Professional Documents
Culture Documents
Active Directory GP Programming and Registry Reference
Active Directory GP Programming and Registry Reference
Group Policy
Programming/Registry
Reference
Group Policy Program/Registry Reference for Administrative Templates
All policies are listed alphabetically by: policy node, policy path, symbolic policy name and policy name.
For policy node:
Computer Configuration / Administrative Templates policies are listed under COMPUTER.
User Configuration / Administrative Templates policies are listed under USER.
For example, if you wanted to find the computer configuration policies for Administrative Templates\Component Updates, you would look under COMPUTER,
Administrative Templates\Component Updates.
The symbolic policy name is the name you would use when scripting or programming Group Policy, such as with Windows Management Instrumentation
(WMI).
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative Templates\Code
Download
CodeDownload Code Download HKLM\Software\Microsoft\Windows\CurrentVersion\Inter
net Settings!CodeBaseSearchPath
COMPUTER Administrative
Templates\Component Updates
HelpAbout128 Help Menu > About Internet
Explorer
HKLM\Software\Microsoft\Windows\CurrentVersion!IEAK
UpdateUrl
COMPUTER Administrative
Templates\Component Updates
UpdateCheck Periodic check for updates
to Internet Explorer and
Internet Tools
HKLM\Software\Microsoft\Internet
Explorer\Main!Update_Check_Page,
HKLM\Software\Microsoft\Internet
Explorer\Main!Update_Check_Interval
COMPUTER Administrative Templates\Network DFSDiscoverDC Sets how often a DFS Client
discovers DC's
HKLM\Software\Policies\Microsoft\System\DFSClient!Dfs
DcNameDelay
COMPUTER Administrative
Templates\Network\Background
Intelligent Transfer Service
BITS_Job_Timeout Timeout (days) for inactive
jobs
HKLM\Software\Policies\Microsoft\Windows\BITS!JobIna
ctivityTimeout
COMPUTER Administrative
Templates\Network\Background
Intelligent Transfer Service
BITS_MaxBandwidth Maximum network bandwith
that BITS uses
HKLM\Software\Policies\Microsoft\Windows\BITS!Enable
BITSMaxBandwidth,
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTr
ansferRateOnSchedule,
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBa
ndwidthValidFrom,
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBa
ndwidthValidTo,
HKLM\Software\Policies\Microsoft\Windows\BITS!UseSy
stemMaximum,
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTr
ansferRateOffSchedule
COMPUTER Administrative
Templates\Network\DNS Client
DNS_Domain Connection-Specific DNS
Suffix
HKLM\Software\Policies\Microsoft\Windows
NT\DNSClient!AdapterDomainName
COMPUTER Administrative
Templates\Network\DNS Client
DNS_NameServer DNS Servers HKLM\Software\Policies\Microsoft\Windows
NT\DNSClient!NameServer
COMPUTER Administrative
Templates\Network\DNS Client
DNS_PrimaryDnsSuffix Primary DNS Suffix HKLM\Software\Policies\Microsoft\System\DNSClient!NV
PrimaryDnsSuffix
COMPUTER Administrative DNS_RegisterAdapterName Register DNS records with
connection-specific DNS
HKLM\Software\Policies\Microsoft\Windows
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 3
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Templates\Network\DNS Client suffix NT\DNSClient!RegisterAdapterName
COMPUTER Administrative
Templates\Network\DNS Client
DNS_RegisterReverseLookup Register PTR Records HKLM\Software\Policies\Microsoft\Windows
NT\DNSClient!RegisterReverseLookup
COMPUTER Administrative
Templates\Network\DNS Client
DNS_RegistrationEnabled Dynamic Update HKLM\Software\Policies\Microsoft\Windows
NT\DNSClient!RegistrationEnabled
COMPUTER Administrative
Templates\Network\DNS Client
DNS_RegistrationOverwritesInConflic
t
Replace Addresses In
Conflicts
HKLM\Software\Policies\Microsoft\Windows
NT\DNSClient!RegistrationOverwritesInConflict
COMPUTER Administrative
Templates\Network\DNS Client
DNS_RegistrationRefreshInterval Registration Refresh Interval HKLM\Software\Policies\Microsoft\Windows
NT\DNSClient!RegistrationRefreshInterval
COMPUTER Administrative
Templates\Network\DNS Client
DNS_RegistrationTtl TTL Set in the A and PTR
records
HKLM\Software\Policies\Microsoft\Windows
NT\DNSClient!RegistrationTtl
COMPUTER Administrative
Templates\Network\DNS Client
DNS_SearchList DNS Suffix Search List HKLM\Software\Policies\Microsoft\Windows
NT\DNSClient!SearchList
COMPUTER Administrative
Templates\Network\DNS Client
DNS_UpdateSecurityLevel Update Security Level HKLM\Software\Policies\Microsoft\Windows
NT\DNSClient!UpdateSecurityLevel
COMPUTER Administrative
Templates\Network\DNS Client
DNS_UpdateTopLevelDomainZones Update Top Level Domain
Zones
HKLM\Software\Policies\Microsoft\Windows
NT\DNSClient!UpdateTopLevelDomainZones
COMPUTER Administrative
Templates\Network\DNS Client
DNS_UseDomainNameDevolution Primary DNS Suffix
Devolution
HKLM\Software\Policies\Microsoft\Windows
NT\DNSClient!UseDomainNameDevolution
COMPUTER Administrative
Templates\Network\DNS Client
HKLM\
COMPUTER Administrative
Templates\Network\Microsoft Peer-
to-Peer Networking Services
P2P_Disabled Turn off Microsoft Peer-to-
Peer Networking Services
HKLM\Software\policies\Microsoft\Peernet!Disabled
COMPUTER Administrative
Templates\Network\Microsoft Peer-
to-Peer Networking Services\Peer
Name Resolution Protocol\Global
Clouds
PNRP_DisableMulticastBootstrap Turn off Multicast Bootstrap HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-
Global!DisableMulticastBootstrap
COMPUTER Administrative
Templates\Network\Microsoft Peer-
to-Peer Networking Services\Peer
PNRP_SeedServer Set the Seed Server HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-
Global!SeedServer,
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-
Active Directory Training Seminar: Group Policy Programming/Registry Reference
4 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Name Resolution Protocol\Global
Clouds
Global!DontIncludeMicrosoftSeedServer
COMPUTER Administrative
Templates\Network\Microsoft Peer-
to-Peer Networking Services\Peer
Name Resolution Protocol\Link-
Local Clouds
PNRP_DisableMulticastBootstrap Turn off Multicast Bootstrap HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-
LinkLocal!DisableMulticastBootstrap
COMPUTER Administrative
Templates\Network\Microsoft Peer-
to-Peer Networking Services\Peer
Name Resolution Protocol\Link-
Local Clouds
PNRP_SeedServer Set the Seed Server HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-
LinkLocal!SeedServer
COMPUTER Administrative
Templates\Network\Microsoft Peer-
to-Peer Networking Services\Peer
Name Resolution Protocol\Site-
Local Clouds
PNRP_DisableMulticastBootstrap Turn off Multicast Bootstrap HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-
SiteLocal!DisableMulticastBootstrap
COMPUTER Administrative
Templates\Network\Microsoft Peer-
to-Peer Networking Services\Peer
Name Resolution Protocol\Site-
Local Clouds
PNRP_SeedServer Set the Seed Server HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-
SiteLocal!SeedServer
COMPUTER Administrative
Templates\Network\Network
Connections
NC_8021XCAName IEEE 802.1x Certificate
Authority for Machine
Authentication
HKLM\Software\Policies\Microsoft\Windows\Network
Connections\8021X!8021XCARootHash
COMPUTER Administrative
Templates\Network\Network
Connections
NC_AllowNetBridge_NLA Prohibit installation and
configuration of Network
Bridge on your DNS domain
network
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_AllowNetBridge_NLA
COMPUTER Administrative
Templates\Network\Network
Connections
NC_PersonalFirewallConfig Prohibit use of Internet
Connection Firewall on your
DNS domain network
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_PersonalFirewallConfig
COMPUTER Administrative
Templates\Network\Network
Connections
NC_ShowSharedAccessUI Prohibit use of Internet
Connection Sharing on your
DNS domain network
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_ShowSharedAccessUI
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 5
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative
Templates\Network\Network
Connections\Windows Firewall
WF_AuthenticatedBypass_Name Windows Firewall: Allow
authenticated IPSec bypass
HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\I
CFv4!BypassFirewall
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_AllowedPrograms_Name Windows Firewall: Define
program exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\AuthorizedApplications!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\AuthorizedApplications\List!UserEntered_
{1,2,3,...}
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_AllowedProgramsLocal_Name Windows Firewall: Allow
local program exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\AuthorizedApplications!AllowUserPrefMer
ge
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_DynamicPorts_Name Windows Firewall: Allow
remote administration
exception
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\RemoteAdminSettings!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\RemoteAdminSettings!RemoteAddresses
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_EnableFirewall_Name Windows Firewall: Protect all
network connections
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile!EnableFirewall
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_EnableShield_Name Windows Firewall: Do not
allow exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile!DoNotAllowExceptions
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_FileAndPrint_Name Windows Firewall: Allow file
and printer sharing
exception
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Services\FileAndPrint!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Services\FileAndPrint!RemoteAddresses
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_IcmpSettings_Name Windows Firewall: Allow
ICMP exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\IcmpSettings!AllowOutboundDestinationU
nreachable,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\IcmpSettings!AllowOutboundSourceQuen
ch,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\IcmpSettings!AllowRedirect,
Active Directory Training Seminar: Group Policy Programming/Registry Reference
6 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\IcmpSettings!AllowInboundEchoRequest,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\IcmpSettings!AllowInboundRouterReques
t,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\IcmpSettings!AllowOutboundTimeExceed
ed,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\IcmpSettings!AllowOutboundParameterPr
oblem,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\IcmpSettings!AllowInboundTimestampRe
quest,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\IcmpSettings!AllowInboundMaskRequest,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\IcmpSettings!AllowOutboundPacketTooBi
g
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_Logging_Name Windows Firewall: Allow
logging
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Logging!LogDroppedPackets,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Logging!LogSuccessfulConnections,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Logging!LogDroppedPackets,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Logging!LogSuccessfulConnections,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Logging!LogFilePath,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Logging!LogFileSize
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_Notifications_Name Windows Firewall: Prohibit
notifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Services\UPnPFramework!DisableNotifica
tions
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
WF_OpenPorts_Name Windows Firewall: Define
port exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\GloballyOpenPorts!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 7
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Firewall\Domain Profile DomainProfile\GloballyOpenPorts\List!UserEntered_{1,2,
3,...}
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_OpenPortsLocal_Name Windows Firewall: Allow
local port exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\GloballyOpenPorts!AllowUserPrefMerge
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_RemoteDesktop_Name Windows Firewall: Allow
Remote Desktop exception
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Services\RemoteDesktop!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Services\RemoteDesktop!RemoteAddress
es
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_UnicastResponseToMulticast_N
ame
Windows Firewall: Prohibit
unicast response to
multicast or broadcast
requests
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Logging!DisableUnicastResponseToMulti
castBroadcast
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Domain Profile
WF_UniversalPlugAndPlay_Name Windows Firewall: Allow
UPnP framework exception
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Services\UPnPFramework!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
DomainProfile\Services\UPnPFramework!RemoteAddres
ses
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_AllowedPrograms_Name Windows Firewall: Define
program exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\AuthorizedApplications!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\AuthorizedApplications\List!UserEntered
_{1,2,3,...}
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_AllowedProgramsLocal_Name Windows Firewall: Allow
local program exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\AuthorizedApplications!AllowUserPrefM
erge
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_DynamicPorts_Name Windows Firewall: Allow
remote administration
exception
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\RemoteAdminSettings!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\RemoteAdminSettings!RemoteAddresse
s
COMPUTER Administrative WF_EnableFirewall_Name Windows Firewall: Protect all HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
Active Directory Training Seminar: Group Policy Programming/Registry Reference
8 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
network connections StandardProfile!EnableFirewall
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_EnableShield_Name Windows Firewall: Do not
allow exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile!DoNotAllowExceptions
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_FileAndPrint_Name Windows Firewall: Allow file
and printer sharing
exception
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Services\FileAndPrint!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Services\FileAndPrint!RemoteAddresses
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_IcmpSettings_Name Windows Firewall: Allow
ICMP exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\IcmpSettings!AllowOutboundDestination
Unreachable,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\IcmpSettings!AllowOutboundSourceQue
nch,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\IcmpSettings!AllowRedirect,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\IcmpSettings!AllowInboundEchoRequest
,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\IcmpSettings!AllowInboundRouterReque
st,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\IcmpSettings!AllowOutboundTimeExcee
ded,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\IcmpSettings!AllowOutboundParameter
Problem,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\IcmpSettings!AllowInboundTimestampR
equest,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\IcmpSettings!AllowInboundMaskReques
t,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 9
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
StandardProfile\IcmpSettings!AllowOutboundPacketToo
