<html dir="ltr" xmlns:v="urn:schemas-microsoft-com:vml" gpmc_reportInitialized="false">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>Locked Down Desktop</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:block; height:24px; margin:0px,0px,-1px,0px; padding-top:4px; position:relative; table-layout:fixed; width:100%; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he1h_expanded   { background-color: #7197B3; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 10px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative; width: 100%; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; width:100%; }

                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:60px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:65px; margin-right:0px; position:relative; width:100%; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:65px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; width:100%; }

                DIV .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; width:10%; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#000000; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:53px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1h_expanded   { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

                    v\:* {behavior:url(#default#VML);}

</style>
<!-- Script 1 -->

<script language="vbscript">
<!--
'================================================================================
' String "strShowHide(0/1)"
' 0 = Hide all mode.
' 1 = Show all mode.
strShowHide = 1

'Localized strings
strShow = "show"
strHide = "hide"
strShowAll = "show all"
strHideAll = "hide all"
strShown = "shown"
strHidden = "hidden"
strExpandoNumPixelsFromEdge = "10px"


Function IsSectionHeader(obj)
    IsSectionHeader = (obj.className = "he0_expanded") Or (obj.className = "he1h_expanded") Or (obj.className = "he1_expanded") Or (obj.className = "he1") Or (obj.className = "he2") Or (obj.className = "he3") Or (obj.className = "he4") Or (obj.className = "he4h") Or (obj.className = "he5") Or (obj.className = "he5h")
End Function


Function IsSectionExpandedByDefault(objHeader)
    IsSectionExpandedByDefault = (Right(objHeader.className, Len("_expanded")) = "_expanded")
End Function


' strState must be show | hide | toggle
Sub SetSectionState(objHeader, strState)
    ' Get the container object for the section.  It's the first one after the header obj.

    i = objHeader.sourceIndex
    Set all = objHeader.parentElement.document.all
    While (all(i).className <> "container")
        i = i + 1
    Wend

    Set objContainer = all(i)

    If strState = "toggle" Then
        If objContainer.style.display = "none" Then
            SetSectionState objHeader, "show"
        Else
            SetSectionState objHeader, "hide"
        End If

    Else
        Set objExpando = objHeader.children.item(1)

        If strState = "show" Then
            objContainer.style.display = "block"
            objExpando.innerText = strHide

        ElseIf strState = "hide" Then
            objContainer.style.display = "none"
            objExpando.innerText = strShow
        End If
    End If
End Sub


Sub ShowSection(objHeader)
    SetSectionState objHeader, "show"
End Sub


Sub HideSection(objHeader)
    SetSectionState objHeader, "hide"
End Sub


Sub ToggleSection(objHeader)
    SetSectionState objHeader, "toggle"
End Sub


'================================================================================
' When user clicks anywhere in the document body, determine if user is clicking
' on a header element.
'================================================================================
Function document_onclick()
    Set strsrc    = window.event.srcElement

    While (strsrc.className = "sectionTitle" Or strsrc.className = "expando" Or strsrc.className = "vmlimage")
        Set strsrc = strsrc.parentElement
    Wend

    ' Only handle clicks on headers.
    If Not IsSectionHeader(strsrc) Then Exit Function

    ToggleSection strsrc

    window.event.returnValue = False
End Function

'================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
Function objshowhide_onClick()
    Set objBody = document.body.all
    Select Case strShowHide
        Case 0
            strShowHide = 1
            objshowhide.innerText = strShowAll
            For Each obji In objBody
                If IsSectionHeader(obji) Then
                    HideSection obji
                End If
            Next
        Case 1
            strShowHide = 0
            objshowhide.innerText = strHideAll
            For Each obji In objBody
                If IsSectionHeader(obji) Then
                    ShowSection obji
                End If
            Next
    End Select
End Function

'================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================
Function window_onload()
    ' Only initialize once.  The UI may reinsert a report into the webbrowser control,
    ' firing onLoad multiple times.
    If UCase(document.documentElement.getAttribute("gpmc_reportInitialized")) <> "TRUE" Then

        ' Set text direction
        Call fDetDir(UCase(document.dir))

        ' Initialize sections to default expanded/collapsed state.
        Set objBody = document.body.all

        For Each obji in objBody
            If IsSectionHeader(obji) Then
                If IsSectionExpandedByDefault(obji) Then
                    ShowSection obji
                Else
                    HideSection obji
                End If
            End If
        Next

        objshowhide.innerText = strShowAll

        document.documentElement.setAttribute "gpmc_reportInitialized", "true"
    End If
End Function

                


'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
Function document_onPropertyChange()
    If window.event.propertyName = "dir" Then
        Call fDetDir(UCase(document.dir))
    End If
End Function
Function fDetDir(strDir)
    strDir = UCase(strDir)
    Select Case strDir
        Case "LTR"
            Set colRules = document.styleSheets(0).rules
            For i = 0 To colRules.length -1
                Set nug = colRules.item(i)
                strClass = nug.selectorText
                If nug.style.textAlign = "right" Then
                    nug.style.textAlign = "left"
                End If
                Select Case strClass
                    Case "DIV .expando"
                        nug.style.Left = ""
                        nug.style.right = strExpandoNumPixelsFromEdge
                    Case "#objshowhide"
                        nug.style.textAlign = "right"
                End Select
            Next
        Case "RTL"
            Set colRules = document.styleSheets(0).rules
            For i = 0 To colRules.length -1
                Set nug = colRules.item(i)
                strClass = nug.selectorText
                If nug.style.textAlign = "left" Then
                    nug.style.textAlign = "right"
                End If
                Select Case strClass
                    Case "DIV .expando"
                        nug.style.Left = strExpandoNumPixelsFromEdge
                        nug.style.right = ""
                    Case "#objshowhide"
                        nug.style.textAlign = "left"
                End Select
            Next
    End Select
End Function

'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI).
'================================================================================
Function window_onbeforeprint()
    For Each obji In document.all
        If obji.className = "expando" Then
            If obji.innerText = strHide Then obji.innerText = strShown
            If obji.innerText = strShow Then obji.innerText = strHidden
        End If
    Next
End Function

'================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
Function window_onafterprint()
    For Each obji In document.all
        If obji.className = "expando" Then
            If obji.innerText = strShown Then obji.innerText = strHide
            If obji.innerText = strHidden Then obji.innerText = strShow
        End If
    Next
End Function

'================================================================================
' Adding keypress support for accessibility
'================================================================================
Function document_onKeyPress()
    If window.event.keyCode = "32" Or window.event.keyCode = "13" Or window.event.keyCode = "10" Then 'space bar (32) or carriage return (13) or line feed (10)
        If window.event.srcElement.className = "expando" Then Call document_onclick() : window.event.returnValue = false
        If window.event.srcElement.className = "sectionTitle" Then Call document_onclick() : window.event.returnValue = false
        If window.event.srcElement.id = "objshowhide" Then Call objshowhide_onClick() : window.event.returnValue = false
    End If
End Function
                
-->
</script>
                
<!-- Script 2 -->

<script language="javascript">
<!--
function getExplainWindowTitle()
{
        return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles()
{
        return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel()
{
        return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel()
{
        return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton()
{
        return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton()
{
        return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable()
{
        return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel()
{
        return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable()
{
        return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");

    if (strSettingDescription == "")
    {
                strSettingDescription = getNoExplainTextAvailable();
    }

    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported == "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html>\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
    var expWin = window.open("", "expWin", strDiagArgs);
    expWin.document.write("");
    expWin.document.close();
    expWin.document.write(strHtml);
    expWin.document.close();
    expWin.focus();

    //cancels navigation for IE.
    if(navigator.userAgent.indexOf("MSIE") > 0)
    {
        window.event.returnValue = false;
    }

    return false;
}
-->
</script>
                
</head>

<body>

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

                </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" cellpadding="0" cellspacing="0">
<tr><td colspan="2" class="gponame">Locked Down Desktop</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 3/28/2016 7:24:04 AM</td>
    <td><div id="objshowhide" tabindex="0"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Domain</td><td>%Domain Removed%</td></tr>
<tr><td scope="row">Owner</td><td>%Owner Removed%</td></tr>
<tr><td scope="row">Created</td><td>2/21/2014 7:40:52 AM</td></tr>
<tr><td scope="row">Modified</td><td>7/14/2014 1:35:20 PM</td></tr>
<tr><td scope="row">User Revisions</td><td>165 (AD), 165 (sysvol)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>0 (AD), 0 (sysvol)</td></tr>
<tr><td scope="row">Unique ID</td><td>{95A66119-5AEF-4B24-A33E-D6B0AE632006}</td></tr>
<tr><td scope="row">GPO Status</td><td>Enabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0"><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
    <tr><td>Users</td><td>Yes</td><td>Enabled</td><td>%Path-removed%</td></tr>
    </table>
    <br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" cellpadding="0" cellspacing="0"><tr><th scope="col">Name</th></tr><tr><td>NT AUTHORITY\Authenticated Users</td></tr></table>
</div>
</div>
<div class="filler"></div>

