<html dir="ltr" xmlns:v="urn:schemas-microsoft-com:vml" gpmc_reportInitialized="false">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>TS Users - Lock down</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:block; height:24px; margin:0px,0px,-1px,0px; padding-top:4px; position:relative; table-layout:fixed; width:100%; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:10px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:10px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:45px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:45px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; width:100%; }

                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:55px; margin-right:0px; position:relative; width:100%; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; width:100%; }

                DIV .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; width:10%; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#000000; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

                    v\:* {behavior:url(#default#VML);}

</style>
<!-- Script 1 -->

<script language="vbscript">
<!--
'================================================================================
' String "strShowHide(0/1)"
' 0 = Hide all mode.
' 1 = Show all mode.
strShowHide = 1

'Localized strings
strShow = "show"
strHide = "hide"
strShowAll = "show all"
strHideAll = "hide all"
strShown = "shown"
strHidden = "hidden"
strExpandoNumPixelsFromEdge = "10px"


Function IsSectionHeader(obj)
    IsSectionHeader = (obj.className = "he0_expanded") Or (obj.className = "he1_expanded") Or (obj.className = "he1") Or (obj.className = "he2") Or (obj.className = "he3") Or (obj.className = "he4") Or (obj.className = "he4h") Or (obj.className = "he5") Or (obj.className = "he5h")
End Function


Function IsSectionExpandedByDefault(objHeader)
    IsSectionExpandedByDefault = (Right(objHeader.className, Len("_expanded")) = "_expanded")
End Function


' strState must be show | hide | toggle
Sub SetSectionState(objHeader, strState)
    ' Get the container object for the section.  It's the first one after the header obj.

    i = objHeader.sourceIndex
    Set all = objHeader.parentElement.document.all
    While (all(i).className <> "container")
        i = i + 1
    Wend

    Set objContainer = all(i)

    If strState = "toggle" Then
        If objContainer.style.display = "none" Then
            SetSectionState objHeader, "show"
        Else
            SetSectionState objHeader, "hide"
        End If

    Else
        Set objExpando = objHeader.children.item(1)

        If strState = "show" Then
            objContainer.style.display = "block"
            objExpando.innerText = strHide

        ElseIf strState = "hide" Then
            objContainer.style.display = "none"
            objExpando.innerText = strShow
        End If
    End If
End Sub


Sub ShowSection(objHeader)
    SetSectionState objHeader, "show"
End Sub


Sub HideSection(objHeader)
    SetSectionState objHeader, "hide"
End Sub


Sub ToggleSection(objHeader)
    SetSectionState objHeader, "toggle"
End Sub


'================================================================================
' When user clicks anywhere in the document body, determine if user is clicking 
' on a header element.
'================================================================================
Function document_onclick()
    Set strsrc    = window.event.srcElement

    While (strsrc.className = "sectionTitle" Or strsrc.className = "expando" Or strsrc.className = "vmlimage")
        Set strsrc = strsrc.parentElement
    Wend

    ' Only handle clicks on headers.
    If Not IsSectionHeader(strsrc) Then Exit Function

    ToggleSection strsrc
    
    window.event.returnValue = False
End Function

'================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
Function objshowhide_onClick()
    Set objBody = document.body.all
    Select Case strShowHide
        Case 0
            strShowHide = 1
            objshowhide.innerText = strShowAll
            For Each obji In objBody
                If IsSectionHeader(obji) Then
                    HideSection obji
                End If
            Next
        Case 1
            strShowHide = 0
            objshowhide.innerText = strHideAll
            For Each obji In objBody
                If IsSectionHeader(obji) Then
                    ShowSection obji
                End If
            Next
    End Select
End Function

'================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================
Function window_onload()
    ' Only initialize once.  The UI may reinsert a report into the webbrowser control,
    ' firing onLoad multiple times.
    If UCase(document.documentElement.getAttribute("gpmc_reportInitialized")) <> "TRUE" Then

        ' Initialize sections to default expanded/collapsed state.
        Set objBody = document.body.all

        For Each obji in objBody
            If IsSectionHeader(obji) Then
                If IsSectionExpandedByDefault(obji) Then
                    ShowSection obji
                Else
                    HideSection obji
                End If
            End If
        Next

        objshowhide.innerText = strShowAll
        
        document.documentElement.setAttribute "gpmc_reportInitialized", "true"
    End If
End Function

                


'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
Function document_onPropertyChange()
    If window.event.propertyName = "dir" Then
        Call fDetDir(UCase(document.dir))
    End If
End Function
Function fDetDir(strDir)
    strDir = UCase(strDir)
    Select Case strDir
        Case "LTR"
            Set colRules = document.styleSheets(0).rules
            For i = 0 To colRules.length -1
                Set nug = colRules.item(i)
                strClass = nug.selectorText 
                If nug.style.textAlign = "right" Then
                    nug.style.textAlign = "left"
                End If
                Select Case strClass
                    Case "DIV .expando"
                        nug.style.Left = ""
                        nug.style.right = strExpandoNumPixelsFromEdge
                    Case "#objshowhide"
                        nug.style.textAlign = "right"
                End Select
            Next
        Case "RTL"
            Set colRules = document.styleSheets(0).rules
            For i = 0 To colRules.length -1
                Set nug = colRules.item(i)
                strClass = nug.selectorText 
                If nug.style.textAlign = "left" Then
                    nug.style.textAlign = "right"
                End If
                Select Case strClass
                    Case "DIV .expando"
                        nug.style.Left = strExpandoNumPixelsFromEdge
                        nug.style.right = ""
                    Case "#objshowhide"
                        nug.style.textAlign = "left"
                End Select
            Next
    End Select
End Function

