Group Policy Registry Table

Group Policy, a Windows 2000 administrative tool, determines how programs, network resources, and the operating system behave for users and
computers in an organization. Group Policy uses Group Policy Objects in Active Directory, and affects computers and users by adding, deleting, and
changing the values of entries in the Windows 2000 registry.
The following table displays the Group Policy settings in the Administrative Templates folder and the registry entries that they change. The policies are
listed in alphabetical order.
For information about the registry entry, click the entry name in the table. For information about the Group Policy settings, click the name of the policy.
Caution
To change the value of entries in this table, use Group Policy. Do not edit the registry.

Group Policy Registry entry

Action on server disconnect (Computer) GoOfflineAction (HKLM)

(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Action on server disconnect (User) GoOfflineAction (HKCU)
(User Configuration\Administrative Templates\Network\Offline (HKCU\Software\Policies\Microsoft\Windows\NetCache)
Files)
Active Desktop Wallpaper Wallpaper, WallpaperStyle
(User Configuration\AdministrativeTemplates\Desktop\Active (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Desktop) es\System)
Active Directory Domains and Trusts Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{EBC53A38-
Components\Microsoft Management A23F-11D0-B09B-00C04FD8DCA6})
Console\Restricted/Permitted snap-ins)
Active Directory Sites and Services Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{D967F824-
Components\Microsoft Management 9968-11D0-B936-00C04FD8D5B0})
Console\Restricted/Permitted snap-ins)
Active Directory Users and Computers Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{E355E538-
Components\Microsoft Management 1C2E-11D0-8C37-00C04FD8FE93})
Console\Restricted/Permitted snap-ins)
Add "Run in Separate Memory Space" check box to Run MemCheckBoxInRunDlg
dialog box (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
(User Configuration\AdministrativeTemplates\Start Menu & es\Explorer)
Taskbar)
Add Logoff to the Start Menu ForceStartMenuLogOff
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Add/Delete items Add, Delete
(User Configuration\AdministrativeTemplates\Desktop\Active (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Desktop) es\ActiveDesktop)
Administrative Templates (Computer) Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{0F6B957D-
Components\Microsoft Management 509E-11D1-A7CC-0000F87571E3})
Console\Restricted/Permitted snap-ins\Group Policy)
Administrative Templates (User) Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-
Components\Microsoft Management 509E-11D1-A7CC-0000F87571E3})
Console\Restricted/Permitted snap-ins\Group Policy)
Administratively assigned offline files (Computer) AssignedOfflineFolders subkey (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache\A
Templates\Network\Offline Files) ssignedOfflineFolders)
Administratively assigned offline files (User) AssignedOfflineFolders subkey (HKCU)
(User Configuration\Administrative Templates\Network\Offline (HKCU\Software\Policies\Microsoft\Windows\NetCache\As
Files) signedOfflineFolders)
Allow access to current user's RAS connection properties NC_RasMyProperties
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Allow admin to install from Terminal Services session EnableAdminTSRemote
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Allow configuration of connection sharing (Computer) NC_ShowSharedAccessUI (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Allow configuration of connection sharing (User) NC_ShowSharedAccessUI (HKCU)
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Allow connection components to be enabled or disabled NC_ChangeBindState
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Allow only bitmapped wallpaper NoHTMLWallPaper
(User Configuration\AdministrativeTemplates\Desktop\Active (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Desktop) es\ActiveDesktop)
Allow printers to be published PublishPrinters
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
Allow pruning of published printers Immortal
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
Allow TCP/IP advanced configuration NC_AllowAdvancedTCPIPConfig
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Always install with elevated privileges (Computer) AlwaysInstallElevated (HKLM)
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Always install with elevated privileges (User) AlwaysInstallElevated (HKCU)
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
AppleTalk Routing Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{1AA7F83C-
Components\Microsoft Management C7F5-11D0-A376-00C04FC9DA04})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Apply group policy for computers asynchronously during SynchronousMachineGroupPolicy
startup (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
(Computer Configuration\Administrative ies\System)
Templates\System\Group Policy)
Apply group policy for users asynchronously during logon SynchronousUserGroupPolicy
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Group Policy) ies\System)
Apply policy to removable media ApplyToRemovableMedia
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows
Templates\System\Disk Quotas) NT\DiskQuota)
At logoff, delete local copy of users offline files PurgeAtLogoff
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Automatically publish new printers in Active Directory Auto Publishing
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows
NT\Printers\Wizard)
Browse a common web site to find printers Printers Page URL
(User Configuration\Administrative Templates\Control (HKCU\Software\Policies\Microsoft\Windows
Panel\Printers) NT\Printers\Wizard)
Browse the network to find printers Downlevel Browse
(User Configuration\Administrative Templates\Control (HKCU\Software\Policies\Microsoft\Windows
Panel\Printers) NT\Printers\Wizard)
Cache transforms in secure location on workstation TransformsSecure
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Century interpretation for Year 2000 <Calendar-ID>
(User Configuration\Administrative Templates\System) (HKCU\Software\Policies\Microsoft\Control
Panel\International\Calendars\TwoDigitYearMax)
Certificates Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{53D6AB1D-
Components\Microsoft Management 2488-11D1-A28C-00C04FB94F17})
Console\Restricted/Permitted snap-ins)
Certification Authority Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{3F276EB4-
Components\Microsoft Management 70EE-11D1-8A0F-00C04FB93753})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Check published state VerifyPublishedState
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
Clear history of recently opened documents on exit ClearRecentDocsOnExit
