<html dir="ltr" xmlns:v="urn:schemas-microsoft-com:vml" gpmc_reportInitialized="false">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>CS Kiosk User Account</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:block; height:24px; margin:0px,0px,-1px,0px; padding-top:4px; position:relative; table-layout:fixed; width:100%; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:10px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:10px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:45px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:45px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; width:100%; }

                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:55px; margin-right:0px; position:relative; width:100%; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; width:100%; }

                DIV .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; width:10%; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#000000; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

                    v\:* {behavior:url(#default#VML);}

</style>
<!-- Script 1 -->

<script language="vbscript">
<!--
'================================================================================
' String "strShowHide(0/1)"
' 0 = Hide all mode.
' 1 = Show all mode.
strShowHide = 1

'Localized strings
strShow = "show"
strHide = "hide"
strShowAll = "show all"
strHideAll = "hide all"
strShown = "shown"
strHidden = "hidden"
strExpandoNumPixelsFromEdge = "10px"


Function IsSectionHeader(obj)
    IsSectionHeader = (obj.className = "he0_expanded") Or (obj.className = "he1_expanded") Or (obj.className = "he1") Or (obj.className = "he2") Or (obj.className = "he3") Or (obj.className = "he4") Or (obj.className = "he4h") Or (obj.className = "he5") Or (obj.className = "he5h")
End Function


Function IsSectionExpandedByDefault(objHeader)
    IsSectionExpandedByDefault = (Right(objHeader.className, Len("_expanded")) = "_expanded")
End Function


' strState must be show | hide | toggle
Sub SetSectionState(objHeader, strState)
    ' Get the container object for the section.  It's the first one after the header obj.

    i = objHeader.sourceIndex
    Set all = objHeader.parentElement.document.all
    While (all(i).className <> "container")
        i = i + 1
    Wend

    Set objContainer = all(i)

    If strState = "toggle" Then
        If objContainer.style.display = "none" Then
            SetSectionState objHeader, "show"
        Else
            SetSectionState objHeader, "hide"
        End If

    Else
        Set objExpando = objHeader.children.item(1)

        If strState = "show" Then
            objContainer.style.display = "block"
            objExpando.innerText = strHide

        ElseIf strState = "hide" Then
            objContainer.style.display = "none"
            objExpando.innerText = strShow
        End If
    End If
End Sub


Sub ShowSection(objHeader)
    SetSectionState objHeader, "show"
End Sub


Sub HideSection(objHeader)
    SetSectionState objHeader, "hide"
End Sub


Sub ToggleSection(objHeader)
    SetSectionState objHeader, "toggle"
End Sub


'================================================================================
' When user clicks anywhere in the document body, determine if user is clicking 
' on a header element.
'================================================================================
Function document_onclick()
    Set strsrc    = window.event.srcElement

    While (strsrc.className = "sectionTitle" Or strsrc.className = "expando" Or strsrc.className = "vmlimage")
        Set strsrc = strsrc.parentElement
    Wend

    ' Only handle clicks on headers.
    If Not IsSectionHeader(strsrc) Then Exit Function

    ToggleSection strsrc
    
    window.event.returnValue = False
End Function

'================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
Function objshowhide_onClick()
    Set objBody = document.body.all
    Select Case strShowHide
        Case 0
            strShowHide = 1
            objshowhide.innerText = strShowAll
            For Each obji In objBody
                If IsSectionHeader(obji) Then
                    HideSection obji
                End If
            Next
        Case 1
            strShowHide = 0
            objshowhide.innerText = strHideAll
            For Each obji In objBody
                If IsSectionHeader(obji) Then
                    ShowSection obji
                End If
            Next
    End Select
End Function

'================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================
Function window_onload()
    ' Only initialize once.  The UI may reinsert a report into the webbrowser control,
    ' firing onLoad multiple times.
    If UCase(document.documentElement.getAttribute("gpmc_reportInitialized")) <> "TRUE" Then

        ' Initialize sections to default expanded/collapsed state.
        Set objBody = document.body.all

        For Each obji in objBody
            If IsSectionHeader(obji) Then
                If IsSectionExpandedByDefault(obji) Then
                    ShowSection obji
                Else
                    HideSection obji
                End If
            End If
        Next

        objshowhide.innerText = strShowAll
        
        document.documentElement.setAttribute "gpmc_reportInitialized", "true"
    End If
End Function

                


'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
Function document_onPropertyChange()
    If window.event.propertyName = "dir" Then
        Call fDetDir(UCase(document.dir))
    End If
End Function
Function fDetDir(strDir)
    strDir = UCase(strDir)
    Select Case strDir
        Case "LTR"
            Set colRules = document.styleSheets(0).rules
            For i = 0 To colRules.length -1
                Set nug = colRules.item(i)
                strClass = nug.selectorText 
                If nug.style.textAlign = "right" Then
                    nug.style.textAlign = "left"
                End If
                Select Case strClass
                    Case "DIV .expando"
                        nug.style.Left = ""
                        nug.style.right = strExpandoNumPixelsFromEdge
                    Case "#objshowhide"
                        nug.style.textAlign = "right"
                End Select
            Next
        Case "RTL"
            Set colRules = document.styleSheets(0).rules
            For i = 0 To colRules.length -1
                Set nug = colRules.item(i)
                strClass = nug.selectorText 
                If nug.style.textAlign = "left" Then
                    nug.style.textAlign = "right"
                End If
                Select Case strClass
                    Case "DIV .expando"
                        nug.style.Left = strExpandoNumPixelsFromEdge
                        nug.style.right = ""
                    Case "#objshowhide"
                        nug.style.textAlign = "left"
                End Select
            Next
    End Select
End Function

'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI). 
'================================================================================
Function window_onbeforeprint()
    For Each obji In document.all
        If obji.className = "expando" Then
            If obji.innerText = strHide Then obji.innerText = strShown
            If obji.innerText = strShow Then obji.innerText = strHidden
        End If
    Next
End Function 

'================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
Function window_onafterprint()
    For Each obji In document.all
        If obji.className = "expando" Then
            If obji.innerText = strShown Then obji.innerText = strHide
            If obji.innerText = strHidden Then obji.innerText = strShow
        End If
    Next
End Function

'================================================================================
' Adding keypress support for accessibility
'================================================================================
Function document_onKeyPress()
    If window.event.keyCode = "32" Or window.event.keyCode = "13" Or window.event.keyCode = "10" Then 'space bar (32) or carriage return (13) or line feed (10)
        If window.event.srcElement.className = "expando" Then Call document_onclick() : window.event.returnValue = false
        If window.event.srcElement.className = "sectionTitle" Then Call document_onclick() : window.event.returnValue = false
        If window.event.srcElement.id = "objshowhide" Then Call objshowhide_onClick() : window.event.returnValue = false
    End If
End Function
                