'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI). 
'================================================================================
Function window_onbeforeprint()
    For Each obji In document.all
        If obji.className = "expando" Then
            If obji.innerText = strHide Then obji.innerText = strShown
            If obji.innerText = strShow Then obji.innerText = strHidden
        End If
    Next
End Function 

'================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
Function window_onafterprint()
    For Each obji In document.all
        If obji.className = "expando" Then
            If obji.innerText = strShown Then obji.innerText = strHide
            If obji.innerText = strHidden Then obji.innerText = strShow
        End If
    Next
End Function

'================================================================================
' Adding keypress support for accessibility
'================================================================================
Function document_onKeyPress()
    If window.event.keyCode = "32" Or window.event.keyCode = "13" Or window.event.keyCode = "10" Then 'space bar (32) or carriage return (13) or line feed (10)
        If window.event.srcElement.className = "expando" Then Call document_onclick() : window.event.returnValue = false
        If window.event.srcElement.className = "sectionTitle" Then Call document_onclick() : window.event.returnValue = false
        If window.event.srcElement.id = "objshowhide" Then Call objshowhide_onClick() : window.event.returnValue = false
    End If
End Function
                
-->
</script>
                
<!-- Script 2 -->

<script language="javascript">
<!--
function getExplainWindowTitle()
{
        return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles()
{
        return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel()
{
        return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel()
{
        return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton()
{
        return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton()
{
        return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable()
{
        return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel()
{
        return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable()
{
        return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");
    
    if (strSettingDescription == "")
    {
                strSettingDescription = getNoExplainTextAvailable();
    }
    
    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported == "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html>\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
    var expWin = window.open("", "expWin", strDiagArgs);
    expWin.document.write("");
    expWin.document.close();
    expWin.document.write(strHtml);
    expWin.document.close();
    expWin.focus();
    
    //cancels navigation for IE.
    if(navigator.userAgent.indexOf("MSIE") > 0)
    {
        window.event.returnValue = false;
    }
    