Big
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_Logging_Name Windows Firewall: Allow
logging
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Logging!LogDroppedPackets,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Logging!LogSuccessfulConnections,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Logging!LogDroppedPackets,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Logging!LogSuccessfulConnections,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Logging!LogFilePath,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Logging!LogFileSize
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_Notifications_Name Windows Firewall: Prohibit
notifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Services\UPnPFramework!DisableNotific
ations
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_OpenPorts_Name Windows Firewall: Define
port exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\GloballyOpenPorts!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\GloballyOpenPorts\List!UserEntered_{1,
2,3,...}
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_OpenPortsLocal_Name Windows Firewall: Allow
local port exceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\GloballyOpenPorts!AllowUserPrefMerge
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_RemoteDesktop_Name Windows Firewall: Allow
Remote Desktop exception
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Services\RemoteDesktop!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Services\RemoteDesktop!RemoteAddre
sses
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_UnicastResponseToMulticast_N
ame
Windows Firewall: Prohibit
unicast response to
multicast or broadcast
requests
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Logging!DisableUnicastResponseToMult
icastBroadcast
Active Directory Training Seminar: Group Policy Programming/Registry Reference
10 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative
Templates\Network\Network
Connections\Windows
Firewall\Standard Profile
WF_UniversalPlugAndPlay_Name Windows Firewall: Allow
UPnP framework exception
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Services\UPnPFramework!Enabled,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
StandardProfile\Services\UPnPFramework!RemoteAddr
esses
COMPUTER Administrative
Templates\Network\Offline Files
Pol_AlwaysPinSubFolders Subfolders always available
offline
HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!AlwaysPinSubFolders
COMPUTER Administrative
Templates\Network\Offline Files
Pol_AssignedOfflineFiles Administratively assigned
offline files
HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders
COMPUTER Administrative
Templates\Network\Offline Files
Pol_CustomGoOfflineActions Non-default server
disconnect actions
HKLM\Software\Policies\Microsoft\Windows\NetCache\C
ustomGoOfflineActions
COMPUTER Administrative
Templates\Network\Offline Files
Pol_DefCacheSize Default cache size HKLM\Software\Policies\Microsoft\Windows\NetCache!D
efCacheSize
COMPUTER Administrative
Templates\Network\Offline Files
Pol_Enabled Allow or Disallow use of the
Offline Files feature
HKLM\Software\Policies\Microsoft\Windows\NetCache!E
nabled
COMPUTER Administrative
Templates\Network\Offline Files
Pol_EncryptOfflineFiles Encrypt the Offline Files
cache
HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!EncryptCache
COMPUTER Administrative
Templates\Network\Offline Files
Pol_EventLoggingLevel Event logging level HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!EventLoggingLevel
COMPUTER Administrative
Templates\Network\Offline Files
Pol_ExtExclusionList Files not cached HKLM\Software\Policies\Microsoft\Windows\NetCache\C
ustomGoOfflineActions!ExcludeExtensions
COMPUTER Administrative
Templates\Network\Offline Files
Pol_GoOfflineAction Action on server disconnect HKLM\Software\Policies\Microsoft\Windows\NetCache!G
oOfflineAction
COMPUTER Administrative
Templates\Network\Offline Files
Pol_NoCacheViewer Prevent use of Offline Files
folder
HKLM\Software\Policies\Microsoft\Windows\NetCache\C
ustomGoOfflineActions!NoCacheViewer
COMPUTER Administrative
Templates\Network\Offline Files
Pol_NoConfigCache Prohibit user configuration of
Offline Files
HKLM\Software\Policies\Microsoft\Windows\NetCache!N
oConfigCache
COMPUTER Administrative
Templates\Network\Offline Files
Pol_NoMakeAvailableOffline Remove 'Make Available
Offline'
HKLM\Software\Policies\Microsoft\Windows\NetCache\C
ustomGoOfflineActions!NoMakeAvailableOffline
COMPUTER Administrative
Templates\Network\Offline Files
Pol_NoPinFiles Prohibit 'Make Available
Offline' for these file and
folders
HKLM\Software\Policies\Microsoft\Windows\NetCache\N
oMakeAvailableOfflineList
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 11
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative
Templates\Network\Offline Files
Pol_NoReminders Turn off reminder balloons HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!NoReminders
COMPUTER Administrative
Templates\Network\Offline Files
Pol_PurgeAtLogoff At logoff, delete local copy of
user's offline files
HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!PurgeAtLogoff,
HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!PurgeOnlyAutoCacheAtLogoff
COMPUTER Administrative
Templates\Network\Offline Files
Pol_ReminderFreq Reminder balloon frequency HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!ReminderFreqMinutes
COMPUTER Administrative
Templates\Network\Offline Files
Pol_ReminderInitTimeout Initial reminder balloon
lifetime
HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!InitialBalloonTimeoutSeconds
COMPUTER Administrative
Templates\Network\Offline Files
Pol_ReminderTimeout Reminder balloon lifetime HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!ReminderBalloonTimeoutSeconds
COMPUTER Administrative
Templates\Network\Offline Files
Pol_SlowLinkSpeed Configure Slow link speed HKLM\Software\Policies\Microsoft\Windows\NetCache\N
oMakeAvailableOfflineList!SlowLinkSpeed
COMPUTER Administrative
Templates\Network\Offline Files
Pol_SyncAtLogoff Synchronize all offline files
before logging off
HKLM\Software\Policies\Microsoft\Windows\NetCache!S
yncAtLogoff
COMPUTER Administrative
Templates\Network\Offline Files
Pol_SyncAtLogon Synchronize all offline files
when logging on
HKLM\Software\Policies\Microsoft\Windows\NetCache!S
yncAtLogon
COMPUTER Administrative
Templates\Network\Offline Files
Pol_SyncAtSuspend Synchronize offline files
before suspend
HKLM\Software\Policies\Microsoft\Windows\NetCache!S
yncAtSuspend
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler
QosMaxOutstandingSends Limit outstanding packets HKLM\Software\Policies\Microsoft\Windows\Psched!Max
OutstandingSends
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler
QosNonBestEffortLimit Limit reservable bandwidth HKLM\Software\Policies\Microsoft\Windows\Psched!Non
BestEffortLimit
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler
QosTimerResolution Set timer resolution HKLM\Software\Policies\Microsoft\Windows\Psched!Tim
erResolution
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\DSCP value of
QosServiceTypeBestEffort_C Best effort service type HKLM\Software\Policies\Microsoft\Windows\Psched\Diffs
ervByteMappingConforming!ServiceTypeBestEffort
Active Directory Training Seminar: Group Policy Programming/Registry Reference
12 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
conforming packets
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\DSCP value of
conforming packets
QosServiceTypeControlledLoad_C Controlled load service type HKLM\Software\Policies\Microsoft\Windows\Psched\Diffs
ervByteMappingConforming!ServiceTypeControlledLoad
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\DSCP value of
conforming packets
QosServiceTypeGuaranteed_C Guaranteed service type HKLM\Software\Policies\Microsoft\Windows\Psched\Diffs
ervByteMappingConforming!ServiceTypeGuaranteed
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\DSCP value of
conforming packets
QosServiceTypeNetworkControl_C Network control service type HKLM\Software\Policies\Microsoft\Windows\Psched\Diffs
ervByteMappingConforming!ServiceTypeNetworkControl
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\DSCP value of
conforming packets
QosServiceTypeQualitative_C Qualitative service type HKLM\Software\Policies\Microsoft\Windows\Psched\Diffs
ervByteMappingConforming!ServiceTypeQualitative
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\DSCP value of non-
conforming packets
QosServiceTypeBestEffort_NC Best effort service type HKLM\Software\Policies\Microsoft\Windows\Psched\Diffs
ervByteMappingNonConforming!ServiceTypeBestEffort
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\DSCP value of non-
conforming packets
QosServiceTypeControlledLoad_NC Controlled load service type HKLM\Software\Policies\Microsoft\Windows\Psched\Diffs
ervByteMappingNonConforming!ServiceTypeControlledL
oad
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\DSCP value of non-
conforming packets
QosServiceTypeGuaranteed_NC Guaranteed service type HKLM\Software\Policies\Microsoft\Windows\Psched\Diffs
ervByteMappingNonConforming!ServiceTypeGuarantee
d
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\DSCP value of non-
conforming packets
QosServiceTypeNetworkControl_NC Network control service type HKLM\Software\Policies\Microsoft\Windows\Psched\Diffs
ervByteMappingNonConforming!ServiceTypeNetworkCo
ntrol
COMPUTER Administrative
Templates\Network\QoS Packet
QosServiceTypeQualitative_NC Qualitative service type HKLM\Software\Policies\Microsoft\Windows\Psched\Diffs
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 13
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Scheduler\DSCP value of non-
conforming packets
ervByteMappingNonConforming!ServiceTypeQualitative
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\Layer-2 priority value
QosServiceTypeBestEffort_PV Best effort service type HKLM\Software\Policies\Microsoft\Windows\Psched\Use
rPriorityMapping!ServiceTypeBestEffort
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\Layer-2 priority value
QosServiceTypeControlledLoad_PV Controlled load service type HKLM\Software\Policies\Microsoft\Windows\Psched\Use
rPriorityMapping!ServiceTypeControlledLoad
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\Layer-2 priority value
QosServiceTypeGuaranteed_PV Guaranteed service type HKLM\Software\Policies\Microsoft\Windows\Psched\Use
rPriorityMapping!ServiceTypeGuaranteed
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\Layer-2 priority value
QosServiceTypeNetworkControl_PV Network control service type HKLM\Software\Policies\Microsoft\Windows\Psched\Use
rPriorityMapping!ServiceTypeNetworkControl
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\Layer-2 priority value
QosServiceTypeNonConforming Non-conforming packets HKLM\Software\Policies\Microsoft\Windows\Psched\Use
rPriorityMapping!ServiceTypeNonConforming
COMPUTER Administrative
Templates\Network\QoS Packet
Scheduler\Layer-2 priority value
QosServiceTypeQualitative_PV Qualitative service type HKLM\Software\Policies\Microsoft\Windows\Psched\Use
rPriorityMapping!ServiceTypeQualitative
COMPUTER Administrative
Templates\Network\SNMP
SNMP_Communities Communities HKLM\Software\Policies\SNMP\Parameters\ValidComm
unities!{1,2,3,...}
COMPUTER Administrative
Templates\Network\SNMP
SNMP_PermittedManagers Permitted Managers HKLM\Software\Policies\SNMP\Parameters\PermittedMa
nagers!{1,2,3,...}
COMPUTER Administrative
Templates\Network\SNMP
SNMP_Traps_Public Traps for public community HKLM\Software\Policies\SNMP\Parameters\TrapConfigu
ration\public!{1,2,3,...}
COMPUTER Administrative
Templates\Network\System policies
update
RemoteUpdate Remote update
COMPUTER Administrative Templates\Printers AllowWebPrinting Web-based printing HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableWebPrinting
COMPUTER Administrative Templates\Printers AutoPublishing Automatically publish new
printers in Active Directory
HKLM\Software\Policies\Microsoft\Windows
NT\Printers\Wizard!Auto Publishing
Active Directory Training Seminar: Group Policy Programming/Registry Reference
14 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative Templates\Printers CustomizedSupportUrl Custom support URL in the
Printers folder's left pane
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!SupportLink
COMPUTER Administrative Templates\Printers ImmortalPrintQueue Allow pruning of published
printers
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!Immortal
COMPUTER Administrative Templates\Printers KMPrintersAreBlocked Disallow installation of
printers using kernel-mode
drivers
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!KMPrintersAreBlocked
COMPUTER Administrative Templates\Printers PhysicalLocation Computer location HKLM\Software\Policies\Microsoft\Windows
NT\Printers!PhysicalLocation
COMPUTER Administrative Templates\Printers PhysicalLocationSupport Pre-populate printer search
location text
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!PhysicalLocationSupport
COMPUTER Administrative Templates\Printers PrinterServerThread Printer browsing HKLM\Software\Policies\Microsoft\Windows
NT\Printers!ServerThread
COMPUTER Administrative Templates\Printers PruneDownlevel Prune printers that are not
automatically republished
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!PruneDownlevel
COMPUTER Administrative Templates\Printers PruningInterval Directory pruning interval HKLM\Software\Policies\Microsoft\Windows
NT\Printers!PruningInterval
COMPUTER Administrative Templates\Printers PruningPriority Directory pruning priority HKLM\Software\Policies\Microsoft\Windows
NT\Printers!PruningPriority
COMPUTER Administrative Templates\Printers PruningRetries Directory pruning retry HKLM\Software\Policies\Microsoft\Windows
NT\Printers!PruningRetries
COMPUTER Administrative Templates\Printers PruningRetryLog Log directory pruning retry
events
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!PruningRetryLog
COMPUTER Administrative Templates\Printers PublishPrinters Allow printers to be
published
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!PublishPrinters
COMPUTER Administrative Templates\Printers RegisterSpoolerRemoteRpcEndPoint Allow Print Spooler to accept
client connections
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!RegisterSpoolerRemoteRpcEndPoint
COMPUTER Administrative Templates\Printers VerifyPublishedState Check published state HKLM\Software\Policies\Microsoft\Windows
NT\Printers!VerifyPublishedState
COMPUTER Administrative Templates\Related
Sites and Errors
RelatedSites
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 15
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative Templates\System AppMgmt_COM_SearchForCLSID Download missing COM
components
HKLM\Software\Policies\Microsoft\Windows\App
Management!COMClassStore
COMPUTER Administrative Templates\System Autorun Turn off Autoplay HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoDriveTypeAutoRun
COMPUTER Administrative Templates\System DisableStatusMessages Remove Boot / Shutdown /
Logon / Logoff status
messages
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!DisableStatusMessages
COMPUTER Administrative Templates\System DLT_AllowDomainMode Allow Distributed Link
Tracking clients to use
domain resources
HKLM\Software\Policies\Microsoft\Windows\System!DLT
_AllowDomainMode
COMPUTER Administrative Templates\System Do_not_display_Manage_Your_Serv
er_page
Do not display Manage Your
Server page at logon
HKLM\Software\Policies\Microsoft\Windows
NT\CurrentVersion\MYS!DisableShowAtLogon
COMPUTER Administrative Templates\System Dont_PowerOff_AfterShutdown Do not turn off system power
after a Windows system
shutdown has occurred.