-->
</script>
                
<!-- Script 2 -->

<script language="javascript">
<!--
function getExplainWindowTitle()
{
        return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles()
{
        return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel()
{
        return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel()
{
        return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton()
{
        return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton()
{
        return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable()
{
        return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel()
{
        return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable()
{
        return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");
    
    if (strSettingDescription == "")
    {
                strSettingDescription = getNoExplainTextAvailable();
    }
    
    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported == "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html>\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
    var expWin = window.open("", "expWin", strDiagArgs);
    expWin.document.write("");
    expWin.document.close();
    expWin.document.write(strHtml);
    expWin.document.close();
    expWin.focus();
    
    //cancels navigation for IE.
    if(navigator.userAgent.indexOf("MSIE") > 0)
    {
        window.event.returnValue = false;
    }
    
    return false;
}
-->
</script>
                
</head>

<body>

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

                </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" cellpadding="0" cellspacing="0">
<tr><td colspan="2" class="gponame">CS Kiosk User Account</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 8 Jun 2007 16:06:51</td>
    <td><div id="objshowhide" tabindex="0"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Domain</td><td>cs.uwaterloo.ca</td></tr>
<tr><td scope="row">Owner</td><td>CS-GENERAL\Domain Admins</td></tr>
<tr><td scope="row">Created</td><td>16 Nov 2005 9:39:16</td></tr>
<tr><td scope="row">Modified</td><td>25 May 2007 15:45:46</td></tr>
<tr><td scope="row">User Revisions</td><td>147 (AD), 147 (sysvol)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>29 (AD), 29 (sysvol)</td></tr>
<tr><td scope="row">Unique ID</td><td>{C9145B45-2595-4DE2-B58C-C54548D32A1A}</td></tr>
<tr><td scope="row">GPO Status</td><td>Enabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0"><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
<tr><td>Kiosk User</td><td>Yes</td><td>Enabled</td><td>cs.uwaterloo.ca/CS/Special Accounts/Kiosk User</td></tr>
</table>
<br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Name</th></tr><tr><td>NT AUTHORITY\Authenticated Users</td></tr></table>
</div>
</div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">WMI Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row"><b>WMI Filter Name</b></td><td>None</td></tr>
<tr><td scope="row"><b>Description</b></td><td>Not applicable</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>CSCF\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>CS-GENERAL\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>NT AUTHORITY\Authenticated Users</td><td>Read (from Security Filtering)</td><td>No</td></tr>
<tr><td>NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Security Settings</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Account Policies/Password Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Minimum password length</td><td>0 characters</td></tr>
<tr><td>Password must meet complexity requirements</td><td>Disabled</td></tr>
</table>
</div></div></div></div><div class="filler"></div>
<div class="he1_expanded"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">System/Group Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="User Group Policy loopback processing mode" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Group Policy" gpmc_settingDescription="Applies alternate user settings when a user logs on to a computer affected by this setting.&lt;br/&gt;&lt;br/&gt;This setting directs the system to apply the set of Group Policy objects for the computer to any user who logs on to a computer affected by this setting. It is intended for special-use computers, such as those in public places, laboratories, and classrooms, where you must modify the user setting based on the computer that is being used.&lt;br/&gt;&lt;br/&gt;By default, the user's Group Policy objects determine which user settings apply. If this setting is enabled, then, when a user logs on to this computer, the computer's Group Policy objects determine which set of Group Policy objects applies.&lt;br/&gt;&lt;br/&gt;To use this setting, select one of the following modes from the Mode box:&lt;br/&gt;&lt;br/&gt;--   &amp;quot;Replace&amp;quot; indicates that the user settings defined in the computer's Group Policy objects replace the user settings normally applied to the user.&lt;br/&gt;&lt;br/&gt;--   &amp;quot;Merge&amp;quot; indicates that the user settings defined in the computer's Group Policy objects and the user settings normally applied to the user are combined. If the settings conflict, the user settings in the computer's Group Policy objects take precedence over the user's normal settings.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the user's Group Policy objects determines which user settings apply.&lt;br/&gt;&lt;br/&gt;Note: This setting is effective only when both the computer account and the user account are in Windows 2000 domains." gpmc_supported="At least Microsoft Windows 2000">User Group Policy loopback processing mode</a></td><td>Disabled</td></tr>
</table>
</div></div></div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Scripts</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Logon</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Name</th><th scope="col">Parameters</th></tr>
<tr><td>%systemroot%\system32\osk.exe</td><td></td></tr>
</table>
</div></div></div></div><div class="filler"></div>
<div class="he1_expanded"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Force classic Control Panel Style" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="This setting affects the visual style and presentation of the Control Panel.&lt;br/&gt;&lt;br/&gt;It allows you to disable the new style of Control Panel, which is task-based, and use the Windows 2000 style, referred to as the &amp;quot;classic&amp;quot; Control Panel. The new Control Panel, referred to as the &amp;quot;simple&amp;quot; Control Panel, simplifies how users interact with settings by providing easy-to-understand tasks that help users get their work done quickly. The Control Panel allows the users to configure their computer, add or remove programs, and change settings.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Control Panel sets the classic Control Panel. The user cannot switch to the new simple style.&lt;br/&gt;&lt;br/&gt;If you disable this setting, Control Panel is set to the task-based style. The user cannot switch to the classic Control Panel style.&lt;br/&gt;&lt;br/&gt;If you do not configure it, the default is the task-based style, which the user can change." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Force classic Control Panel Style</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide specified Control Panel applets" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Hides specified Control Panel items and folders.&lt;br/&gt;&lt;br/&gt;This setting removes Control Panel items (such as Display) and folders (such as Fonts) from the Control Panel window and the Start menu. It can remove Control Panel items you have added to your system, as well as Control Panel items included in Windows 2000 Professional and Windows XP Professional.&lt;br/&gt;&lt;br/&gt;To hide a Control Panel item, type the file name of the item, such as Ncpa.cpl (for Network). To hide a folder, type the folder name, such as Fonts.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu and Control Panel window only. It does not prevent users from running Control Panel items.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Display in Control Panel&amp;quot; setting in User Configuration\Administrative Templates\Control Panel\Display.&lt;br/&gt;&lt;br/&gt;If both the &amp;quot;Hide specified Control Panel applets&amp;quot; setting and the &amp;quot;Show only specified Control Panel applets&amp;quot; setting are enabled, and the same item appears in both lists, the &amp;quot;Show only specified Control Panel applets&amp;quot; setting is ignored.&lt;br/&gt;&lt;br/&gt;Note: To find the file name of a Control Panel item, search for files with the .cpl file name extension in the %Systemroot%\System32 directory. Note: To create a list of disallowed Control Panel applets, click Show, click Add, and then enter the Control Panel file name (ends with .cpl) or the name displayed under that item in the Control Panel. (e.g., desk.cpl, powercfg.cpl, Printers and Faxes)&lt;br/&gt;&lt;br/&gt;Note: This setting does not affect the Categories that are displayed in the new Control Panel Category view in Windows XP. If you want to control which items are displayed in Control Panel, enable the &amp;quot;Force classic Control Panel Style&amp;quot; setting to remove the Category view, and then use this setting to control which .cpls are not displayed." gpmc_supported="At least Microsoft Windows 2000">Hide specified Control Panel applets</a></td><td>Disabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to the Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Disables all Control Panel programs.&lt;br/&gt;&lt;br/&gt;This setting prevents Control.exe, the program file for Control Panel, from starting. As a result, users cannot start Control Panel or run any Control Panel items.