    return false;
}
-->
</script>
                
</head>

<body>

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

                </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" cellpadding="0" cellspacing="0">
<tr><td colspan="2" class="gponame">TS Users - Lock down</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 11/10/2006 12:24:37 PM</td>
    <td><div id="objshowhide" tabindex="0"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Domain</td><td>aaxion.local</td></tr>
<tr><td scope="row">Owner</td><td>AAXION\Domain Admins</td></tr>
<tr><td scope="row">Created</td><td>10/27/2006 2:16:20 PM</td></tr>
<tr><td scope="row">Modified</td><td>11/10/2006 12:21:42 PM</td></tr>
<tr><td scope="row">User Revisions</td><td>7 (AD), 7 (sysvol)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>1 (AD), 1 (sysvol)</td></tr>
<tr><td scope="row">Unique ID</td><td>{A5A2A64D-F8B9-4114-B09C-CC8A074F08FE}</td></tr>
<tr><td scope="row">GPO Status</td><td>Enabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0"><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
<tr><td>aaxion</td><td>No</td><td>Enabled</td><td>aaxion.local</td></tr>
</table>
<br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Name</th></tr><tr><td>AAXION\TS Users</td></tr></table>
</div>
</div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">WMI Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row"><b>WMI Filter Name</b></td><td>TS Systems</td></tr>
<tr><td scope="row"><b>Description</b></td><td>Select only Terminal Servers</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>AAXION\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>AAXION\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>AAXION\TS Users</td><td>Read (from Security Filtering)</td><td>No</td></tr>
<tr><td>NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">No settings defined.</div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Folder Redirection</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Application Data</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">Setting: Basic (Redirect everyone's folder to the same location)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Path: \\sql1\users\%USERNAME%\Application Data</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Grant user exclusive rights to Application Data</td><td>Disabled</td></tr>
<tr><td scope="row">Move the contents of Application Data to the new location</td><td>Disabled</td></tr>
</table>
</div>
<div class="he4i">
<table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Policy Removal Behavior</td><td>Restore contents</td></tr>
</table></div></div></div><div class="he4"><span class="sectionTitle" tabindex="0">Desktop</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">Setting: Basic (Redirect everyone's folder to the same location)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Path: \\sql1\users\Desktop</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Grant user exclusive rights to Desktop</td><td>Disabled</td></tr>
<tr><td scope="row">Move the contents of Desktop to the new location</td><td>Disabled</td></tr>
</table>
</div>
<div class="he4i">
<table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Policy Removal Behavior</td><td>Restore contents</td></tr>
</table></div></div></div><div class="he4"><span class="sectionTitle" tabindex="0">My Documents</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">Setting: Basic (Redirect everyone's folder to the same location)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Path: \\sql1\users\%USERNAME%\My Documents</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Grant user exclusive rights to My Documents</td><td>Disabled</td></tr>
<tr><td scope="row">Move the contents of My Documents to the new location</td><td>Disabled</td></tr>
</table>
</div>
<div class="he4i">
<table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Policy Removal Behavior</td><td>Restore contents</td></tr>
</table></div></div></div><div class="he4"><span class="sectionTitle" tabindex="0">Start Menu</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">Setting: Basic (Redirect everyone's folder to the same location)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Path: \\sql1\users\StartMenu</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Grant user exclusive rights to Start Menu</td><td>Disabled</td></tr>
<tr><td scope="row">Move the contents of Start Menu to the new location</td><td>Disabled</td></tr>
</table>
</div>
<div class="he4i">
<table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Policy Removal Behavior</td><td>Restore contents</td></tr>
</table></div></div></div></div></div><div class="filler"></div>
<div class="he1_expanded"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show only specified Control Panel applets" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Hides all Control Panel items and folders except those specified in this setting.&lt;br/&gt;&lt;br/&gt;This setting removes all Control Panel items (such as Network) and folders (such as Fonts) from the Control Panel window and the Start menu. It removes Control Panel items you have added to your system, as well the Control Panel items included in Windows 2000 and Windows XP Professional. The only items displayed in Control Panel are those you specify in this setting.&lt;br/&gt;&lt;br/&gt;To display a Control Panel item, type the file name of the item, such as Ncpa.cpl (for Network). To display a folder, type the folder name, such as Fonts.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu and Control Panel window only. It does not prevent users from running any Control Panel items.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Display in Control Panel&amp;quot; setting in User Configuration\Administrative Templates\Control Panel\Display.&lt;br/&gt;&lt;br/&gt;If both the &amp;quot;Hide specified Control Panel applets&amp;quot; setting and the &amp;quot;Show only specified Control Panel applets&amp;quot; setting are enabled, the &amp;quot;Show only specified Control Panel applets&amp;quot; setting is ignored.&lt;br/&gt;&lt;br/&gt;Tip: To find the file name of a Control Panel item, search for files with the .cpl file name extension in the %Systemroot%\System32 directory." gpmc_supported="At least Microsoft Windows 2000">Show only specified Control Panel applets</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2"><table class="subtable" cellpadding="0" cellspacing="0">
<tr><th scope="col">List of allowed Control Panel applets</th></tr>
<tr><td>keyboard</td></tr>
<tr><td>mouse</td></tr>
<tr><td>printers and faxes</td></tr>
</table></td></tr><tr><td colspan="2">To create a list of allowed Control Panel applets, click Show,</td></tr><tr><td colspan="2">then Add, and enter the Control Panel file name (ends with .cpl)</td></tr><tr><td colspan="2">or the name displayed under that item in the Control Panel.</td></tr><tr><td colspan="2">(e.g., desk.cpl, powercfg.cpl, Printers)</td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Display</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing wallpaper" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Prevents users from adding or changing the background design of the desktop.&lt;br/&gt;&lt;br/&gt;By default, users can use the Desktop tab of Display in Control Panel to add a background design (wallpaper) to their desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Desktop tab still appears, but all options on the tab are disabled.&lt;br/&gt;&lt;br/&gt;To remove the Desktop tab, use the &amp;quot;Hide Desktop tab&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;To specify wallpaper for a group, use the &amp;quot;Active Desktop Wallpaper&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Allow only bitmapped wallpaper&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Prevent changing wallpaper</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide My Network Places icon on desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the My Network Places icon from the desktop.&lt;br/&gt;&lt;br/&gt;This setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network." gpmc_supported="At least Microsoft Windows 2000">Hide My Network Places icon on desktop</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit user from changing My Documents path" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from changing the path to the My Documents folder.&lt;br/&gt;&lt;br/&gt;By default, a user can change the location of the My Documents folder by typing a new path in the Target box of the My Documents Properties dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users are unable to type a new location in the Target box." gpmc_supported="At least Microsoft Windows 2000">Prohibit user from changing My Documents path</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Computer icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides My Computer from the desktop and from the new Start menu. It also hides links to My Computer in the Web view of all Explorer windows, and it hides My Computer in the Explorer folder tree pane. If the user navigates into My Computer via the &amp;quot;Up&amp;quot; button while this setting is enabled, they view an empty My Computer folder. This setting allows administrators to restrict their users from seeing My Computer in the shell namespace, allowing them to present their users with a simpler desktop environment.