<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>NT AUTHORITY\Authenticated Users</td><td>Read (from Security Filtering)</td><td>No</td></tr>
<tr><td>NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">No settings defined.</div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Policy definitions (ADMX files) retrieved from the local machine.</div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Always open All Control Panel Items when opening Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Set All Control Panel Items as the default Control Panel view.&lt;br/&gt;&lt;br/&gt;If the policy is disabled, Control Panel Home is the default view." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Always open All Control Panel Items when opening Control Panel</a></td><td>Disabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide specified Control Panel items" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Hides specified Control Panel items.&lt;br/&gt;&lt;br/&gt;This setting removes Control Panel items (such as &amp;quot;Mouse&amp;quot;, &amp;quot;System&amp;quot; or &amp;quot;Personalization&amp;quot;) from the Control Panel window and the Start menu.&lt;br/&gt;&lt;br/&gt;To hide a Control Panel item, click Show. In the Show Contents dialog box in the Value column, enter the Control Panel item's canonical name (e.g. &amp;quot;Microsoft.Mouse&amp;quot;, &amp;quot;Microsoft.System&amp;quot; or &amp;quot;Microsoft.Personalization&amp;quot;).&lt;br/&gt;&lt;br/&gt;Note: For Windows Vista, Windows Server 2008, and earlier versions of Windows, the module name (e.g. &amp;quot;timedate.cpl&amp;quot; or &amp;quot;inetcpl.cpl&amp;quot;) should be entered. If a Control Panel item does not have a CPL file, or the CPL file contains multiple applets, then its module name and string resource identification number should be entered (e.g. &amp;quot;@systemcpl.dll,-1&amp;quot; for System or &amp;quot;@themecpl.dll,-1&amp;quot; for Personalization).&lt;br/&gt;&lt;br/&gt;A complete list of canonical and module names of Control Panel items can be found in MSDN at http://go.microsoft.com/fwlink/?LinkId=122973.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu and Control Panel window, as well as other ways to access Control Panel items (such as shortcuts in Help and Support or command lines that use control.exe).&lt;br/&gt;&lt;br/&gt;If both the &amp;quot;Hide specified Control Panel items&amp;quot; setting and the &amp;quot;Show only specified Control Panel items&amp;quot; setting are enabled, the &amp;quot;Show only specified Control Panel items&amp;quot; setting is ignored.&lt;br/&gt;&lt;br/&gt;Note: The Display Control Panel item cannot be hidden in the Desktop context menu by using this setting. To hide the Display Control Panel item and prevent users from modifying the computer's display settings use the &amp;quot;Disable Display Control Panel&amp;quot; setting instead." gpmc_supported="At least Windows 2000">Hide specified Control Panel items</a></td><td>Disabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to the Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Disables all Control Panel programs.&lt;br/&gt;&lt;br/&gt;This setting prevents Control.exe, the program file for Control Panel, from starting. As a result, users cannot start Control Panel or run any Control Panel items.&lt;br/&gt;&lt;br/&gt;This setting also removes Control Panel from the Start menu. This setting also removes the Control Panel folder from Windows Explorer.&lt;br/&gt;&lt;br/&gt;If users try to select a Control Panel item from the Properties item on a context menu, a message appears explaining that a setting prevents the action." gpmc_supported="At least Windows 2000">Prohibit access to the Control Panel</a></td><td>Disabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show only specified Control Panel items" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Hides all Control Panel items and folders except those specified in this setting.&lt;br/&gt;&lt;br/&gt;This setting removes all Control Panel items (such as &amp;quot;Mouse&amp;quot;, &amp;quot;System&amp;quot; or &amp;quot;Personalization&amp;quot;) from the Control Panel window and the Start menu. The only items displayed in Control Panel are those you specify in this setting.&lt;br/&gt;&lt;br/&gt;To display a Control Panel item, click Show, In the Show Contents dialog box in the Value column, enter the Control Panel item's canonical name (e.g. &amp;quot;Microsoft.Mouse&amp;quot;, &amp;quot;Microsoft.System&amp;quot; or &amp;quot;Microsoft.Personalization&amp;quot;).&lt;br/&gt;&lt;br/&gt;Note: For Windows Vista, Windows Server 2008, and earlier versions of Windows, the module name (e.g. &amp;quot;timedate.cpl&amp;quot; or &amp;quot;inetcpl.cpl&amp;quot;) should be entered. If a Control Panel item does not have a CPL file, or the CPL file contains multiple applets, then its module name and string resource identification number should be entered (e.g. &amp;quot;@systemcpl.dll,-1&amp;quot; for System or &amp;quot;@themecpl.dll,-1&amp;quot; for Personalization).&lt;br/&gt;&lt;br/&gt;A complete list of canonical and module names of Control Panel items can be found in MSDN at http://go.microsoft.com/fwlink/?LinkId=122973.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu and Control Panel, as well as other ways to access Control Panel items (such as shortcuts in Help and Support or command lines that use control.exe).&lt;br/&gt;&lt;br/&gt;If both the &amp;quot;Hide specified Control Panel items&amp;quot; setting and the &amp;quot;Show only specified Control Panel items&amp;quot; setting are enabled, the &amp;quot;Show only specified Control Panel items&amp;quot; setting is ignored.&lt;br/&gt;&lt;br/&gt;Note: The Display Control Panel item cannot be hidden in the Desktop context menu by using this setting. To hide the Display Control Panel item and prevent users from modifying the computer's display settings use the &amp;quot;Disable Display Control Panel&amp;quot; setting instead." gpmc_supported="At least Windows 2000">Show only specified Control Panel items</a></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2"><table class="subtable" cellpadding="0" cellspacing="0">
<tr><th scope="col">List of allowed Control Panel items</th></tr>
<tr><td>Microsoft.DefaultPrograms</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Add or Remove Programs</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Add New Programs page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page.&lt;br/&gt;&lt;br/&gt;The Add New Programs button lets users install programs published or assigned by a system administrator.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Add New Programs button is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to install programs." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Hide Add New Programs page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Add/Remove Windows Components page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page.&lt;br/&gt;&lt;br/&gt;The Add/Remove Windows Components button lets users configure installed services and use the Windows Component Wizard to add, remove, and configure components of Windows from the installation files.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Add/Remove Windows Components button is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to configure services or add or remove program components. However, this setting blocks user access to the Windows Component Wizard." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Hide Add/Remove Windows Components page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Change or Remove Programs page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page.&lt;br/&gt;&lt;br/&gt;The Change or Remove Programs button lets users uninstall, repair, add, or remove features of installed programs.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Change or Remove Programs page is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to delete or uninstall programs." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Hide Change or Remove Programs page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the &amp;quot;Add a program from CD-ROM or floppy disk&amp;quot; option" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the &amp;quot;Add a program from CD-ROM or floppy disk&amp;quot; section from the Add New Programs page. This prevents users from using Add or Remove Programs to install programs from removable media.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Add a program from CD-ROM or floppy disk&amp;quot; option is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to add or remove program components.&lt;br/&gt;&lt;br/&gt;Note: If the &amp;quot;Hide Add New Programs page&amp;quot; setting is enabled, this setting is ignored. Also, if the &amp;quot;Prevent removable media source for any install&amp;quot; setting (located in User Configuration\Administrative Templates\Windows Components\Windows Installer) is enabled, users cannot add programs from removable media, regardless of this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Hide the &quot;Add a program from CD-ROM or floppy disk&quot; option</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the &amp;quot;Add programs from Microsoft&amp;quot; option" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the &amp;quot;Add programs from Microsoft&amp;quot; section from the Add New Programs page. This setting prevents users from using Add or Remove Programs to connect to Windows Update.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, &amp;quot;Add programs from Microsoft&amp;quot; is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to connect to Windows Update.&lt;br/&gt;&lt;br/&gt;Note: If the &amp;quot;Hide Add New Programs page&amp;quot; setting is enabled, this setting is ignored." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Hide the &quot;Add programs from Microsoft&quot; option</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the &amp;quot;Add programs from your network&amp;quot; option" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Prevents users from viewing or installing published programs.&lt;br/&gt;&lt;br/&gt;This setting removes the &amp;quot;Add programs from your network&amp;quot; section from the Add New Programs page. The &amp;quot;Add programs from your network&amp;quot; section lists published programs and provides an easy way to install them.&lt;br/&gt;&lt;br/&gt;Published programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically, system administrators publish programs to notify users that the programs are available, to recommend their use, or to enable users to install them without having to search for installation files.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot tell which programs have been published by the system administrator, and they cannot use Add or Remove Programs to install published programs. However, they can still install programs by using other methods, and they can view and install assigned (partially installed) programs that are offered on the desktop or on the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, &amp;quot;Add programs from your network&amp;quot; is available to all users.&lt;br/&gt;&lt;br/&gt;Note: If the &amp;quot;Hide Add New Programs page&amp;quot; setting is enabled, this setting is ignored." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Hide the &quot;Add programs from your network&quot; option</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the Set Program Access and Defaults page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Set Program Access and Defaults button from the Add or Remove Programs bar.  As a result, users cannot view or change the associated page.&lt;br/&gt;&lt;br/&gt;The Set Program Access and Defaults button lets administrators specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Set Program Access and Defaults button is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to change program access or defaults.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the Set Program Access and Defaults icon from appearing on the Start menu.  See the &amp;quot;Remove Set Program Access and Defaults from Start menu&amp;quot; setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Hide the Set Program Access and Defaults page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Add or Remove Programs" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Prevents users from using Add or Remove Programs.&lt;br/&gt;&lt;br/&gt;This setting removes Add or Remove Programs from Control Panel and removes the Add or Remove Programs item from menus.&lt;br/&gt;&lt;br/&gt;Add or Remove Programs lets users install, uninstall, repair, add, and remove features and components of Windows 2000 Professional and a wide variety of Windows programs. Programs published or assigned to the user appear in Add or Remove Programs.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, Add or Remove Programs is available to all users.&lt;br/&gt;&lt;br/&gt;When enabled, this setting takes precedence over the other settings in this folder.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to install or uninstall programs." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Remove Add or Remove Programs</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Personalization</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable screen saver" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Enables desktop screen savers.&lt;br/&gt;&lt;br/&gt;If you disable this setting, screen savers do not run. Also, this setting disables the Screen Saver section of the Screen Saver dialog in the Personalization or Display Control Panel. As a result, users cannot change the screen saver options.&lt;br/&gt;&lt;br/&gt;If you do not configure it, this setting has no effect on the system.&lt;br/&gt;&lt;br/&gt;If you enable it, a screen saver runs, provided the following two conditions hold: First, a valid screen saver on the client is specified through the &amp;quot;Screen Saver executable name&amp;quot; setting or through Control Panel on the client computer. Second, the screen saver timeout is set to a nonzero value through the setting or Control Panel.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent changing Screen Saver&amp;quot; setting." gpmc_supported="At least Windows 2000 Service Pack 1">Enable screen saver</a></td><td>Disabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing color scheme" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="This setting forces the theme color scheme to be the default color scheme.&lt;br/&gt;&lt;br/&gt;If you enable this setting, a user cannot change the color scheme of the current desktop theme.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, a user may change the color scheme of the current desktop theme.&lt;br/&gt;&lt;br/&gt;For Windows 7 and later, use the &amp;quot;Prevent changing window color and appearance&amp;quot; setting." gpmc_supported="Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP">Prevent changing color scheme</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing desktop background" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from adding or changing the background design of the desktop.&lt;br/&gt;&lt;br/&gt;By default, users can use the Desktop Background page in the Personalization or Display Control Panel to add a background design (wallpaper) to their desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, none of the Desktop Background settings can be changed by the user.