&lt;br/&gt;&lt;br/&gt;This setting also removes Control Panel from the Start menu. (To open Control Panel, click Start, point to Settings, and then click Control Panel.) This setting also removes the Control Panel folder from Windows Explorer.&lt;br/&gt;&lt;br/&gt;If users try to select a Control Panel item from the Properties item on a context menu, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Display in Control Panel&amp;quot; and &amp;quot;Remove programs on Settings menu&amp;quot; settings." gpmc_supported="At least Microsoft Windows 2000">Prohibit access to the Control Panel</a></td><td>Disabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show only specified Control Panel applets" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Hides all Control Panel items and folders except those specified in this setting.&lt;br/&gt;&lt;br/&gt;This setting removes all Control Panel items (such as Network) and folders (such as Fonts) from the Control Panel window and the Start menu. It removes Control Panel items you have added to your system, as well the Control Panel items included in Windows 2000 and Windows XP Professional. The only items displayed in Control Panel are those you specify in this setting.&lt;br/&gt;&lt;br/&gt;To display a Control Panel item, type the file name of the item, such as Ncpa.cpl (for Network). To display a folder, type the folder name, such as Fonts.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu and Control Panel window only. It does not prevent users from running any Control Panel items.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Display in Control Panel&amp;quot; setting in User Configuration\Administrative Templates\Control Panel\Display.&lt;br/&gt;&lt;br/&gt;If both the &amp;quot;Hide specified Control Panel applets&amp;quot; setting and the &amp;quot;Show only specified Control Panel applets&amp;quot; setting are enabled, the &amp;quot;Show only specified Control Panel applets&amp;quot; setting is ignored.&lt;br/&gt;&lt;br/&gt;Tip: To find the file name of a Control Panel item, search for files with the .cpl file name extension in the %Systemroot%\System32 directory." gpmc_supported="At least Microsoft Windows 2000">Show only specified Control Panel applets</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2"><table class="subtable" cellpadding="0" cellspacing="0">
<tr><th scope="col">List of allowed Control Panel applets</th></tr>
<tr><td>Display</td></tr>
</table></td></tr><tr><td colspan="2">To create a list of allowed Control Panel applets, click Show,</td></tr><tr><td colspan="2">then Add, and enter the Control Panel file name (ends with .cpl)</td></tr><tr><td colspan="2">or the name displayed under that item in the Control Panel.</td></tr><tr><td colspan="2">(e.g., desk.cpl, powercfg.cpl, Printers)</td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Display</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Appearance and Themes tab" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Removes the Appearance and Themes tabs from Display in Control Panel.&lt;br/&gt;&lt;br/&gt;When this setting is enabled, it removes the desktop color selection option from the Desktop tab.&lt;br/&gt;&lt;br/&gt;This setting prevents users from using Control Panel to change the colors or color scheme of the desktop and windows.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or not configured, the Appearance and Themes tabs are available in Display in Control Panel." gpmc_supported="At least Microsoft Windows 2000">Hide Appearance and Themes tab</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Desktop tab" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Removes the Desktop tab from Display in Control Panel.&lt;br/&gt;&lt;br/&gt;This setting prevents users from using Control Panel to change the pattern and wallpaper on the desktop.&lt;br/&gt;&lt;br/&gt;Enabling this setting also prevents the user from customizing the desktop by changing icons or adding new Web content through Control Panel." gpmc_supported="At least Microsoft Windows 2000">Hide Desktop tab</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Screen Saver tab" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Removes the Screen Saver tab from Display in Control Panel.&lt;br/&gt;&lt;br/&gt;This setting prevents users from using Control Panel to add, configure, or change the screen saver on the computer." gpmc_supported="At least Microsoft Windows 2000">Hide Screen Saver tab</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Password protect the screen saver" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Determines whether screen savers used on the computer are password protected.&lt;br/&gt;&lt;br/&gt;If you enable this setting, all screen savers are password protected. If you disable this setting, password protection cannot be set on any screen saver.&lt;br/&gt;&lt;br/&gt;This setting also disables the &amp;quot;Password protected&amp;quot; check box on the Screen Saver tab in Display in Control Panel, preventing users from changing the password protection setting.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, users can choose whether or not to set password protection on each screen saver.&lt;br/&gt;&lt;br/&gt;To ensure that a computer will be password protected, also enable the &amp;quot;Screen Saver&amp;quot; setting and specify a timeout via the &amp;quot;Screen Saver timeout&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: To remove the Screen Saver tab, use the &amp;quot;Hide Screen Saver tab&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000 Service Pack 1">Password protect the screen saver</a></td><td>Disabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing wallpaper" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Prevents users from adding or changing the background design of the desktop.&lt;br/&gt;&lt;br/&gt;By default, users can use the Desktop tab of Display in Control Panel to add a background design (wallpaper) to their desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Desktop tab still appears, but all options on the tab are disabled.&lt;br/&gt;&lt;br/&gt;To remove the Desktop tab, use the &amp;quot;Hide Desktop tab&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;To specify wallpaper for a group, use the &amp;quot;Active Desktop Wallpaper&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Allow only bitmapped wallpaper&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Prevent changing wallpaper</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Screen Saver" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Enables desktop screen savers.&lt;br/&gt;&lt;br/&gt;If you disable this setting, screen savers do not run. Also, this setting disables the Screen Saver section of the Screen Saver tab in Display in Control Panel. As a result, users cannot change the screen saver options.&lt;br/&gt;&lt;br/&gt;If you do not configure it, this setting has no effect on the system.&lt;br/&gt;&lt;br/&gt;If you enable it, a screen saver runs, provided the following two conditions hold: First, a valid screensaver on the client is specified through the &amp;quot;Screensaver executable name&amp;quot; setting or through Control Panel on the client computer. Second, the screensaver timeout is set to a nonzero value through the setting or Control Panel.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide Screen Saver tab&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000 Service Pack 1">Screen Saver</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Screen Saver executable name" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Specifies the screen saver for the user's desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system displays the specified screen saver on the user's desktop. Also, this setting disables the drop-down list of screen savers on the Screen Saver tab in Display in Control Panel, which prevents users from changing the screen saver.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can select any screen saver.&lt;br/&gt;&lt;br/&gt;If you enable this setting, type the name of the file that contains the screen saver, including the .scr file name extension. If the screen saver file is not in the %Systemroot%\System32 directory, type the fully qualified path to the file.&lt;br/&gt;&lt;br/&gt;If the specified screen saver is not installed on a computer to which this setting applies, the setting is ignored.&lt;br/&gt;&lt;br/&gt;Note: This setting can be superseded by the &amp;quot;Screen Saver&amp;quot; setting.  If  the &amp;quot;Screen Saver&amp;quot; setting is disabled, this setting is ignored, and screen savers do not run." gpmc_supported="At least Microsoft Windows 2000 Service Pack 1">Screen Saver executable name</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Screen Saver executable name</td><td>%Systemroot%\System32\ssmypics.scr</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Screen Saver timeout" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Specifies how much user idle time must elapse before the screen saver is launched.&lt;br/&gt;&lt;br/&gt;When configured, this idle time can be set from a minimum of 1 second to a maximum of 86,400 seconds, or 24 hours. If set to zero, the screen saver will not be started.&lt;br/&gt;&lt;br/&gt;This setting has no effect under any of the following circumstances:&lt;br/&gt;&lt;br/&gt;    - The setting is disabled or not configured.&lt;br/&gt;&lt;br/&gt;    - The wait time is set to zero.&lt;br/&gt;&lt;br/&gt;    - The &amp;quot;No screen saver&amp;quot; setting is enabled.&lt;br/&gt;&lt;br/&gt;    - Neither the &amp;quot;Screen saver executable name&amp;quot; setting nor the Screen Saver tab of the client computer's Display Properties dialog box specifies a valid existing screensaver program on the client.