
select "Deny "Enable forfor domain
domain accounts
account" the todomain
domaincontroller servers," will the denydomain all controller
NTLM will log events
authentication logon for attempts
NTLM authentication
from domain logon
accounts attempts
and for domain
return an NTLMaccount blo
Network
This
Allow policy security:
isevents
tosupportedAllow Local
onNULLat System
least to computer
Windows use computer7 or Windows identity Server for NTLM 2008 R2.
Note:
If you
If you NTLM
Block
configure
do not
fall
thisback
configure
are
policy to
recorded
this setting,
policy
session
on you this
setting, canwhenno define used
exceptions ainlistwith
the LocalSystem.
"NTLMBlock"
ofwill
servers
be in this
applied.
Logdomainlocated to under
which the clientsApplications
are allowed andtoServices
use NTLM Log/Microsoft/Windows/Security-NTLM
authentication.
If
Network
If you select
youpolicy security:
select "Enable
"DenyAllow forfor domain
PKU2U
domain accounts,"
authentication
servers" the therequests
domain domain controller
toNegotiate
thiswill will log
computer events
to use for NTLM
online authentication
identities. logon attempts that use domain accounts when NTLM
This
Note:
The Audit
default setting
events
isconfigure
TRUE allows
are toLocal
uprecorded Windows System
on this Vista services
computer
and FALSE incontroller
that use
the in "NTLMBlock"
Windows
deny
7.to Log
NTLM
use the
locatedauthentication
computerunder the requests
identity when to
Applications all
reverting
andservers in the
to NTLM
Services domain
authentication.and return
Log/Microsoft/Windows/Security-NTLM an NTLM blocked
If
The you do not this policy setting, no exceptions will be applied.
Network
If
This younaming
select format
security:"Enable for
forservers
Configure domain onservers"
encryption this exception
typesthe list iscontroller
allowed
domain theKerberos
for fully qualified
will log domain
events for name
NTLM (FQDN) or NetBIOS
authentication requestsserver name
toable used in
all servers bythe thedomain
application, when listed
NTLM one per
an authe
If
If you youpolicy
select
enable will"Denybe policy
this turned
all," the offdomain
setting,by defaultservices on
controller domain
running will as joined
deny Local allmachines.
NTLM
System This
pass-through
that would
use disallow willthe
authentication
Negotiate use online
requests identities
the computer from to be
its servers
identity. This to
and authenticate
for its
might cause accountsto theand
some domain
return
authentication joined ma
NTLM
requ
The naming
Recovery format Allow
console: for serversautomatic on this exception list
administrative is the fully qualified domain name (FQDN) or NetBIOS server name used by the calling application listed o
logon
This
If
This youpolicy
selectsetting
is"Enable allows
all" on you
the to
atdomain set Windows
the encryption
controller will log types eventsthat Kerberos
for NTLM ispass-through allowed to use. authentication requests from its servers and for its accounts which would
If youpolicy do not supported
configure this policy least setting, services Server 2008
running R2.
as Local System that use Negotiate when reverting to NTLM authentication will authenticate anonym
Recovery
This console: Allow floppy copy and access to all drives and all folders
If
This
Note: notsecurity
selected,
policy
Blockis
setting
supported determines
the encryption on at least type if the
onwill
password
thisnot
Windows be Server for the
allowed. in 2008
Administrator
This R2.setting may account
affect must be givenwith
compatibility before
client access
computers to theorsystem services is granted. If this option
and applications. is enabled,
Multiple selection th
This
Shutdown: policy isevents
Allow supported
system
are recorded
on
to at least
be shut Windows
down
computer
without 7 or having
Windowsthe "NTLMBlock"
to Server
log on 2008 Log R2. located under the Applications and Services Log/Microsoft/Windows/Security-NTLM
EnablingThis
Default: this policy
security option
is not makes the Recoveryadministrative Console SETlogon command available, which allows you to set the following Recovery Console environment varia
This
Note:policy Audit is supported
events are ondefined
recorded at least on and thisautomatic
Windows computer 7 or Windows
in the "NTLMBlock" Server 2008 is
Lognot
R2. allowed.
located under the Applications and Services Log/Microsoft/Windows/Security-NTLM
Shutdown:
This security Clearsetting virtual memory whether
determines pagefile a computer can be shut down without having to log on to Windows.
AllowWildCards: Enable wildcard support for some commands (such as the DEL command).