HKLM\Software\Policies\Microsoft\Windows
NT!DontPowerOffAfterShutdown
COMPUTER Administrative Templates\System DriverSearchPlaces_DontPromptFor
WindowsUpdate
Turn off Windows Update
device driver search prompt
HKLM\Software\Policies\Microsoft\Windows\DriverSearc
hing!DontPromptForWindowsUpdate
COMPUTER Administrative Templates\System EE_EnablePersistentTimeStamp Enable Persistent Time
Stamp
HKLM\Software\Policies\Microsoft\Windows
NT\Reliability!TimeStampEnabled,
HKLM\Software\Policies\Microsoft\Windows
NT\Reliability!TimeStampInterval
COMPUTER Administrative Templates\System HelpQualifiedRootDir_Comp Restrict potentially unsafe
HTML Help functions to
specified folders
HKLM\Software\Policies\Microsoft\Windows\System!Hel
pQualifiedRootDir
COMPUTER Administrative Templates\System NoEncryptOnMove Do not automatically encrypt
files moved to encrypted
folders
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoEncryptOnMove
COMPUTER Administrative Templates\System RestrictRunFromHelp_Comp Restrict these programs
from being launched from
Help
HKLM\Software\Policies\Microsoft\Windows\System!Disa
bleInHelp
COMPUTER Administrative Templates\System Run Run HKLM\Software\Microsoft\Windows\CurrentVersion\Run
COMPUTER Administrative Templates\System ServicePackSourcePath Specify Windows Service HKLM\Software\Policies\Microsoft\Windows
Active Directory Training Seminar: Group Policy Programming/Registry Reference
16 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Pack installation file location NT\Setup!ServicePackSourcePath
COMPUTER Administrative Templates\System SetupSourcePath Specify Windows installation
file location
HKLM\Software\Policies\Microsoft\Windows
NT\Setup!SourcePath
COMPUTER Administrative Templates\System ShutdownEventTrackerStateFile Activate Shutdown Event
Tracker System State Data
feature
HKLM\Software\Policies\Microsoft\Windows
NT\Reliability!SnapShot
COMPUTER Administrative Templates\System ShutdownReason Display Shutdown Event
Tracker
HKLM\Software\Policies\Microsoft\Windows
NT\Reliability!ShutdownReasonOn,
HKLM\Software\Policies\Microsoft\Windows
NT\Reliability!ShutdownReasonUI
COMPUTER Administrative Templates\System VerboseStatus Verbose vs normal status
messages
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!VerboseStatus
COMPUTER Administrative
Templates\System\Disk Quotas
DQ_Enable Enable disk quotas HKLM\Software\Policies\Microsoft\Windows
NT\DiskQuota!Enable
COMPUTER Administrative
Templates\System\Disk Quotas
DQ_Enforce Enforce disk quota limit HKLM\Software\Policies\Microsoft\Windows
NT\DiskQuota!Enforce
COMPUTER Administrative
Templates\System\Disk Quotas
DQ_Limit Default quota limit and
warning level
HKLM\Software\Policies\Microsoft\Windows
NT\DiskQuota!Limit,
HKLM\Software\Policies\Microsoft\Windows
NT\DiskQuota!LimitUnits,
HKLM\Software\Policies\Microsoft\Windows
NT\DiskQuota!Threshold,
HKLM\Software\Policies\Microsoft\Windows
NT\DiskQuota!ThresholdUnits
COMPUTER Administrative
Templates\System\Disk Quotas
DQ_LogEventOverLimit Log event when quota limit
exceeded
HKLM\Software\Policies\Microsoft\Windows
NT\DiskQuota!LogEventOverLimit
COMPUTER Administrative
Templates\System\Disk Quotas
DQ_LogEventOverThreshold Log event when quota
warning level exceeded
HKLM\Software\Policies\Microsoft\Windows
NT\DiskQuota!LogEventOverThreshold
COMPUTER Administrative
Templates\System\Disk Quotas
DQ_RemovableMedia Apply policy to removable
media
HKLM\Software\Policies\Microsoft\Windows
NT\DiskQuota!ApplyToRemovableMedia
COMPUTER Administrative
Templates\System\Error Reporting
PCH_ConfigureReport Configure Error Reporting HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing\DW!DWNoExternalURL,
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing\DW!DWNoFileCollection,
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 17
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing\DW!DWNoSecondLevelCollection,
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing!ForceQueueMode,
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing\DW!DWFileTreeRoot,
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing\DW!DWReporteeName
COMPUTER Administrative
Templates\System\Error Reporting
PCH_ShowUI Display Error Notification HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing!ShowUI,
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing\DW!DWAllowHeadless,
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing\DW!DWAllowHeadless
COMPUTER Administrative
Templates\System\Error
Reporting\Advanced Error Reporting
settings
PCH_AllOrNoneDef Default application reporting
settings
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing!AllOrNone,
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing!IncludeMicrosoftApps,
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing!IncludeWindowsApps
COMPUTER Administrative
Templates\System\Error
Reporting\Advanced Error Reporting
settings
PCH_AllOrNoneEx List of applications to never
report errors for
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing\ExclusionList
COMPUTER Administrative
Templates\System\Error
Reporting\Advanced Error Reporting
settings
PCH_AllOrNoneInc List of applications to always
report errors for
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing\InclusionList
COMPUTER Administrative
Templates\System\Error
Reporting\Advanced Error Reporting
settings
PCH_ReportOperatingSystemFaults Report operating system
errors
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing!IncludeKernelFaults
COMPUTER Administrative
Templates\System\Error
Reporting\Advanced Error Reporting
settings
PCH_ReportShutdownEvents Report unplanned shutdown
events
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing!IncludeShutdownErrs
Active Directory Training Seminar: Group Policy Programming/Registry Reference
18 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative
Templates\System\Group Policy
AllowX-ForestPolicy-and-RUP Allow Cross-Forest User
Policy and Roaming User
Profiles
HKLM\Software\Policies\Microsoft\Windows\System!Allo
wX-ForestPolicy-and-RUP
COMPUTER Administrative
Templates\System\Group Policy
CSE_AppMgmt Software Installation policy
processing
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{c6dc5466-785a-11d2-84d0-
00c04fb169f7}!NoSlowLink,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{c6dc5466-785a-11d2-84d0-
00c04fb169f7}!NoGPOListChanges
COMPUTER Administrative
Templates\System\Group Policy
CSE_DiskQuota Disk Quota policy
processing
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{3610eda5-77ef-11d2-8dc5-
00c04fa31a66}!NoSlowLink,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{3610eda5-77ef-11d2-8dc5-
00c04fa31a66}!NoBackgroundPolicy,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{3610eda5-77ef-11d2-8dc5-
00c04fa31a66}!NoGPOListChanges
COMPUTER Administrative
Templates\System\Group Policy
CSE_EFSRecovery EFS recovery policy
processing
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{B1BE8D72-6EAC-11D2-A4EA-
00C04F79F83A}!NoSlowLink,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{B1BE8D72-6EAC-11D2-A4EA-
00C04F79F83A}!NoBackgroundPolicy,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{B1BE8D72-6EAC-11D2-A4EA-
00C04F79F83A}!NoGPOListChanges
COMPUTER Administrative
Templates\System\Group Policy
CSE_FolderRedirection Folder Redirection policy
processing
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{25537BA6-77A8-11D2-9B6C-
0000F8080861}!NoSlowLink,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{25537BA6-77A8-11D2-9B6C-
0000F8080861}!NoGPOListChanges
COMPUTER Administrative
Templates\System\Group Policy
CSE_IEM Internet Explorer
Maintenance policy
processing
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{A2E30F80-D7DE-11d2-BBDE-
00C04F86AE3B}!NoSlowLink,
HKLM\Software\Policies\Microsoft\Windows\Group
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 19
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Policy\{A2E30F80-D7DE-11d2-BBDE-
00C04F86AE3B}!NoBackgroundPolicy,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{A2E30F80-D7DE-11d2-BBDE-
00C04F86AE3B}!NoGPOListChanges
COMPUTER Administrative
Templates\System\Group Policy
CSE_IPSecurity IP Security policy processing HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{e437bc1c-aa7d-11d2-a382-
00c04f991e27}!NoSlowLink,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{e437bc1c-aa7d-11d2-a382-
00c04f991e27}!NoBackgroundPolicy,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{e437bc1c-aa7d-11d2-a382-
00c04f991e27}!NoGPOListChanges
COMPUTER Administrative
Templates\System\Group Policy
CSE_Registry Registry policy processing HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{35378EAC-683F-11D2-A89A-
00C04FBBCFA2}!NoBackgroundPolicy,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{35378EAC-683F-11D2-A89A-
00C04FBBCFA2}!NoGPOListChanges
COMPUTER Administrative
Templates\System\Group Policy
CSE_Scripts Scripts policy processing HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{42B5FAAE-6536-11d2-AE5A-
0000F87571E3}!NoSlowLink,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{42B5FAAE-6536-11d2-AE5A-
0000F87571E3}!NoBackgroundPolicy,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{42B5FAAE-6536-11d2-AE5A-
0000F87571E3}!NoGPOListChanges
COMPUTER Administrative
Templates\System\Group Policy
CSE_Security Security policy processing HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{827D319E-6EAC-11D2-A4EA-
00C04F79F83A}!NoBackgroundPolicy,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{827D319E-6EAC-11D2-A4EA-
00C04F79F83A}!NoGPOListChanges
COMPUTER Administrative
Templates\System\Group Policy
CSE_Wireless Wireless policy processing HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{0ACDD40C-75AC-47ab-BAA0-
Active Directory Training Seminar: Group Policy Programming/Registry Reference
20 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
BF6DE7E7FE63}!NoSlowLink,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{0ACDD40C-75AC-47ab-BAA0-
BF6DE7E7FE63}!NoBackgroundPolicy,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{0ACDD40C-75AC-47ab-BAA0-
BF6DE7E7FE63}!NoGPOListChanges
COMPUTER Administrative
Templates\System\Group Policy
DenyRsopToInteractiveUser Disallow Interactive Users
from generating Resultant
Set of Policy data
HKLM\Software\Policies\Microsoft\Windows\System!Den
yRsopToInteractiveUser
COMPUTER Administrative
Templates\System\Group Policy
DisableBackgroundPolicy Turn off background refresh
of Group Policy
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!DisableBkGndGroupPolicy
COMPUTER Administrative
Templates\System\Group Policy
DisableUsersFromMachGP Remove users ability to
invoke machine policy
refresh
HKLM\Software\Policies\Microsoft\Windows\System!Den
yUsersFromMachGP
COMPUTER Administrative
Templates\System\Group Policy
GPTransferRate Group Policy slow link
detection
HKLM\Software\Policies\Microsoft\Windows\System!Gro
upPolicyMinTransferRate
COMPUTER Administrative
Templates\System\Group Policy
GroupPolicyRefreshRate Group Policy refresh interval
for computers
HKLM\Software\Policies\Microsoft\Windows\System!Gro
upPolicyRefreshTime,
HKLM\Software\Policies\Microsoft\Windows\System!Gro
upPolicyRefreshTimeOffset
COMPUTER Administrative
Templates\System\Group Policy
GroupPolicyRefreshRateDC Group Policy refresh interval
for domain controllers
HKLM\Software\Policies\Microsoft\Windows\System!Gro
upPolicyRefreshTimeDC,
HKLM\Software\Policies\Microsoft\Windows\System!Gro
upPolicyRefreshTimeOffsetDC
COMPUTER Administrative
Templates\System\Group Policy
OnlyUseLocalAdminFiles Always use local ADM files
for Group Policy Object
Editor
HKLM\Software\Policies\Microsoft\Windows\Group
Policy!OnlyUseLocalAdminFiles
COMPUTER Administrative
Templates\System\Group Policy
RSoPLogging Turn off Resultant Set of
Policy logging
HKLM\Software\Policies\Microsoft\Windows\System!RSo
PLogging
COMPUTER Administrative
Templates\System\Group Policy
UserPolicyMode User Group Policy loopback
processing mode
HKLM\Software\Policies\Microsoft\Windows\System!Use
rPolicyMode
COMPUTER Administrative
Templates\System\Internet
InternetManagement_RestrictCommu
nication
Restrict Internet
communication
HKLM\Software\Policies\Microsoft\InternetManagement!