&lt;br/&gt;&lt;br/&gt;When not configured, whatever wait time is set on the client through the Screen Saver tab of the Display Properties dialog box is used. The default is 15 minutes." gpmc_supported="At least Microsoft Windows 2000 Service Pack 1">Screen Saver timeout</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2">Number of seconds to wait to enable the Screen Saver</td></tr><tr><td colspan="2"> </td></tr><tr><td>Seconds:</td><td>600</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Display/Desktop Themes</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent selection of windows and buttons styles" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display/Desktop Themes" gpmc_settingDescription="Prevents users from changing the visual style of the windows and buttons displayed on their screens. When enabled, this setting disables the &amp;quot;Windows and buttons&amp;quot; drop-down list on the Appearance tab in Display Properties." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Prevent selection of windows and buttons styles</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Theme color selection" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display/Desktop Themes" gpmc_settingDescription="This setting forces the theme color to be the default color scheme.&lt;br/&gt;&lt;br/&gt;If you enable this setting, a user cannot change the color scheme of the current desktop theme.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, a user may change the color scheme of the current desktop theme." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Prohibit Theme color selection</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Theme option" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display/Desktop Themes" gpmc_settingDescription="This setting effects the Themes tab that controls the overall appearance of windows.&lt;br/&gt;&lt;br/&gt;It is accessed through the Display icon in Control Panel.&lt;br/&gt;&lt;br/&gt;Using the options under the Themes tab, users can configure the theme for their desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, it removes the Themes tab.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, there is no effect.&lt;br/&gt;&lt;br/&gt;Note: If you enable this setting but do not set a theme, the theme defaults to whatever the user previously set." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove Theme option</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not add shares of recently opened documents to My Network Places" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Remote shared folders are not added to My Network Places whenever you open a document in the shared folder.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, when you open a document in a remote shared folder, the system adds a connection to the shared folder to My Network Places.&lt;br/&gt;&lt;br/&gt;If you enable this setting, shared folders are not added to My Network Places automatically when you open a document in the shared folder." gpmc_supported="At least Microsoft Windows 2000">Do not add shares of recently opened documents to My Network Places</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Don't save settings at exit" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from saving certain changes to the desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users can change the desktop, but some changes, such as the position of open windows or the size and position of the taskbar, are not saved when users log off. However, shortcuts placed on the desktop are always saved." gpmc_supported="At least Microsoft Windows 2000">Don't save settings at exit</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide and disable all items on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, My Computer, and My Network Places.&lt;br/&gt;&lt;br/&gt;Removing icons and shortcuts does not prevent the user from using another method to start the programs or opening the items they represent.&lt;br/&gt;&lt;br/&gt;Also, see &amp;quot;Items displayed in Places Bar&amp;quot; in User Configuration\Administrative Templates\Windows Components\Common Open File Dialog to remove the Desktop icon from the Places Bar. This will help prevent users from saving data to the Desktop." gpmc_supported="At least Microsoft Windows 2000">Hide and disable all items on the desktop</a></td><td>Disabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Internet Explorer icon on desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from starting Internet Explorer by using other methods." gpmc_supported="At least Microsoft Windows 2000">Hide Internet Explorer icon on desktop</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide My Network Places icon on desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the My Network Places icon from the desktop.&lt;br/&gt;&lt;br/&gt;This setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network." gpmc_supported="At least Microsoft Windows 2000">Hide My Network Places icon on desktop</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent adding, dragging, dropping and closing the Taskbar's toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from manipulating desktop toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag toolbars on to or off of docked toolbars.&lt;br/&gt;&lt;br/&gt;Note: If users have added or removed toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Tip: To view the toolbars that can be added to the desktop, right-click a docked toolbar (such as the taskbar beside the Start button), and point to &amp;quot;Toolbars.&amp;quot;&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit adjusting desktop toolbars&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Prevent adding, dragging, dropping and closing the Taskbar's toolbars</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit adjusting desktop toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from adding or removing toolbars on the desktop.&lt;br/&gt;&lt;br/&gt;Note: If users have adjusted their toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent adding, dragging, dropping and closing the Taskbar's toolbars&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Prohibit adjusting desktop toolbars</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit user from changing My Documents path" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from changing the path to the My Documents folder.&lt;br/&gt;&lt;br/&gt;By default, a user can change the location of the My Documents folder by typing a new path in the Target box of the My Documents Properties dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users are unable to type a new location in the Target box." gpmc_supported="At least Microsoft Windows 2000">Prohibit user from changing My Documents path</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Computer icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides My Computer from the desktop and from the new Start menu. It also hides links to My Computer in the Web view of all Explorer windows, and it hides My Computer in the Explorer folder tree pane. If the user navigates into My Computer via the &amp;quot;Up&amp;quot; button while this setting is enabled, they view an empty My Computer folder. This setting allows administrators to restrict their users from seeing My Computer in the shell namespace, allowing them to present their users with a simpler desktop environment.&lt;br/&gt;&lt;br/&gt;If you enable this setting, My Computer is hidden on the desktop, the new Start menu, the Explorer folder tree pane, and the Explorer Web views. If the user manages to navigate to My Computer, the folder will be empty.&lt;br/&gt;&lt;br/&gt;If you disable this setting, My Computer is displayed as usual, appearing as normal on the desktop, Start menu, folder tree pane, and Web views, unless restricted by another setting.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the default is to display My Computer as usual.&lt;br/&gt;&lt;br/&gt;Note: Hiding My Computer and its contents does not hide the contents of the child folders of My Computer. For example, if the users navigate into one of their hard drives, they see all of their folders and files there, even if this setting is enabled." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove My Computer icon on the desktop</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Documents icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the My Documents icon.&lt;br/&gt;&lt;br/&gt;This setting removes the My Documents icon from the desktop, from Windows Explorer, from programs that use the Windows Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the My Documents folder.&lt;br/&gt;&lt;br/&gt;This setting does not remove the My Documents icon from the Start menu. To do so, use the &amp;quot;Remove My Documents icon from Start Menu&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off from and log back on to Windows 2000 Professional." gpmc_supported="At least Microsoft Windows 2000">Remove My Documents icon on the desktop</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the My Computer context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Properties on the context menu for My Computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks My Computer or clicks My Computer and then goes to the File menu.  Likewise, Alt-Enter does nothing when My Computer is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Microsoft Windows 2000 Service Pack 3">Remove Properties from the My Computer context menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the My Documents context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Properties for the context menu on My Documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks My Documents or clicks My Documents and then goes to the File menu.  