System
AllowAllPaths:
This cryptography:
security Allow determines
setting Use FIPS
access 140
to allwhether filescompliant
and the folders cryptographic
virtual on the computer.
memory algorithms,
pagefile including encryption, hashing
is shutand signing algorithms
When this policy
AllowRemovableMedia: is enabled, Allowthe filesShut to be Down copied command to removable is available media, onis cleared
the
such Windows when
as a floppy
the system
logon disk.screen.
down.
System
NoCopyPrompt:
For Cryptography:
thememory
Schannel Do notForce
Security prompt strong
Service when key
Provider protection
overwriting (SSP), for user keys stored disables on the computer
Virtual
When this policy support
is disabled, uses a system
the option pagefile
to shut toan
down
this
swap existing
the
security
pages
computer
file.ofsetting
memory
does not diskthe
to appear when weaker Secure
are not Sockets
theyWindows
on SHA512)
the used.
logon OnLayera running(SSL)system,protocols thisand supports
pagefile is ableonly theexclusi
opened Trans
authentication,
System
unauthorized objects: userand
Default
whoonly the
owner
manages Secure for to Hashing
objects
directly created Algorithm
access bythe (SHA1,
members
pagefile. SHA256,
of the SHA384,
Administrators and group for the TLSscreen.
hashing Inrequirements.
this case, users must be to log on to
This security
Default: This policysettingisdeterminesnot definedif and users' theprivate
recover keys consolerequire SET a password
commandtoisbe notused.
available.
Description
Default on workstations: Enabled.
System
For Encrypting
When
This objects:
security
this policysettingRequire
File
is System
enabled,
determinescaseService
it insensitivity
causes
which (EFS),the
security for
system non-Windows
it supports
principal
pagefile the(SID) Triple
to subsystems
be Data
will
cleared
be Encryption
assigned
upon clean
theStandard
OWNER
shutdown. (DES) andenable
of objects
If you Advanced
when the Encryption
thisobject
security Standard
is created
option, the
by a (AES)
hibernation
member encryption
offile algorith
the(hiberfil.sys
Administr
The
Default options are: Disabled.
on servers:
Default:
System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links)
This
For
Windows
Default: security
Remote XP:
Disabled. setting
Desktop
User determines
SID Services, itwhether supportscase onlyinsensitivity
the Triple DES is enforced
encryption for algorithm
all subsystems. The Win32
for encrypting Remote subsystem Desktop is case
Services insensitive.
networkHowever, communication. the kernel suppo
User input is not required when new keys are stored and used
System
Windows
This settings:
2003 : Optional
Administrators subsystems Group
If thissecurity
User
Note: isRemote
prompted
setting setting
is when
enabled,
Desktop determines
the
case
Services isthe
keyinsensitivity
was firststrength
usedisTerminal
called of the default
enforced for alldiscretionary
Services directory
in previous access
objects,versions control
symbolic list
links,
of Windows (DACL)
and IO
Server.forobjects,
objects.including file objects. Disabling this setting does n
User
System must enter aUse
settings: password
Certificate each Rules time on they use a key
Windows Executables for Software Restriction Policies
Thismore
Active security
Directory settingmaintainsdetermines a global which subsystems
listinfrastructure.
of shared systemcan optionally be started up to device
supportnames, your applications. With this securityInsetting, you can specify beaslocated
many
For
Default:
For BitLocker, information,
Enabled. this policy seeneeds Public tokey be enabled before anyresources,
encryptionsuch key is asgenerated.
DOS Please note mutexes,
that when and semaphores.
this policy is enabled, this way,
BitLockerobjects willcan prevent the c
User security
This Accountsetting Control: Admin Approval
determines if digital Mode certificatesfor the are Built-inprocessedAdministrator when aaccount
user or process attempts to run software with an .exe file name extension. This sec
Default:
If this policy
Default: POSIX.
This ispolicy
enabled, the
is notthis default
defined. DACL is stronger, allowing users who are not administrators to read shared objects but not allowing these users to modify s
effect,
Default:
User you must
Disabled.
Account enable
Control: Behavior security of the setting.
elevation prompt for administrators in Admin Approval Mode
This security setting determines the behavior of Admin Approval mode for the Built-in Administrator account.
Default:
User Enabled.
Account Control: Behavior of
When
Note:
This
The options
certificate
The
security Federalsetting rules are