&lt;br/&gt;&lt;br/&gt;To specify wallpaper for a group, use the &amp;quot;Desktop Wallpaper&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: You must also enable the &amp;quot;Desktop Wallpaper&amp;quot; setting to prevent users from changing the desktop wallpaper. Refer to KB article: Q327998 for more information.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Allow only bitmapped wallpaper&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent changing desktop background</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing desktop icons" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from changing the desktop icons.&lt;br/&gt;&lt;br/&gt;By default, users can use the Desktop Icon Settings dialog in the Personalization or Display Control Panel to show, hide, or change the desktop icons.&lt;br/&gt;&lt;br/&gt;If you enable this setting, none of the desktop icons can be changed by the user.&lt;br/&gt;&lt;br/&gt;For systems prior to Windows Vista, this setting also hides the Desktop tab in the Display Control Panel." gpmc_supported="At least Windows 2000">Prevent changing desktop icons</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing mouse pointers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from changing the mouse pointers.&lt;br/&gt;&lt;br/&gt;By default, users can use the Pointers tab in the Mouse Control Panel to add, remove, or change the mouse pointers.&lt;br/&gt;&lt;br/&gt;If you enable this setting, none of the mouse pointer scheme settings can be changed by the user." gpmc_supported="At least Windows 7 or Windows Server 2008 R2">Prevent changing mouse pointers</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing screen saver" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents the Screen Saver dialog from opening in the Personalization or Display Control Panel.&lt;br/&gt;      &lt;br/&gt;This setting prevents users from using Control Panel to add, configure, or change the screen saver on the computer. It does not prevent a screen saver from running.&lt;br/&gt;      " gpmc_supported="At least Windows 2000">Prevent changing screen saver</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing sounds" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from changing the sound scheme.&lt;br/&gt;&lt;br/&gt;By default, users can use the Sounds tab in the Sound Control Panel to add, remove, or change the system Sound Scheme.&lt;br/&gt;&lt;br/&gt;If you enable this setting, none of the Sound Scheme settings can be changed by the user." gpmc_supported="At least Windows 7 or Windows Server 2008 R2">Prevent changing sounds</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing theme" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="This setting disables the theme gallery in the Personalization Control Panel.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot change or save a theme.  Elements of a theme such as the desktop background, window color, sounds, and screen saver can still be changed (unless policies are set to turn them off).&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, there is no effect.&lt;br/&gt;&lt;br/&gt;Note: If you enable this setting but do not specify a theme using the &amp;quot;load a specific theme&amp;quot; setting, the theme defaults to whatever the user previously set or the system default." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Prevent changing theme</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing visual style for windows and buttons" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users or applications from changing the visual style of the windows and buttons displayed on their screens.&lt;br/&gt;&lt;br/&gt;When enabled on Windows XP, this setting disables the &amp;quot;Windows and buttons&amp;quot; drop-down list on the Appearance tab in Display Properties.&lt;br/&gt;&lt;br/&gt;When enabled on Windows XP and later systems, this setting prevents users and applications from changing the visual style through the command line.  Also, a user may not apply a different visual style when changing themes." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Prevent changing visual style for windows and buttons</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing window color and appearance" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Disables the Window Color page in the Personalization Control Panel, or the Color Scheme dialog in the Display Control Panel on systems where the Personalization feature is not available.&lt;br/&gt;&lt;br/&gt;This setting prevents users from using Control Panel to change the glass color, system colors, or color scheme of the desktop and windows.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or not configured, the Window Color page or Color Scheme dialog is available in the Personalization or Display Control Panel.&lt;br/&gt;&lt;br/&gt;For systems prior to Windows Vista, this setting hides the Appearance and Themes tabs in the in Display in Control Panel." gpmc_supported="At least Windows 2000">Prevent changing window color and appearance</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit selection of visual style font size" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from changing the size of the font in the windows and buttons displayed on their screens.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the &amp;quot;Font size&amp;quot; drop-down list on the Appearance tab in Display Properties is disabled. &lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, a user may change the font size using the &amp;quot;Font size&amp;quot; drop-down list on the Appearance tab." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Prohibit selection of visual style font size</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Printers</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browse a common web site to find printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Adds a link to an Internet or intranet Web page to the Add Printer Wizard.&lt;br/&gt;&lt;br/&gt;You can use this setting to direct users to a Web page from which they can install printers.&lt;br/&gt;&lt;br/&gt;If you enable this setting and type an Internet or intranet address in the text box, the system adds a Browse button to the &amp;quot;Specify a Printer&amp;quot; page in the Add Printer Wizard. The Browse button appears beside the &amp;quot;Connect to a printer on the Internet or on a home or office network&amp;quot; option. When users click Browse, the system opens an Internet browser and navigates to the specified URL address to display the available printers.&lt;br/&gt;&lt;br/&gt;This setting makes it easy for users to find the printers you want them to add.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Custom support URL in the Printers folder's left pane&amp;quot; and &amp;quot;Web-based printing&amp;quot; settings in &amp;quot;Computer Configuration\Administrative Templates\Printers.&amp;quot;" gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Browse a common web site to find printers</a></td><td>Disabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browse the network to find printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Allows users to use the Add Printer Wizard to search the network for shared printers.&lt;br/&gt;&lt;br/&gt;If you enable this setting or do not configure it, when users choose to add a network printer by selecting the &amp;quot;A network printer, or a printer attached to another computer&amp;quot; radio button on Add Printer Wizard's page 2, and also check the &amp;quot;Connect to this printer (or to browse for a printer, select this option and click Next)&amp;quot; radio button on Add Printer Wizard's page 3, and do not specify a printer name in the adjacent &amp;quot;Name&amp;quot; edit box, then Add Printer Wizard displays the list of shared printers on the network and invites to choose a printer from the shown list.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the network printer browse page is removed from within the Add Printer Wizard, and users cannot search the network but must type a printer name.&lt;br/&gt;&lt;br/&gt;Note: This setting affects the Add Printer Wizard only. It does not prevent users from using other programs to search for shared printers or to connect to network printers." gpmc_supported="At least Windows 2000">Browse the network to find printers</a></td><td>Disabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent deletion of printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Prevents users from deleting local and network printers.&lt;br/&gt;&lt;br/&gt;If a user tries to delete a printer, such as by using the Delete option in Printers in Control Panel, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from running other programs to delete a printer.&lt;br/&gt;&lt;br/&gt;If this policy is disabled, or not configured, users can delete printers using the methods described above." gpmc_supported="At least Windows 2000">Prevent deletion of printers</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Programs</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide &amp;quot;Get Programs&amp;quot; page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Programs" gpmc_settingDescription="Prevents users from viewing or installing published programs from the network.  &lt;br/&gt;&lt;br/&gt;This setting prevents users from accessing the &amp;quot;Get Programs&amp;quot; page from the Programs Control Panel in Category View, Programs and Features in Classic View and the &amp;quot;Install a program from the netowrk&amp;quot; task.  The &amp;quot;Get Programs&amp;quot; page lists published programs and provides an easy way to install them.&lt;br/&gt;&lt;br/&gt;Published programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer.  Typically, system administrators publish programs to notify users of their availability, to recommend their use, or to enable users to install them without having to search for installation files.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, users cannot view the programs that have been published by the system administrator, and they cannot use the &amp;quot;Get Programs&amp;quot; page to install published programs.  Enabling this feature does not prevent users from installing programs by using other methods.  Users will still be able to view and installed assigned (partially installed) programs that are offered on the desktop or on the Start menu.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or is not configured, the &amp;quot;Install a program from the network&amp;quot; task to the &amp;quot;Get Programs&amp;quot; page will be available to all users.&lt;br/&gt;&lt;br/&gt;Note:  If the &amp;quot;Hide Programs Control Panel&amp;quot; setting is enabled, this setting is ignored." gpmc_supported="At least Windows Vista">Hide &quot;Get Programs&quot; page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide &amp;quot;Installed Updates&amp;quot; page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Programs" gpmc_settingDescription="This setting prevents users from accessing &amp;quot;Installed Updates&amp;quot; page from the &amp;quot;View installed updates&amp;quot; task.&lt;br/&gt;&lt;br/&gt;&amp;quot;Installed Updates&amp;quot; allows users to view and uninstall updates currently installed on the computer.  The updates are often downloaded directly from Windows Update or from various program publishers.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or not configured, the &amp;quot;View installed updates&amp;quot; task and the &amp;quot;Installed Updates&amp;quot; page will be available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to install or uninstall programs." gpmc_supported="At least Windows Vista">Hide &quot;Installed Updates&quot; page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide &amp;quot;Programs and Features&amp;quot; page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Programs" gpmc_settingDescription="This setting prevents users from accessing &amp;quot;Programs and Features&amp;quot; to view, uninstall, change, or repair programs that are currently installed on the computer.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or not configured, &amp;quot;Programs and Features&amp;quot; will be available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to view or uninstall programs.  It also does not prevent users from linking to related Programs Control Panel Features including Windows Features, Get Programs, or Windows Marketplace." gpmc_supported="At least Windows Vista">Hide &quot;Programs and Features&quot; page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide &amp;quot;Set Program Access and Computer Defaults&amp;quot; page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Programs" gpmc_settingDescription="This setting removes the Set Program Access and Defaults page from the Programs Control Panel.  As a result, users cannot view or change the associated page.&lt;br/&gt;&lt;br/&gt;The Set Program Access and Computer Defaults page allows administrators to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as specify the programs that are accessible from the Start menu, desktop, and other locations.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or not configured, the Set Program Access and Defaults button is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to change program access or defaults.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the Default Programs icon from appearing on the Start menu." gpmc_supported="At least Windows Vista">Hide &quot;Set Program Access and Computer Defaults&quot; page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide &amp;quot;Windows Features&amp;quot;" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Programs" gpmc_settingDescription="This setting prevents users from accessing the &amp;quot;Turn Windows features on or off&amp;quot; task from the Programs Control Panel in Category View, Programs and Features in Classic View, and Get Programs.  As a result, users cannot view, enable, or disable various Windows features and services.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or is not configured, the &amp;quot;Turn Windows features on or off&amp;quot; task will be available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to configure services or enable or disable program components." gpmc_supported="At least Windows Vista">Hide &quot;Windows Features&quot;</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide &amp;quot;Windows Marketplace&amp;quot;" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Programs" gpmc_settingDescription="This setting prevents users from access the &amp;quot;Get new programs from Windows Marketplace&amp;quot; task from the Programs Control Panel in Category View, Programs and Features in Classic View, and Get Programs.&lt;br/&gt;&lt;br/&gt;Windows Marketplace allows users to purchase and/or download various programs to their computer for installation.&lt;br/&gt;&lt;br/&gt;Enabling this feature does not prevent users from navigating to Windows Marketplace using other methods. &lt;br/&gt;&lt;br/&gt;If this feature is disabled or is not configured, the &amp;quot;Get new programs from Windows Marketplace&amp;quot; task link will be available to all users.&lt;br/&gt;&lt;br/&gt;Note:  If the &amp;quot;Hide Programs control Panel&amp;quot; setting is enabled, this setting is ignored." gpmc_supported="At least Windows Vista">Hide &quot;Windows Marketplace&quot;</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the Programs Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Programs" gpmc_settingDescription="This setting prevents users from using the Programs Control Panel in Category View and Programs and Features in Classic View.