&lt;br/&gt;&lt;br/&gt;If you enable this setting, My Computer is hidden on the desktop, the new Start menu, the Explorer folder tree pane, and the Explorer Web views. If the user manages to navigate to My Computer, the folder will be empty.&lt;br/&gt;&lt;br/&gt;If you disable this setting, My Computer is displayed as usual, appearing as normal on the desktop, Start menu, folder tree pane, and Web views, unless restricted by another setting.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the default is to display My Computer as usual.&lt;br/&gt;&lt;br/&gt;Note: Hiding My Computer and its contents does not hide the contents of the child folders of My Computer. For example, if the users navigate into one of their hard drives, they see all of their folders and files there, even if this setting is enabled." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove My Computer icon on the desktop</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the My Computer context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Properties on the context menu for My Computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks My Computer or clicks My Computer and then goes to the File menu.  Likewise, Alt-Enter does nothing when My Computer is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Microsoft Windows 2000 Service Pack 3">Remove Properties from the My Computer context menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the My Documents context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Properties for the context menu on My Documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks My Documents or clicks My Documents and then goes to the File menu.  Likewise, Alt-Enter does nothing when My Documents is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Microsoft Windows 2000 Service Pack 3">Remove Properties from the My Documents context menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Desktop Cleanup Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from using the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Desktop Cleanup wizard does not automatically run on a users workstation every 60 days. The user will also not be able to access the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the default behavior of the Desktop Clean Wizard running every 60 days occurs.&lt;br/&gt;&lt;br/&gt;Note: When this setting is not enabled, users can run the Desktop Cleanup Wizard, or have it run automatically every 60 days from Display, by clicking the Desktop tab and then clicking the Customize Desktop button." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove the Desktop Cleanup Wizard</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Offline Files</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit user configuration of Offline Files" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Prevents users from enabling, disabling, or changing the configuration of Offline Files.&lt;br/&gt;&lt;br/&gt;This setting removes the Offline Files tab from the Folder Options dialog box. It also removes the Settings item from the Offline Files context menu and disables the Settings button on the Offline Files Status dialog box. As a result, users cannot view or change the options on the Offline Files tab or Offline Files dialog box.&lt;br/&gt;&lt;br/&gt;This is a comprehensive setting that locks down the configuration you establish by using other settings in this folder.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: This setting provides a quick method for locking down the default settings for Offline Files. To accept the defaults, just enable this setting. You do not have to disable any other settings in this folder." gpmc_supported="At least Microsoft Windows 2000">Prohibit user configuration of Offline Files</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2">Prevents users from changing any cache configuration settings.</td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Start Menu and Taskbar</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add Logoff to the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Adds the &amp;quot;Log Off &amp;lt;username&amp;gt;&amp;quot; item to the Start menu and prevents users from removing it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Log Off &amp;lt;username&amp;gt; item appears in the Start menu. This setting also removes the Display Logoff item from Start Menu Options. As a result, users cannot remove the Log Off &amp;lt;username&amp;gt; item from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can use the Display Logoff item to add and remove the Log Off item.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu only. It does not affect the Log Off item on the Windows Security dialog box that appears when you press Ctrl+Alt+Del.&lt;br/&gt;&lt;br/&gt;Note: To add or remove the Log Off item on a computer, click Start, click Settings, click Taskbar and Start Menu, click the Start Menu Options tab, and then, in the Start Menu Settings box, click Display Logoff.&lt;br/&gt;&lt;br/&gt;Also, see &amp;quot;Remove Logoff&amp;quot; in User Configuration\Administrative Templates\System\Logon/Logoff." gpmc_supported="At least Microsoft Windows 2000">Add Logoff to the Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display any custom toolbars in the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar.&lt;br/&gt;&lt;br/&gt;The taskbar includes the Start button, buttons for currently running tasks, custom toolbars, the notification area, and the system clock. Toolbars include Quick Launch, Address, Links, Desktop, and other custom toolbars created by the user or by an application.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the taskbar does not display any custom toolbars, and the user cannot add any custom toolbars to the taskbar. Moreover, the &amp;quot;Toolbars&amp;quot; menu command and submenu are removed from the context menu. The taskbar displays only the Start button, taskbar buttons, the notification area, and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or is not configured, the taskbar displays all toolbars. Users can add or remove custom toolbars, and the &amp;quot;Toolbars&amp;quot; command appears in the context menu." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Do not display any custom toolbars in the taskbar</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not use the search-based method when resolving shell shortcuts" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut.&lt;br/&gt;&lt;br/&gt;By default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target's file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system does not conduct the final drive search. It just displays a message explaining that the file is not found.&lt;br/&gt;&lt;br/&gt;Note: This setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not track Shell shortcuts during roaming&amp;quot; and the &amp;quot;Do not use the tracking-based method when resolving shell shortcuts&amp;quot; settings." gpmc_supported="At least Microsoft Windows 2000">Do not use the search-based method when resolving shell shortcuts</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not use the tracking-based method when resolving shell shortcuts" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents the system from using NTFS tracking features to resolve a shortcut.&lt;br/&gt;&lt;br/&gt;By default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target's file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system does not try to locate the file by using its file ID. It skips this step and begins a comprehensive search of the drive specified in the target path.&lt;br/&gt;&lt;br/&gt;Note: This setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not track Shell shortcuts during roaming&amp;quot; and the &amp;quot;Do not use the search-based method when resolving shell shortcuts&amp;quot; settings." gpmc_supported="At least Microsoft Windows 2000">Do not use the tracking-based method when resolving shell shortcuts</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting effects the taskbar, which is used to switch between running applications.&lt;br/&gt;&lt;br/&gt;The taskbar includes the Start button, list of currently running tasks, and the notification area. By default, the taskbar is located at the bottom of the screen, but it can be dragged to any side of the screen. When it is locked, it cannot be moved or resized.&lt;br/&gt;&lt;br/&gt;If you enable this setting, it prevents the user from moving or resizing the taskbar. While the taskbar is locked, auto-hide and other taskbar options are still available in Taskbar properties.