Information
determines enabled, thethe
Processing elevation
software
behavior Standard prompt
restriction
of the (FIPS)
elevationfor standard
policies 140 will
is acheck
prompt users
security a certificate
implementation
for administrators revocation designedlist (CRL) to makecryptographic
for certifying sure the software's software. certificate
FIPS 140 andvalidated
signatur
This securityare: setting determines the behavior of the elevation prompt for standard users
User
Default: Account
Disabled. Control: Detect application installations and prompt for elevation
The
options
Enabled: Theare:Built-in Administrator will logon in Admin Approval Mode. By default any operation that requires elevation of privilege will prompt the Consent A
The options
User security
Accountsetting are:Control: Only elevate
This determines the executables
behavior of application that are signed and validated
installation detection for the entire system.
Prompt
Disabled: forThe consent:
Built-in AnAdministrator
operation that will requires
logon inelevation
XP compatible of privilege mode will
and prompt
run allthe Consent Admin
applications to selectwith either Permit or Deny. If the Consent Admin sel
User
This Account
Prompt for
securityare: Control:
credentials: Only An elevate
operation UIAccess
that requires
setting will enforce PKI signature checks on any interactive application applicationselevation that of are installed
privilege willin secure
prompt the
thatlocations
user
requests to by
enterdefault
elevationan administrativefull administrative
of privilege. user name
Enterprise
privilege.
and password.can
administrators If the user et
control
The options
User Prompt
Account for credentials:
Control: Run An operation
all users, that
including requires elevation
administrators, of privilege will prompt the Consent Admin to enter their user name and password. If the user en
Default:
This
The
Disabled
security
Automatically
options setting
are: denywill enforce
elevation the requirement
requests: This option thatresults
applications in as an standard
that request
access users.
denied execution
error message with a UIAccess
being returned integrity to thelevel (via a marking
standard user when of UIAccess=true
they try to perform in thei a
Enabled: Application installation packages that require an elevation of privilege to install will be heuristically detected and trigger the configured elevation pro
User
This Account
Elevate
security without Control:
setting prompting: Switch
determines to
This the secure
option
the behavior allows desktop the
of all UAC when
Consent prompting
policies Admin for the tofor elevation
perform
entire system.an operation that requires elevation without consent or credentials. Note: this sc
-Default:
\Program
Enabled: Prompt Files\,
Enforces for including
credentialsPKI subdirectories
therunning (home)
certificate /chain
Automatically validation deny a elevation
ofthat given requests
executable (enterprise)
before it is permitted to run. like Group Policy Software Install (GPSI) or SMS wil
Disabled:
-Default:
User\Windows\system32\
Account Enterprises
Control: Virtualizesstandard file and the users
registry desktops
write request
failures leverage
to per-user delegated
locations installation technologies
This
The security
options Prompt setting
are: for determines
consent whether elevation will prompt on the interactive users desktop or the Secure Desktop.
- \Program
Disabled: Files not
Does (x86)\, enforce including subdirectories
PKI certificate chainfor 64 bit versions
validation before ofgiven
a Windows executable
User
Default:
This Account
Enabled
security Control:
setting (home) Allow
enables UIAccess
/ Disabled
the redirection applications
(enterprise) of legacy to prompt
application for elevation
write failures without usingisthe
to defined
permitted
locations
to run.
secureindesktop. both the registry and file system. This feature mitigates th
The
options
Enabled: are:
Admin Approval Mode and all check other UAC policies are dependent onthat thisrequests
option being enabled. Changing integrity this setting requires a system
Note:
Maximum
Default: Windows application
Disabled enforces log a PKI
size signature on any interactive application execution with UIAccess level regardless of thereboot.
state of thi
This security setting
Virtualization facilitates controls
the whether
running User
ofdefault
pre-Vista Interface (legacy) Accessibility
applications (UIAccess or UIA) programs
that historically failed to run canasautomatically
Standard User. disable the secure desktop
An administrator runningforonly elevation
Windows prom Vi