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Code signing for device drivers BehaviorOnFailedVerify
(User Configuration\Administrative Templates\System) (HKCU\Software\Policies\Microsoft\Windows NT\Driver
Signing)
Component Services Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{C9BC92DF-
Components\Microsoft Management 5B9A-11D1-8F00-00C04FC2C17B})
Console\Restricted/Permitted snap-ins)
Computer location PhysicalLocation
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
Computer Management Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{58221C67-
Components\Microsoft Management EA27-11CF-ADCF-00AA00A80033})
Console\Restricted/Permitted snap-ins)
Connect home directory to root of the share ConnectHomeDirToRoot
(User Configuration\Administrative (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Templates\System\Logon/Logoff) es\System)
Connection Sharing (NAT) Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{C2FE450B-
Components\Microsoft Management D6C2-11D0-A37B-00C04FC9DA04})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Create new Group Policy Object links disabled by default NewGPOLinksDisabled
(User Configuration\Administrative Templates\System\Group (HKCU\Software\Policies\Microsoft\Windows\Group Policy
Policy) Editor)
Custom support URL in the Printers folder's left pane SupportLink, SupportLinkName
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
Custom user interface Shell
(User Configuration\Administrative Templates\System) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\System)
DCOM Configuration Extension Restrict_Run
(HKCU\Software\Policies\Microsoft\MMC\{9EC88934-
C774-11d1-87F4-00C04FC2C17B})
(User Configuration\Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Default Active Directory path when searching for printers Default Search Scope
(User Configuration\Administrative Templates\Control (HKCU\Software\Policies\Microsoft\Windows
Panel\Printers) NT\Printers\Wizard)
Default cache size DefCacheSize
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Default quota limit and warning level Limit, LimitUnits, Threshold, ThresholdUnits
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows
Templates\System\Disk Quotas) NT\DiskQuota)
Delete cached copies of roaming profiles DeleteRoamingCache
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Logon) ies\System)
Device Manager Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{90087284-
Components\Microsoft Management d6d6-11d0-8353-00a0c90640bf})
Console\Restricted/Permitted snap-ins)
Device Manager Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{74246bfc-
Components\Microsoft Management 4c96-11d0-abef-0020af6b0b7a})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
DHCP Relay Management Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{C2FE4502-
Components\Microsoft Management D6C2-11D0-A37B-00C04FC9DA04})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Directory pruning interval PruningInterval
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
Directory pruning priority PruningPriority
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
Directory pruning retry PruningRetries
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
Disable "Make Available Offline" (Computer) NoMakeAvailableOffline (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Disable "Make Available Offline" (User) NoMakeAvailableOffline (HKCU)
(User Configuration\Administrative Templates\Network\Offline (HKCU\Software\Policies\Microsoft\Windows\NetCache)
Files)
Disable Active Desktop NoActiveDesktop
(User Configuration\AdministrativeTemplates\Desktop\Active (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Desktop) es\Explorer)
Disable Add/Remove Programs NoAddRemovePrograms
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Add/Remove Programs) es\Uninstall)
Disable adding, dragging, dropping and closing the NoCloseDragDropBands
Taskbar's toolbars (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
(User Configuration\AdministrativeTemplates\Desktop) es\Explorer)
Disable addition of printers NoAddPrinter
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Printers) es\Explorer)
Disable adjusting desktop toolbars NoMovingBands
(User Configuration\AdministrativeTemplates\Desktop) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Disable Advanced Menu (Computer) Disable Advanced (HKLM)
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Disable Advanced Menu (User) Disable Advanced (HKCU)
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Disable all items NoComponents
(User Configuration\AdministrativeTemplates\Desktop\Active (Software\Microsoft\Windows\CurrentVersion\Policies\Acti
Desktop) veDesktop)
Disable and remove links to Windows Update NoWindowsUpdate
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Disable and remove the Shut Down command NoClose
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Disable automatic update of ADM files DisableAutoADMUpdate
(User Configuration\Administrative Templates\System\Group (HKCU\Software\Policies\Microsoft\Windows\Group Policy
Policy) Editor)
Disable Autoplay (User) NoDriveTypeAutoRun (HKCU)
(User Configuration\Administrative Templates\System) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Disable Autoplay (Computer) NoDriveTypeAutoRun (HKLM)
(Computer Configuration\Administrative Templates\System) (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer)
Disable background refresh of group policy DisableBkGndGroupPolicy
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Group Policy) ies\System)
Disable Boot / Shutdown / Logon / Logoff status messages DisableStatusMessages
(Computer Configuration\Administrative Templates\System) (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System)
Disable browse dialog box for new source DisableBrowse
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Disable Change Password Disable Change Password
(User Configuration\Administrative (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Templates\System\Logon/Logoff) es\System)
Disable changes to Taskbar and Start Menu Settings NoSetTaskbar
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Disable changing wallpaper NoChangingWallPaper
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Display) es\ActiveDesktop)
Disable context menu for taskbar NoTrayContextMenu
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Disable Control Panel NoControlPanel
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Disable deletion of printers NoDeletePrinter
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Printers) es\Explorer)
Disable DFS tab NoDFSTab
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Disable Display in control panel NoDispCPL
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Display) es\System)
Disable Drag-and-Drop (Computer) DragAndDrop (HKLM)
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Disable Drag-and-Drop (User) DragAndDrop (HKCU)