Likewise, Alt-Enter does nothing when My Documents is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Microsoft Windows 2000 Service Pack 3">Remove Properties from the My Documents context menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Recycle Bin context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Properties option from the Recycle Bin context menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks on Recycle Bin or opens Recycle Bin and then clicks File. Likewise, Alt-Enter does nothing when Recycle Bin is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove Properties from the Recycle Bin context menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recycle Bin icon from desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the Recycle Bin icon.&lt;br/&gt;&lt;br/&gt;This setting removes the Recycle Bin icon from the desktop, from Windows Explorer, from programs that use the Windows Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the Recycle Bin folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off and then log back on." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove Recycle Bin icon from desktop</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Desktop Cleanup Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from using the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Desktop Cleanup wizard does not automatically run on a users workstation every 60 days. The user will also not be able to access the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the default behavior of the Desktop Clean Wizard running every 60 days occurs.&lt;br/&gt;&lt;br/&gt;Note: When this setting is not enabled, users can run the Desktop Cleanup Wizard, or have it run automatically every 60 days from Display, by clicking the Desktop tab and then clicking the Customize Desktop button." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove the Desktop Cleanup Wizard</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Offline Files</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Synchronize all offline files before logging off" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Determines whether offline files are fully synchronized when users log off.&lt;br/&gt;&lt;br/&gt;This setting also disables the &amp;quot;Synchronize all offline files before logging off&amp;quot; option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, offline files are fully synchronized. Full synchronization ensures that offline files are complete and current.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the system only performs a quick synchronization. Quick synchronization ensures that files are complete, but does not ensure that they are current.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the system performs a quick synchronization by default, but users can change this option.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To change the synchronization method without changing a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then select the &amp;quot;Synchronize all offline files before logging off&amp;quot; option." gpmc_supported="At least Microsoft Windows 2000">Synchronize all offline files before logging off</a></td><td>Disabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Synchronize all offline files when logging on" gpmc_settingPath="User Configuration/Administrative Templates/Network/Offline Files" gpmc_settingDescription="Determines whether offline files are fully synchronized when users log on.&lt;br/&gt;&lt;br/&gt;This setting also disables the &amp;quot;Synchronize all offline files before logging on&amp;quot; option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, offline files are fully synchronized at logon. Full synchronization ensures that offline files are complete and current. Enabling this setting automatically enables logon synchronization in Synchronization Manager.&lt;br/&gt;&lt;br/&gt;If this setting is disabled and Synchronization Manager is configured for logon synchronization, the system performs only a quick synchronization. Quick synchronization ensures that files are complete but does not ensure that they are current.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting and Synchronization Manager is configured for logon synchronization, the system performs a quick synchronization by default, but users can change this option.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To change the synchronization method without setting a setting, in Windows Explorer, on the Tools menu, click Folder Options, click the Offline Files tab, and then select the &amp;quot;Synchronize all offline files before logging on&amp;quot; option." gpmc_supported="At least Microsoft Windows 2000">Synchronize all offline files when logging on</a></td><td>Disabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Start Menu and Taskbar</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add Logoff to the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Adds the &amp;quot;Log Off &amp;lt;username&amp;gt;&amp;quot; item to the Start menu and prevents users from removing it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Log Off &amp;lt;username&amp;gt; item appears in the Start menu. This setting also removes the Display Logoff item from Start Menu Options. As a result, users cannot remove the Log Off &amp;lt;username&amp;gt; item from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can use the Display Logoff item to add and remove the Log Off item.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu only. It does not affect the Log Off item on the Windows Security dialog box that appears when you press Ctrl+Alt+Del.&lt;br/&gt;&lt;br/&gt;Note: To add or remove the Log Off item on a computer, click Start, click Settings, click Taskbar and Start Menu, click the Start Menu Options tab, and then, in the Start Menu Settings box, click Display Logoff.&lt;br/&gt;&lt;br/&gt;Also, see &amp;quot;Remove Logoff&amp;quot; in User Configuration\Administrative Templates\System\Logon/Logoff." gpmc_supported="At least Microsoft Windows 2000">Add Logoff to the Start Menu</a></td><td>Disabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear history of recently opened documents on exit" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Clear history of recently opened documents on exit.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system deletes shortcuts to recently used document files when the user logs off. As a result, the Documents menu on the Start menu is always empty when the user logs on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system retains document shortcuts, and when a user logs on the Documents menu appears just as it did when the user logged off.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Documents and Settings\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Documents menu from Start Menu&amp;quot; and &amp;quot;Do not keep history of recently opened documents&amp;quot; policies in this folder. The system only uses this setting when neither of these related settings are selected.&lt;br/&gt;&lt;br/&gt;This setting does not clear the list of recent files that Windows programs display at the bottom of the File menu. See the &amp;quot;Do not keep history of recently opened documents&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This policy setting also does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Clear history of recently opened documents on exit</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not keep history of recently opened documents" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system and Windows programs do not create shortcuts to documents opened while the setting is in effect. Also, they retain but do not display existing document shortcuts. The system empties the Documents menu on the Start menu, and Windows programs do not display shortcuts at the bottom of the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the system defaults are enforced. Disabling this setting has no effect on the system.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Documents and Settings\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Documents menu from Start Menu&amp;quot; and &amp;quot;Clear history of recently opened documents on exit&amp;quot; policies in this folder.&lt;br/&gt;&lt;br/&gt;If you enable this setting but do not enable the &amp;quot;Remove Documents menu from Start Menu&amp;quot; setting, the Documents menu appears on the Start menu, but it is empty.&lt;br/&gt;&lt;br/&gt;If you enable this setting, but then later disable it or set it to Not Configured, the document shortcuts saved before the setting was enabled reappear in the Documents menu and program File menus.&lt;br/&gt;&lt;br/&gt;This setting does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Microsoft Windows 2000">Do not keep history of recently opened documents</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Force classic Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting effects the presentation of the Start menu.&lt;br/&gt;&lt;br/&gt;The classic Start menu in Windows 2000 Professional allows users to begin common tasks, while the new Start menu consolidates common items onto one menu. When the classic Start menu is used, the following icons are placed on the desktop: My Documents, My Pictures, My Music, My Computer, and My Network Places. The new Start menu starts them directly.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Start menu displays the classic Start menu in the Windows 2000 style and displays the standard desktop icons.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Start menu only displays in the new style, meaning the desktop icons are now on the Start page.