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the user can configure the taskbar position.&lt;br/&gt;&lt;br/&gt;Note: Enabling this setting also locks the quicklaunch bar and any other toolbars that the user has on their taskbar. The toolbar's position is locked, and the user cannot show and hide various toolbars using the taskbar context menu." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Lock the Taskbar</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changes to Taskbar and Start Menu Settings" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Taskbar and Start Menu item from Settings on the Start menu. This setting also prevents the user from opening the Taskbar Properties dialog box.&lt;br/&gt;&lt;br/&gt;If the user right-clicks the taskbar and then clicks Properties, a message appears explaining that a setting prevents the action." gpmc_supported="At least Microsoft Windows 2000">Prevent changes to Taskbar and Start Menu Settings</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove and prevent access to the Shut Down command" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from shutting down or restarting Windows.&lt;br/&gt;&lt;br/&gt;This setting removes the Shut Down option from the Start menu and disables the Shut Down button on the Windows Security dialog box, which appears when you press CTRL+ALT+DEL.&lt;br/&gt;&lt;br/&gt;This setting prevents users from using the Windows user interface to shut down the system, although it does not prevent them from running programs that shut down Windows. &lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Shut Down menu option appears, and the Shut Down button is enabled.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Microsoft Windows 2000">Remove and prevent access to the Shut Down command</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove common program groups from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes items in the All Users profile from the Programs menu on the Start menu.&lt;br/&gt;&lt;br/&gt;By default, the Programs menu contains items from the All Users profile and items from the user's profile. If you enable this setting, only items in the user's profile appear in the Programs menu.&lt;br/&gt;&lt;br/&gt;Tip: To see the Program menu items in the All Users profile, on the system drive, go to Documents and Settings\All Users\Start Menu\Programs." gpmc_supported="At least Microsoft Windows 2000">Remove common program groups from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Drag-and-drop context menus on the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from using the drag-and-drop method to reorder or remove items on the Start menu. Also, it removes context menus from the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can remove or reorder Start menu items by dragging and dropping the item. They can display context menus by right-clicking a Start menu item.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other methods of customizing the Start menu or performing the tasks available from the context menus.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent changes to Taskbar and Start Menu Settings&amp;quot; and the &amp;quot;Remove access to the context menus for taskbar&amp;quot; settings." gpmc_supported="At least Microsoft Windows 2000">Remove Drag-and-drop context menus on the Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Help menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Help command from the Start menu.&lt;br/&gt;&lt;br/&gt;This setting only affects the Start menu. It does not remove the Help menu from Windows Explorer and does not prevent users from running Help." gpmc_supported="At least Microsoft Windows 2000">Remove Help menu from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove links and access to Windows Update" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from connecting to the Windows Update Web site.&lt;br/&gt;&lt;br/&gt;This setting blocks user access to the Windows Update Web site at http://windowsupdate.microsoft.com. Also, the setting removes the Windows Update hyperlink from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Windows Update, the online extension of Windows, offers software updates to keep a user’s system up-to-date. The Windows Update Product Catalog determines any system files, security fixes, and Microsoft updates that users need and shows the newest versions available for download.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide the &amp;quot;Add programs from Microsoft&amp;quot; option&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Remove links and access to Windows Update</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Music icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the My Music icon from the Start Menu." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove My Music icon from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Network Places icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the My Network Places icon from the Start Menu." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove My Network Places icon from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Pictures icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the My Pictures icon from the Start Menu." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove My Pictures icon from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network Connections from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from running Network Connections.&lt;br/&gt;&lt;br/&gt;This setting prevents the Network Connections folder from opening. This setting also removes Network Connections from Settings on the Start menu.&lt;br/&gt;&lt;br/&gt;Network Connections still appears in Control Panel and in Windows Explorer, but if users try to start it, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable programs on Settings menu&amp;quot; and &amp;quot;Disable Control Panel&amp;quot; settings and the settings in the Network Connections folder (Computer Configuration and User Configuration\Administrative Templates\Network\Network Connections)." gpmc_supported="At least Microsoft Windows 2000">Remove Network Connections from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove pinned programs list from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the &amp;quot;Pinned Programs&amp;quot; list is removed from the Start menu, and the Internet and Email checkboxes are removed from the simple Start menu customization CPL.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Pinned Programs&amp;quot; list remains on the simple Start menu." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove pinned programs list from the Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Run menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the following changes occur:&lt;br/&gt;&lt;br/&gt;(1) The Run command is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;(2) The New Task (Run) command is removed from Task Manager.&lt;br/&gt;&lt;br/&gt;(3) The user will be blocked from entering the following into the Internet Explorer Address Bar:&lt;br/&gt;&lt;br/&gt;--- A UNC path: \\&amp;lt;server&amp;gt;\&amp;lt;share&amp;gt; &lt;br/&gt;&lt;br/&gt;---Accessing local drives:  e.g., C:&lt;br/&gt;&lt;br/&gt;--- Accessing local folders: e.g., \temp&amp;gt;&lt;br/&gt;&lt;br/&gt;Also, users with extended keyboards will no longer be able to display the Run dialog box by pressing the Application key (the key with the Windows logo) + R.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the Run command in the Start menu and in Task Manager and use the Internet Explorer Address Bar.&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;Note:This setting affects the specified interface only. It does not prevent users from using other methods to run programs.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Microsoft Windows 2000">Remove Run menu from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Search item from the Start menu, and disables some Windows Explorer search elements.&lt;br/&gt;&lt;br/&gt;This setting removes the Search item from the Start menu and from the context menu that appears when you right-click the Start menu. Also, the system does not respond when users press the Application key (the key with the Windows logo)+ F.&lt;br/&gt;&lt;br/&gt;In Windows Explorer, the Search item still appears on the Standard buttons toolbar, but the system does not respond when the user presses Ctrl+F. Also, Search does not appear in the context menu when you right-click an icon representing a drive or a folder.&lt;br/&gt;&lt;br/&gt;This setting affects the specified user interface elements only. It does not affect Internet Explorer and does not prevent the user from using other methods to search.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Search button from Windows Explorer&amp;quot; setting in User Configuration\Administrative Templates\Windows Components\Windows Explorer.