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Disable drag-and-drop context menus on the Start Menu NoChangeStartMenu
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Disable IE security prompt for Windows Installer scripts SafeForScripting
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Disable legacy run list (Computer) DisableLocalMachineRun (HKLM)
(Computer Configuration\Administrative Templates\System) (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer)
Disable legacy run list (User) DisableLocalMachineRun (HKCU)
(User Configuration\Administrative (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Templates\System\Logon/Logoff) es\Explorer)
Disable Lock Computer DisableLockWorkstation
(User Configuration\Administrative (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Templates\System\Logon/Logoff) es\System)
Disable Logoff NoLogoff
(User Configuration\Administrative (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Templates\System\Logon/Logoff) es\Explorer)
Disable Logoff on the Start Menu StartMenuLogOff
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Disable media source for any install DisableMedia
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Disable New Task Creation (Computer) Task Creation (HKLM)
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Disable New Task Creation (User) Task Creation (HKCU)
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Disable patching DisablePatch
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Disable personalized menus Intellimenus
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Disable programs on Settings menu NoSetFolders
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Disable registry editing tools DisableRegistryTools
(User Configuration\Administrative Templates\System) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\System)
Disable reminder balloons (Computer) NoReminders (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Disable reminder balloons (User) NoReminders (HKCU)
(User Configuration\Administrative Templates\Network\Offline (HKCU\Software\Policies\Microsoft\Windows\NetCache\As
Files) signedOfflineFolders)
Disable rollback (Computer) DisableRollback (HKLM)
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Disable rollback (User) DisableRollback (HKCU)
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Disable Support Information NoSupportInfo
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Add/Remove Programs) es\Uninstall)
Disable Task Deletion (Computer) Task Deletion (HKLM)
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Disable Task Deletion (User) Task Deletion (HKCU)
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Disable Task Manager DisableTaskMgr
(User Configuration\Administrative (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Templates\System\Logon/Logoff) es\System)
Disable the command prompt DisableCMD
(User Configuration\Administrative Templates\System) (HKCU\Software\Policies\Microsoft\Windows\System)
Disable the run once list (Computer) DisableLocalMachineRunOnce (HKLM)
(Computer Configuration\Administrative Templates\System) (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer)
Disable the run once list (User) DisableLocalMachineRunOnce (HKCU)
(User Configuration\Administrative (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Templates\System\Logon/Logoff) es\Explorer)
Disable UI to change keyboard navigation indicator setting NoChangeKeyboardNavigationIndicators
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Disable UI to change menu animation setting NoChangeAnimation
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Disable user configuration of Offline Files (Computer) NoConfigCache (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Disable user configuration of Offline Files (User) NoConfigCache (HKCU)
(User Configuration\Administrative Templates\Network\Offline (HKCU\Software\Policies\Microsoft\Windows\NetCache)
Files)
Disable user tracking NoInstrumentation
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Disable Windows Explorer's default context menu NoViewContextMenu
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Disable Windows Installer DisableMSI
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Disk Defragmenter Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{43668E21-
Components\Microsoft Management 2636-11D1-A1CE-0080C88593A5})
Console\Restricted/Permitted snap-ins)
Disk Management Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{8EAD3A12-
Components\Microsoft Management B2C1-11d0-83AA-00A0C92C9D5D})
Console\Restricted/Permitted snap-ins)
Disk Quota policy processing NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\Group
Templates\System\Group Policy) Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66})
Display and enable the Network Connection wizard NC_NewConnectionWizard
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Distributed File System Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{677A2D94-
Components\Microsoft Management 28D9-11D1-A95B-008048918FB1})
Console\Restricted/Permitted snap-ins)
Do not add shares from recently opened documents to the NoRecentDocsNetHood
My Network Places folder (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
(User Configuration\AdministrativeTemplates\Desktop) es\Explorer)
Do not automatically encrypt files moved to encrypted NoEncryptOnMove
folders (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
(Computer Configuration\Administrative Templates\System) ies\Explorer)
Do not detect slow network connections SlowLinkDetectEnabled
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Logon) ies\System)
Do not keep history of recently opened documents NoRecentDocsHistory
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Do not request alternate credentials NoRunasInstallPrompt
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Do not track Shell shortcuts during roaming LinkResolveIgnoreLinkInfo
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Do not use the search-based method when resolving shell NoResolveSearch
shortcuts (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
(User Configuration\AdministrativeTemplates\Start Menu & es\Explorer)
Taskbar)
Do not use the tracking-based method when resolving shell NoResolveTrack
shortcuts (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
(User Configuration\AdministrativeTemplates\Start Menu & es\Explorer)
Taskbar)
Don't display welcome screen at logon (Computer) NoWelcomeScreen (HKLM)
(Computer Configuration\Administrative Templates\System) (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer)
Don't display welcome screen at logon (User) NoWelcomeScreen (HKCU)
(User Configuration\Administrative Templates\System) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Don't run specified Windows applications DisallowRun