&lt;br/&gt; &lt;br/&gt;The Programs Control Panel allows users to uninstall, change, and repair programs, enable and disable Windows Features, set program defaults, view installed updates, and purchase software from Windows Marketplace. Programs published or assigned to the user by the system administrator also appear in the Programs Control Panel.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or not configured, the Programs Control Panel in Category View and Programs and Features in Classic View will be available to all users.&lt;br/&gt;&lt;br/&gt;When enabled, this setting takes precedence over the other settings in this folder.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to install or uninstall programs." gpmc_supported="At least Windows Vista">Hide the Programs Control Panel</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Regional and Language Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Regional and Language Options administrative options" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Regional and Language Options" gpmc_settingDescription="This policy removes the Administrative options from the Regional and Language Options control panel.  Administrative options include interfaces for setting system locale and copying settings to the default user. This policy does not, however, prevent an administrator or another application from changing these values programmatically.&lt;br/&gt;&lt;br/&gt;The policy is used only to simplify the Regional Options control panel.&lt;br/&gt;&lt;br/&gt;If the policy is Enabled, then the user will not be able to see the Administrative options.&lt;br/&gt;&lt;br/&gt;If the policy is Disabled or Not Configured, then the user will see the Administrative options.&lt;br/&gt;&lt;br/&gt;Note that even if a user can see the Administrative options, other policies may prevent them from modifying the values." gpmc_supported="At least Windows Vista">Hide Regional and Language Options administrative options</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the geographic location option" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Regional and Language Options" gpmc_settingDescription="This policy removes the option to change the user's geographical location (GeoID) from the Language and Regional Options control panel. This does not, however, prevent the user or an application from changing the GeoID programmatically.&lt;br/&gt;&lt;br/&gt;The policy is used only to simplify the Regional Options control panel.&lt;br/&gt;&lt;br/&gt;If the policy is Enabled, then the user will not see the option to change the user geographical location (GeoID).&lt;br/&gt;&lt;br/&gt;If the policy is Disabled or Not Configured, then the user will see the option for changing the user location (GeoID).&lt;br/&gt;&lt;br/&gt;Note that even if a user can see the GeoID Option, the &amp;quot;Disallow changing of geographical location&amp;quot; option may prevent them from actually changing their current geographical location." gpmc_supported="At least Windows Vista">Hide the geographic location option</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the select language group options" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Regional and Language Options" gpmc_settingDescription="This policy removes the option to change the user's menus and dialogs (UI) language from the Language and Regional Options control panel.  This does not, however, prevent the user or an application from changing the UI language programmatically.&lt;br/&gt;&lt;br/&gt;The policy is used only to simplify the Regional Options control panel.&lt;br/&gt;&lt;br/&gt;If the policy is Enabled, then the user will not see the option for changing the UI language.&lt;br/&gt;&lt;br/&gt;If the policy is Disabled or Not Configured, then the user will see the option for changing the UI language.&lt;br/&gt;&lt;br/&gt;Note that even if a user can see the option to change the UI language, other policies may prevent them from changing their UI language." gpmc_supported="At least Windows Vista">Hide the select language group options</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide user locale selection and customization options" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Regional and Language Options" gpmc_settingDescription="This policy removes the regional formats interface from the Regional and Language Options control panel.  This does not, however, prevent the user or an application from changing their user locale or user overrides programmatically.&lt;br/&gt;&lt;br/&gt;The policy is only used to simplify the Regional Options control panel.&lt;br/&gt;&lt;br/&gt;If the policy is Enabled, then the user will not see the regional formats options.&lt;br/&gt;&lt;br/&gt;If the policy is Disabled or Not Configured, then the user will see the regional formats options for changing and customizing the user locale." gpmc_supported="At least Windows Vista">Hide user locale selection and customization options</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict selection of Windows menus and dialogs language" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Regional and Language Options" gpmc_settingDescription="This setting restricts users to the specified language by disabling the menus and dialog box controls in the Regional and Language Options Control Panel. If the specified language is not installed on the target computer, the language selection defaults to English.&lt;br/&gt;&lt;br/&gt;To enable this policy in Windows Vista, you need to use &amp;quot;Restricts the UI languages Windows should use for the selected user&amp;quot; policy. &lt;br/&gt;" gpmc_supported="At least Windows 2000">Restrict selection of Windows menus and dialogs language</a></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Restrict users to the following language:</td><td>English</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restricts the UI languages Windows should use for the selected user" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Regional and Language Options" gpmc_settingDescription="This is a setting for computers with more than one UI language installed. If you enable this setting the UI language of Windows menus and dialogs language for systems with more than one language is restricted to the specific language for the selected user. If the specified language is not installed on the target computer or the policy is disabled, the language selection defaults to the language selected by the user.&lt;br/&gt;&lt;br/&gt;To enable this policy in Windows 2000, Windows XP or Windows Server 2003, you need to use &amp;quot;Restrict selection of Windows menus and dialogs language&amp;quot; policy. &lt;br/&gt;&lt;br/&gt;" gpmc_supported="At least Windows Vista">Restricts the UI languages Windows should use for the selected user</a></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Restrict users to the following language:</td><td>English</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not add shares of recently opened documents to Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Remote shared folders are not added to Network Locations whenever you open a document in the shared folder.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, when you open a document in a remote shared folder, the system adds a connection to the shared folder to Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this setting, shared folders are not added to Network Locations automatically when you open a document in the shared folder." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Do not add shares of recently opened documents to Network Locations</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide and disable all items on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Computer, and Network Locations.&lt;br/&gt;&lt;br/&gt;Removing icons and shortcuts does not prevent the user from using another method to start the programs or opening the items they represent.&lt;br/&gt;&lt;br/&gt;Also, see &amp;quot;Items displayed in Places Bar&amp;quot; in User Configuration\Administrative Templates\Windows Components\Common Open File Dialog to remove the Desktop icon from the Places Bar. This will help prevent users from saving data to the Desktop." gpmc_supported="At least Windows 2000">Hide and disable all items on the desktop</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Network Locations icon on desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Network Locations icon from the desktop.&lt;br/&gt;&lt;br/&gt;This setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Network Places icon." gpmc_supported="At least Windows 2000">Hide Network Locations icon on desktop</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent adding, dragging, dropping and closing the Taskbar's toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from manipulating desktop toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag toolbars on to or off of docked toolbars.&lt;br/&gt;&lt;br/&gt;Note: If users have added or removed toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Tip: To view the toolbars that can be added to the desktop, right-click a docked toolbar (such as the taskbar beside the Start button), and point to &amp;quot;Toolbars.&amp;quot;&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit adjusting desktop toolbars&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent adding, dragging, dropping and closing the Taskbar's toolbars</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit adjusting desktop toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from adding or removing toolbars on the desktop.&lt;br/&gt;&lt;br/&gt;Note: If users have adjusted their toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent adding, dragging, dropping and closing the Taskbar's toolbars&amp;quot; setting." gpmc_supported="At least Windows 2000">Prohibit adjusting desktop toolbars</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit User from manually redirecting Profile Folders" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from changing the path to their profile folders.&lt;br/&gt;&lt;br/&gt;By default, a user can change the location of their individual profile folders like Documents, Music etc. by typing a new path in the Locations tab of the folder's Properties dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users are unable to type a new location in the Target box." gpmc_supported="At least Windows 2000">Prohibit User from manually redirecting Profile Folders</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Computer icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Computer from the desktop and from the new Start menu. It also hides links to Computer in the Web view of all Explorer windows, and it hides Computer in the Explorer folder tree pane. If the user navigates into Computer via the &amp;quot;Up&amp;quot; button while this setting is enabled, they view an empty Computer folder. This setting allows administrators to restrict their users from seeing Computer in the shell namespace, allowing them to present their users with a simpler desktop environment.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Computer is hidden on the desktop, the new Start menu, the Explorer folder tree pane, and the Explorer Web views. If the user manages to navigate to Computer, the folder will be empty.&lt;br/&gt;&lt;br/&gt;If you disable this setting, Computer is displayed as usual, appearing as normal on the desktop, Start menu, folder tree pane, and Web views, unless restricted by another setting.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the default is to display Computer as usual.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Computer icon. Hiding Computer and its contents does not hide the contents of the child folders of Computer. For example, if the users navigate into one of their hard drives, they see all of their folders and files there, even if this setting is enabled." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Remove Computer icon on the desktop</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Documents icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the My Documents icon.&lt;br/&gt;&lt;br/&gt;This setting removes the My Documents icon from the desktop, from Windows Explorer, from programs that use the Windows Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the My Documents folder.&lt;br/&gt;&lt;br/&gt;This setting does not remove the My Documents icon from the Start menu. To do so, use the &amp;quot;Remove My Documents icon from Start Menu&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off from and log back on to Windows 2000 Professional." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Remove My Documents icon on the desktop</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Computer icon context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Properties on the context menu for Computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks My Computer or clicks Computer and then goes to the File menu.  Likewise, Alt-Enter does nothing when Computer is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows 2000 Service Pack 3">Remove Properties from the Computer icon context menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Documents icon context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This policy setting hides the Properties menu command on the shortcut menu for the My Documents icon.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Properties menu command will not be displayed when the user does any of the following:&lt;br/&gt;&lt;br/&gt;Right-clicks the My Documents icon.&lt;br/&gt;Clicks the My Documents icon, and then opens the File menu.&lt;br/&gt;Clicks the My Documents icon, and then presses ALT+ENTER.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Properties menu command is displayed." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Remove Properties from the Documents icon context menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Recycle Bin context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Properties option from the Recycle Bin context menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks on Recycle Bin or opens Recycle Bin and then clicks File. Likewise, Alt-Enter does nothing when Recycle Bin is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Remove Properties from the Recycle Bin context menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recycle Bin icon from desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the Recycle Bin icon.&lt;br/&gt;&lt;br/&gt;This setting removes the Recycle Bin icon from the desktop, from Windows Explorer, from programs that use the Windows Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the Recycle Bin folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off and then log back on." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Remove Recycle Bin icon from desktop</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Desktop Cleanup Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from using the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Desktop Cleanup wizard does not automatically run on a users workstation every 60 days. The user will also not be able to access the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the default behavior of the Desktop Clean Wizard running every 60 days occurs.&lt;br/&gt;&lt;br/&gt;Note: When this setting is not enabled, users can run the Desktop Cleanup Wizard, or have it run automatically every 60 days from Display, by clicking the Desktop tab and then clicking the Customize Desktop button." gpmc_supported="Windows Server 2003 and Windows XP operating systems only">Remove the Desktop Cleanup Wizard</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Offline Files</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent use of Offline Files folder" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Disables the Offline Files folder.