Enabled:
Disabled: All
Admin elevationApproval requests by will go to the secure desktop
Mode user type and all related UAC policies will be disabled. Note: the Security Center will notify that the overall security of the op
Maximum
The
This options
security security
are:
setting log size
specifies the maximum size of the application event log, which has a theoretical maximum of 4 GB. Practically the limit is lowerUnless (~300MB
If
The you enable
optionsAll this
are: setting, UIA programs including Windows Remote Assistance can automatically disable the secure desktop for elevation prompts. you
Disabled:
Maximum
Default: system
Enabled elevation sizerequests
logspecifies will go to the interactive users desktop
This
security
Enabled:
Notes Ansetting
application the maximum
will only launch with size of the security
UIAccess integrityevent log, which
if it resides in ahas secure a theoretical
location inmaximum the file system. of 4 GB. Practically the limit is lower (~300MB).
If you
Enabled: disable or
Facilitates do not configure
the runtime this setting, of
redirection theapplication
secure desktop write can onlytobe
failures disabled
defined user bylocations
the user for of thebothinteractive
the file system desktop andorregistry.
by disabling the "User Account
Prevent
Default:
This local
Enabled
securityAn guests
setting group
specifies and the ANONYMOUS
maximum LOGIN
size of the users
system from event accessing
log, which application
has a in log
theoretical maximum of 4 GB. Practically the limit is lower (~300MB).
Notes
Disabled:
Log programs
file sizes must application
be a multiple will launch
of 64 KB. with UIAccess
IfWindows
you enterand integrity
a value even if it
that is programs does not
not a multiple reside of 64 KB, a secure location in the file system.
UIA
Prevent
Disabled: local are designed
guests
Applications group towrite
thatand interact
ANONYMOUS
data with
to Computer
protected LOGIN users
locations application
from accessing
will simply on behalf
security
fail application
as they did in of
logevent aEvent
user. This
previous
Viewer will round
setting allowshe UIA logprograms
file size up to a multiple
to bypass the secureof 64 KB. desk
This
Notes security
setting setting
does notdetermines
appear in the if guests
Local are prevented Policy from object.accessing the log. versions of Windows.
Log file
Default:
Event Logsizes
Enabled must
sizeguests and log be a multiple
wrapping of 64
should KB. If
be definedyou enter a
to match value that
the business is not a multiple
and securityof 64 KB, Event
requirements Viewer will
you determined round he log file size up to a multiple of 64 KB.
Prevent
Since
This
Default UIA
settinglocal
security
:For programs
Enableddoes
setting group
must
notdetermines
appear beand able
in ANONYMOUS
the toLocal
if2003
guestsrespond Computer toLOGIN
are prevented prompts Policyusersregarding
from from
object.accessing accessing
security system
the issues,
application logevent
such as the UAC elevation
log. prompt,when designing must
UIA programs your enterprise
be highly trusted. securityInp
Notes
Default:
Log file sizes themust
..\Program Windowsbe a
Files\ Server
multiple
(and of 64
subfolders) family,
KB. If you 16 enter
MB; for
a Windows
value that XPnot
is Professional
a multiple Service
of 64 KB, Pack
Event 1, Viewer
8 MB; for will Windows
round he XP
log Professional,
file size up to 512
a KB. of 64 KB.
multiple
Event
Retain Log size andlog
application log wrapping should be defined to match the business and security requirements you determined when designing your enterprise security p
This
Notes
Default:setting
security
For does
setting
..\Program
the notdetermines
Windows appear
Files (x86)\
Serverin the if(and
guests
2003 Local Computer
are prevented
subfolders,
family, 16 MB; in Policyforfrom
64-bit object.accessing
versions
Windows the application
of Windows
XP Professional only) ServiceeventPack log. 1, 8 MB; for Windows XP Professional, 512 KB.
This setting
..\Windows\System32\
Event Log does
size and not logappear
wrapping in the Local
should beComputer
defined to Policy
match object.the business and security requirements you determined when designing your enterprise security p
Retain
This security
security log
setting determines the number of16 days' worth of events toProfessional
be retained for the application
Notes
Default:
This settingFor does the Windows
notaffects
appear Serverin the 2003 Local family,
Computer MB; for Windows
Policy object. XP Service Pack 1, 8 log MB;iffor theWindows
retentionXP method for the application
Professional, 512 KB. log is By D
This