(User Configuration\Administrative Templates\System) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Don't save settings at exit NoSaveSettings
(User Configuration\AdministrativeTemplates\Desktop) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Download missing COM components (Computer) COMClassStore (HKLM)
(Computer Configuration\Administrative Templates\System) (HKLM\Software\Policies\Microsoft\Windows\App
Management)
Download missing COM components (User) COMClassStore (HKCU)
(User Configuration\Administrative Templates\System\Group (HKCU\Software\Policies\Microsoft\Windows\App
Policy) Management)
EFS recovery policy processing NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\Group
Templates\System\Group Policy) Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A})
Enable access to properties of a LAN connection NC_LanProperties
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Enable access to properties of components of a LAN NC_LanChangeProperties
connection (HKCU\Software\Policies\Microsoft\Windows\Network
(User Configuration\Administrative Connections)
Templates\Network\Network and Dial-up Connections)
Enable access to properties of components of a RAS NC_RasChangeProperties
connection (HKCU\Software\Policies\Microsoft\Windows\Network
(User Configuration\Administrative Connections)
Templates\Network\Network and Dial-up Connections)
Enable access to properties of RAS connections available to NC_RasAllUserProperties
all users (HKCU\Software\Policies\Microsoft\Windows\Network
(User Configuration\Administrative Connections)
Templates\Network\Network and Dial-up Connections)
Enable Active Desktop ForceActiveDesktopOn
(User Configuration\AdministrativeTemplates\Desktop\Active (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Desktop) es\ActiveDesktop)
Enable adding or removing components of a RAS or LAN NC_AddRemoveComponents
connection (HKCU\Software\Policies\Microsoft\Windows\Network
(User Configuration\Administrative Connections)
Templates\Network\Network and Dial-up Connections)
Enable Classic Shell ClassicShell
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Enable connecting and disconnecting a LAN connection NC_LanConnect
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Enable connecting and disconnecting a RAS connection NC_RasConnect
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Enable deletion of RAS connections NC_DeleteConnection
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Enable deletion of RAS connections available to all users NC_DeleteAllUserConnection
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Enable disk quotas Enable
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows
Templates\System\Disk Quotas) NT\DiskQuota)
Enable filter in Find dialog box EnableFilter
(User Configuration\AdministrativeTemplates\Desktop\Active (HKCU\Software\Policies\Microsoft\Windows\Directory
Directory) UI)
Enable renaming of connections, if supported NC_RenameConnection
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Enable renaming of RAS connections belonging to the NC_RenameMyRasConnection
current user (HKCU\Software\Policies\Microsoft\Windows\Network
(User Configuration\Administrative Connections)
Templates\Network\Network and Dial-up Connections)
Enable status statistics for an active connection NC_Statistics
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Enable the Advanced Settings item on the Advanced menu NC_AdvancedSettings
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Enable the Dial-up Preferences item on the Advanced menu NC_DialupPrefs
(User Configuration\Administrative (HKCU\Software\Policies\Microsoft\Windows\Network
Templates\Network\Network and Dial-up Connections) Connections)
Enable user control over installs EnableUserControl
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Enable user to browse for source while elevated AllowLockdownBrowse
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Enable user to patch elevated products AllowLockdownPatch
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Enable user to use media source while elevated AllowLockdownMedia
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Enabled Enabled
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Enforce disk quota limit Enforce
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows
Templates\System\Disk Quotas) NT\DiskQuota)
Enforce Show Policies Only ShowPoliciesOnly
(User Configuration\Administrative Templates\System\Group (HKCU\Software\Policies\Microsoft\Windows\Group Policy
Policy) Editor)
Event logging level (Computer) EventLoggingLevel (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Event logging level (User) EventLoggingLevel (HKCU)
(User Configuration\Administrative Templates\Network\Offline (HKCU\Software\Policies\Microsoft\Windows\NetCache)
Files)
Event Viewer Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{975797FC-
Components\Microsoft Management 4E2A-11D0-B702-00C04FD8DBF7})
Console\Restricted/Permitted snap-ins)
Event Viewer Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{394C052E-
Components\Microsoft Management B830-11D0-9A86-00C04FD8DBF7})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Exclude directories in roaming profile ExcludeProfileDirs
(Exclude directories in roaming profile) (HKCU\Software\Policies\Microsoft\Windows\System)
FAX Service Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{753EDB4D-
Components\Microsoft Management 2E1B-11D1-9064-00A0C90AB504})
Console\Restricted/Permitted snap-ins)
Files not cached ExcludeExtensions
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Folder Redirection Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{88E729D6-
Components\Microsoft Management BDC1-11D1-BD2A-00C04FB9603F})
Console\Restricted/Permitted snap-ins\Group Policy)
Folder Redirection policy processing NoSlowLink, NoGPOListChanges
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\Group
Templates\System\Group Policy) Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861})
Go directly to Components wizard NoServices
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Add/Remove Programs) es\Uninstall)
Gray unavailable Windows Installer programs Start Menu GreyMSIAds
shortcuts (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
(User Configuration\AdministrativeTemplates\Start Menu & es\Explorer)
Taskbar)
Group Policy domain controller selection DCOption
(User Configuration\Administrative Templates\System\Group (HKCU\Software\Policies\Microsoft\Windows\Group Policy
Policy) Editor)
Group Policy refresh interval for computers GroupPolicyRefreshTime (HKLM),
(Computer Configuration\Administrative GroupPolicyRefreshTimeOffset (HKLM)
Templates\System\Group Policy) (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System)
Group Policy refresh interval for domain controllers GroupPolicyRefreshTimeDC,