&lt;br/&gt;&lt;br/&gt;This setting disables the &amp;quot;View Files&amp;quot; button on the Offline Files tab. As a result, users cannot use the Offline Files folder to view or open copies of network files stored on their computer. Also, they cannot use the folder to view characteristics of offline files, such as their server status, type, or location.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from working offline or from saving local copies of files available offline. Also, it does not prevent them from using other programs, such as Windows Explorer, to view their offline files.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To view the Offline Files Folder, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then click &amp;quot;View Files.&amp;quot;" gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Prevent use of Offline Files folder</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit user configuration of Offline Files" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Prevents users from enabling, disabling, or changing the configuration of Offline Files.&lt;br/&gt;&lt;br/&gt;This setting removes the Offline Files tab from the Folder Options dialog box. It also removes the Settings item from the Offline Files context menu and disables the Settings button on the Offline Files Status dialog box. As a result, users cannot view or change the options on the Offline Files tab or Offline Files dialog box.&lt;br/&gt;&lt;br/&gt;This is a comprehensive setting that locks down the configuration you establish by using other settings in this folder.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: This setting provides a quick method for locking down the default settings for Offline Files. To accept the defaults, just enable this setting. You do not have to disable any other settings in this folder." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Prohibit user configuration of Offline Files</a></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2">Prevents users from changing any cache configuration settings.</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove 'Make Available Offline'" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Prevents users from making network files and folders available offline.&lt;br/&gt;&lt;br/&gt;This setting removes the &amp;quot;Make Available Offline&amp;quot; option from the File menu and from all context menus in Windows Explorer. As a result, users cannot designate files to be saved on their computer for offline use.&lt;br/&gt;&lt;br/&gt;However, this setting does not prevent the system from saving local copies of files that reside on network shares designated for automatic caching.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration." gpmc_supported="At least Windows 2000">Remove 'Make Available Offline'</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off reminder balloons" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Hides or displays reminder balloons, and prevents users from changing the setting.&lt;br/&gt;&lt;br/&gt;Reminder balloons appear above the Offline Files icon in the notification area to notify users when they have lost the connection to a networked file and are working on a local copy of the file. Users can then decide how to proceed.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system hides the reminder balloons, and prevents users from displaying them.&lt;br/&gt;&lt;br/&gt;If you disable the setting, the system displays the reminder balloons and prevents users from hiding them.&lt;br/&gt;&lt;br/&gt;If this setting is not configured, reminder balloons are displayed by default when you enable offline files, but users can change the setting.&lt;br/&gt;&lt;br/&gt;To prevent users from changing the setting while a setting is in effect, the system disables the &amp;quot;Enable reminders&amp;quot; option on the Offline Files tab&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To display or hide reminder balloons without establishing a setting, in Windows Explorer, on the Tools menu, click Folder Options, and then click the Offline Files tab. This setting corresponds to the &amp;quot;Enable reminders&amp;quot; check box." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 operating systems only">Turn off reminder balloons</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Windows Connect Now</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Access of the Windows Connect Now wizards" gpmc_settingPath="User Configuration/Administrative Templates/Network/Windows Connect Now" gpmc_settingDescription="This policy setting prohibits access to Windows Connect Now (WCN) wizards. If this policy setting is enabled, the wizards are disabled and users will have no access to any of the wizard tasks. All the configuration related tasks, including ‘Set up a wireless router or access point’ and ‘Add a wireless device’, will be disabled. If this policy is disabled or not configured, users will have access to the wizard tasks; including ‘Set up a wireless router or access point’ and ‘Add a wireless device’. The default for this policy setting allows users to access all WCN wizards." gpmc_supported="At least Windows Vista">Prohibit Access of the Windows Connect Now wizards</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Shared Folders</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow DFS roots to be published" gpmc_settingPath="User Configuration/Administrative Templates/Shared Folders" gpmc_settingDescription="Determines whether the user can publish DFS roots in Active Directory.&lt;br/&gt;&lt;br/&gt;If you enable this setting or do not configure it, users can use the &amp;quot;Publish in Active Directory&amp;quot; option to publish DFS roots as shared folders in Active Directory.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the user cannot publish DFS roots in Active Directory, and the &amp;quot;Publish in Active Directory&amp;quot; option is disabled. Note: The default is to allow shared folders to be published when this setting is not configured." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Allow DFS roots to be published</a></td><td>Disabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow shared folders to be published" gpmc_settingPath="User Configuration/Administrative Templates/Shared Folders" gpmc_settingDescription="Determines whether the user can publish shared folders in Active Directory.&lt;br/&gt;&lt;br/&gt;If you enable this setting or do not configure it, users can use the &amp;quot;Publish in Active Directory&amp;quot; option in the Shared Folders snap-in to publish shared folders in Active Directory.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the user cannot publish shared folders in Active Directory, and the &amp;quot;Publish in Active Directory&amp;quot; option is disabled. Note: The default is to allow shared folders to be published when this setting is not configured" gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Allow shared folders to be published</a></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Start Menu and Taskbar</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add Logoff to the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy only applies to the classic version of the start menu and does not affect the new style start menu.&lt;br/&gt;&lt;br/&gt;Adds the &amp;quot;Log Off &amp;lt;username&amp;gt;&amp;quot; item to the Start menu and prevents users from removing it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Log Off &amp;lt;username&amp;gt; item appears in the Start menu. This setting also removes the Display Logoff item from Start Menu Options. As a result, users cannot remove the Log Off &amp;lt;username&amp;gt; item from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can use the Display Logoff item to add and remove the Log Off item.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu only. It does not affect the Log Off item on the Windows Security dialog box that appears when you press Ctrl+Alt+Del.&lt;br/&gt;&lt;br/&gt;Note: To add or remove the Log Off item on a computer, click Start, click Settings, click Taskbar and Start Menu, click the Start Menu Options tab, and then, in the Start Menu Settings box, click Display Logoff.&lt;br/&gt;&lt;br/&gt;Also, see &amp;quot;Remove Logoff&amp;quot; in User Configuration\Administrative Templates\System\Logon/Logoff." gpmc_supported="Windows Server 2008, Windows Vista, Windows Server 2003, Windows XP, and Windows 2000">Add Logoff to the Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add Search Internet link to Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;If you enable this policy, a &amp;quot;Search the Internet&amp;quot; link is shown when the user performs a search in the start menu search box.  This button launches the default browser with the search terms.&lt;br/&gt;&lt;br/&gt;If you disable this policy, there will not be a &amp;quot;Search the Internet&amp;quot; link when the user performs a search in the start menu search box.&lt;br/&gt;          &lt;br/&gt;If you do not configure this policy (default), there will not be a &amp;quot;Search the Internet&amp;quot; link on the start menu." gpmc_supported="At least Windows 7 or Windows Server 2008 R2">Add Search Internet link to Start Menu</a></td><td>Disabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Change Start Menu power button" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Set the default action of the power button on the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Start Menu will set the power button to the chosen action, and not let the user change this action.&lt;br/&gt;&lt;br/&gt;If you set the button to either Sleep or Hibernate, and that state is not supported on a computer, then the button will fall back to Shut Down.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Start Menu power button will be set to Shut Down by default, and the user can change this setting to another action." gpmc_supported="At least Windows 7 or Windows Server 2008 R2">Change Start Menu power button</a></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Choose one of the following actions</td><td>Restart</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear history of recently opened documents on exit" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Clear history of recently opened documents on exit.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system deletes shortcuts to recently used document files when the user logs off. As a result, the Recent Items menu on the Start menu is always empty when the user logs on. In addition, recently and frequently used items in the Jump Lists off of programs in the Start Menu and Taskbar will be cleared when the user logs off.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system retains document shortcuts, and when a user logs on, the Recent Items menu and the Jump Lists appear just as it did when the user logged off.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Users\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; and &amp;quot;Do not keep history of recently opened documents&amp;quot; policies in this folder. The system only uses this setting when neither of these related settings are selected.&lt;br/&gt;&lt;br/&gt;This setting does not clear the list of recent files that Windows programs display at the bottom of the File menu. See the &amp;quot;Do not keep history of recently opened documents&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This policy setting also does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This policy also does not clear items that the user may have pinned to the Jump Lists, or Tasks that the application has provided for their menu. See the &amp;quot;Do not allow pinning items in Jump Lists&amp;quot; setting." gpmc_supported="At least Windows 2000">Clear history of recently opened documents on exit</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear the recent programs list for new users" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting, the recent programs list in the start menu will be blank for each new user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu recent programs list will be pre-populated with programs for each new user." gpmc_supported="At least Windows Vista">Clear the recent programs list for new users</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display any custom toolbars in the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar.&lt;br/&gt;&lt;br/&gt;The taskbar includes the Start button, buttons for currently running tasks, custom toolbars, the notification area, and the system clock. Toolbars include Quick Launch, Address, Links, Desktop, and other custom toolbars created by the user or by an application.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the taskbar does not display any custom toolbars, and the user cannot add any custom toolbars to the taskbar. Moreover, the &amp;quot;Toolbars&amp;quot; menu command and submenu are removed from the context menu. The taskbar displays only the Start button, taskbar buttons, the notification area, and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or is not configured, the taskbar displays all toolbars. Users can add or remove custom toolbars, and the &amp;quot;Toolbars&amp;quot; command appears in the context menu." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Do not display any custom toolbars in the taskbar</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not keep history of recently opened documents" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system and Windows programs do not create shortcuts to documents opened while the setting is in effect. Also, they retain but do not display existing document shortcuts. The system empties the Recent Items menu on the Start menu, and Windows programs do not display shortcuts at the bottom of the File menu. In addition, the Jump Lists off of programs in the Start Menu and Taskbar do not show lists of recently or frequently used files, folders, or websites.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system will store and display shortcuts to recently and frequently used files, folders, and websites.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Users\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; and &amp;quot;Clear history of recently opened documents on exit&amp;quot; policies in this folder.&lt;br/&gt;&lt;br/&gt;If you enable this setting but do not enable the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; setting, the Recent Items menu appears on the Start menu, but it is empty.&lt;br/&gt;&lt;br/&gt;If you enable this setting, but then later disable it or set it to Not Configured, the document shortcuts saved before the setting was enabled reappear in the Recent Items menu and program File menus, and Jump Lists.&lt;br/&gt;&lt;br/&gt;This setting does not hide or prevent the user from pinning files, folders, or websites to the Jump Lists. See the &amp;quot;Do not allow pinning items in Jump Lists&amp;quot; setting. This policy also does not hide Tasks that the application has provided for their Jump List. This setting does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Do not keep history of recently opened documents</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search communications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu search box will not search for communications.