RestrictCommunication,
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 21
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Communication Management HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoPublishingWizard,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoWebServices,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoOnlinePrintsWizard,
HKLM\Software\Policies\Microsoft\Messenger\Client!CEI
P,
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!He
adlines,
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Mi
crosoftKBSearch,
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing!DoReport,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoInternetOpenWith,
HKLM\Software\Policies\Microsoft\Windows\Internet
Connection Wizard!ExitOnMSICW,
HKLM\Software\Policies\Microsoft\EventViewer!Microsoft
EventVwrDisableLinks,
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificate
s\AuthRoot!DisableRootAutoUpdate,
HKLM\Software\Policies\Microsoft\Windows\Registration
Wizard Control!NoRegistration,
HKLM\Software\Policies\Microsoft\SearchCompanion!Di
sableContentFileUpdates,
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableHTTPPrinting,
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableWebPnPDownload,
HKLM\Software\Policies\Microsoft\Windows\DriverSearc
hing!DontSearchWindowsUpdate,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date!DisableWindowsUpdateAccess,
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
CodecDownload,
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
WebHelp,
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
WebPublish,
Active Directory Training Seminar: Group Policy Programming/Registry Reference
22 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoPublishingWizard,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoWebServices,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoOnlinePrintsWizard,
HKLM\Software\Policies\Microsoft\Messenger\Client!CEI
P,
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!He
adlines,
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Mi
crosoftKBSearch,
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing!DoReport,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoInternetOpenWith,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!NoAutoUpdate,
HKLM\Software\Policies\Microsoft\Windows\Internet
Connection Wizard!ExitOnMSICW,
HKLM\Software\Policies\Microsoft\EventViewer!Microsoft
EventVwrDisableLinks,
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificate
s\AuthRoot!DisableRootAutoUpdate,
HKLM\Software\Policies\Microsoft\Windows\Registration
Wizard Control!NoRegistration,
HKLM\Software\Policies\Microsoft\SearchCompanion!Di
sableContentFileUpdates,
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableHTTPPrinting,
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableWebPnPDownload,
HKLM\Software\Policies\Microsoft\Windows\DriverSearc
hing!DontSearchWindowsUpdate,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date!DisableWindowsUpdateAccess,
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
CodecDownload,
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
WebHelp,
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 23
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
WebPublish
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
CertMgr_DisableAutoRootUpdates Turn off Automatic Root
Certificates Update
HKLM\Software\Policies\Microsoft\SystemCertificates\Au
thRoot!DisableRootAutoUpdate
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
DisableHTTPPrinting Turn off printing over HTTP HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableHTTPPrinting
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
DisableWebPnPDownload Turn off downloading of print
drivers over HTTP
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableWebPnPDownload
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
DriverSearchPlaces_DontSearchWin
dowsUpdate
Turn off Windows Update
device driver searching
HKLM\Software\Policies\Microsoft\Windows\DriverSearc
hing!DontSearchWindowsUpdate
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
EventViewer_DisableLinks Turn off Event Viewer
Events.asp links
HKLM\Software\Policies\Microsoft\EventViewer!Microsoft
EventVwrDisableLinks
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
HSS_HeadlinesPolicy Turn off Help and Support
Center Did you know?
content
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!He
adlines
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
HSS_KBSearchPolicy Turn off Help and Support
Center Microsoft Knowledge
Base search
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Mi
crosoftKBSearch
Active Directory Training Seminar: Group Policy Programming/Registry Reference
24 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Communication settings
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
MovieMaker_PreventCodecDownload Turn off Windows Movie
Maker automatic codec
downloads
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
CodecDownload
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
MovieMaker_PreventWebHelp Turn off Windows Movie
Maker online Web links
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
WebHelp
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
MovieMaker_PreventWebPublish Turn off Windows Movie
Maker saving to online video
hosting provider
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
WebPublish
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
NC_ExitOnISP Turn off Internet Connection
Wizard if URL connection is
referring to Microsoft.com
HKLM\Software\Policies\Microsoft\Windows\Internet
Connection Wizard!ExitOnMSICW
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
NC_NoRegistration Turn off Registration if URL
connection is referring to
Microsoft.com
HKLM\Software\Policies\Microsoft\Windows\Registration
Wizard Control!NoRegistration
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
PCH_DoNotReport Turn off Windows Error
Reporting
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReport
ing!DoReport
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
RemoveWindowsUpdate_ICM Turn off access to all
Windows Update features
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date!DisableWindowsUpdateAccess
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 25
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
SearchCompanion_DisableFileUpdat
es
Turn off Search Companion
content file updates
HKLM\Software\Policies\Microsoft\SearchCompanion!Di
sableContentFileUpdates
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
ShellNoUseInternetOpenWith Turn off Internet File
Association service
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoInternetOpenWith
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
ShellPreventWPWDownload Turn off Internet download
for Web publishing and
online ordering wizards
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoWebServices
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
ShellRemoveOrderPrints Turn off the Order Prints
picture task
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoOnlinePrintsWizard
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
ShellRemovePublishToWeb Turn off the Publish to Web
task for files and folders
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoPublishingWizard
COMPUTER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
WinMSG_NoInstrumentation Turn off the Windows
Messenger Customer
Experience Improvement
Program
HKLM\Software\Policies\Microsoft\Messenger\Client!CEI
P
COMPUTER Administrative
Templates\System\Logon
DisableExplorerRunLegacy Do not process the legacy
run list
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!DisableLocalMachineRun
COMPUTER Administrative
Templates\System\Logon
DisableExplorerRunOnceLegacy Do not process the run once
list
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!DisableLocalMachineRunOnce
COMPUTER Administrative LogonType Always use classic logon HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Active Directory Training Seminar: Group Policy Programming/Registry Reference
26 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Templates\System\Logon ies\System!LogonType
COMPUTER Administrative
Templates\System\Logon
NoWelcomeTips Don't display the Getting
Started welcome screen at
logon
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoWelcomeScreen
COMPUTER Administrative
Templates\System\Logon
Run Run these programs at user
logon
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer\Run!{1,2,3,...}
COMPUTER Administrative
Templates\System\Logon
SyncForegroundPolicy Always wait for the network
at computer startup and
logon
HKLM\Software\Policies\Microsoft\Windows
NT\CurrentVersion\Winlogon!SyncForegroundPolicy
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_AvoidPdcOnWan Contact PDC on logon
failure
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
AvoidPdcOnWan
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_BackgroundRetryInitialPeri
od
Initial DC Discovery Retry
Setting for Background
Callers
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
BackgroundRetryInitialPeriod
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_BackgroundRetryMaximum
Period
Maximum DC Discovery
Retry Interval Setting for
Background Callers
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
BackgroundRetryMaximumPeriod
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_BackgroundRetryQuitTime Final DC Discovery Retry
Setting for Background
Callers
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
BackgroundRetryQuitTime
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_BackgroundSuccessfulRefr
eshPeriod
Positive Periodic DC Cache
Refresh for Background
Callers
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
BackgroundSuccessfulRefreshPeriod
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_DebugFlag Log File Debug Output Level HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
dbFlag
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_ExpectedDialupDelay Expected dial-up delay on
logon
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
ExpectedDialupDelay
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_MaximumLogFileSize Maximum Log File Size HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
MaximumLogFileSize
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_NegativeCachePeriod Negative DC Discovery
Cache Setting
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
NegativeCachePeriod
COMPUTER Administrative Netlogon_NetlogonShareCompatibilit Netlogon share compatibility HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 27
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Templates\System\Net Logon yMode AllowExclusiveScriptsShareAccess
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_NonBackgroundSuccessful
RefreshPeriod
Positive Periodic DC Cache
Refresh for Non-Background
Callers
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
NonBackgroundSuccessfulRefreshPeriod
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_ScavengeInterval Scavenge Interval HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
ScavengeInterval
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_SiteName Site Name HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
SiteName
COMPUTER Administrative
Templates\System\Net Logon
Netlogon_SysvolShareCompatibilityM
ode
Sysvol share compatibility HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
AllowExclusiveSysvolShareAccess
COMPUTER Administrative
Templates\System\Net Logon\DC
Locator DNS Records
Netlogon_AllowSingleLabelDnsDoma
in
Location of the DCs hosting
a domain with single label
DNS name
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
AllowSingleLabelDnsDomain
COMPUTER Administrative
Templates\System\Net Logon\DC
Locator DNS Records
Netlogon_AutoSiteCoverage Automated Site Coverage by
the DC Locator DNS SRV
Records
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
AutoSiteCoverage
COMPUTER Administrative
Templates\System\Net Logon\DC
Locator DNS Records
Netlogon_DnsAvoidRegisterRecords DC Locator DNS records not
registered by the DCs
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
DnsAvoidRegisterRecords
COMPUTER Administrative
Templates\System\Net Logon\DC
Locator DNS Records
Netlogon_DnsRefreshInterval Refresh Interval of the DC
Locator DNS Records
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
DnsRefreshInterval
COMPUTER Administrative
Templates\System\Net Logon\DC
Locator DNS Records
Netlogon_DnsTtl TTL Set in the DC Locator
DNS Records
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
DnsTtl
COMPUTER Administrative
Templates\System\Net Logon\DC
Locator DNS Records
Netlogon_GcSiteCoverage Sites Covered by the GC
Locator DNS SRV Records
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
GcSiteCoverage
COMPUTER Administrative
Templates\System\Net Logon\DC
Locator DNS Records
Netlogon_LdapSrvPriority Priority Set in the DC
Locator DNS SRV Records
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
LdapSrvPriority
COMPUTER Administrative
Templates\System\Net Logon\DC
Netlogon_LdapSrvWeight Weight Set in the DC
Locator DNS SRV Records
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
LdapSrvWeight
Active Directory Training Seminar: Group Policy Programming/Registry Reference
28 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Locator DNS Records
COMPUTER Administrative
Templates\System\Net Logon\DC
Locator DNS Records
Netlogon_NdncSiteCoverage Sites Covered by the
Application Directory
Partition Locator DNS SRV
Records
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
NdncSiteCoverage
COMPUTER Administrative
Templates\System\Net Logon\DC
Locator DNS Records
Netlogon_SiteCoverage Sites Covered by the DC
Locator DNS SRV Records
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
SiteCoverage
COMPUTER Administrative
Templates\System\Net Logon\DC
Locator DNS Records
Netlogon_UseDynamicDns Dynamic Registration of the
DC Locator DNS Records
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!
UseDynamicDns
COMPUTER Administrative
Templates\System\Remote
Assistance
RA_Solicit Solicited Remote Assistance HKLM\Software\policies\Microsoft\Windows NT\Terminal
Services!fAllowToGetHelp,
HKLM\Software\policies\Microsoft\Windows NT\Terminal
Services!fAllowFullControl,
HKLM\Software\policies\Microsoft\Windows NT\Terminal
Services!MaxTicketExpiry,