Retain
The security
system
requirement setting
log to be in a only
protected computers path can runningbe Windows
disabled by 2000
the "Userand Account
WindowsControl: XP. Only elevate UIAccess applications that are installed in secure locatio
This
Set security
this value setting
onlynot if determines
you archive the
theLocalnumber
log atComputer of days' worth
scheduled intervals of events and you to be make retained
sure that for the the security
Maximum logapplication
if the retention log sizemethodis largefor theenoughsecurity log
to accommodateis By Days. the
This
This setting
security does
setting appear
affects in the
only computers running Policy
Windows object. 2000 and Windows XP.
Retention
Default:
Thisthis
While security
this method
Enabled
settingsetting forfordetermines
applies application
Windows to any XP, the
UIAlogDisabled
number
program, for Windows
ofitdays'
will be worth
used 2000ofprimarily
events toinbe retained
certain Windowsfor the system
Remote log security
if the retention
Assistance scenarios. methodThe for
Windowsthe system Remote log Assistance
is By Days. pro
Set
Note: value
This setting only if
does you archive
not appear the log
in the Local at scheduled Computer intervalsPolicy and object.you make sure that the Maximum log size is large enough to accommodate the inte
This
Default:security
Retention method
Enabled setting forforaffects
security
Windows only log
XP, computers
Disabled running
for Windows Windows 2000 2000 and Windows XP.
This
If security
Default:
Set this value
a user None.
requests setting
onlyremote determines
if you archiveassistance the
the log "wrapping"
from atan scheduled method
administrator for
intervals the
andand application
the you remote make log. sure thatsession
assistance the Maximum system log
is established, anysize is largeprompts
elevation enoughappear to accommodate
on the interactive the inte
Notes
Retention
Default:
requires
This security
setting method
Enabled
that the for
setting
does fordetermines
not systemuser
Windows
interactive
appear log
in XP, the
the Disabled
respond
"wrapping"
Local tofor
Computer anWindows
elevation
method Policy for2000
prompt
the
object. on thelog.
security secure desktop. If the interactive user is a standard user, the user does not have the r
If you This
Note: do not archive
setting does thenot application
appearauditing inlog,
theinLocal the Properties
Computer dialog box for this policy, select the Define this policy setting check box, and then click Overwrite eve
A user must
Restricted possess
Groups the Manage and security logPolicy
user right object. to access the security log.
This
Default:
If you
Default:
If security
you archiveNone.
enable
doNone. setting
this
not archive determines
setting, ("User the
Account "wrapping" Control: method
Allow for the
UIAccess system log.
applications to prompt for elevation withoutsetting using check the secure desktop), , requests for elevatio
If you the log the security log,
at scheduled in the Properties
intervals, in the Properties dialog box dialog for boxthis policy,
for this select
policy,the selectDefinethe this
Define policythis policy setting box,
check and then
box, and click
then Overwrite
click Overwrite events
This
If
Thisyou security
do
setting not setting
archive
does not allows
the
change anthe
system administrator
log,
behaviorin the of tothedefine
Properties UAC two
dialog properties
elevation box for
prompt for for
this security-sensitive
policy, select
administrators. the groupsthis
Define ("restricted"
policy groups).
setting check box, and then click Overwrite events
If
If you
you archive
must retain the log all the at scheduled
events in the intervals,
log, in in thethe Properties
Properties dialog dialog box box forforthis this policy,
policy, select
select thethe Define
Define thisthis policy
policy setting
setting check
check box,box,and andthen then click
click DoOverwrite
not overw
The
If youtwo planproperties
archive to the
enable log are at
this Members
scheduled
setting, and
you Member
intervals,
should in
also Of.
the The
review Members
Properties the dialog
effect listof defines
box
the for
"User who
this belongs
policy,
Account and
select
Control: who
the does
Define
Behavior not
this
of belong
policy
the to the
setting
elevation restricted
check
prompt box,
for group.
and
standard The
then Member
click
users" Of listIf
Overwrite
setting.
If you This
Note: mustsettingretain all does thenot events
appear in the in the log,Local in theComputerPropertiesPolicy dialogobject. box for this policy, select the Define this policy setting check box, and then click Do not overw