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will search for communications, unless the user chooses not to in the start menu control panel." gpmc_supported="At least Windows Vista">Do not search communications</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search for files" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting the Start menu search box will not search for files.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Start menu will search for files, unless the user chooses not to do so directly in Control Panel.  If you enable this policy, a &amp;quot;See more results&amp;quot; / &amp;quot;Search Everywhere&amp;quot; link will not be shown when the user performs a search in the start menu search box." gpmc_supported="At least Windows Vista">Do not search for files</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search Internet" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu search box will not search for internet history or favorites.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will search for for internet history or favorites, unless the user chooses not to in the start menu control panel." gpmc_supported="Windows Vista and Windows Server 2008">Do not search Internet</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search programs and Control Panel items" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting the Start menu search box will not search for programs or Control Panel items.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Start menu search box will search for programs and Control Panel items, unless the user chooses not to do so directly in Control Panel." gpmc_supported="At least Windows Vista">Do not search programs and Control Panel items</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock all taskbar settings" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents the user from making any changes to the taskbar settings through the Taskbar Properties dialog.&lt;br/&gt;&lt;br/&gt;If you enable this setting the user cannot access the taskbar control panel. The user is also unable to resize, move or rearrange toolbars on their taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting the user will be able to set any taskbar setting that is not disallowed by another policy setting." gpmc_supported="At least Windows Vista">Lock all taskbar settings</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar, which is used to switch between running applications.&lt;br/&gt;&lt;br/&gt;The taskbar includes the Start button, list of currently running tasks, and the notification area. By default, the taskbar is located at the bottom of the screen, but it can be dragged to any side of the screen. When it is locked, it cannot be moved or resized.&lt;br/&gt;&lt;br/&gt;If you enable this setting, it prevents the user from moving or resizing the taskbar. While the taskbar is locked, auto-hide and other taskbar options are still available in Taskbar properties.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the user can configure the taskbar position.&lt;br/&gt;&lt;br/&gt;Note: Enabling this setting also locks the QuickLaunch bar and any other toolbars that the user has on their taskbar. The toolbar's position is locked, and the user cannot show and hide various toolbars using the taskbar context menu." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Lock the Taskbar</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from adding or removing toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from adding or removing toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting the user will not be allowed to add or remove any toolbars to the taskbar. Applications will not be able to add toolbars either.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the users and applications will be able to add toolbars to the taskbar." gpmc_supported="At least Windows Vista">Prevent users from adding or removing toolbars</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from rearranging toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from rearranging toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this setting the user will not be able to drag or drop toolbars to the taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users will be able to rearrange the toolbars on the taskbar.&lt;br/&gt;" gpmc_supported="At least Windows Vista">Prevent users from rearranging toolbars</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove access to the context menus for the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Hides the menus that appear when you right-click the taskbar and items on the taskbar, such as the Start button, the clock, and the taskbar buttons.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other methods to issue the commands that appear on these menus." gpmc_supported="At least Windows 2000">Remove access to the context menus for the taskbar</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove All Programs list from the Start menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the &amp;quot;All Programs&amp;quot; item is removed from the simple Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;All Programs&amp;quot; item remains on the simple Start menu." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Remove All Programs list from the Start menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Balloon Tips on Start Menu items" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Hides pop-up text on the Start menu and in the notification area.&lt;br/&gt;&lt;br/&gt;When you hold the cursor over an item on the Start menu or in the notification area, the system displays pop-up text providing additional information about the object.&lt;br/&gt;&lt;br/&gt;If you enable this setting, some of this pop-up text is not displayed. The pop-up text affected by this setting includes &amp;quot;Click here to begin&amp;quot; on the Start button, &amp;quot;Where have all my programs gone&amp;quot; on the Start menu, and &amp;quot;Where have my icons gone&amp;quot; in the notification area.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, all pop-up text is displayed on the Start menu and in the notification area." gpmc_supported="Windows Server 2003 and Windows XP operating systems only">Remove Balloon Tips on Start Menu items</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove common program groups from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes items in the All Users profile from the Programs menu on the Start menu.&lt;br/&gt;&lt;br/&gt;By default, the Programs menu contains items from the All Users profile and items from the user's profile. If you enable this setting, only items in the user's profile appear in the Programs menu.&lt;br/&gt;&lt;br/&gt;Tip: To see the Program menu items in the All Users profile, on the system drive, go to ProgramData\Microsoft\Windows\Start Menu\Programs." gpmc_supported="At least Windows 2000">Remove common program groups from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Default Programs link from the Start menu." gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Default Programs link from the Start menu.&lt;br/&gt;&lt;br/&gt;Clicking the Default Programs link from the Start menu opens the Default Programs control panel and provides administrators the ability to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent the Set Default Programs for This Computer option from appearing in the Default Programs control panel." gpmc_supported="At least Windows 2000 Service Pack 3 or Windows XP Professional Service Pack 1">Remove Default Programs link from the Start menu.</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Documents icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Documents icon from the Start menu and its submenus.&lt;br/&gt;&lt;br/&gt;This setting only removes the icon. It does not prevent the user from using other methods to gain access to the contents of the Documents folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off and then log on.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Documents icon on the desktop&amp;quot; setting." gpmc_supported="At least Windows 2000">Remove Documents icon from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Downloads link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu will not show a link to the Downloads folder." gpmc_supported="At least Windows 7 or Windows Server 2008 R2">Remove Downloads link from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove drag-and-drop and context menus on the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from using the drag-and-drop method to reorder or remove items on the Start menu. Also, it removes context menus from the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can remove or reorder Start menu items by dragging and dropping the item. They can display context menus by right-clicking a Start menu item.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other methods of customizing the Start menu or performing the tasks available from the context menus.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent changes to Taskbar and Start Menu Settings&amp;quot; and the &amp;quot;Remove access to the context menus for taskbar&amp;quot; settings." gpmc_supported="At least Windows 2000">Remove drag-and-drop and context menus on the Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Favorites menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from adding the Favorites menu to the Start menu or classic Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Display Favorites item does not appear in the Advanced Start menu options box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Display Favorite item is available.&lt;br/&gt;&lt;br/&gt;Note:The Favorities menu does not appear on the Start menu by default. To display the Favorites menu, right-click Start, click Properties, and then click Customize.  If you are using Start menu, click the Advanced tab, and then, under Start menu items, click the Favorites menu. If you are using the classic Start menu, click Display Favorites under Advanced Start menu options.&lt;br/&gt;&lt;br/&gt;Note:The items that appear in the Favorites menu when you install Windows are preconfigured by the system to appeal to most users. However, users can add and remove items from this menu, and system administrators can create a customized Favorites menu for a user group.&lt;br/&gt;&lt;br/&gt;Note:This setting only affects the Start menu. The Favorites item still appears in Windows Explorer and in Internet Explorer." gpmc_supported="At least Windows 2000">Remove Favorites menu from Start Menu</a></td><td>Disabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove frequent programs list from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the frequently used programs list is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the frequently used programs list remains on the simple Start menu." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Remove frequent programs list from the Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Games link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu will not show a link to the Games folder.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will show a link to the Games folder, unless the user chooses to remove it in the start menu control panel." gpmc_supported="At least Windows Vista">Remove Games link from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Help menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Help command from the Start menu.&lt;br/&gt;&lt;br/&gt;This setting only affects the Start menu. It does not remove the Help menu from Windows Explorer and does not prevent users from running Help." gpmc_supported="At least Windows 2000">Remove Help menu from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Homegroup link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the Start menu will not show a link to Homegroup. It also removes the homegroup item from the Start Menu options. As a result, users cannot add the homegroup link to the Start Menu.&lt;br/&gt;&lt;br/&gt;      If you disable or do not configure this policy, users can use the Start Menu options to add or remove the homegroup link from the Start Menu." gpmc_supported="At least Windows 7 or Windows Server 2008 R2">Remove Homegroup link from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove links and access to Windows Update" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from connecting to the Windows Update Web site.&lt;br/&gt;&lt;br/&gt;This setting blocks user access to the Windows Update Web site at http://windowsupdate.microsoft.com. Also, the setting removes the Windows Update hyperlink from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Windows Update, the online extension of Windows, offers software updates to keep a user’s system up-to-date. The Windows Update Product Catalog determines any system files, security fixes, and Microsoft updates that users need and shows the newest versions available for download.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide the &amp;quot;Add programs from Microsoft&amp;quot; option&amp;quot; setting." gpmc_supported="At least Windows 2000">Remove links and access to Windows Update</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Music icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Music icon from the Start Menu." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Remove Music icon from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network Connections from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from running Network Connections.&lt;br/&gt;&lt;br/&gt;This setting prevents the Network Connections folder from opening. This setting also removes Network Connections from Settings on the Start menu.&lt;br/&gt;&lt;br/&gt;Network Connections still appears in Control Panel and in Windows Explorer, but if users try to start it, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable programs on Settings menu&amp;quot; and &amp;quot;Disable Control Panel&amp;quot; settings and the settings in the Network Connections folder (Computer Configuration and User Configuration\Administrative Templates\Network\Network Connections)." gpmc_supported="Windows Server 2008, Windows Vista, Windows Server 2003, Windows XP, and Windows 2000">Remove Network Connections from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Network icon from the Start Menu." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Remove Network icon from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Pictures icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Pictures icon from the Start Menu." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Remove Pictures icon from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove pinned programs list from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the &amp;quot;Pinned Programs&amp;quot; list is removed from the Start menu. Users cannot pin programs to the Start menu. &lt;br/&gt;&lt;br/&gt;In Windows XP and Windows Vista, the Internet and email checkboxes are removed from the 'Customize Start Menu' dialog. &lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Pinned Programs&amp;quot; list remains on the Start menu. Users can pin and unpin programs in the Start Menu." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Remove pinned programs list from the Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove programs on Settings menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents Control Panel, Printers, and Network Connections from running.