&lt;br/&gt;&lt;br/&gt;Note:&lt;br/&gt;&lt;br/&gt;This setting also prevents the user from using the F3 key." gpmc_supported="At least Microsoft Windows 2000">Remove Search menu from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Set Program Access and Defaults from Start menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Set Program Access and Defaults icon from the Start menu.&lt;br/&gt;&lt;br/&gt;Clicking the Set Program Access and Defaults icon from the Start menu opens Add or Remove Programs and provides adminstrators the ability to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent the Set Program Access and Defaults button from appearing in Add or Remove Programs.  See the &amp;quot;Hide the Set Program Access and Defaults page&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000 Service Pack 3 or Microsoft Windows XP Professional Service Pack 1">Remove Set Program Access and Defaults from Start menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off notification area cleanup" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting effects the notification area, also called the &amp;quot;system tray.&amp;quot;&lt;br/&gt;&lt;br/&gt;The notification area is located in the task bar, generally at the bottom of the screen, and itincludes the clock and current notifications. This setting determines whether the items are always expanded or always collapsed. By default, notifications are collapsed. The notification cleanup &amp;lt;&amp;lt; icon can be referred to as the &amp;quot;notification chevron.&amp;quot;&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system notification area expands to show all of the notifications that use this area.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the system notification area will always collapse notifications.&lt;br/&gt;&lt;br/&gt;If you do not configure it, the user can choose if they want notifications collapsed." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Turn off notification area cleanup</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Don't display the Getting Started welcome screen at logon" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Supresses the welcome screen.&lt;br/&gt;&lt;br/&gt;This setting hides the welcome screen that is displayed on Windows 2000 Professional and Windows XP Professional each time the user logs on.&lt;br/&gt;&lt;br/&gt;Users can still display the welcome screen by selecting it on the Start menu or by typing &amp;quot;Welcome&amp;quot; in the Run dialog box.&lt;br/&gt;&lt;br/&gt;This setting applies only to Windows 2000 Professional and Windows XP Professional. It does not affect the &amp;quot;Configure Your Server on a Windows 2000 Server&amp;quot; screen on Windows 2000 Server.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click &amp;quot;Getting Started.&amp;quot; To suppress the welcome screen without specifying a setting, clear the &amp;quot;Show this screen at startup&amp;quot; check box on the welcome screen." gpmc_supported="Only works on Microsoft Windows 2000">Don't display the Getting Started welcome screen at logon</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to registry editing tools" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Disables the Windows registry editor Regedit.exe.&lt;br/&gt;&lt;br/&gt;If this setting is enabled and the user tries to start a registry editor, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;To prevent users from using other administrative tools, use the &amp;quot;Run only allowed Windows applications&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Prevent access to registry editing tools</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Disable regedit from running silently?</td><td>Yes</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to the command prompt" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Prevents users from running the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd and .bat) can run on the computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;Note: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Terminal Services." gpmc_supported="At least Microsoft Windows 2000">Prevent access to the command prompt</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Disable the command prompt script processing also?</td><td>No</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Autoplay" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Turns off the Autoplay feature.&lt;br/&gt;&lt;br/&gt;Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately.&lt;br/&gt;&lt;br/&gt;By default, Autoplay is disabled on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you can also disable Autoplay on CD-ROM drives or disable Autoplay on all drives.&lt;br/&gt;&lt;br/&gt;This setting disables Autoplay on additional types of drives. You cannot use this setting to enable Autoplay on drives on which it is disabled by default.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in both the Computer Configuration and User Configuration folders. If the settings conflict, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent Autoplay for music CDs." gpmc_supported="At least Microsoft Windows 2000">Turn off Autoplay</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Turn off Autoplay on:</td><td>CD-ROM drives</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Automatic Updates" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This setting controls automatic updates to a user's computer.&lt;br/&gt;&lt;br/&gt;Whenever a user connects to the Internet, Windows searches for updates available for the software and hardware on their computer and automatically downloads them. This happens in the background, and the user is prompted when downloaded components are ready to be installed, or prior to downloading, depending on their configuration.&lt;br/&gt;&lt;br/&gt;If you enable this setting, it prohibits Windows from searching for updates.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure it, Windows searches for updates and automatically downloads them.&lt;br/&gt;&lt;br/&gt;Note: Windows Update is an online catalog customized for your computer that consists of items such as drivers, critical updates, Help files, and Internet products that you can download to keep your computer up to date.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove links and access to Windows Update&amp;quot; setting. If the &amp;quot;Remove links and access to Windows Update&amp;quot; setting is enabled, the links to Windows Update on the Start menu are also removed.&lt;br/&gt;&lt;br/&gt;Note: If you have installed Windows XP Service Pack 1 or the update to Automatic Updates that was released after Windows XP was originally shipped, then you should use the new Automatic Updates settings located at: 'Computer Configuration / Administrative Templates / Windows Update'" gpmc_supported="Only works on Microsoft Windows XP Professional">Windows Automatic Updates</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Ctrl+Alt+Del Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Lock Computer" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="Prevents users from locking the system.&lt;br/&gt;&lt;br/&gt;While locked, the desktop is hidden and the system cannot be used. Only the user who locked the system or the system administrator can unlock it.&lt;br/&gt;&lt;br/&gt;Tip:To lock a computer without configuring a setting, press Ctrl+Alt+Delete, and then click &amp;quot;Lock Computer.&amp;quot;" gpmc_supported="At least Microsoft Windows 2000">Remove Lock Computer</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Task Manager" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="Prevents users from starting Task Manager (Taskmgr.exe).&lt;br/&gt;&lt;br/&gt;If this setting is enabled and users try to start Task Manager, a message appears explaining that a policy prevents the action.&lt;br/&gt;&lt;br/&gt;Task Manager lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers, including system services; find the executable names of programs; and change the priority of the process in which programs run." gpmc_supported="At least Microsoft Windows 2000">Remove Task Manager</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Search: Disable Find Files via F3 within the browser" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Disables using the F3 key to search in Internet Explorer and Windows Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the search functionality of the F3 key is disabled. Users cannot press F3 to search the Internet (from Internet Explorer) or to search the hard disk (from Windows Explorer). If the user presses F3, a prompt appears that informs the user that this feature has been disabled.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can press F3 to search the Internet (from Internet Explorer) or the hard disk (from Windows Explorer).&lt;br/&gt;&lt;br/&gt;This policy is intended for situations in which administrators do not want users to explore the Internet or the hard disk.