HKLM\Software\policies\Microsoft\Windows NT\Terminal
Services!MaxTicketExpiryUnits,
HKLM\Software\policies\Microsoft\Windows NT\Terminal
Services!fUseMailto
COMPUTER Administrative
Templates\System\Remote
Assistance
RA_Unsolicit Offer Remote Assistance HKLM\Software\policies\Microsoft\Windows NT\Terminal
Services!fAllowUnsolicited,
HKLM\Software\policies\Microsoft\Windows NT\Terminal
Services!fAllowUnsolicitedFullControl
COMPUTER Administrative
Templates\System\Remote
Procedure Call
RpcEnableAuthEpResolution RPC Endpoint Mapper
Client Authentication
HKLM\Software\Policies\Microsoft\Windows
NT\Rpc\MinimumConnectionTimeout!EnableAuthEpRes
olution
COMPUTER Administrative
Templates\System\Remote
Procedure Call
RpcExtendedErrorInformation Propagation of extended
error information
HKLM\Software\Policies\Microsoft\Windows
NT\Rpc!ExtErrorInformation,
HKLM\Software\Policies\Microsoft\Windows
NT\Rpc!ExtErrorInfoExceptions
COMPUTER Administrative
Templates\System\Remote
Procedure Call
RpcIgnoreDelegationFailure Ignore Delegation Failure HKLM\Software\Policies\Microsoft\Windows
NT\Rpc\IgnoreDelegationFailure!IgnoreDelegationFailure
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 29
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative
Templates\System\Remote
Procedure Call
RpcMinimumHttpConnectionTimeout Minimum Idle Connection
Timeout for RPC/HTTP
connections
HKLM\Software\Policies\Microsoft\Windows
NT\Rpc\MinimumConnectionTimeout!MinimumConnectio
nTimeout
COMPUTER Administrative
Templates\System\Remote
Procedure Call
RpcRestrictRemoteClients Restrictions for
Unauthenticated RPC clients
HKLM\Software\Policies\Microsoft\Windows
NT\Rpc\MinimumConnectionTimeout!RestrictRemoteClie
nts
COMPUTER Administrative
Templates\System\Remote
Procedure Call
RpcStateInformation RPC Troubleshooting State
Information
HKLM\Software\Policies\Microsoft\Windows
NT\Rpc!StateInformation
COMPUTER Administrative
Templates\System\Scripts
MaxGPOScriptWaitPolicy Maximum wait time for
Group Policy scripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!MaxGPOScriptWait
COMPUTER Administrative
Templates\System\Scripts
Run_Logon_Script_Sync Run logon scripts
synchronously
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!RunLogonScriptSync
COMPUTER Administrative
Templates\System\Scripts
Run_Shutdown_Script_Visible Run shutdown scripts visible HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!HideShutdownScripts
COMPUTER Administrative
Templates\System\Scripts
Run_Startup_Script_Sync Run startup scripts
asynchronously
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!RunStartupScriptSync
COMPUTER Administrative
Templates\System\Scripts
Run_Startup_Script_Visible Run startup scripts visible HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!HideStartupScripts
COMPUTER Administrative
Templates\System\System Restore
SR_DisableConfig Turn off Configuration HKLM\Software\Policies\Microsoft\Windows
NT\SystemRestore!DisableConfig
COMPUTER Administrative
Templates\System\System Restore
SR_DisableSR Turn off System Restore HKLM\Software\Policies\Microsoft\Windows
NT\SystemRestore!DisableSR
COMPUTER Administrative
Templates\System\User Profiles
AddAdminGroupToRUP Add the Administrators
security group to roaming
user profiles
HKLM\Software\Policies\Microsoft\Windows\System!Add
AdminGroupToRUP
COMPUTER Administrative
Templates\System\User Profiles
CompatibleRUPSecurity Do not check for user
ownership of Roaming
Profile Folders
HKLM\Software\Policies\Microsoft\Windows\System!Co
mpatibleRUPSecurity
COMPUTER Administrative
Templates\System\User Profiles
DeleteRoamingCachedProfiles Delete cached copies of
roaming profiles
HKLM\Software\Policies\Microsoft\Windows\System!Del
eteRoamingCache
COMPUTER Administrative EnableSlowLinkDetect Do not detect slow network HKLM\Software\Policies\Microsoft\Windows\System!Slo
Active Directory Training Seminar: Group Policy Programming/Registry Reference
30 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Templates\System\User Profiles connections wLinkDetectEnabled
COMPUTER Administrative
Templates\System\User Profiles
EnableSlowLinkUI Prompt user when slow link
is detected
HKLM\Software\Policies\Microsoft\Windows\System!Slo
wLinkUIEnabled
COMPUTER Administrative
Templates\System\User Profiles
LeaveAppMgmtData Leave Windows Installer and
Group Policy Software
Installation Data
HKLM\Software\Policies\Microsoft\Windows\System!Lea
veAppMgmtData
COMPUTER Administrative
Templates\System\User Profiles
LocalProfile Only allow local user profiles HKLM\Software\Policies\Microsoft\Windows\System!Loc
alProfile
COMPUTER Administrative
Templates\System\User Profiles
ProfileDlgTimeOut Timeout for dialog boxes HKLM\Software\Policies\Microsoft\Windows\System!Prof
ileDlgTimeOut
COMPUTER Administrative
Templates\System\User Profiles
ProfileErrorAction Log users off when roaming
profile fails
HKLM\Software\Policies\Microsoft\Windows\System!Prof
ileErrorAction
COMPUTER Administrative
Templates\System\User Profiles
ProfileUnloadTimeout Maximum retries to unload
and update user profile
HKLM\Software\Policies\Microsoft\Windows\System!Prof
ileUnloadTimeout
COMPUTER Administrative
Templates\System\User Profiles
Readonlyuserprofile Prevent Roaming Profile
changes from propagating to
the server
HKLM\Software\Policies\Microsoft\Windows\System!Rea
dOnlyProfile
COMPUTER Administrative
Templates\System\User Profiles
SlowLinkDefault Wait for remote user profile HKLM\Software\Policies\Microsoft\Windows\System!Slo
wLinkProfileDefault
COMPUTER Administrative
Templates\System\User Profiles
SlowLinkTimeOut Slow network connection
timeout for user profiles
HKLM\Software\Policies\Microsoft\Windows\System!Use
rProfileMinTransferRate,
HKLM\Software\Policies\Microsoft\Windows\System!Slo
wLinkTimeOut
COMPUTER Administrative
Templates\System\Windows File
Protection
WFPDllCacheDir Specify Windows File
Protection cache location
HKLM\Software\Policies\Microsoft\Windows
NT\Windows File Protection!SFCDllCacheDir
COMPUTER Administrative
Templates\System\Windows File
Protection
WFPQuota Limit Windows File
Protection cache size
HKLM\Software\Policies\Microsoft\Windows
NT\Windows File Protection!SfcQuota
COMPUTER Administrative
Templates\System\Windows File
Protection
WFPScan Set Windows File Protection
scanning
HKLM\Software\Policies\Microsoft\Windows
NT\Windows File Protection!SfcScan
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 31
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative
Templates\System\Windows File
Protection
WFPShowProgress Hide the file scan progress
window
HKLM\Software\Policies\Microsoft\Windows
NT\Windows File Protection!SfcShowProgress
COMPUTER Administrative
Templates\System\Windows Time
Service
W32TIME_POLICY_CONFIG Global Configuration
Settings
HKLM\Software\Policies\Microsoft\W32Time\Config!Freq
uencyCorrectRate,
HKLM\Software\Policies\Microsoft\W32Time\Config!Hold
Period,
HKLM\Software\Policies\Microsoft\W32Time\Config!Larg
ePhaseOffset,
HKLM\Software\Policies\Microsoft\W32Time\Config!Max
AllowedPhaseOffset,
HKLM\Software\Policies\Microsoft\W32Time\Config!Max
NegPhaseCorrection,
HKLM\Software\Policies\Microsoft\W32Time\Config!Max
PosPhaseCorrection,
HKLM\Software\Policies\Microsoft\W32Time\Config!Pha
seCorrectRate,
HKLM\Software\Policies\Microsoft\W32Time\Config!Poll
AdjustFactor,
HKLM\Software\Policies\Microsoft\W32Time\Config!Spik
eWatchPeriod,
HKLM\Software\Policies\Microsoft\W32Time\Config!Upd
ateInterval,
HKLM\Software\Policies\Microsoft\W32Time\Config!Ann
ounceFlags,
HKLM\Software\Policies\Microsoft\W32Time\Config!Eve
ntLogFlags,
HKLM\Software\Policies\Microsoft\W32Time\Config!Loca
lClockDispersion,
HKLM\Software\Policies\Microsoft\W32Time\Config!Max
PollInterval,
HKLM\Software\Policies\Microsoft\W32Time\Config!Min
PollInterval
COMPUTER Administrative
Templates\System\Windows Time
Service\Time Providers
W32TIME_POLICY_CONFIGURE_N
TPCLIENT
Configure Windows NTP
Client
HKLM\Software\Policies\Microsoft\W32time\Parameters!
NtpServer,
HKLM\Software\Policies\Microsoft\W32time\Parameters!
Type,
HKLM\Software\Policies\Microsoft\W32time\Parameters!
CrossSiteSyncFlags,
Active Directory Training Seminar: Group Policy Programming/Registry Reference
32 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
HKLM\Software\Policies\Microsoft\W32time\Parameters!
ResolvePeerBackoffMinutes,
HKLM\Software\Policies\Microsoft\W32time\Parameters!
ResolvePeerBackoffMaxTimes,
HKLM\Software\Policies\Microsoft\W32time\Parameters!
SpecialPollInterval,
HKLM\Software\Policies\Microsoft\W32time\Parameters!
EventLogFlags
COMPUTER Administrative
Templates\System\Windows Time
Service\Time Providers
W32TIME_POLICY_ENABLE_NTPC
LIENT
Enable Windows NTP Client HKLM\Software\Policies\Microsoft\W32time\TimeProvide
rs\NtpClient!Enabled
COMPUTER Administrative
Templates\System\Windows Time
Service\Time Providers
W32TIME_POLICY_ENABLE_NTPS
ERVER
Enable Windows NTP
Server
HKLM\Software\Policies\Microsoft\W32Time\TimeProvid
ers\NtpServer!Enabled
COMPUTER Administrative
Templates\Temporary Internet Files
(Machine)
COMPUTER Administrative
Templates\Temporary Internet Files
(Machine)
UserProfiles
COMPUTER Administrative
Templates\Unsupported
Administrative Templates
SystemOnlyPolicy Windows.adm HKLM\Software\Policies
COMPUTER Administrative
Templates\Unsupported
Administrative Templates
SystemOnlyPolicyFileCommon Common.adm HKLM\Software\Policies
COMPUTER Administrative
Templates\Unsupported
Administrative Templates
SystemOnlyPolicyFileWinnt Winnt.adm HKLM\Software\Policies
COMPUTER Administrative Templates\Windows
95 Network\Access control
COMPUTER Administrative Templates\Windows
95 Network\Dial-up networking
RemoteAccess_Disable Disable dial-in HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoDialIn
COMPUTER Administrative Templates\Windows DisableFileSharing Disable file sharing HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 33
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
95 Network\File and printer sharing ies\Network!NoFileSharing
COMPUTER Administrative Templates\Windows
95 Network\File and printer sharing
DisablePrintSharing Disable printer sharing HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoPrintSharing
COMPUTER Administrative Templates\Windows
95 Network\File and Printer Sharing
for NetWare Networks
DisableSAP Disable SAP advertising
COMPUTER Administrative Templates\Windows
95 Network\Logon
AutomaticLogon Allow logon without name or
password
HKLM\Software\Microsoft\Windows\CurrentVersion\Winl
ogon!Default Password
COMPUTER Administrative Templates\Windows
95 Network\Logon
COMPUTER Administrative Templates\Windows
95 Network\Logon
ValidatedLogon Require validation by
network for Windows access
HKLM\Network\Logon!MustBeValidated
COMPUTER Administrative Templates\Windows
95 Network\Microsoft Client for
Windows networks
AlternateWorkgroup Alternate workgroup HKLM\System\CurrentControlSet\Services\VxD\VREDIR
!Workgroup
COMPUTER Administrative Templates\Windows
95 Network\Microsoft Client for
Windows networks
LogonDomain Log on to Windows NT
COMPUTER Administrative Templates\Windows
95 Network\Microsoft Client for
Windows networks
Workgroup Workgroup HKLM\System\CurrentControlSet\Services\VxD\VNETS
UP!Workgroup
COMPUTER Administrative Templates\Windows
95 Network\Microsoft Client Service
for NetWare networks
DisableAutoNWLogin Disable automatic NetWare
login
HKLM\System\CurrentControlSet\Services\NWNP32\Net
workProvider!DisableDefaultPasswords
COMPUTER Administrative Templates\Windows
95 Network\Microsoft Client Service
for NetWare networks
PrefServer Preferred server HKLM\System\CurrentControlSet\Services\NWNP32\Net
workProvider!AuthenticatingAgent
COMPUTER Administrative Templates\Windows
95 Network\Microsoft Client Service
for NetWare networks
SearchMode Search mode HKLM\System\CurrentControlSet\Services\NWNP32\Net
workProvider!SearchMode
COMPUTER Administrative Templates\Windows
95 Network\Microsoft Client Service
for NetWare networks
SupportLFN Support long filenames HKLM\System\CurrentControlSet\Services\NWNP32\Net
workProvider!SupportLFN
Active Directory Training Seminar: Group Policy Programming/Registry Reference
34 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative Templates\Windows
95 Network\Passwords
DisablePasswordCaching Disable password caching HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!DisablePwdCaching
COMPUTER Administrative Templates\Windows
95 Network\Passwords
HideSharePasswords Hide share passwords with
asterisks
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!HideSharePwds
COMPUTER Administrative Templates\Windows
95 Network\Passwords
MinimumPwdLen Min Windows password
length
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!MinPwdLen
COMPUTER Administrative Templates\Windows
95 Network\Passwords
RequireAlphaNum Require alphanumeric
Windows password
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!AlphanumPwds
COMPUTER Administrative Templates\Windows
95 System\Network paths
NetworkSetupPath Network path for Windows
setup
HKLM\Software\Microsoft\Windows\CurrentVersion\Setu
p!SourcePath
COMPUTER Administrative Templates\Windows
95 System\Network paths
NetworkTourPath Network path for Windows
tour
HKLM\Software\Microsoft\Windows\CurrentVersion\Setu
p!TourPath
COMPUTER Administrative Templates\Windows
95 System\Profiles
EnableUserProfiles Enable user profiles HKLM\Network\Logon!UserProfiles
COMPUTER Administrative Templates\Windows
95 System\SNMP
COMPUTER Administrative Templates\Windows
Components\Application
Compatibility
AppCompatPrevent16BitMach Prevent access to 16-bit
applications
HKLM\Software\Policies\Microsoft\Windows\AppCompat!
VDMDisallowed
COMPUTER Administrative Templates\Windows
Components\Application
Compatibility
AppCompatRemoveProgramCompat
PropPage
Remove Program
Compatibility Property Page
HKLM\Software\Policies\Microsoft\Windows\AppCompat!
DisablePropPage
COMPUTER Administrative Templates\Windows
Components\Application
Compatibility
AppCompatTurnOffAppLogEvents Turn On Application Help
Log Events
HKLM\Software\Policies\Microsoft\Windows\AppCompat!
LogAppHelpEvents
COMPUTER Administrative Templates\Windows
Components\Application
Compatibility
AppCompatTurnOffEngine Turn Off Application
Compatibility Engine
HKLM\Software\Policies\Microsoft\Windows\AppCompat!
DisableEngine
COMPUTER Administrative Templates\Windows
Components\Application
Compatibility
AppCompatTurnOffProgramCompat
Wizard
Turn Off Program
Compatibility Wizard
HKLM\Software\Policies\Microsoft\Windows\AppCompat!