(Computer Configuration\Administrative GroupPolicyRefreshTimeOffsetDC
Templates\System\Group Policy) (HKLM\Software\Policies\Microsoft\Windows\System)
Group Policy refresh interval for users GroupPolicyRefreshTime (HKCU),
(User Configuration\Administrative Templates\System\Group GroupPolicyRefreshTimeOffset (HKCU)
Policy) (HKCU\Software\Policies\Microsoft\Windows\System)
Group Policy slow link detection (Computer) GroupPolicyMinTransferRate (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\System)
Templates\System\Group Policy)
Group Policy slow link detection (User) GroupPolicyMinTransferRate (HKCU)
(User Configuration\Administrative Templates\System\Group (HKCU\Software\Policies\Microsoft\Windows\System)
Policy)
Group Policy snap-in Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-
Components\Microsoft Management A0E1-11D1-A7D3-0000F87571E3})
Console\Restricted/Permitted snap-ins\Group Policy)
Group Policy Tab for Active Directory Tools Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{D70A2BEA-
Components\Microsoft Management A63E-11D1-A7D4-0000F87571E3})
Console\Restricted/Permitted snap-ins\Group Policy)
Hide Active Directory folder HideDirectoryFolder
(User Configuration\AdministrativeTemplates\Desktop\Active (HKCU\Software\Policies\Microsoft\Windows\Directory
Directory) UI)
Hide Add New Programs page NoAddPage
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Add/Remove Programs) es\Uninstall)
Hide Add/Remove Windows Components page NoWindowsSetupPage
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Add/Remove Programs) es\Uninstall)
Hide all icons on Desktop NoDesktop
(User Configuration\AdministrativeTemplates\Desktop) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Hide Appearance tab NoDispAppearancePage
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Display) es\System)
Hide Background tab NoDispBackgroundPage
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Display) es\System)
Hide Change or Remove Programs page NoRemovePage
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Add/Remove Programs) es\Uninstall)
Hide Hardware tab NoHardwareTab
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Hide Internet Explorer icon on desktop NoInternetIcon
(User Configuration\AdministrativeTemplates\Desktop) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Hide My Network Places icon on desktop NoNetHood
(User Configuration\AdministrativeTemplates\Desktop) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Hide Property Pages (Computer) Property Pages (HKLM)
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Hide Property Pages (User) Property Pages (HKCU)
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Hide Screen Saver tab NoDispScrSavPage
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Display) es\System)
Hide Settings tab NoDispSettingsPage
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Display) es\System)
Hide specified control panel applets DisallowCpl,
(User Configuration\Administrative Templates\Control Panel) href="mk:@MSITStore:regentry.chm::/93227.htm">Disallo
wCpl subkey
(HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Hide the "Add a program from CD-ROM or floppy disk" NoAddFromCDorFloppy
option (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
(User Configuration\Administrative Templates\Control es\Uninstall)
Panel\Add/Remove Programs)
Hide the "Add programs from Microsoft" option NoAddFromInternet
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Add/Remove Programs) es\Uninstall)
Hide the "Add programs from your network" option NoAddFromNetwork
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Add/Remove Programs) es\Uninstall)
Hide the common dialog back button NoBackButton
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer\Common Open File Dialog) es\Comdlg32)
Hide the common dialog places bar NoPlacesBar
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer\Common Open File Dialog) es\Comdlg32)
Hide the dropdown list of recent files NoFileMru
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer\Common Open File Dialog) es\Comdlg32)
Hide the file scan progress window SfcShowProgress
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows
Templates\System\Windows File Protection) NT\Windows File Protection)
Hide these specified drives in My Computer NoDrives
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Hides the Manage item on the Windows Explorer context NoManageMyComputerVerb
menu (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
(User Configuration\Administrative Templates\Windows es\Explorer)
Components\Windows Explorer)
IAS Logging Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{2E19B602-
Components\Microsoft Management 48EB-11d2-83CA-00104BCA42CF})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
IGMP Routing Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{C2FE4508-
Components\Microsoft Management D6C2-11D0-A37B-00C04FC9DA04})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Indexing Service Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{95AD72F0-
Components\Microsoft Management 44CE-11D0-AE29-00AA004B9986})
Console\Restricted/Permitted snap-ins)
Initial reminder balloon lifetime (Computer) InitialBalloonTimeoutSeconds (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Initial reminder balloon lifetime (User) InitialBalloonTimeoutSeconds (HKCU)
(User Configuration\Administrative Templates\Network\Offline (HKCU\Software\Policies\Microsoft\Windows\NetCache\As
Files) signedOfflineFolders)
Internet Authentication Service (IAS) Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0-
Components\Microsoft Management 5713-11D1-9551-0060B0576642})
Console\Restricted/Permitted snap-ins)
Internet Explorer Maintenance Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{FC715823-
Components\Microsoft Management C5FB-11D1-9EEF-00A0C90347FF})
Console\Restricted/Permitted snap-ins\Group Policy)
Internet Explorer Maintenance policy processing NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\Group
Templates\System\Group Policy) Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B})
Internet Information Services Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{A841B6C2-
Components\Microsoft Management 7577-11D0-BB1F-00A0C922E79C})
Console\Restricted/Permitted snap-ins)
IP Routing Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{C2FE4500-
Components\Microsoft Management D6C2-11D0-A37B-00C04FC9DA04})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
IP Security Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA0-
Components\Microsoft Management CC85-11d0-9CE2-0080C7221EBD})
Console\Restricted/Permitted snap-ins)
IP Security policy processing NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\Group
Templates\System\Group Policy) Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27})
IPX RIP Routing Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{90810502-