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the default is the new style, and the user can change the view." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Force classic Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changes to Taskbar and Start Menu Settings" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Taskbar and Start Menu item from Settings on the Start menu. This setting also prevents the user from opening the Taskbar Properties dialog box.&lt;br/&gt;&lt;br/&gt;If the user right-clicks the taskbar and then clicks Properties, a message appears explaining that a setting prevents the action." gpmc_supported="At least Microsoft Windows 2000">Prevent changes to Taskbar and Start Menu Settings</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Documents menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Documents menu from the Start menu.&lt;br/&gt;&lt;br/&gt;The Documents menu contains links to the nonprogram files that users have most recently opened. It appears so that users can easily reopen their documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system saves document shortcuts but does not display them in the Documents menu. If you later disable it or set it to Not Configured, the document shortcuts saved before the setting was enabled and while it was in effect appear in the Documents menu.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent Windows programs from displaying shortcuts to recently opened documents. See the &amp;quot;Do not keep history of recently opened documents&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not keep history of recently opened documents&amp;quot; and &amp;quot;Clear history of recenTly opened documents on exit&amp;quot; policies in this folder.&lt;br/&gt;&lt;br/&gt;This setting also does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Remove Documents menu from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Favorites menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from adding the Favorites menu to the Start menu or classic Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Display Favorites item does not appear in the Advanced Start menu options box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Display Favorite item is available.&lt;br/&gt;&lt;br/&gt;Note:The Favorities menu does not appear on the Start menu by default. To display the Favorites menu, right-click Start, click Properties, and then click Customize.  If you are using Start menu, click the Advanced tab, and then, under Start menu items, click the Favorites menu. If you are using the classic Start menu, click Display Favorites under Advanced Start menu options.&lt;br/&gt;&lt;br/&gt;Note:The items that appear in the Favorites menu when you install Windows are preconfigured by the system to appeal to most users. However, users can add and remove items from this menu, and system administrators can create a customized Favorites menu for a user group.&lt;br/&gt;&lt;br/&gt;Note:This setting only affects the Start menu. The Favorites item still appears in Windows Explorer and in Internet Explorer." gpmc_supported="At least Microsoft Windows 2000">Remove Favorites menu from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove links and access to Windows Update" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from connecting to the Windows Update Web site.&lt;br/&gt;&lt;br/&gt;This setting blocks user access to the Windows Update Web site at http://windowsupdate.microsoft.com. Also, the setting removes the Windows Update hyperlink from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Windows Update, the online extension of Windows, offers software updates to keep a user’s system up-to-date. The Windows Update Product Catalog determines any system files, security fixes, and Microsoft updates that users need and shows the newest versions available for download.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide the &amp;quot;Add programs from Microsoft&amp;quot; option&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Remove links and access to Windows Update</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Logoff on the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the &amp;quot;Log Off &amp;lt;username&amp;gt;&amp;quot; item from the Start menu and prevents users from restoring it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Log Off &amp;lt;username&amp;gt; item does not appear in the Start menu. This setting also removes the Display Logoff item from Start Menu Options. As a result, users cannot restore the Log Off &amp;lt;username&amp;gt; item to the Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can use the Display Logoff item to add and remove the Log Off item.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu only. It does not affect the Log Off item on the Windows Security dialog box that appears when you press Ctrl+Alt+Del, and it does not prevent users from using other methods to log off.&lt;br/&gt;&lt;br/&gt;Tip: To add or remove the Log Off item on a computer, click Start, click Settings, click Taskbar and Start Menu, click the Start Menu Options tab and, in the Start Menu Settings box, click Display Logoff.&lt;br/&gt;&lt;br/&gt;See also: &amp;quot;Remove Logoff&amp;quot; in User Configuration\Administrative Templates\System\Logon/Logoff." gpmc_supported="At least Microsoft Windows 2000">Remove Logoff on the Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Documents icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the My Documents icon from the Start menu and its submenus.&lt;br/&gt;&lt;br/&gt;This setting only removes the icon. It does not prevent the user from using other methods to gain access to the contents of the My Documents folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off and then log on.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove My Documents icon on the desktop&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Remove My Documents icon from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Music icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the My Music icon from the Start Menu." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove My Music icon from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Network Places icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the My Network Places icon from the Start Menu." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove My Network Places icon from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Pictures icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the My Pictures icon from the Start Menu." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove My Pictures icon from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network Connections from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from running Network Connections.&lt;br/&gt;&lt;br/&gt;This setting prevents the Network Connections folder from opening. This setting also removes Network Connections from Settings on the Start menu.&lt;br/&gt;&lt;br/&gt;Network Connections still appears in Control Panel and in Windows Explorer, but if users try to start it, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable programs on Settings menu&amp;quot; and &amp;quot;Disable Control Panel&amp;quot; settings and the settings in the Network Connections folder (Computer Configuration and User Configuration\Administrative Templates\Network\Network Connections)." gpmc_supported="At least Microsoft Windows 2000">Remove Network Connections from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove programs on Settings menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents Control Panel, Printers, and Network Connections from running.&lt;br/&gt;&lt;br/&gt;This setting removes the Control Panel, Printers, and Network and Connection folders from Settings on the Start menu, and from My Computer and Windows Explorer. It also prevents the programs represented by these folders (such as Control.exe) from running.&lt;br/&gt;&lt;br/&gt;However, users can still start Control Panel items by using other methods, such as right-clicking the desktop to start Display or right-clicking My Computer to start System.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable Control Panel,&amp;quot; &amp;quot;Disable Display in Control Panel,&amp;quot; and &amp;quot;Remove Network Connections from Start Menu&amp;quot; settings." gpmc_supported="At least Microsoft Windows 2000">Remove programs on Settings menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Run menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the following changes occur:&lt;br/&gt;&lt;br/&gt;(1) The Run command is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;(2) The New Task (Run) command is removed from Task Manager.&lt;br/&gt;&lt;br/&gt;(3) The user will be blocked from entering the following into the Internet Explorer Address Bar:&lt;br/&gt;&lt;br/&gt;--- A UNC path: \\&amp;lt;server&amp;gt;\&amp;lt;share&amp;gt; &lt;br/&gt;&lt;br/&gt;---Accessing local drives:  e.g., C:&lt;br/&gt;&lt;br/&gt;--- Accessing local folders: e.g., \temp&amp;gt;&lt;br/&gt;&lt;br/&gt;Also, users with extended keyboards will no longer be able to display the Run dialog box by pressing the Application key (the key with the Windows logo) + R.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the Run command in the Start menu and in Task Manager and use the Internet Explorer Address Bar.&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;Note:This setting affects the specified interface only. It does not prevent users from using other methods to run programs.