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;File Menu: Disable Open menu option&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Browser Menus), which prevents users from opening files by using the browser." gpmc_supported="at least Internet Explorer v5.0">Search: Disable Find Files via F3 within the browser</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Browser menus</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents the shortcut menu from appearing when users click the right mouse button while using the browser.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the shortcut menu will not appear when users point to a Web page, and then click the right mouse button.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can use the shortcut menu.&lt;br/&gt;&lt;br/&gt;This policy can be used to ensure that the shortcut menu is not used as an alternate method of running commands that have been removed from other parts of the interface." gpmc_supported="at least Internet Explorer v5.0">Disable Context menu</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Security Page</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Intranet Sites: Include all local (intranet) sites not listed in other zones" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, local sites which are not explicitly mapped into a zone are considered to be in the Intranet Zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, local sites which are not explicitly mapped into a zone will not be considered to be in the Intranet Zone (so would typically be in the Internet Zone).&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users choose whether to force local sites into the Intranet Zone." gpmc_supported="at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1">Intranet Sites: Include all local (intranet) sites not listed in other zones</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Intranet Sites: Include all network paths (UNCs)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, all network paths are mapped into the Intranet Zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, network paths are not necessarily mapped into the Intranet Zone (other rules might map one there).&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users choose whether network paths are mapped into the Intranet Zone." gpmc_supported="at least Internet Explorer v6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1">Intranet Sites: Include all network paths (UNCs)</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Task Scheduler</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Property Pages" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from viewing and changing the properties of an existing task.&lt;br/&gt;&lt;br/&gt;This setting removes the Properties item from the File menu in Scheduled Tasks and from the context menu that appears when you right-click a task. As a result, users cannot change any properties of a task. They can only see the properties that appear in Detail view and in the task preview.&lt;br/&gt;&lt;br/&gt;This setting prevents users from viewing and changing characteristics such as the program the task runs, its schedule details, idle time and power management settings, and its security context.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: This setting affects existing tasks only. To prevent users from changing the properties of newly created tasks, use the &amp;quot;Remove Advanced Menu&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Hide Property Pages</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Task Run or End" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from starting and stopping tasks manually.&lt;br/&gt;&lt;br/&gt;This setting removes the Run and End Task items from the context menu that appears when you right-click a task. As a result, users cannot start tasks manually or force tasks to end before they are finished.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration." gpmc_supported="At least Microsoft Windows 2000">Prevent Task Run or End</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit New Task Creation" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from creating new tasks.&lt;br/&gt;&lt;br/&gt;This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also, the system does not respond when users try to move, paste, or drag programs or documents into the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Important: This setting does not prevent administrators of a computer from using At.exe to create new tasks or prevent administrators from submitting tasks from remote computers." gpmc_supported="At least Microsoft Windows 2000">Prohibit New Task Creation</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Task Deletion" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from deleting tasks from the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;This setting removes the Delete command from the Edit menu in the Scheduled Tasks folder and from the menu that appears when you right-click a task. Also, the system does not respond when users try to cut or drag a task from the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Important: This setting does not prevent administrators of a computer from using At.exe to delete tasks." gpmc_supported="At least Microsoft Windows 2000">Prohibit Task Deletion</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not track Shell shortcuts during roaming" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Determines whether Windows traces shortcuts back to their sources when it cannot find the target on the user's system.&lt;br/&gt;&lt;br/&gt;Shortcut files typically include an absolute path to the original target file as well as the relative path to the current target file. When the system cannot find the file in the current target path, then, by default, it searches for the target in the original path. If the shortcut has been copied to a different computer, the original path might lead to a network computer, including external resources, such as an Internet server.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Windows only searches the current target path. It does not search for the original path even when it cannot find the target file in the current target path." gpmc_supported="At least Microsoft Windows 2000">Do not track Shell shortcuts during roaming</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide these specified drives in My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Removes the icons representing selected hard drives from My Computer and Windows Explorer. Also, the drive letters representing the selected drives do not appear in the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;To use this setting, select a drive or combination of drives in the drop-down list. To display all drives, disable this setting or select the &amp;quot;Do not restrict drives&amp;quot; option in the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: This setting removes the drive icons. Users can still gain access to drive contents by using other methods, such as by typing the path to a directory on the drive in the Map Network Drive dialog box, in the Run dialog box, or in a command window.&lt;br/&gt;&lt;br/&gt;Also, this setting does not prevent users from using programs to access these drives or their contents. And, it does not prevent users from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent access to drives from My Computer&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Microsoft Windows 2000">Hide these specified drives in My Computer</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Pick one of the following combinations</td><td>Restrict A, B and C drives only</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hides the Manage item on the Windows Explorer context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Removes the Manage item from the Windows Explorer context menu. This context menu appears when you right-click Windows Explorer or My Computer.&lt;br/&gt;&lt;br/&gt;The Manage item opens Computer Management (Compmgmt.msc), a console tool that includes many of the primary Windows 2000 administrative tools, such as Event Viewer, Device Manager, and Disk Management. You must be an administrator to use many of the features of these tools.&lt;br/&gt;&lt;br/&gt;This setting does not remove the Computer Management item from the Start menu (Start, Programs, Administrative Tools, Computer Management), nor does it prevent users from using other methods to start Computer Management.&lt;br/&gt;&lt;br/&gt;Tip: To hide all context menus, use the &amp;quot;Remove Windows Explorer's default context menu&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Hides the Manage item on the Windows Explorer context menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="No &amp;quot;Computers Near Me&amp;quot; in My Network Places" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Removes computers in the user's workgroup and domain from lists of network resources in Windows Explorer and My Network Places.