&lt;br/&gt;&lt;br/&gt;This setting removes the Control Panel, Printers, and Network and Connection folders from Settings on the Start menu, and from Computer and Windows Explorer. It also prevents the programs represented by these folders (such as Control.exe) from running.&lt;br/&gt;&lt;br/&gt;However, users can still start Control Panel items by using other methods, such as right-clicking the desktop to start Display or right-clicking Computer to start System.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable Control Panel,&amp;quot; &amp;quot;Disable Display in Control Panel,&amp;quot; and &amp;quot;Remove Network Connections from Start Menu&amp;quot; settings." gpmc_supported="At least Windows 2000">Remove programs on Settings menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recent Items menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Recent Items menu from the Start menu.  Removes the Documents menu from the classic Start menu.&lt;br/&gt;&lt;br/&gt;The Recent Items menu contains links to the non-program files that users have most recently opened. It appears so that users can easily reopen their documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system saves document shortcuts but does not display the Recent Items menu in the Start Menu, and users cannot turn the menu on.&lt;br/&gt;&lt;br/&gt;If you later disable the setting, so that the Recent Items menu appears in the Start Menu, the document shortcuts saved before the setting was enabled and while it was in effect appear in the Recent Items menu.&lt;br/&gt;&lt;br/&gt;When the setting is disabled, the Recent Items menu appears in the Start Menu, and users cannot remove it.&lt;br/&gt;&lt;br/&gt;If the setting is not configured, users can turn the Recent Items menu on and off.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent Windows programs from displaying shortcuts to recently opened documents. See the &amp;quot;Do not keep history of recently opened documents&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This setting also does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting." gpmc_supported="At least Windows 2000">Remove Recent Items menu from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recorded TV link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu will not show a link to the Recorded TV library." gpmc_supported="At least Windows 7 or Windows Server 2008 R2">Remove Recorded TV link from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Run menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the following changes occur:&lt;br/&gt;&lt;br/&gt;(1) The Run command is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;(2) The New Task (Run) command is removed from Task Manager.&lt;br/&gt;&lt;br/&gt;(3) The user will be blocked from entering the following into the Internet Explorer Address Bar:&lt;br/&gt;&lt;br/&gt;--- A UNC path: \\&amp;lt;server&amp;gt;\&amp;lt;share&amp;gt; &lt;br/&gt;&lt;br/&gt;---Accessing local drives:  e.g., C:&lt;br/&gt;&lt;br/&gt;--- Accessing local folders: e.g., \temp&amp;gt;&lt;br/&gt;&lt;br/&gt;Also, users with extended keyboards will no longer be able to display the Run dialog box by pressing the Application key (the key with the Windows logo) + R.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the Run command in the Start menu and in Task Manager and use the Internet Explorer Address Bar.&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;Note:This setting affects the specified interface only. It does not prevent users from using other methods to run programs.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Remove Run menu from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search Computer link" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy, the &amp;quot;See all results&amp;quot; link will not be shown when the user performs a search in the start menu search box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the &amp;quot;See all results&amp;quot; link will be shown when the user performs a search in the start menu search box." gpmc_supported="Windows Vista only">Remove Search Computer link</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Search link from the Start menu, and disables some Windows Explorer search elements.  Note that this does not remove the search box from the new style Start menu.&lt;br/&gt;&lt;br/&gt;This setting removes the Search item from the Start menu and from the context menu that appears when you right-click the Start menu. Also, the system does not respond when users press the Application key (the key with the Windows logo)+ F.&lt;br/&gt;&lt;br/&gt;In Windows Explorer, the Search item still appears on the Standard buttons toolbar, but the system does not respond when the user presses Ctrl+F. Also, Search does not appear in the context menu when you right-click an icon representing a drive or a folder.&lt;br/&gt;&lt;br/&gt;This setting affects the specified user interface elements only. It does not affect Internet Explorer and does not prevent the user from using other methods to search.&lt;br/&gt;&lt;br/&gt;Note:&lt;br/&gt;&lt;br/&gt;This setting also prevents the user from using the F3 key." gpmc_supported="Windows Server 2003 and Windows XP operating systems only">Remove Search link from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove See More Results / Search Everywhere link" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;          If you enable this policy, a &amp;quot;See more results&amp;quot; / &amp;quot;Search Everywhere&amp;quot; link will not be shown when the user performs a search in the start menu search box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, a &amp;quot;See more results&amp;quot; link will be shown when the user performs a search in the start menu search box.  If a 3rd party protocol handler is installed, a &amp;quot;Search Everywhere&amp;quot; link will be shown instead of the &amp;quot;See more results&amp;quot; link." gpmc_supported="At least Windows 7 or Windows Server 2008 R2">Remove See More Results / Search Everywhere link</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove user folder link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu will not show a link to the user's storage folder.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will display a link, unless the user chooses to remove it in the start menu control panel." gpmc_supported="At least Windows Vista">Remove user folder link from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove user's folders from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden.&lt;br/&gt;&lt;br/&gt;This setting is designed for use with redirected folders. Redirected folders appear on the main (bottom) section of the Start menu. However, the original, user-specific version of the folder still appears on the top section of the Start menu. Because the appearance of two folders with the same name might confuse users, you can use this setting to hide user-specific folders.&lt;br/&gt;&lt;br/&gt;Note that this setting hides all user-specific folders, not just those associated with redirected folders.&lt;br/&gt;&lt;br/&gt;If you enable this setting, no folders appear on the top section of the Start menu. If users add folders to the Start Menu directory in their user profiles, the folders appear in the directory but not on the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configured it, Windows 2000 Professional and Windows XP Professional display folders on both sections of the Start menu." gpmc_supported="At least Windows 2000">Remove user's folders from the Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Videos link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu will not show a link to the Videos library." gpmc_supported="At least Windows 7 or Windows Server 2008 R2">Remove Videos link from Start Menu</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show QuickLaunch on Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting controls whether the QuickLaunch bar is displayed in the Taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the QuickLaunch bar will be visible and cannot be turned off.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the QuickLaunch bar will be hidden and cannot be turned on.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, then users will be able to turn the QuickLaunch bar on and off." gpmc_supported="Windows Vista only">Show QuickLaunch on Taskbar</a></td><td>Disabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off all balloon notifications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting no notification balloons will be shown to the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting balloon notifications will be displayed." gpmc_supported="At least Windows Vista">Turn off all balloon notifications</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off notification area cleanup" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the notification area, also called the &amp;quot;system tray.&amp;quot;&lt;br/&gt;&lt;br/&gt;The notification area is located in the task bar, generally at the bottom of the screen, and it includes the clock and current notifications. This setting determines whether the items are always expanded or always collapsed. By default, notifications are collapsed. The notification cleanup &amp;lt;&amp;lt; icon can be referred to as the &amp;quot;notification chevron.&amp;quot;&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system notification area expands to show all of the notifications that use this area.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the system notification area will always collapse notifications.&lt;br/&gt;&lt;br/&gt;If you do not configure it, the user can choose if they want notifications collapsed." gpmc_supported="At least Windows XP Professional or Windows Server 2003 family">Turn off notification area cleanup</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off personalized menus" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Disables personalized menus.&lt;br/&gt;&lt;br/&gt;Windows personalizes long menus by moving recently used items to the top of the menu and hiding items that have not been used recently. Users can display the hidden items by clicking an arrow to extend the menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system does not personalize menus. All menu items appear and remain in standard order. Also, this setting removes the &amp;quot;Use Personalized Menus&amp;quot; option so users do not try to change the setting while a setting is in effect.&lt;br/&gt;&lt;br/&gt;Note: Personalized menus require user tracking. If you enable the &amp;quot;Turn off user tracking&amp;quot; setting, the system disables user tracking and personalized menus and ignores this setting.&lt;br/&gt;&lt;br/&gt;Tip: To Turn off personalized menus without specifying a setting, click Start, click Settings, click Taskbar and Start Menu, and then, on the General tab, clear the &amp;quot;Use Personalized Menus&amp;quot; option." gpmc_supported="Windows Server 2008, Windows Vista, Windows Server 2003, Windows XP, and Windows 2000">Turn off personalized menus</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Don't display the Getting Started welcome screen at logon" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Supresses the welcome screen.&lt;br/&gt;&lt;br/&gt;This setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on.&lt;br/&gt;&lt;br/&gt;Users can still display the welcome screen by selecting it on the Start menu or by typing &amp;quot;Welcome&amp;quot; in the Run dialog box.&lt;br/&gt;&lt;br/&gt;This setting applies only to Windows 2000 Professional. It does not affect the &amp;quot;Configure Your Server on a Windows 2000 Server&amp;quot; screen on Windows 2000 Server.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click &amp;quot;Getting Started.&amp;quot; To suppress the welcome screen without specifying a setting, clear the &amp;quot;Show this screen at startup&amp;quot; check box on the welcome screen." gpmc_supported="Windows 2000 only">Don't display the Getting Started welcome screen at logon</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to registry editing tools" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Disables the Windows registry editor Regedit.exe.&lt;br/&gt;&lt;br/&gt;If this setting is enabled and the user tries to start a registry editor, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;To prevent users from using other administrative tools, use the &amp;quot;Run only specified Windows applications&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent access to registry editing tools</a></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Disable regedit from running silently?</td><td>No</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to the command prompt" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Prevents users from running the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd and .bat) can run on the computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;Note: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Remote Desktop Services." gpmc_supported="At least Windows 2000">Prevent access to the command prompt</a></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Disable the command prompt script processing also?</td><td>No</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Automatic Updates" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This setting controls automatic updates to a user's computer.&lt;br/&gt;&lt;br/&gt;Whenever a user connects to the Internet, Windows searches for updates available for the software and hardware on their computer and automatically downloads them. This happens in the background, and the user is prompted when downloaded components are ready to be installed, or prior to downloading, depending on their configuration.&lt;br/&gt;&lt;br/&gt;If you enable this setting, it prohibits Windows from searching for updates.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure it, Windows searches for updates and automatically downloads them.&lt;br/&gt;&lt;br/&gt;Note: Windows Update is an online catalog customized for your computer that consists of items such as drivers, critical updates, Help files, and Internet products that you can download to keep your computer up to date.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove links and access to Windows Update&amp;quot; setting. If the &amp;quot;Remove links and access to Windows Update&amp;quot; setting is enabled, the links to Windows Update on the Start menu are also removed.&lt;br/&gt;&lt;br/&gt;Note: If you have installed Windows XP Service Pack 1 or the update to Automatic Updates that was released after Windows XP was originally shipped, then you should use the new Automatic Updates settings located at: 'Computer Configuration / Administrative Templates / Windows Update'" gpmc_supported="Windows XP Professional only">Windows Automatic Updates</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Ctrl+Alt+Del Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Change Password" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="Prevents users from changing their Windows password on demand.&lt;br/&gt;&lt;br/&gt;This setting disables the &amp;quot;Change Password&amp;quot; button on the Windows Security dialog box (which appears when you press Ctrl+Alt+Del).&lt;br/&gt;&lt;br/&gt;However, users are still able to change their password when prompted by the system. The system prompts users for a new password when an administrator requires a new password or their password is expiring." gpmc_supported="At least Windows 2000">Remove Change Password</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Lock Computer" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="Prevents users from locking the system.&lt;br/&gt;&lt;br/&gt;While locked, the desktop is hidden and the system cannot be used. Only the user who locked the system or the system administrator can unlock it.&lt;br/&gt;&lt;br/&gt;Tip:To lock a computer without configuring a setting, press Ctrl+Alt+Delete, and then click &amp;quot;Lock Computer.&amp;quot;" gpmc_supported="At least Windows 2000">Remove Lock Computer</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Task Manager" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="Prevents users from starting Task Manager (Taskmgr.exe).&lt;br/&gt;&lt;br/&gt;If this setting is enabled and users try to start Task Manager, a message appears explaining that a policy prevents the action.&lt;br/&gt;&lt;br/&gt;Task Manager lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers, including system services; find the executable names of programs; and change the priority of the process in which programs run." gpmc_supported="At least Windows 2000">Remove Task Manager</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Logon</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run these programs at user logon" gpmc_settingPath="User Configuration/Administrative Templates/System/Logon" gpmc_settingDescription="Specifies additional programs or documents that Windows starts automatically when a user logs on to the system.&lt;br/&gt;&lt;br/&gt;To specify values for this setting, click Show. In the Show Contents dialog box in the Value column, type the name of the executable program (.exe) file or document file. To specify another name, press ENTER, and type the name. Unless the file is located in the %Systemroot% directory, you must specify the fully qualified path to the file.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the system starts the programs specified in the Computer Configuration setting just before it starts the programs specified in the User Configuration setting.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not process the legacy run list&amp;quot; and the &amp;quot;Do not process the run once list&amp;quot; settings." gpmc_supported="At least Windows 2000">Run these programs at user logon</a></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2"><table class="subtable" cellpadding="0" cellspacing="0">