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Microsoft Windows 2000">Remove Run menu from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove user name from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Remove user name from Start Menu" gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove user name from Start Menu</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove user's folders from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden.&lt;br/&gt;&lt;br/&gt;This setting is designed for use with redirected folders. Redirected folders appear on the main (bottom) section of the Start menu. However, the original, user-specific version of the folder still appears on the top section of the Start menu. Because the appearance of two folders with the same name might confuse users, you can use this setting to hide user-specific folders.&lt;br/&gt;&lt;br/&gt;Note that this setting hides all user-specific folders, not just those associated with redirected folders.&lt;br/&gt;&lt;br/&gt;If you enable this setting, no folders appear on the top section of the Start menu. If users add folders to the Start Menu directory in their user profiles, the folders appear in the directory but not on the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configured it, Windows 2000 Professional and Windows XP Professional display folders on both sections of the Start menu." gpmc_supported="At least Microsoft Windows 2000">Remove user's folders from the Start Menu</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Custom user interface" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Specifies an alternate user interface for Windows 2000.&lt;br/&gt;&lt;br/&gt;The Explorer program (%systemdrive%\program files\internet explorer\iExplorer.exe) creates the familiar Windows interface, but you can use this setting to specify an alternate interface. If you enable this setting, the system starts the interface you specify instead of Explorer.exe.&lt;br/&gt;&lt;br/&gt;To use this setting, copy your interface program to a network share or to your system drive. Then, enable this setting, and type the name of the interface program, including the file name extension, in the Shell name text box. If the interface program file is not located in a folder specified in the Path environment variable for your system, enter the fully qualified path to the file.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the setting is ignored and the system displays the Explorer interface.&lt;br/&gt;&lt;br/&gt;Tip: To find the folders indicated by the Path environment variable, click System Properties in Control Panel, click the Advanced tab, click the Environment Variables button, and then, in the System variables box, click Path." gpmc_supported="At least Microsoft Windows 2000">Custom user interface</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Interface file name (for example, Explorer.exe)</td><td>%SystemDrive%\software\cscf_kiosk\bin\cscf_kiosk.exe</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Don't display the Getting Started welcome screen at logon" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Supresses the welcome screen.&lt;br/&gt;&lt;br/&gt;This setting hides the welcome screen that is displayed on Windows 2000 Professional and Windows XP Professional each time the user logs on.&lt;br/&gt;&lt;br/&gt;Users can still display the welcome screen by selecting it on the Start menu or by typing &amp;quot;Welcome&amp;quot; in the Run dialog box.&lt;br/&gt;&lt;br/&gt;This setting applies only to Windows 2000 Professional and Windows XP Professional. It does not affect the &amp;quot;Configure Your Server on a Windows 2000 Server&amp;quot; screen on Windows 2000 Server.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click &amp;quot;Getting Started.&amp;quot; To suppress the welcome screen without specifying a setting, clear the &amp;quot;Show this screen at startup&amp;quot; check box on the welcome screen." gpmc_supported="Only works on Microsoft Windows 2000">Don't display the Getting Started welcome screen at logon</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Don't run specified Windows applications" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Prevents Windows from running the programs you specify in this setting.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot run programs that you add to the list of disallowed applications.&lt;br/&gt;&lt;br/&gt;This setting only prevents users from running programs that are started by the Windows Explorer process. It does not prevent users from running programs, such as Task Manager, that are started by the system process or by other processes. Also, if you permit users to gain access to the command prompt, Cmd.exe, this setting does not prevent them from starting programs in the command window that they are not permitted to start by using Windows Explorer. Note: To create a list of disallowed applications, click Show, click Add, and then enter the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe)." gpmc_supported="At least Microsoft Windows 2000">Don't run specified Windows applications</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2"><table class="subtable" cellpadding="0" cellspacing="0">
<tr><th scope="col">List of disallowed applications</th></tr>
<tr><td>explorer.exe</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to registry editing tools" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Disables the Windows registry editor Regedit.exe.&lt;br/&gt;&lt;br/&gt;If this setting is enabled and the user tries to start a registry editor, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;To prevent users from using other administrative tools, use the &amp;quot;Run only allowed Windows applications&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Prevent access to registry editing tools</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Disable regedit from running silently?</td><td>Yes</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to the command prompt" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Prevents users from running the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd and .bat) can run on the computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;Note: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Terminal Services." gpmc_supported="At least Microsoft Windows 2000">Prevent access to the command prompt</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Disable the command prompt script processing also?</td><td>No</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run only allowed Windows applications" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Limits the Windows programs that users have permission to run on the computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users can only run programs that you add to the List of Allowed Applications.&lt;br/&gt;&lt;br/&gt;This setting only prevents users from running programs that are started by the Windows Explorer process. It does not prevent users from running programs such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt, Cmd.exe, this setting does not prevent them from starting programs in the command window that they are not permitted to start by using Windows Explorer.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting. Note: To create a list of allowed applications, click Show, click Add, and then enter the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe)." gpmc_supported="At least Microsoft Windows 2000">Run only allowed Windows applications</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2"><table class="subtable" cellpadding="0" cellspacing="0">
<tr><th scope="col">List of allowed applications</th></tr>
<tr><td>%SystemDrive%\Program Files\Mozilla FireFox\firefox.cmd</td></tr>
<tr><td>%SystemDrive%\Program Files\Mozilla FireFox\firefox.exe</td></tr>
<tr><td>%SystemDrive%\software\adobe_acrobat_rdr-7.0\distribution\Reader\AcroRd32.exe</td></tr>
<tr><td>%SystemDrive%\software\cscf_kiosk\bin\cscf_kiosk.exe</td></tr>
<tr><td>%SystemDrive%\software\cscf_kiosk\bin\startfirefox.cmd</td></tr>
<tr><td>%SystemDrive%\software\firefox\distribution\firefox.exe</td></tr>
<tr><td>%SystemDrive%\software\firefox-1.0\distribution\firefox.exe</td></tr>
<tr><td>%SystemDrive%\software\firefox-2.0\distribution\firefox.exe</td></tr>
<tr><td>%SystemRoot%\system32\osk.exe</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Autoplay" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Turns off the Autoplay feature.&lt;br/&gt;&lt;br/&gt;Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately.&lt;br/&gt;&lt;br/&gt;By default, Autoplay is disabled on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you can also disable Autoplay on CD-ROM drives or disable Autoplay on all drives.&lt;br/&gt;&lt;br/&gt;This setting disables Autoplay on additional types of drives. You cannot use this setting to enable Autoplay on drives on which it is disabled by default.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in both the Computer Configuration and User Configuration folders. If the settings conflict, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent Autoplay for music CDs." gpmc_supported="At least Microsoft Windows 2000">Turn off Autoplay</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Turn off Autoplay on:</td><td>CD-ROM drives</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Ctrl+Alt+Del Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Change Password" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="Prevents users from changing their Windows password on demand.&lt;br/&gt;&lt;br/&gt;This setting disables the &amp;quot;Change Password&amp;quot; button on the Windows Security dialog box (which appears when you press Ctrl+Alt+Del).&lt;br/&gt;&lt;br/&gt;However, users are still able to change their password when prompted by the system. The system prompts users for a new password when an administrator requires a new password or their password is expiring." gpmc_supported="At least Microsoft Windows 2000">Remove Change Password</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Lock Computer" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="Prevents users from locking the system.