Components\Microsoft Management 38F1-11D1-9345-00C04FC9DA04})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
IPX Routing Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{90810500-
Components\Microsoft Management 38F1-11D1-9345-00C04FC9DA04})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
IPX SAP Routing Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{90810504-
Components\Microsoft Management 38F1-11D1-9345-00C04FC9DA04})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Limit profile size EnableProfileQuota, IncludeRegInProQuota, MaxProfile
(User Configuration\Administrative Size,ProfileQuotaMessage, WarnUser, WarnUserTimeou
Templates\System\Logon/Logoff) t
(HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\System)
Limit Windows File Protection cache size SfcQuota
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows
Templates\System\Windows File Protection) NT\Windows File Protection)
Local Users and Groups Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{5D6179C8-
Components\Microsoft Management 17EC-11D1-9AA9-00C04FD8FE93})
Console\Restricted/Permitted snap-ins)
Log event when quota limit exceeded LogEventOverLimit
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows
Templates\System\Disk Quotas) NT\DiskQuota)
Log event when quota warning level exceeded LogEventOverThreshold
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows
Templates\System\Disk Quotas) NT\DiskQuota)
Log users off when roaming profile fails ProfileErrorAction
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\System)
Templates\System\Logon)
Logging Logging
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Logical and Mapped Drives Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{6E8E0081-
Components\Microsoft Management 19CD-11D1-AD91-00AA00B8E05A})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Maximum number of Recent documents MaxRecentDocs
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Maximum retries to unload and update user profile ProfileUnloadTimeout
(Computer Configuration\Administrative (HKLM\SOFTWARE\Policies\Microsoft\Windows\System)
Templates\System\Logon)
Maximum size of Active Directory searches QueryLimit
(User Configuration\AdministrativeTemplates\Desktop\Active (HKCU\Software\Policies\Microsoft\Windows\Directory
Directory) UI)
Maximum wait time for Group Policy scripts MaxGPOScriptWait
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Logon) ies\System)
No "Computers Near Me" in My Network Places NoComputersNearMe
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
No "Entire Network" in My Network Places NoEntireNetwork
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Network)
No screen saver ScreenSaveActive
(User Configuration\Administrative Templates\Control (HKCU\Software\Policies\Microsoft\Windows\Control
Panel\Display) Panel\Desktop)
Non-default server disconnect actions (Computer) CustomGoOfflineActions subkey (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache\C
Templates\Network\Offline Files) ustomGoOfflineActions)
Non-default server disconnect actions (User) CustomGoOfflineActions subkey (HKCU)
(User Configuration\Administrative Templates\Network\Offline (HKCU\Software\Policies\Microsoft\Windows\NetCache\Cu
Files) stomGoOfflineActions)
Only allow approved Shell extensions EnforceShellExtensionSecurity
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
OSPF Routing Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{C2FE4506-
Components\Microsoft Management D6C2-11D0-A37B-00C04FC9DA04})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Password protect the screen saver ScreenSaverIsSecure
(User Configuration\Administrative Templates\Control (HKCU\Software\Policies\Microsoft\Windows\Control
Panel\Display) Panel\Desktop)
Performance Logs and Alerts Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{7478EF61-
Components\Microsoft Management 8C46-11d1-8D99-00A0C913CAD4})
Console\Restricted/Permitted snap-ins)
Pre-populate printer search location text PhysicalLocationSupport
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
Prevent access to drives from My Computer NoViewOnDrive
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Prevent Task Run or End (Computer) Execution (HKLM)
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Prevent Task Run or End (User) Execution (HKCU)
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Prevent use of Offline Files folder (Computer) NoCacheViewer (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Prevent use of Offline Files Folder (User) NoCacheViewer (HKCU)
(User Configuration\Administrative Templates\Network\Offline (HKCU\Software\Policies\Microsoft\Windows\NetCache)
Files)
Primary DNS Suffix NV PrimaryDnsSuffix, PrimaryDnsSuffix
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\System\DNSclient)
Templates\System\DNS Client)
Printer browsing ServerThread
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
Prohibit adding items NoAddingComponents
(User Configuration\AdministrativeTemplates\Desktop\Active (Software\Microsoft\Windows\CurrentVersion\Policies\Acti
Desktop) veDesktop)
Prohibit Browse (Computer) Allow Browse (HKLM)
(Computer Configuration\Administrative Templates\Windows (HKLM\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Prohibit Browse (User) Allow Browse (HKCU)
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\Windows\Task
Components\Task Scheduler) Scheduler5.0)
Prohibit changes NoActiveDesktopChanges
(User Configuration\AdministrativeTemplates\Desktop\Active (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Desktop) es\Explorer)
Prohibit closing items NoClosingComponents
(User Configuration\AdministrativeTemplates\Desktop\Active (Software\Microsoft\Windows\CurrentVersion\Policies\Acti
Desktop) veDesktop)
Prohibit deleting items NoDeletingComponents
(User Configuration\AdministrativeTemplates\Desktop\Active (Software\Microsoft\Windows\CurrentVersion\Policies\Acti
Desktop) veDesktop)
Prohibit editing items NoEditingComponents
(User Configuration\AdministrativeTemplates\Desktop\Active (Software\Microsoft\Windows\CurrentVersion\Policies\Acti
Desktop) veDesktop)
Prohibit user from changing My Documents path DisablePersonalDirChange
(User Configuration\AdministrativeTemplates\Desktop) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Prompt user when slow link is detected SlowLinkUIEnabled
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Logon) ies\System)
Prune printers that are not automatically republished PruneDownlevel
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
Public Key Policies Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{34AB8E82-
Components\Microsoft Management C27E-11D1-A6C0-00C04FB94F17})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
QoS Admission Control Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{FD57D297-
Components\Microsoft Management 4FD9-11D1-854E-00C04FC31FD3})