DisableWizard
COMPUTER Administrative Templates\Windows EventViewer_RedirectionProgram Events.asp program HKLM\Software\Policies\Microsoft\EventViewer!Microsoft
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 35
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Components\Event Viewer RedirectionProgram
COMPUTER Administrative Templates\Windows
Components\Event Viewer
EventViewer_RedirectionProgramCo
mmandLineParameters
Events.asp program
command line parameters
HKLM\Software\Policies\Microsoft\EventViewer!Microsoft
RedirectionProgramCommandLineParameters
COMPUTER Administrative Templates\Windows
Components\Event Viewer
EventViewer_RedirectionURL Events.asp URL HKLM\Software\Policies\Microsoft\EventViewer!Microsoft
RedirectionURL
COMPUTER Administrative Templates\Windows
Components\Internet Explorer
NoJITSetup Disable Automatic Install of
Internet Explorer
components
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoJITSetup
COMPUTER Administrative Templates\Windows
Components\Internet Explorer
NoSplash Disable showing the splash
screen
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoSplash
COMPUTER Administrative Templates\Windows
Components\Internet Explorer
NoUpdateCheck Disable Periodic Check for
Internet Explorer software
updates
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoUpdateCheck
COMPUTER Administrative Templates\Windows
Components\Internet Explorer
Security_HKLM_only Security Zones: Use only
machine settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Security_HKLM_only
COMPUTER Administrative Templates\Windows
Components\Internet Explorer
Security_options_edit Security Zones: Do not allow
users to change policies
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Security_options_edit
COMPUTER Administrative Templates\Windows
Components\Internet Explorer
Security_zones_map_edit Security Zones: Do not allow
users to add/delete sites
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Security_zones_map_edit
COMPUTER Administrative Templates\Windows
Components\Internet Explorer
ShellNotifications Disable software update
shell notifications on
program launch
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoMSAppLogo5ChannelNotify
COMPUTER Administrative Templates\Windows
Components\Internet Explorer
UserProxy Make proxy settings per-
machine (rather than per-
user)
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!ProxySettingsPerUser
COMPUTER Administrative Templates\Windows
Components\Internet Information
Services
PreventIISInstall Prevent IIS installation HKLM\Software\Policies\Microsoft\Windows
NT\IIS!PreventIISInstall
COMPUTER Administrative Templates\Windows
Components\NetMeeting
DisableRDS Disable remote Desktop
Sharing
HKLM\Software\Policies\Microsoft\Conferencing!NoRDS
COMPUTER Administrative Templates\Windows
Components\Security Center
SecurityCenter_SecurityCenterInDom
ain
Turn on Security Center
(Domain PCs only)
HKLM\Software\Policies\Microsoft\Windows NT\Security
Center!SecurityCenterInDomain
Active Directory Training Seminar: Group Policy Programming/Registry Reference
36 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative Templates\Windows
Components\Task Scheduler
AllowBrowse Prohibit Browse HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Allow Browse
COMPUTER Administrative Templates\Windows
Components\Task Scheduler
DisableAdvanced Hide Advanced Properties
Checkbox in Add Scheduled
Task Wizard
HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Disable Advanced
COMPUTER Administrative Templates\Windows
Components\Task Scheduler
DragAndDrop Prohibit Drag-and-Drop HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!DragAndDrop
COMPUTER Administrative Templates\Windows
Components\Task Scheduler
Execution Prevent Task Run or End HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Execution
COMPUTER Administrative Templates\Windows
Components\Task Scheduler
PropertyPages Hide Property Pages HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Property Pages
COMPUTER Administrative Templates\Windows
Components\Task Scheduler
TaskCreation Prohibit New Task Creation HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Task Creation
COMPUTER Administrative Templates\Windows
Components\Task Scheduler
TaskDeletion Prohibit Task Deletion HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Task Deletion
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_AUTO_RECONNECT Automatic reconnection HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fDisableAutoReconnect
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_COLORDEPTH Limit maximum color depth HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!ColorDepth
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_DISABLE_CONNECTIONS Allow users to connect
remotely using Terminal
Services
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fDenyTSConnections,
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fDenyTSConnections
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_DISABLE_REMOTE_DESKTOP_
WALLPAPER
Enforce Removal of Remote
Desktop Wallpaper
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fNoRemoteDesktopWallpaper
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_FORCIBLE_LOGOFF Deny log off of an
administrator logged in to
the console session
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fDisableForcibleLogoff
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_KEEP_ALIVE Keep-Alive Connections HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!KeepAliveEnable,
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!KeepAliveInterval
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 37
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_LICENSE_SERVERS Use these License Servers HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!LicenseServers
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_LICENSE_SERVERS Use these License Servers HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!LicenseServers
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_MAX_CON_POLICY Limit number of connections HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!MaxInstanceCount
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_NoDisconnectMenu Remove Disconnect option
from Shut Down dialog
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoDisconnect
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_NoSecurityMenu Remove Windows Security
item from Start menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoNTSecurity
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_RemoteControl Sets rules for remote control
of Terminal Services user
sessions
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!Shadow
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_SINGLE_SESSION Restrict Terminal Services
users to a single remote
session
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fSingleSessionPerUser
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_START_PROGRAM Start a program on
connection
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!InitialProgram,
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!WorkDirectory
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_TSCC_PERMISSIONS_POLICY Do not allow local
administrators to customize
permissions
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fWritableTSCCPermTab
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_USER_HOME TS User Home Directory HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!WFHomeDirUNC,
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!WFHomeDir,
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!WFHomeDirDrive
COMPUTER Administrative Templates\Windows
Components\Terminal Services
TS_USER_PROFILES Set path for TS Roaming
Profiles
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!WFProfilePath
COMPUTER Administrative Templates\Windows
Components\Terminal
TS_CLIENT_DISABLE_PASSWORD
_SAVING
Do not allow passwords to
be saved
HKLM\Software\Policies\Microsoft\Windows NT\Terminal
Services!DisablePasswordSaving
Active Directory Training Seminar: Group Policy Programming/Registry Reference
38 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Services\Client
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Client/Server data
redirection
TS_CLIENT_AUDIO Allow audio redirection HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fDisableCam
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Client/Server data
redirection
TS_CLIENT_CLIPBOARD Do not allow clipboard
redirection
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fDisableClip
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Client/Server data
redirection
TS_CLIENT_COM Do not allow COM port
redirection
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fDisableCcm
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Client/Server data
redirection
TS_CLIENT_DEFAULT_M Do not set default client
printer to be default printer in
a session
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fForceClientLptDef
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Client/Server data
redirection
TS_CLIENT_DRIVE_M Do not allow drive
redirection
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fDisableCdm
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Client/Server data
redirection
TS_CLIENT_LPT Do not allow LPT port
redirection
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fDisableLPT
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Client/Server data
redirection
TS_CLIENT_PRINTER Do not allow client printer
redirection
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fDisableCpm
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Client/Server data
redirection
TS_FALLBACKPRINTDRIVERTYPE Terminal Server Fallback
Printer Driver Behavior
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fPolicyFallbackPrintDriver,
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!FallbackPrintDriverType
COMPUTER Administrative Templates\Windows
Components\Terminal
TS_FALLBACKPRINTDRIVERTYPE Terminal Server Fallback HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fPolicyFallbackPrintDriver,
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 39
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Services\Client/Server data
redirection
Printer Driver Behavior HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!FallbackPrintDriverType
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Client/Server data
redirection
TS_SMART_CARD Do not allow smart card
device redirection
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fEnableSmartCard
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Client/Server data
redirection
TS_TIME_ZONE Allow Time Zone Redirection HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fEnableTimeZoneRedirection
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Encryption and Security
TS_ENCRYPTION_POLICY Set client connection
encryption level
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!MinEncryptionLevel
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Encryption and Security
TS_PASSWORD Always prompt client for
password upon connection
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fPromptForPassword
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Encryption and
Security\RPC Security Policy
TS_RPC_ENCRYPTION Secure Server (Require
Security)
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fEncryptRPCTraffic
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Licensing
TS_LICENSE_SECGROUP License Server Security
Group
HKLM\Software\Policies\Microsoft\Windows NT\Terminal
Services!fSecureLicensing
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Licensing
TS_PreventLicenseUpgrade Prevent License Upgrade HKLM\Software\Policies\Microsoft\Windows NT\Terminal
Services!fPreventLicenseUpgrade
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Session Directory
TS_JOIN_SESSION_DIRECTORY Join Session Directory HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!SessionDirectoryActive
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Session Directory
TS_SD_ClustName Session Directory Cluster
Name
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!SessionDirectoryClusterName
COMPUTER Administrative Templates\Windows
Components\Terminal
TS_SD_EXPOSE_ADDRESS Terminal Server IP Address
Redirection
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!SessionDirectoryExposeServerIP
Active Directory Training Seminar: Group Policy Programming/Registry Reference
40 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Services\Session Directory
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Session Directory
TS_SD_Loc Session Directory Server HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!SessionDirectoryLocation
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Sessions
TS_Session_End_On_Limit Terminate session when
time limits are reached
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fResetBroken
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Sessions
TS_Sessions_Disconnected_Timeout Set time limit for
disconnected sessions
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!MaxDisconnectionTime VALUE 0,
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!MaxDisconnectionTime
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Sessions
TS_Sessions_Idle_Limit Sets a time limit for active
but idle Terminal Services
sessions
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!MaxIdleTime
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Sessions
TS_Sessions_Limits Sets a time limit for active
Terminal Services sessions
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!MaxConnectionTime
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Sessions
TS_Sessions_Reconnect_Same Allow reconnection from
original client only
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fReconnectSame
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Temporary folders
TS_TEMP_DELETE Do not delete temp folder
upon exit
HKLM\Software\Policies\Microsoft\Windows NT\Terminal
Services!DeleteTempDirsOnExit
COMPUTER Administrative Templates\Windows
Components\Terminal
Services\Temporary folders
TS_TEMP_PER_SESSION Do not use temp folders per
session
HKLM\Software\Policies\Microsoft\Windows NT\Terminal
Services!PerSessionTempDir
COMPUTER Administrative Templates\Windows
Components\Windows Installer
AllowLockdownBrowse Enable user to browse for
source while elevated
HKLM\Software\Policies\Microsoft\Windows\Installer!Allo
wLockdownBrowse
COMPUTER Administrative Templates\Windows
Components\Windows Installer
AllowLockdownMedia Enable user to use media
source while elevated
HKLM\Software\Policies\Microsoft\Windows\Installer!Allo
wLockdownMedia
COMPUTER Administrative Templates\Windows
Components\Windows Installer
AllowLockdownPatch Enable user to patch
elevated products
HKLM\Software\Policies\Microsoft\Windows\Installer!Allo
wLockdownPatch
COMPUTER Administrative Templates\Windows AlwaysInstallElevated Always install with elevated HKLM\Software\Policies\Microsoft\Windows\Installer!Alw
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 41
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Components\Windows Installer privileges aysInstallElevated
COMPUTER Administrative Templates\Windows
Components\Windows Installer
DisableBrowse Remove browse dialog box
for new source
HKLM\Software\Policies\Microsoft\Windows\Installer!Dis
ableBrowse
COMPUTER Administrative Templates\Windows
Components\Windows Installer
DisableMSI Disable Windows Installer HKLM\Software\Policies\Microsoft\Windows\Installer!Dis
ableMSI
COMPUTER Administrative Templates\Windows
Components\Windows Installer
DisablePatch Prohibit patching HKLM\Software\Policies\Microsoft\Windows\Installer!Dis
ablePatch
COMPUTER Administrative Templates\Windows
Components\Windows Installer
DisableRollback Prohibit rollback HKLM\Software\Policies\Microsoft\Windows\Installer!Dis
ableRollback
COMPUTER Administrative Templates\Windows
Components\Windows Installer
EnableAdminTSRemote Allow admin to install from
Terminal Services session
HKLM\Software\Policies\Microsoft\Windows\Installer!Ena
bleAdminTSRemote
COMPUTER Administrative Templates\Windows
Components\Windows Installer
EnableUserControl Enable user control over
installs
HKLM\Software\Policies\Microsoft\Windows\Installer!Ena
bleUserControl
COMPUTER Administrative Templates\Windows
Components\Windows Installer
MSI_DisableLUAPatching Prohibit non-administrators
from applying vendor signed
updates
HKLM\Software\Policies\Microsoft\Windows\Installer!Dis
ableLUAPatching
COMPUTER Administrative Templates\Windows
Components\Windows Installer