<tr><th scope="col">Items to run at logon</th></tr>
<tr><td>&quot;c:\program files\internet explorer\iexplore.exe&quot;</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Desktop Gadgets</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off desktop gadgets" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Desktop Gadgets" gpmc_settingDescription="This policy setting allows you to turn off desktop gadgets. Gadgets are small applets that display information or utilities on the  desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, desktop gadgets will be turned off.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, desktop gadgets will be turned on.&lt;br/&gt;&lt;br/&gt;The default is for desktop gadgets to be turned on." gpmc_supported="At least Windows Vista">Turn off desktop gadgets</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn Off user-installed desktop gadgets" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Desktop Gadgets" gpmc_settingDescription="This policy setting allows you to turn off desktop gadgets that have been installed by the user.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Windows will not run any user-installed gadgets.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, Windows will run user-installed gadgets.&lt;br/&gt;&lt;br/&gt;The default is for Windows to run user installed gadgets." gpmc_supported="At least Windows Vista">Turn Off user-installed desktop gadgets</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Favorites bar" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to manage whether users have access to the Favorites bar in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Favorites bar will be turned off.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the Favorites bar will be turned on.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users will be able to turn on or turn off the Favorites bar." gpmc_supported="At least Internet Explorer 8.0">Turn off Favorites bar</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/InPrivate</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off InPrivate Browsing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/InPrivate" gpmc_settingDescription="This policy setting allows you to disable the InPrivate Browsing feature.&lt;br/&gt;&lt;br/&gt;InPrivate Browsing prevents Internet Explorer from storing data about a user's browsing session. This includes cookies, temporary Internet files, history, and other data.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, InPrivate Browsing will be disabled.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, InPrivate Browsing will be available for use.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, InPrivate Browsing can be turned on or off through the registry." gpmc_supported="At least Internet Explorer 8.0">Turn off InPrivate Browsing</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off InPrivate Filtering" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/InPrivate" gpmc_settingDescription="This policy setting allows you to disable InPrivate Filtering.&lt;br/&gt;&lt;br/&gt;InPrivate Filtering helps users control whether third parties can automatically collect information about their browsing based on the sites they visit. InPrivate Filtering does this by identifying third-party content that is used by multiple websites that users have visited.&lt;br/&gt;&lt;br/&gt;If you enable this policy, InPrivate Filtering will be disabled in all browsing sessions, and InPrivate Filtering data will not be collected.&lt;br/&gt;&lt;br/&gt;If you disable this policy, InPrivate Filtering will be available for use.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, it can be configured through the registry." gpmc_supported="At least Internet Explorer 8.0">Turn off InPrivate Filtering</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Advanced page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Advanced tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing advanced Internet settings, such as security, multimedia, and printing.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the &amp;quot;Disable changing Advanced page settings&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\), because this policy removes the Advanced tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable the Advanced page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Connections page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Connections tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing connection and proxy settings.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following policies for the Content tab, because this policy removes the Connections tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable Internet Connection Wizard&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing connection settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing proxy settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Automatic Configuration settings&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Connections page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Content page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and Profile Assistant settings.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings." gpmc_supported="At least Internet Explorer 5.0">Disable the Content page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the General page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the General tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are unable to see and change settings for the home page, the cache, history, Web page appearance, and accessibility.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following Internet Explorer policies (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\), because this policy removes the General tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing home page settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Temporary Internet files settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing history settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing color settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing link color settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing font settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing language settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing accessibility settings&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the General page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Privacy page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Privacy tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing default settings for privacy.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings." gpmc_supported="At least Internet Explorer 5.0">Disable the Privacy page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Programs page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Programs tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing default settings for Internet programs.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following policies for the Programs tab, because this policy removes the Programs tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Messaging settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Calendar and Contact settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable the Reset Web Settings feature&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing default browser check&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Programs page</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Security page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Security tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, it prevents users from seeing and changing settings for security zones, such as scripting, downloads, and user authentication.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following Internet Explorer policies, because this policy removes the Security tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Security zones: Do not allow users to change policies&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Security zones: Do not allow users to add/delete sites&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Security page</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Toolbars</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable customizing browser toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="Prevents users from determining which toolbars are displayed in Microsoft Internet Explorer and Windows Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the list of toolbars, which users can display by clicking the View menu and then pointing to the Toolbars command, will appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can determine which toolbars are displayed in Windows Explorer and Internet Explorer.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;Disable customizing browser toolbar buttons&amp;quot; policy, which prevents users from adding or removing toolbars from Internet Explorer." gpmc_supported="At least Internet Explorer 5.0">Disable customizing browser toolbars</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the Command Bar" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to show or hide the command bar.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the command bar will be hidden and the user cannot choose to show it.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the command bar will be shown and the user cannot choose to hide it.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the command bar will be shown by default, and users can chose to hide it." gpmc_supported="At least Internet Explorer 8.0">Hide the Command Bar</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock all Toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to lock or unlock the toolbars in the user interface (UI).&lt;br/&gt;&lt;br/&gt;If you enable this setting, the toolbars will be locked and users will not be able to move the toolbars.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the toolbars will be unlocked and users will be able to move the toolbars.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the toolbars will be locked by default, but users can unlock them through the context menu of the command bar." gpmc_supported="At least Internet Explorer 8.0">Lock all Toolbars</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Set location of Stop and Refresh buttons" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to lock the Stop and Refresh buttons next to the Back and Forward buttons.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Stop and Refresh buttons will be next to the Forward and Back buttons, and cannot be moved by the user.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Stop and Refresh buttons will be next to the Address bar, and cannot be moved by the user.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the Stop and Refresh buttons will be next to the Address bar by default, and the user can chose to move them." gpmc_supported="At least Internet Explorer 8.0">Set location of Stop and Refresh buttons</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Developer Tools" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to manage whether users have access to Developer Tools in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will not have access to Developer Tools.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users will have access to Developer Tools." gpmc_supported="At least Internet Explorer 8.0">Turn off Developer Tools</a></td><td>Enabled</td><td></td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off toolbar upgrade tool" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="The toolbar upgrade tool will check to see if incompatible toolbars or browser helper objects are installed when Internet Explorer is launched. When detected the user will be prompted to update or disable the toolbar. Specific toolbars or browser helper objects that are enabled or disabled via policy will not undergo this check.&lt;br/&gt;&lt;br/&gt;If this policy is enabled the toolbar upgrade tool will not check for incompatible toolbars. The user will not be prompted, and incompatible toolbars will run unless previously disabled through policy or the user.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured the toolbar upgrade tool will check for incompatible toolbars. The user will be given the option to enable or disable incompatible toolbars. Toolbars that are enabled or disabled via policy will not undergo these checks." gpmc_supported="At least Internet Explorer 7.0">Turn off toolbar upgrade tool</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Windows Explorer's default context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Removes shortcut menus from the desktop and Windows Explorer. Shortcut menus appear when you right-click an item.&lt;br/&gt;&lt;br/&gt;If you enable this setting, menus do not appear when you right-click the desktop or when you right-click the items in Windows Explorer. This setting does not prevent users from using other methods to issue commands available on the shortcut menus." gpmc_supported="At least Windows 2000">Remove Windows Explorer's default context menu</a></td><td>Enabled</td><td></td></tr>
</table>
</div></div></div></div></div>
</body></html>