When
.If you a Restricted
must retain all Groups
the events Policyinisthe enforced,
log, in the anyProperties
current member dialog box of afor restricted
this policy, group that the
select is not
Defineon the thisMembers
policy setting list is check
removed. box,Any anduserthenon theDo
click Members
not overl
Notes
Default: None.
System Services security settings
Registry
Allows ansecurity settingsto define the startup mode (manual, automatic, or disabled) as well as the access permissions (Start, Stop, or Pause) for all system se
administrator
File System
Allows security settings
Default:an administrator
Undefined. to define access permissions (on discretionary access control lists (DACLs)) and audit settings (on system access control lists (SACLs
Allows
Default:an administrator to define access permissions (on discretionary access control lists (DACLs)) and audit settings (on system access control lists (SACLs
Notes Undefined.
Default:
Note: Undefined.
This setting does not appear
This setting does not appear in the in the Local
Local Computer
Computer PolicyPolicy
object.object.
If you choose to set system service startup to Automatic, perform
Note: This setting does not appear in the Local Computer Policy object.adequate testing to verify that the services can start without user intervention.
For performance optimization, set unnecessary or unused services to Manual.
Reboot Required Comments
No
No
No
No
No
No
No
No
No
No clients will get the new setting
after a maximum of 8 hours
No clients
but for will
DCsgetto the newthese
assign setting
after
new a maximum
settings a of 8 hours
Gpupdate
No clients
but foriswill
DCs get
to the newthese
assign setting
/force
after required
a maximum or waiting
of 8 hours for
No new settings
clients will
5geta Gpupdate
the for
but usual
/force DCs to the
minutes
ismaximum
required
new
assign
or
whensetting
these
waiting
the
SCE
after
new a
engine
settings assigns
a theof 8 hours for
all
Gpupdate
No clients
the
but usualwill
forisDCs
modified 5 get
minutesnew
to assign
settings. whensetting
thesethe
/force
after a required
maximum
SCE settings
engine or waiting
of 8
assigns hours for
all
No new
the usual a Gpupdate
5 minutes when the
modified
but for
/force DCs
settings.
to
is requiredassign these
or waiting for
SCE
new engine
settings assigns
a all
Gpupdate
No the usualsettings.
modified 5 minutes when the
/force is required or
SCE engine assigns all waiting for
No the usualsettings.
modified 5 minutes when the
SCE engine assigns all
No modified settings.
No
No
No
No
No
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Note: In Windows 2000
Server, Windows 2000
No Logoff required
Professional, Windows XP
No Professional,
Note: See also and
thethe
Windows Server
corresponding 2003 family,
Windows
No Logoff
the required
Task
Server Scheduler
2003 Allow log on
automatically
locally policy grants
setting,this rightin
earlier
No Logoff
as required
thisnecessary.
worksheet.
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No Logoff required
No
No
No
No
No
Yes
Yes
No
Yes
No
No
No
No
No For the policy change to take
effect, the spooler service
No needs to be stopped/restarted,
No but the system does not have
to be rebooted.
No
Yes Restart of service might be
sufficient
No
No
No Important: In order to take
advantage of this policy on
No member workstations and
No servers, all domain controllers
that constitute the members
No domain must be running
Windows NT 4.0 Service Pack
No Important:
6 or higher.This setting applies
to
In Windows
order to take2000 computers,
advantage of
No but
this itpolicy
is noton
available
doma through
No the Security Configuration
Manager tools on these
computers.
No
No
No
No
No
No
No
No Important: This setting
applies to Windows 2000
No Important:
computers,This but itsetting
is not will
apply to any
available computers
through the Security
No Only
runningLogOff is
Windows required for
2000 tools
Configuration
W2K, XPchangesand Manager
W2K3
Yes through
on
Important:
these computers.
For in the
computers.
registry, butonIn this
the Vista,policy to
security
take effect
start/restart thecomputers
scpolicysvc
Yes setting
running is not viewable2000,through
will
the workWindows
or LogOff client-
Yes sideSecurity Configuration
packet signing must also
Manager tool set.
be enabled. For more
Yes information, search for
"Security Settings
No Descriptions" in the Windows
Yes Server
Important:2003 ForHelp.
this policy to
take effect on computers
No running Windows 2000,
No server-side packet signing
must also be enabled. For
No more information, search for
"Security Settings