Console\Restricted/Permitted snap-ins)
RAS Dialin - User Node Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{B52C1E50-
Components\Microsoft Management 1DD2-11D1-BC43-00C04FC31FD3})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Registry policy processing NoBackgroundPolicy, NoGPOListChanges
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\Group
Templates\System\Group Policy) Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2})
Reminder balloon frequency (Computer) ReminderFreqMinutes (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Reminder balloon frequency (User) ReminderFreqMinutes (HKCU)
(User Configuration\Administrative Templates\Network\Offline (HKCU\Software\Policies\Microsoft\Windows\NetCache\As
Files) signedOfflineFolders)
Reminder balloon lifetime (Computer) ReminderBalloonTimeoutSeconds (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Reminder balloon lifetime (User) ReminderBalloonTimeoutSeconds (HKCU)
(User Configuration\Administrative Templates\Network\Offline (ReminderBalloonTimeoutSeconds)
Files)
Remote Access Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{5880CD5C-
Components\Microsoft Management 8EC0-11d1-9570-0060B0576642})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Remote Installation Services Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{3060E8CE-
Components\Microsoft Management 7020-11D2-842D-00C04FA372D4})
Console\Restricted/Permitted snap-ins\Group Policy)
Removable Storage Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{243E20B0-
Components\Microsoft Management 48ED-11D2-97DA-00A024D77700})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Removable Storage Management Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{3CB6973D-
Components\Microsoft Management 3E6F-11D0-95DB-00A024D77700})
Console\Restricted/Permitted snap-ins)
Remove "Map Network Drive" and "Disconnect Network NoNetConnectDisconnect
Drive" (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
(User Configuration\Administrative Templates\Windows es\Explorer)
Components\Windows Explorer)
Remove common program groups from Start Menu NoCommonGroups
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Remove Disconnect item from Start menu (Terminal NoDisconnect
Services only) (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
(Computer Configuration\Administrative Templates\System) ies\Explorer)
Remove Documents menu from Start Menu NoRecentDocsMenu
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Remove Favorites menu from Start Menu NoFavoritesMenu
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Remove File menu from Windows Explorer NoFileMenu
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Remove Help menu from Start Menu NoSMHelp
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Remove My Documents icon from desktop {450D8FBA-AD25-11D0-98A8-0800361B1103}
(User Configuration\AdministrativeTemplates\Desktop) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\NonEnum)
Remove My Documents icon from Start Menu NoSMMyDocs
(User Configuration\AdministrativeTemplates\Desktop) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Remove Network & Dial-up Connections from Start Menu NoNetworkConnections
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Remove Run menu from Start Menu NoRun
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Remove Search button from Windows Explorer NoShellSearchButton
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Remove Search menu from Start Menu NoFind
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Remove security option from Start menu (Terminal Services NoNTSecurity
only) (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
(Computer Configuration\Administrative Templates\System) ies\Explorer)
Remove the Folder Options menu item from the Tools menu NoFolderOptions
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Remove user's folders from the Start Menu NoStartMenuSubFolders
(User Configuration\AdministrativeTemplates\Start Menu & (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Taskbar) es\Explorer)
Request credentials for network installations PromptRunasInstallNetPath
(User Configuration\Administrative Templates\Windows (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Components\Windows Explorer) es\Explorer)
Restrict selection of Windows 2000 menus and dialogs MultiUILanguageID
language (HKCU\Software\Policies\Microsoft\Control Panel\Desktop)
(User Configuration\Administrative Templates\Control
Panel\Regional Options)
Restrict the user from entering author mode RestrictAuthorMode
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC)
Components\Microsoft Management Console)
Restrict users to the explicitly permitted list of snap-ins RestrictToPermittedSnapins
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC)
Components\Microsoft Management Console)
RIP Routing Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{C2FE4504-
Components\Microsoft Management D6C2-11D0-A37B-00C04FC9DA04})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Routing Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{DAB1A262-
Components\Microsoft Management 4FD7-11D1-842C-00C04FB6C218})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Routing and Remote Access Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{1AA7F839-
Components\Microsoft Management C7F5-11D0-A376-00C04FC9DA04})
Console\Restricted/Permitted snap-ins)
Run legacy logon scripts hidden HideLegacyLogonScripts
(Run legacy logon scripts hidden) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\System)
Run logoff scripts visible HideLogoffScripts
(User Configuration\Administrative (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Templates\System\Logon/Logoff) es\System)
Run logon scripts synchronously (Computer) RunLogonScriptSync (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Logon) ies\System)
Run logon scripts synchronously (User) RunLogonScriptSync (HKCU)
(User Configuration\Administrative (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Templates\System\Logon/Logoff) es\Explorer)
Run logon scripts visible HideLogonScripts
(User Configuration\Administrative (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Templates\System\Logon/Logoff) es\System)
Run only allowed Windows applications RestrictRun
(User Configuration\Administrative Templates\System) (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Run shutdown scripts visible HideShutdownScripts
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Logon) ies\System)
Run startup scripts asynchronously RunStartupScriptSync
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Logon) ies\System)
Run startup scripts visible HideStartupScripts
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Logon) ies\System)
Run these programs at user logon (Computer) Run subkey (HKLM)
(Computer Configuration\Administrative Templates\System) (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer\Run)