&lt;br/&gt;&lt;br/&gt;While locked, the desktop is hidden and the system cannot be used. Only the user who locked the system or the system administrator can unlock it.&lt;br/&gt;&lt;br/&gt;Tip:To lock a computer without configuring a setting, press Ctrl+Alt+Delete, and then click &amp;quot;Lock Computer.&amp;quot;" gpmc_supported="At least Microsoft Windows 2000">Remove Lock Computer</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Logoff" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="Prevents the user from logging off.&lt;br/&gt;&lt;br/&gt;This setting does not let the user log off the system by using any method, including programs run from the command line, such as scripts. It also disables or removes all menu items and buttons that log the user off the system.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Logoff on the Start Menu&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Remove Logoff</a></td><td>Disabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Task Manager" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="Prevents users from starting Task Manager (Taskmgr.exe).&lt;br/&gt;&lt;br/&gt;If this setting is enabled and users try to start Task Manager, a message appears explaining that a policy prevents the action.&lt;br/&gt;&lt;br/&gt;Task Manager lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers, including system services; find the executable names of programs; and change the priority of the process in which programs run." gpmc_supported="At least Microsoft Windows 2000">Remove Task Manager</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Logon</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not process the legacy run list" gpmc_settingPath="User Configuration/Administrative Templates/System/Logon" gpmc_settingDescription="Ignores the customized run list.&lt;br/&gt;&lt;br/&gt;You can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows XP Professional, Windows 2000 Professional, Windows NT Workstation 4.0 and earlier. These programs are added to the standard run list of programs and services that the system starts.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system ignores the run list for Windows NT Workstation 4.0, Windows 2000 Professional, and Windows XP Professional.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, Windows 2000 adds any customized run list configured for Windows NT 4.0 and earlier to its run list.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both policies are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Note: To create a customized run list by using a policy, use the &amp;quot;Run these applications at startup&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;The customized run lists for Windows NT 4.0 and earlier are stored in the registry in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run and HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run. They can be configured by using the &amp;quot;Run&amp;quot; setting in System Policy Editor for Windows NT 4.0 and earlier.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not process the run once list&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Do not process the legacy run list</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not process the run once list" gpmc_settingPath="User Configuration/Administrative Templates/System/Logon" gpmc_settingDescription="Ignores customized run-once lists.&lt;br/&gt;&lt;br/&gt;You can create a customized list of additional programs and documents that are started automatically the next time the system starts (but not thereafter). These programs are added to the standard list of programs and services that the system starts.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system ignores the run-once list.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the system runs the programs in the run-once list.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Note: Customized run-once lists are stored in the registry in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not process the legacy run list&amp;quot; setting." gpmc_supported="At least Microsoft Windows 2000">Do not process the run once list</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run these programs at user logon" gpmc_settingPath="User Configuration/Administrative Templates/System/Logon" gpmc_settingDescription="Specifies additional programs or documents that Windows starts automatically when a user logs on to the system.&lt;br/&gt;&lt;br/&gt;To use this setting, click Show, click Add, and then, in the text box, type the name of the executable program (.exe) file or document file. Unless the file is located in the %Systemroot% directory, you must specify the fully qualified path to the file.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the system starts the programs specified in the Computer Configuration setting just before it starts the programs specified in the User Configuration setting.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not process the legacy run list&amp;quot; and the &amp;quot;Do not process the run once list&amp;quot; settings." gpmc_supported="At least Microsoft Windows 2000">Run these programs at user logon</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2"><table class="subtable" cellpadding="0" cellspacing="0">
<tr><th scope="col">Items to run at logon</th></tr>
<tr><td>%SystemDrive%\software\firefox-1.0\distribution\firefox.exe</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide these specified drives in My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Removes the icons representing selected hard drives from My Computer and Windows Explorer. Also, the drive letters representing the selected drives do not appear in the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;To use this setting, select a drive or combination of drives in the drop-down list. To display all drives, disable this setting or select the &amp;quot;Do not restrict drives&amp;quot; option in the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: This setting removes the drive icons. Users can still gain access to drive contents by using other methods, such as by typing the path to a directory on the drive in the Map Network Drive dialog box, in the Run dialog box, or in a command window.&lt;br/&gt;&lt;br/&gt;Also, this setting does not prevent users from using programs to access these drives or their contents. And, it does not prevent users from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent access to drives from My Computer&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Microsoft Windows 2000">Hide these specified drives in My Computer</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Pick one of the following combinations</td><td>Restrict all drives</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove &amp;quot;Map Network Drive&amp;quot; and &amp;quot;Disconnect Network Drive&amp;quot;" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Prevents users from using Windows Explorer or My Network Places to map or disconnect network drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system removes the Map Network Drive and Disconnect Network Drive commands from the toolbar and Tools menus in Windows Explorer and My Network Places and from menus that appear when you right-click the Windows Explorer or My Network Places icons. It also removes the Add Network Place option from My Network Places.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from connecting to another computer by typing the name of a shared folder in the Run dialog box.&lt;br/&gt;&lt;br/&gt;Note:&lt;br/&gt;&lt;br/&gt;This setting was documented incorrectly on the Explain tab in Group Policy for Windows 2000. The Explain tab states incorrectly that this setting prevents users from connecting and disconnecting drives.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Microsoft Windows 2000">Remove &quot;Map Network Drive&quot; and &quot;Disconnect Network Drive&quot;</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove CD Burning features" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Explorer" gpmc_settingDescription="Windows Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC.&lt;br/&gt;&lt;br/&gt;If you enable this setting, all features in the Windows Explorer that allow you to use your CD writer are removed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users are able to use the Windows Explorer CD burning features.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using third-party applications to create or modify CDs using a CD writer." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Remove CD Burning features</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Messenger</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Windows Messenger to be run" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Messenger" gpmc_settingDescription="Allows you to disable Windows Messenger.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Windows Messenger will not run.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, Windows Messenger can be used.&lt;br/&gt;&lt;br/&gt;Note: If you enable this setting, Remote Assistance also cannot use Windows Messenger.&lt;br/&gt;&lt;br/&gt;Note: This setting is available under both Computer Configuration and User Configuration. If both are present, the Computer Configuration version of this setting takes precedence." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Do not allow Windows Messenger to be run</a></td><td>Enabled</td></tr>
</table>
</div></div></div></div>
</body></html>