No Descriptions" in the Windows
No Server
Important:2003 Help.
This policy has no
impact on domain controllers.
No For more information, search
No for "Security Settings
Descriptions" in the Windows
No Server 2003 Help.
Yes
No Important: The Network
access: Remotely
No Important:
accessible On Windows
registry paths XP,
this security
security setting
setting that was
appearscalled
Yes "Network access: Remotely
on computers running
Yes accessible
Windows XP registry paths." to
corresponds If
you configureaccess:
the Network this setting on a
No member
Important:
Remotely ofaccessible
the
ThisWindows
setting only
affects
Server computers
registry 2003
paths family
and running
that is
subpaths
No Important:
Windows
joined aXP Windows
topolicy Professional
domain, 2000
this setting
security
Service Pack 2 setting
(SP2) on
and
No which
is are of
inherited
members not
bythejoined
Wi to a with
computers
above offer
domain. compatibility
No authentication
Important:
This policy willThis to previous
setting
have can
no impact
versionstheofability
on computers
affect Windows,
running such as
of computers
Yes Microsoft
running Windows
WindowsWindows
2000. For NT
2000more4.0.
This setting
Server, Windows
information, can
search affect
2000 the
forwill
No Warning:
ability This
of computers settingrunning
Professional,
"Security
apply to Setting
any Windows
computers XP
Descriptions"
No Windows
Warning:
Professional,
in the Win 2000
Thisand Server,
setting
the will
running
Windows Windows
2000 Pr 2000
apply
Windows
through to changes
any computers
Server 2003
in thefamily
to
running
communicate
registry Windows
but with
the security2000 setting
through
computers
will not bechanges
running
viewable in Windows
the
through
registry
NT
the 4.0 but the
and
Security earlier security
over the
Configuration setting
will
netwonot betool
Manager viewable
set. For through
more
the Security search
information, Configuration for
Manager tool set.De
"Security Setting For more
No
No
No
No
No
No
No
No
No
No
No
No Require restart of recovery
console
Require restart of recovery
No console
No Requires logoff
Yes Vista does NOT require reboot
No
Yes Requires reboot with CNG on
Vista; Does not require reboot
No This policyon
with CAPI does notDoes
Vista; exist not
on
Vista
require reboot on XP, 2003
Yes
with CAPI
Yes
Yes
No
No
No
No
No
No
No
Yes
No
No
No
No Note: This setting does not
appear in the Local Computer
No Note:
Policy This setting does not
object.
No Note: This
Policy setting does not
object.
appear
Important:in the Local Computer
Modifying thisnot
No Notes:
Policy This
object. setting does
setting
appear in the Localcompatibility
may affect Computer
No Notes:
with
Policy This services,
clients,
object. setting doesandnot
appear
This in theFor
applications.
security Local Computer
compatibility
setting affects
No Note: This
information
Policy setting
object.about does
this not
setting,
only
appearcomputers
in running
the setting
Local Computer
No This
see
Notes:security
the
Windows "Event
This Log:
setting
2000, affects
Maximum
does not
Windows
Policy
only
sec object.
computers running
appear
Server in the and
2003, Local Computer
Windows
No Notes:
Windows
XP.
Policy object.settingdoes
This setting
2000, Windows not
This
appear
Serversecurity
in thepossess
2003, Local
and affects
Computer
Windows
No A user
Note:
only must
This
computerssetting the
does not
running
Policy
XP.
Manage object.
appear
Windows
A user inauditing
must thepossess
2000,Localand
Computer
Windowsthe
No Note:
ServerThis
security
Policy setting
log
object.
2003, user
andand does
right tonot
Windows
Manage
appear
access inauditing
the the Local
security security
Computer
log.
No XP.
Note:
log userThis setting
right does not
to acces
Policy object.
No Note: This
Policy object. setting does not
Policy object.
Note: This setting does not
Note:
PolicyThis setting does not
object.
Note: This
Policy setting does not
object.
Policy object.

Windows 10 ADMX Spreadsheet

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Windows 10 ADMX Spreadsheet

Uploaded by

Copyright:

Available Formats

Group Policy Settings Reference

2015 Microsoft Corporation. All rights reserved.

All other trademarks are property of their respective owners.

based on one value or a combination of values that are available

Web site references, may change without notice.

Computer Configuration\Windows Settings\Account Policies\Password Policy

Enforce password history

At least Windows XP SP2, Windows Server 2003

Password Policy security settings are not registry keys.

Enforce password history

You might also like