MSI_DisablePatchUninstall Prohibit removal of updates HKLM\Software\Policies\Microsoft\Windows\Installer!Dis
ablePatchUninstall
COMPUTER Administrative Templates\Windows
Components\Windows Installer
MSI_DisableSRCheckPoints Turn off creation of System
Restore Checkpoints
HKLM\Software\Policies\Microsoft\Windows\Installer!Limi
tSystemRestoreCheckpointing
COMPUTER Administrative Templates\Windows
Components\Windows Installer
MSI_DisableUserInstalls Prohibit User Installs HKLM\Software\Policies\Microsoft\Windows\Installer!Dis
ableUserInstalls
COMPUTER Administrative Templates\Windows
Components\Windows Installer
MSI_EnforceUpgradeComponentRul
es
Enforce upgrade component
rules
HKLM\Software\Policies\Microsoft\Windows\Installer!Enf
orceUpgradeComponentRules
COMPUTER Administrative Templates\Windows
Components\Windows Installer
MSI_MaxPatchCacheSize Baseline file cache
maximum size
HKLM\Software\Policies\Microsoft\Windows\Installer!Ma
xPatchCacheSize
COMPUTER Administrative Templates\Windows
Components\Windows Installer
MSILogging Logging HKLM\Software\Policies\Microsoft\Windows\Installer!Log
ging
COMPUTER Administrative Templates\Windows
Components\Windows Installer
SafeForScripting Disable IE security prompt
for Windows Installer scripts
HKLM\Software\Policies\Microsoft\Windows\Installer!Saf
eForScripting
COMPUTER Administrative Templates\Windows TransformsSecure Cache transforms in secure HKLM\Software\Policies\Microsoft\Windows\Installer!Tra
Active Directory Training Seminar: Group Policy Programming/Registry Reference
42 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Components\Windows Installer location on workstation nsformsSecure
COMPUTER Administrative Templates\Windows
Components\Windows Media Digital
Rights Management
DisableOnline Prevent Windows Media
DRM Internet Access
HKLM\Software\Policies\Microsoft\WMDRM!DisableOnli
ne
COMPUTER Administrative Templates\Windows
Components\Windows Media Player
DisableAutoUpdate Prevent Automatic Updates HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
DisableAutoUpdate
COMPUTER Administrative Templates\Windows
Components\Windows Media Player
DisableSetupFirstUseConfiguration Do Not Show First Use
Dialog Boxes
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
GroupPrivacyAcceptance
COMPUTER Administrative Templates\Windows
Components\Windows Media Player
DontUseFrameInterpolation Prevent Video Smoothing HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
DontUseFrameInterpolation
COMPUTER Administrative Templates\Windows
Components\Windows Media Player
PreventQuickLaunchShortcut Prevent Quick Launch
Toolbar Shortcut Creation
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
QuickLaunchShortcut
COMPUTER Administrative Templates\Windows
Components\Windows Media Player
PreventWMPDeskTopShortcut Prevent Desktop Shortcut
Creation
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
DesktopShortcut
COMPUTER Administrative Templates\Windows
Components\Windows Messenger
WinMSG_NoAutoStartWindowsMsg_
Comp
Do not automatically start
Windows Messenger initially
HKLM\Software\Policies\Microsoft\Messenger\Client!Pre
ventAutoRun
COMPUTER Administrative Templates\Windows
Components\Windows Messenger
WinMSG_NoWindowsMsg_Comp Do not allow Windows
Messenger to be run
HKLM\Software\Policies\Microsoft\Messenger\Client!Pre
ventRun
COMPUTER Administrative Templates\Windows
Components\Windows Movie Maker
MovieMaker_Disable Do not allow Windows Movie
Maker to run
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
MovieMaker
COMPUTER Administrative Templates\Windows
Components\Windows Update
AutoUpdateCfg Configure Automatic
Updates
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!NoAutoUpdate,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!AUOptions,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!ScheduledInstallDay,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!ScheduledInstallTime
COMPUTER Administrative Templates\Windows
Components\Windows Update
CorpWuURL Specify intranet Microsoft
update service location
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!UseWUServer,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!UseWUServer,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!WUServer,
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 43
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!WUStatusServer
COMPUTER Administrative Templates\Windows
Components\Windows Update
DetectionFrequency_Title Automatic Updates detection
frequency
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!DetectionFrequencyEnabled,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!DetectionFrequency
COMPUTER Administrative Templates\Windows
Components\Windows Update
ElevateNonAdmins_Title Allow non-administrators to
receive update notifications
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date!ElevateNonAdmins
COMPUTER Administrative Templates\Windows
Components\Windows Update
ImmediateInstall_Title Allow Automatic Updates
immediate installation
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!AutoInstallMinorUpdates
COMPUTER Administrative Templates\Windows
Components\Windows Update
NoAutoRebootWithLoggedOnUsers_
Title
No auto-restart for
scheduled Automatic
Updates installations
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!NoAutoRebootWithLoggedOnUsers
COMPUTER Administrative Templates\Windows
Components\Windows Update
RebootRelaunchTimeout_Title Re-prompt for restart with
scheduled installations
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!RebootRelaunchTimeoutEnabled,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!RebootRelaunchTimeout
COMPUTER Administrative Templates\Windows
Components\Windows Update
RebootWarningTimeout_Title Delay Restart for scheduled
installations
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!RebootWarningTimeoutEnabled,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!RebootWarningTimeout
COMPUTER Administrative Templates\Windows
Components\Windows Update
RescheduleWaitTime_Title Reschedule Automatic
Updates scheduled
installations
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!RescheduleWaitTimeEnabled,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date\AU!RescheduleWaitTime
COMPUTER Administrative Templates\Windows
Components\Windows Update
TargetGroup_Title Enable client-side targeting HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date!TargetGroupEnabled,
HKLM\Software\Policies\Microsoft\Windows\WindowsUp
date!TargetGroup
COMPUTER Administrative Templates\Windows
NT Network\Sharing
ServerShareAutoCreate Create hidden drive shares
(server)
HKLM\System\CurrentControlSet\Services\LanManServ
er\Parameters!AutoShareServer
COMPUTER Administrative Templates\Windows
NT Network\Sharing
WorkstationShareAutoCreate Create hidden drive shares
(workstation)
HKLM\System\CurrentControlSet\Services\LanManServ
er\Parameters!AutoShareWks
Active Directory Training Seminar: Group Policy Programming/Registry Reference
44 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
COMPUTER Administrative Templates\Windows
NT Printers
Beep_Enabled Beep for error enabled HKLM\System\CurrentControlSet\Control\Print!BeepEna
bled
COMPUTER Administrative Templates\Windows
NT Printers
PrintManager_Browser_Restrict Disable browse thread on
this computer
HKLM\System\CurrentControlSet\Control\Print!DisableS
erverThread
COMPUTER Administrative Templates\Windows
NT Printers
Scheduler_Thread_Priority Scheduler priority HKLM\System\CurrentControlSet\Control\Print!Schedule
rThreadPriority
COMPUTER Administrative Templates\Windows
NT Remote Access
Auto_Disconnect Auto Disconnect HKLM\System\CurrentControlSet\Services\RemoteAcce
ss\Parameters!AutoDisconnect
COMPUTER Administrative Templates\Windows
NT Remote Access
CallBackTime Wait interval for callback HKLM\System\CurrentControlSet\Services\RemoteAcce
ss\Parameters!CallbackTime
COMPUTER Administrative Templates\Windows
NT Remote Access
MaximumRetries Max number of unsuccessful
authentication retries
HKLM\System\CurrentControlSet\Services\RemoteAcce
ss\Parameters!AuthenticateRetries
COMPUTER Administrative Templates\Windows
NT Remote Access
MaximumTime Max time limit for
authentication
HKLM\System\CurrentControlSet\Services\RemoteAcce
ss\Parameters!AuthenticateTime
COMPUTER Administrative Templates\Windows
NT Shell\Custom shared folders
COMPUTER Administrative Templates\Windows
NT Shell\Custom shared folders
CustomFolders_SharedStartup Custom shared Startup
folder
HKLM\Software\Microsoft\Windows\CurrentVersion\Expl
orer\User Shell Folders!Common Startup
COMPUTER Administrative Templates\Windows
NT System\File system
AllowExtCharsIn8dot3 Allow extended characters in
8.3 file names
HKLM\System\CurrentControlSet\Control\FileSystem!Ntf
sAllowExtendedCharacterIn8dot3Name
COMPUTER Administrative Templates\Windows
NT System\File system
Disable8dot3Names Do not create 8.3 file names
for long file names
HKLM\System\CurrentControlSet\Control\FileSystem!Ntf
sDisable8dot3NameCreation
COMPUTER Administrative Templates\Windows
NT System\File system
DisableLastUpdate Do not update last access
time
HKLM\System\CurrentControlSet\Control\FileSystem!Ntf
sDisableLastAccessUpdate
COMPUTER Administrative Templates\Windows
NT System\Logon
LastUserName_Restrict Do not display last logged
on user name
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon!DontDisplayLastUserName
COMPUTER Administrative Templates\Windows
NT System\Logon
COMPUTER Administrative Templates\Windows
NT System\Logon
Run_Logon_Script_Sync Run logon scripts
synchronously.
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon!RunLogonScriptSync
COMPUTER Administrative Templates\Windows Shutdown_Restrict Enable shutdown from HKLM\Software\Microsoft\Windows
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 45
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
NT System\Logon Authentication dialog box NT\CurrentVersion\Winlogon!ShutdownWithoutLogon
COMPUTER Administrative Templates\Windows
NT User Profiles
ChooseProfileDefault Choose profile default
operation
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\winlogon!ChooseProfileDefault
COMPUTER Administrative Templates\Windows
NT User Profiles
DeleteRoamingCachedProfiles Delete cached copies of
roaming profiles
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\winlogon!DeleteRoamingCache
COMPUTER Administrative Templates\Windows
NT User Profiles
EnableSlowLinkDetect Automatically detect slow
network connections
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\winlogon!SlowLinkDetectEnabled
COMPUTER Administrative Templates\Windows
NT User Profiles
ProfileDlgTimeOut Timeout for dialog boxes HKLM\Software\Microsoft\Windows
NT\CurrentVersion\winlogon!ProfileDlgTimeOut
COMPUTER Administrative Templates\Windows
NT User Profiles
SlowLinkDefault Slow network default profile
operation
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\winlogon!SlowLinkProfileDefault
COMPUTER Administrative Templates\Windows
NT User Profiles
SlowLinkTimeOut Slow network connection
timeout
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\winlogon!SlowLinkTimeOut
USER Administrative Templates\Advanced
settings
Browsing Browsing
USER Administrative Templates\Advanced
settings
USER Administrative Templates\Advanced
settings
ICWSettings Internet Connection Wizard
Settings
HKLM\Software\Microsoft\Internet Connection
Wizard!Completed
USER Administrative Templates\Advanced
settings
MJVM Microsoft VM HKLM\Software\Microsoft\Java VM!EnableLogging,
HKLM\Software\Microsoft\Java VM!EnableJIT
USER Administrative Templates\Advanced
settings
ModemSettings Connection HKLM\Software\Microsoft\Windows\CurrentVersion\Inter
net Settings!EnableAutodial
USER Administrative Templates\Advanced
settings
Multimedia
USER Administrative Templates\Advanced
settings
Printing Printing HKLM\Software\Microsoft\Java VM!Print_Background
USER Administrative Templates\Advanced
settings
USER Administrative Templates\Advanced
settings
Security Security
Active Directory Training Seminar: Group Policy Programming/Registry Reference
46 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Advanced
settings
SignupSettings Signup Settings HKLM\Software\Microsoft\IEAK!NoAutomaticSignup
USER Administrative
Templates\AutoComplete
AutoCompletePol AutoComplete Settings
USER Administrative Templates\Control
Panel
DisallowCpls Hide specified Control Panel
applets
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!DisallowCpl,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer\DisallowCpl!{1,2,3,...}
USER Administrative Templates\Control
Panel
ForceClassicControlPanel Force classic Control Panel
Style
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer\RestrictCpl!ForceClassicControlPanel
USER Administrative Templates\Control
Panel
NoControlPanel Prohibit access to the
Control Panel
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoControlPanel
USER Administrative Templates\Control
Panel
RestrictCpls Show only specified Control
Panel applets
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!RestrictCpl,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer\RestrictCpl!{1,2,3,...}
USER Administrative Templates\Control
Panel\Add or Remove Programs
DefaultCategory Specify default category for
Add New Programs
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Uninstall!DefaultCategory
USER Administrative Templates\Control
Panel\Add or Remove Programs
NoAddFromCDorFloppy Hide the Add a program
from CD-ROM or floppy disk
option
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Uninstall!NoAddFromCDorFloppy
USER Administrative Templates\Control
Panel\Add or Remove Programs
NoAddFromInternet Hide the Add programs from
Microsoft option
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Uninstall!NoAddFromInternet
USER Administrative Templates\Control
Panel\Add or Remove Programs
NoAddFromNetwork Hide the Add programs from
your network option
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Uninstall!NoAddFromNetwork
USER Administrative Templates\Control
Panel\Add or Remove Programs
NoAddPage Hide Add New Programs
page
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Uninstall!NoAddPage
USER Administrative Templates\Control
Panel\Add or Remove Programs
NoAddRemovePrograms Remove Add or Remove
Programs
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Uninstall!NoAddRemovePrograms
USER Administrative Templates\Control
Panel\Add or Remove Programs
NoChooseProgramsPage Hide the Set Program
Access and Defaults page
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Uninstall!NoChooseProgramsPage
USER Administrative Templates\Control NoRemovePage Hide Change or Remove HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 47
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Panel\Add or Remove Programs Programs page ies\Uninstall!NoRemovePage
USER Administrative Templates\Control
Panel\Add or Remove Programs
NoServices Go directly to Components
Wizard
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Uninstall!NoServices
USER Administrative Templates\Control
Panel\Add or Remove Programs
NoSupportInfo Remove Support Information HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Uninstall!NoSupportInfo
USER Administrative Templates\Control
Panel\Add or Remove Programs
NoWindowsSetupPage Hide Add/Remove Windows
Components page
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Uninstall!NoWindowsSetupPage
USER Administrative Templates\Control
Panel\Display
CPL_Display_Disable Remove Display in Control
Panel
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!NoDispCPL
USER Administrative Templates\Control
Panel\Display
CPL_Display_HideAppearance Hide Appearance and
Themes tab
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop!NoDispAppearancePage
USER Administrative Templates\Control
Panel\Display
CPL_Display_HideBkgnd Hide Desktop tab HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!NoDispBackgroundPage
USER Administrative Templates\Control
Panel\Display
CPL_Display_HideScrsav Hide Screen Saver tab HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop!NoDispScrSavPage
USER Administrative Templates\Control
Panel\Display
CPL_Display_HideSettings Hide Settings tab HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop!NoDispSettingsPage
USER Administrative Templates\Control
Panel\Display
CPL_Display_Restrict Restrict display
USER Administrative Templates\Control
Panel\Display
ScreenSaverActive Screen Saver HKLM\Software\Policies\Microsoft\Windows\Control
Panel\Desktop!ScreenSaveActive
USER Administrative Templates\Control
Panel\Display
ScreenSaverFilename Screen Saver executable
name
HKLM\Software\Policies\Microsoft\Windows\Control