Run these programs at user logon (User) Run subkey (HKCU)
(User Configuration\Administrative (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Templates\System\Logon/Logoff) es\Explorer\Run)
Screen saver executable name SCRNSAVE.EXE
(User Configuration\Administrative Templates\Control (HKCU\Software\Policies\Microsoft\Windows\Control
Panel\Display) Panel\Desktop)
Scripts (Logon/Logoff) Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{40B66650-
Components\Microsoft Management 4972-11D1-A7CA-0000F87571E3})
Console\Restricted/Permitted snap-ins\Group Policy)
Scripts (Startup/Shutdown) Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{40B6664F-
Components\Microsoft Management 4972-11D1-A7CA-0000F87571E3})
Console\Restricted/Permitted snap-ins\Group Policy)
Scripts policy processing NoSlowLink, NoBackgroundPolicy, NoGPOListChanges
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\Group
Templates\System\Group Policy) Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3})
Search order SearchOrder
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\Windows\Installer)
Components\Windows Installer)
Security Configuration and Analysis Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{011BE22D-
Components\Microsoft Management E453-11D1-945A-00C04FB984F9})
Console\Restricted/Permitted snap-ins)
Security policy processing NoBackgroundPolicy, NoGPOListChanges
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\Group
Templates\System\Group Policy) Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A})
Security Settings Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{803E14A0-
Components\Microsoft Management B4FB-11D0-A0D0-00A0C90F574B})
Console\Restricted/Permitted snap-ins\Group Policy)
Security Templates Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6-
Components\Microsoft Management E452-11D1-945A-00C04FB984F9})
Console\Restricted/Permitted snap-ins)
Send Console Message Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D0-
Components\Microsoft Management 0C49-11D1-BB12-00C04FC9A3A3})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Service Dependencies Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{BD95BA60-
Components\Microsoft Management 2E26-AAD1-AD99-00AA00B8E05A})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Services Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{58221C66-
Components\Microsoft Management EA27-11CF-ADCF-00AA00A80033})
Console\Restricted/Permitted snap-ins)
Set Windows File Protection scanning SfcScan
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows
Templates\System\Windows File Protection) NT\Windows File Protection)
Shared Folders Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{58221C65-
Components\Microsoft Management EA27-11CF-ADCF-00AA00A80033})
Console\Restricted/Permitted snap-ins)
Show only specified control panel applets RestrictCpl,
(User Configuration\Administrative Templates\Control Panel) href="mk:@MSITStore:regentry.chm::/93230.htm">Restrict
Cpl subkey
 (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer)
Slow network connection timeout for user profiles SlowLinkTimeOut, UserProfileMinTransferRate
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Logon) ies\System)
SMTP Protocol Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-
Components\Microsoft Management 11d0-bb77-00aa00a1eab7})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
SNMP Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{7AF60DD3-
Components\Microsoft Management 4979-11D1-8A6C-00C04FC33566})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Software Installation (Computer) Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{942A8E4F-
Components\Microsoft Management A261-11D1-A760-00C04FB9603F})
Console\Restricted/Permitted snap-ins\Group Policy)
Software Installation (User) Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A-
Components\Microsoft Management A3C7-11D1-A760-00C04FB9603F})
Console\Restricted/Permitted snap-ins\Group Policy)
Software Installation policy processing NoGPOListChanges, NoSlowLink
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\Group
Templates\System\Group Policy) Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7})
Specify default category for Add New Programs DefaultCategory
(User Configuration\Administrative Templates\Control (HKCU\Software\Microsoft\Windows\CurrentVersion\Polici
Panel\Add/Remove Programs) es\Uninstall)
Specify Windows File Protection cache location SFCDllCacheDir
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows
Templates\System\Windows File Protection) NT\Windows File Protection)
Subfolders always available offline AlwaysPinSubFolders
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Synchronize all offline files before logging off (Computer) SyncAtLogoff (HKLM)
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\NetCache)
Templates\Network\Offline Files)
Synchronize all offline files before logging off (User) SyncAtLogoff (HKCU)
(User Configuration\Administrative Templates\Network\Offline (HKCU\Software\Policies\Microsoft\Windows\NetCache)
Files)
System Information Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{45ac8c63-
Components\Microsoft Management 23e2-11d1-a696-00c04fd58bc3})
Console\Restricted/Permitted snap-ins)
System Properties Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{0F3621F1-
Components\Microsoft Management 23C6-11D1-AD97-00AA00B88E5A})
Console\Restricted/Permitted snap-ins\Extension snap-ins)
Telephony Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{E26D02A0-
Components\Microsoft Management 4C1F-11D1-9AA1-00C04FC3357A})
Console\Restricted/Permitted snap-ins)
Terminal Services Configuration Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{B91B6008-
Components\Microsoft Management 32D2-11D2-9888-00A0C925F917})
Console\Restricted/Permitted snap-ins)
Timeout for dialog boxes ProfileDlgTimeOut
(Computer Configuration\Administrative (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Templates\System\Logon) ies\System)
User Group Policy loopback processing mode UserPolicyMode
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\System)
Templates\System\Group Policy)
Verbose vs normal status messages VerboseStatus
(Computer Configuration\Administrative Templates\System) (HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System)
Wait for remote user profile SlowLinkProfileDefault
(Computer Configuration\Administrative (HKLM\Software\Policies\Microsoft\Windows\System)
Templates\System\Logon)
Web-based printing DisableWebPrinting
(Computer Configuration\Administrative Templates\Printers) (HKLM\Software\Policies\Microsoft\Windows NT\Printers)
WMI Control Restrict_Run
(User Configuration\Administrative Templates\Windows (HKCU\Software\Policies\Microsoft\MMC\{5C659257-
Components\Microsoft Management E236-11D2-8899-00104B2AFB46})
Console\Restricted/Permitted snap-ins)