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system removes the &amp;quot;Computers Near Me&amp;quot; option and the icons representing nearby computers from My Network Places. This setting also removes these icons from the Map Network Drive browser.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from connecting to computers in their workgroup or domain by other commonly used methods, such as typing the share name in the Run dialog box or the Map Network Drive dialog box.&lt;br/&gt;&lt;br/&gt;To remove network computers from lists of network resources, use the &amp;quot;No Entire Network in My Network Places&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">No &quot;Computers Near Me&quot; in My Network Places</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to drives from My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Prevents users from using My Computer to gain access to the content of selected drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users can browse the directory structure of the selected drives in My Computer or Windows Explorer, but they cannot open folders and access the contents. Also, they cannot use the Run dialog box or the Map Network Drive dialog box to view the directories on these drives.&lt;br/&gt;&lt;br/&gt;To use this setting, select a drive or combination of drives from the drop-down list. To allow access to all drive directories, disable this setting or select the &amp;quot;Do not restrict drives&amp;quot; option from the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: The icons representing the specified drives still appear in My Computer, but if users double-click the icons, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt; Also, this setting does not prevent users from using programs to access local and network drives. And, it does not prevent them from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide these specified drives in My Computer&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Prevent access to drives from My Computer</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Pick one of the following combinations</td><td>Restrict A, B and C drives only</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Hardware tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Removes the Hardware tab.&lt;br/&gt;&lt;br/&gt;This setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. It also removes the Hardware tab from the Properties dialog box for all local drives, including hard drives, floppy disk drives, and CD-ROM drives. As a result, users cannot use the Hardware tab to view or change the device list or device properties, or use the Troubleshoot button to resolve problems with the device." gpmc_supported="At least Microsoft Windows 2000">Remove Hardware tab</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Security tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Removes the Security tab from Windows Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users opening the Properties dialog box for all file system objects, including folders, files, shortcuts, and drives, will not be able to access the Security tab. As a result, users will be able to neither change the security settings nor view a list of all users that have access to the resource in question.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the security tab." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove Security tab</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Shared Documents from My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Removes the Shared Documents folder from My Computer.&lt;br/&gt;&lt;br/&gt;When a Windows client in is a workgroup, a Shared Documents icon appears in the Windows Explorer Web view under &amp;quot;Other Places&amp;quot; and also under &amp;quot;Files Stored on This Computer&amp;quot; in My Computer.  Using this policy setting, you can choose not to have these items displayed.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Shared Documents folder is not displayed in the Web view or in My Computer.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Shared Documents folder is displayed in Web view and also in My Computer when the client is part of a workgroup.&lt;br/&gt;&lt;br/&gt;Note:  The ability to remove the Shared Documents folder via Group Policy is only available on Windows XP Professional." gpmc_supported="Only works on Microsoft Windows XP Professional">Remove Shared Documents from My Computer</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off caching of thumbnail pictures" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="This settings controls whether the thumbnail views are cached.&lt;br/&gt;&lt;br/&gt;If you enable this setting, thumbnail views are not cached.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, thumbnail views are cached.&lt;br/&gt;&lt;br/&gt;Note: For shared corporate workstations or computers where security is a top concern, you should enable this setting to turn off the thumbnail view cache, because the thumbnail cache can be read by everyone." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Turn off caching of thumbnail pictures</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Messenger</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Windows Messenger to be run" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Messenger" gpmc_settingDescription="Allows you to disable Windows Messenger.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Windows Messenger will not run.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, Windows Messenger can be used.&lt;br/&gt;&lt;br/&gt;Note: If you enable this setting, Remote Assistance also cannot use Windows Messenger.&lt;br/&gt;&lt;br/&gt;Note: This setting is available under both Computer Configuration and User Configuration. If both are present, the Computer Configuration version of this setting takes precedence." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Do not allow Windows Messenger to be run</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not automatically start Windows Messenger initially" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Messenger" gpmc_settingDescription="Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this setting to stop Windows Messenger from automatically being run at logon.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Windows Messenger will not be loaded automatically when a user logs on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Windows Messenger will be loaded automatically at logon.&lt;br/&gt;&lt;br/&gt;Note: This setting simply prevents Windows Messenger from running intially. If the user invokes and uses Windows Messenger from that point on, Windows Messenger will be loaded.&lt;br/&gt;&lt;br/&gt;The user can also configure this behavior on the Preferences tab on the Tools menu in the Windows Messenger user interface.&lt;br/&gt;&lt;br/&gt;Note: If you do not want users to use Windows Messenger, enable the &amp;quot;Do not allow Windows Messenger to run&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: This setting is available under both Computer Configuration and User Configuration. If both are present, the Computer Configuration version of this setting takes precedence." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Do not automatically start Windows Messenger initially</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Movie Maker</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Windows Movie Maker to run" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Movie Maker" gpmc_settingDescription="Specifies whether Windows Movie Maker can run.&lt;br/&gt;&lt;br/&gt;Windows Movie Maker is a feature of the Windows XP operating system that can be used to capture, edit, and then save video as a movie to share with others.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Windows Movie Maker will not run.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, Windows Movie Maker can be run." gpmc_supported="At least Microsoft Windows XP Professional with SP2">Do not allow Windows Movie Maker to run</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Update</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove access to use all Windows Update features" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Update" gpmc_settingDescription="This setting allows you to remove access to Windows Update.&lt;br/&gt;&lt;br/&gt;If you enable this setting, all Windows Update features are removed. This includes blocking access to the Windows Update Web site at http://windowsupdate.microsoft.com, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This setting also prevents Device Manager from automatically installing driver updates from the Windows Update Web site." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove access to use all Windows Update features</a></td><td>Enabled</td></tr>
</table>
</div></div></div></div>
</body></html>