Panel\Desktop!SCRNSAVE.EXE
USER Administrative Templates\Control
Panel\Display
ScreenSaverIsSecure Password protect the screen
saver
HKLM\Software\Policies\Microsoft\Windows\Control
Panel\Desktop!ScreenSaverIsSecure
USER Administrative Templates\Control
Panel\Display
ScreenSaverTimeOut Screen Saver timeout HKLM\Software\Policies\Microsoft\Windows\Control
Panel\Desktop!ScreenSaveTimeOut
USER Administrative Templates\Control
Panel\Display
sz_DWP_DisableChanges Prevent changing wallpaper HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop!NoChangingWallPaper
USER Administrative Templates\Control
Panel\Display\Desktop Themes
Themes_Disable_Color_Select Prohibit Theme color
selection
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!NoColorChoice
Active Directory Training Seminar: Group Policy Programming/Registry Reference
48 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Control
Panel\Display\Desktop Themes
Themes_Disable_Options Remove Theme option HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoThemesTab
USER Administrative Templates\Control
Panel\Display\Desktop Themes
Themes_Disable_VisualStyle Prevent selection of
windows and buttons styles
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!NoVisualStyleChoice
USER Administrative Templates\Control
Panel\Display\Desktop Themes
Themes_Load_Theme Load a specific visual style
file or force Windows Classic
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!SetVisualStyle
USER Administrative Templates\Control
Panel\Display\Desktop Themes
Themes_Lock_Themesize Prohibit selection of font size HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!NoSizeChoice
USER Administrative Templates\Control
Panel\Printers
DownlevelBrowse Browse the network to find
printers
HKLM\Software\Policies\Microsoft\Windows
NT\Printers\Wizard!Downlevel Browse
USER Administrative Templates\Control
Panel\Printers
IntranetPrintersUrl Browse a common web site
to find printers
HKLM\Software\Policies\Microsoft\Windows
NT\Printers\Wizard!Printers Page URL
USER Administrative Templates\Control
Panel\Printers
NoAddPrinter Prevent addition of printers HKLM\Software\Policies\Microsoft\Windows
NT\Printers\PointAndPrint!NoAddPrinter
USER Administrative Templates\Control
Panel\Printers
NoDeletePrinter Prevent deletion of printers HKLM\Software\Policies\Microsoft\Windows
NT\Printers\PointAndPrint!NoDeletePrinter
USER Administrative Templates\Control
Panel\Printers
PointAndPrint_Restrictions Point and Print Restrictions HKLM\Software\Policies\Microsoft\Windows
NT\Printers\PointAndPrint!Restricted,
HKLM\Software\Policies\Microsoft\Windows
NT\Printers\PointAndPrint!InForest,
HKLM\Software\Policies\Microsoft\Windows
NT\Printers\PointAndPrint!TrustedServers,
HKLM\Software\Policies\Microsoft\Windows
NT\Printers\PointAndPrint!ServerList
USER Administrative Templates\Control
Panel\Printers
PrinterDirectorySearchScope Default Active Directory path
when searching for printers
HKLM\Software\Policies\Microsoft\Windows
NT\Printers\Wizard!Default Search Scope
USER Administrative Templates\Control
Panel\Regional and Language
Options
RestrictUILangSelect Restrict selection of
Windows menus and dialogs
language
HKLM\Software\Policies\Microsoft\Control
Panel\Desktop!MultiUILanguageID
USER Administrative Templates\Desktop ColorScheme Color scheme HKLM\Control Panel\Appearance!Current
USER Administrative Templates\Desktop DisablePersonalDirChange Prohibit user from changing
My Documents path
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!DisablePersonalDirChange
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 49
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Desktop NoDesktop Hide and disable all items on
the desktop
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoDesktop
USER Administrative Templates\Desktop NoDesktopCleanupWizard Remove the Desktop
Cleanup Wizard
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoDesktopCleanupWizard
USER Administrative Templates\Desktop NoInternetIcon Hide Internet Explorer icon
on desktop
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoInternetIcon
USER Administrative Templates\Desktop NoMyComputerIcon Remove My Computer icon
on the desktop
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\NonEnum!{20D04FE0-3AEA-1069-A2D8-
08002B30309D}
USER Administrative Templates\Desktop NoMyDocumentsIcon Remove My Documents icon
on the desktop
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\NonEnum!{450D8FBA-AD25-11D0-98A8-
0800361B1103}
USER Administrative Templates\Desktop NoNetHood Hide My Network Places
icon on desktop
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoNetHood
USER Administrative Templates\Desktop NoPropertiesMyComputer Remove Properties from the
My Computer context menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoPropertiesMyComputer
USER Administrative Templates\Desktop NoPropertiesMyDocuments Remove Properties from the
My Documents context
menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoPropertiesMyDocuments
USER Administrative Templates\Desktop NoRecentDocsNetHood Do not add shares of
recently opened documents
to My Network Places
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoRecentDocsNetHood
USER Administrative Templates\Desktop NoRecycleBinIcon Remove Recycle Bin icon
from desktop
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\NonEnum!{645FF040-5081-101B-9F08-
00AA002F954E}
USER Administrative Templates\Desktop NoRecycleBinProperties Remove Properties from the
Recycle Bin context menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoPropertiesRecycleBin
USER Administrative Templates\Desktop NoSaveSettings Don't save settings at exit HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSaveSettings
USER Administrative Templates\Desktop sz_DB_DragDropClose Prevent adding, dragging,
dropping and closing the
Taskbar's toolbars
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoCloseDragDropBands
Active Directory Training Seminar: Group Policy Programming/Registry Reference
50 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Desktop sz_DB_Moving Prohibit adjusting desktop
toolbars
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoMovingBands
USER Administrative Templates\Desktop Wallpaper Wallpaper HKLM\Control Panel\Desktop!Wallpaper, HKLM\Control
Panel\Desktop!TileWallpaper
USER Administrative
Templates\Desktop\Active Desktop
ForceActiveDesktopOn Enable Active Desktop HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!ForceActiveDesktopOn
USER Administrative
Templates\Desktop\Active Desktop
NoActiveDesktop Disable Active Desktop HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoActiveDesktop
USER Administrative
Templates\Desktop\Active Desktop
NoActiveDesktopChanges Prohibit changes HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoActiveDesktopChanges
USER Administrative
Templates\Desktop\Active Desktop
sz_AdminComponents_Title Add/Delete items HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop\AdminComponent!Add,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop\AdminComponent!Delete
USER Administrative
Templates\Desktop\Active Desktop
sz_ATC_DisableAdd Prohibit adding items HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop!NoAddingComponents
USER Administrative
Templates\Desktop\Active Desktop
sz_ATC_DisableClose Prohibit closing items HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop!NoClosingComponents
USER Administrative
Templates\Desktop\Active Desktop
sz_ATC_DisableDel Prohibit deleting items HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop!NoDeletingComponents
USER Administrative
Templates\Desktop\Active Desktop
sz_ATC_DisableEdit Prohibit editing items HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop!NoEditingComponents
USER Administrative
Templates\Desktop\Active Desktop
sz_ATC_NoComponents Disable all items HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop!NoComponents
USER Administrative
Templates\Desktop\Active Desktop
sz_DWP_NoHTMLPaper Allow only bitmapped
wallpaper
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\ActiveDesktop!NoHTMLWallPaper
USER Administrative
Templates\Desktop\Active Desktop
Wallpaper Active Desktop Wallpaper HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!Wallpaper,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!WallpaperStyle
USER Administrative
Templates\Desktop\Active Directory
AD_EnableFilter Enable filter in Find dialog
box
HKLM\Software\Policies\Microsoft\Windows\Directory
UI!EnableFilter
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 51
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative
Templates\Desktop\Active Directory
AD_HideDirectoryFolder Hide Active Directory folder HKLM\Software\Policies\Microsoft\Windows\Directory
UI!HideDirectoryFolder
USER Administrative
Templates\Desktop\Active Directory
AD_QueryLimit Maximum size of Active
Directory searches
HKLM\Software\Policies\Microsoft\Windows\Directory
UI!QueryLimit
USER Administrative Templates\Display
settings
FontSize Text Size HKLM\Software\Microsoft\Internet
Explorer\International\Scripts!Default_IEFontSize
USER Administrative Templates\Display
settings
GeneralColors General Colors
USER Administrative Templates\Display
settings
LinkColors Link colors
USER Administrative Templates\IE
Maintenance Only
IEAKOnlyPolicy INETCORP.ADM HKLM\Software\Policies
USER Administrative
Templates\Network\Network
Connections
NC_AddRemoveComponents Prohibit adding and
removing components for a
LAN or remote access
connection
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_AddRemoveComponents
USER Administrative
Templates\Network\Network
Connections
NC_AdvancedSettings Prohibit access to the
Advanced Settings item on
the Advanced menu
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_AdvancedSettings
USER Administrative
Templates\Network\Network
Connections
NC_AllowAdvancedTCPIPConfig Prohibit TCP/IP advanced
configuration
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_AllowAdvancedTCPIPConfig
USER Administrative
Templates\Network\Network
Connections
NC_ChangeBindState Prohibit Enabling/Disabling
components of a LAN
connection
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_ChangeBindState
USER Administrative
Templates\Network\Network
Connections
NC_DeleteAllUserConnection Ability to delete all user
remote access connections
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_DeleteAllUserConnection
USER Administrative
Templates\Network\Network
Connections
NC_DeleteConnection Prohibit deletion of remote
access connections
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_DeleteConnection
USER Administrative
Templates\Network\Network
NC_DialupPrefs Prohibit access to the
Remote Access Preferences
HKLM\Software\Policies\Microsoft\Windows\Network
Active Directory Training Seminar: Group Policy Programming/Registry Reference
52 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Connections item on the Advanced menu Connections!NC_DialupPrefs
USER Administrative
Templates\Network\Network
Connections
NC_EnableAdminProhibits Enable Windows 2000
Network Connections
settings for Administrators
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_EnableAdminProhibits
USER Administrative
Templates\Network\Network
Connections
NC_LanChangeProperties Prohibit access to properties
of components of a LAN
connection
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_LanChangeProperties
USER Administrative
Templates\Network\Network
Connections
NC_LanConnect Ability to Enable/Disable a
LAN connection
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_LanConnect
USER Administrative
Templates\Network\Network
Connections
NC_LanProperties Prohibit access to properties
of a LAN connection
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_LanProperties
USER Administrative
Templates\Network\Network
Connections
NC_NewConnectionWizard Prohibit access to the New
Connection Wizard
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_NewConnectionWizard
USER Administrative
Templates\Network\Network
Connections
NC_RasAllUserProperties Ability to change properties
of an all user remote access
connection
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_RasAllUserProperties
USER Administrative
Templates\Network\Network
Connections
NC_RasChangeProperties Prohibit access to properties
of components of a remote
access connection
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_RasChangeProperties
USER Administrative
Templates\Network\Network
Connections
NC_RasConnect Prohibit connecting and
disconnecting a remote
access connection
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_RasConnect
USER Administrative
Templates\Network\Network
Connections
NC_RasMyProperties Prohibit changing properties
of a private remote access
connection
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_RasMyProperties
USER Administrative
Templates\Network\Network
Connections
NC_RenameAllUserRasConnection Ability to rename all user
remote access connections
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_RenameAllUserRasConnection
USER Administrative
Templates\Network\Network
NC_RenameConnection Ability to rename LAN
connections or remote
access connections
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_RenameConnection
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 53
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Connections available to all users
USER Administrative
Templates\Network\Network
Connections
NC_RenameLanConnection Ability to rename LAN
connections
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_RenameLanConnection
USER Administrative
Templates\Network\Network
Connections
NC_RenameMyRasConnection Prohibit renaming private
remote access connections
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_RenameMyRasConnection
USER Administrative
Templates\Network\Network
Connections
NC_Statistics Prohibit viewing of status for
an active connection
HKLM\Software\Policies\Microsoft\Windows\Network
Connections!NC_Statistics
USER Administrative
Templates\Network\Offline Files
DisableFRAdminPin Do not automatically make
redirected folders available
offline
HKLM\Software\Policies\Microsoft\Windows\NetCache\N
oMakeAvailableOfflineList!DisableFRAdminPin
USER Administrative
Templates\Network\Offline Files
Pol_AssignedOfflineFiles Administratively assigned
offline files
HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders
USER Administrative
Templates\Network\Offline Files
Pol_CustomGoOfflineActions Non-default server
disconnect actions
HKLM\Software\Policies\Microsoft\Windows\NetCache\C
ustomGoOfflineActions
USER Administrative
Templates\Network\Offline Files
Pol_EventLoggingLevel Event logging level HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!EventLoggingLevel
USER Administrative
Templates\Network\Offline Files
Pol_GoOfflineAction Action on server disconnect HKLM\Software\Policies\Microsoft\Windows\NetCache!G
oOfflineAction
USER Administrative
Templates\Network\Offline Files
Pol_NoCacheViewer Prevent use of Offline Files
folder
HKLM\Software\Policies\Microsoft\Windows\NetCache\C
ustomGoOfflineActions!NoCacheViewer
USER Administrative
Templates\Network\Offline Files
Pol_NoConfigCache Prohibit user configuration of
Offline Files
HKLM\Software\Policies\Microsoft\Windows\NetCache!N
oConfigCache
USER Administrative
Templates\Network\Offline Files
Pol_NoMakeAvailableOffline Remove 'Make Available
Offline'
HKLM\Software\Policies\Microsoft\Windows\NetCache\C
ustomGoOfflineActions!NoMakeAvailableOffline
USER Administrative
Templates\Network\Offline Files
Pol_NoPinFiles Prohibit 'Make Available
Offline' for these file and
folders
HKLM\Software\Policies\Microsoft\Windows\NetCache\N
oMakeAvailableOfflineList
USER Administrative
Templates\Network\Offline Files
Pol_NoReminders Turn off reminder balloons HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!NoReminders
Active Directory Training Seminar: Group Policy Programming/Registry Reference
54 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative
Templates\Network\Offline Files
Pol_ReminderFreq Reminder balloon frequency HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!ReminderFreqMinutes
USER Administrative
Templates\Network\Offline Files
Pol_ReminderInitTimeout Initial reminder balloon
lifetime
HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!InitialBalloonTimeoutSeconds
USER Administrative
Templates\Network\Offline Files
Pol_ReminderTimeout Reminder balloon lifetime HKLM\Software\Policies\Microsoft\Windows\NetCache\A
ssignedOfflineFolders!ReminderBalloonTimeoutSeconds
USER Administrative
Templates\Network\Offline Files
Pol_SyncAtLogoff Synchronize all offline files
before logging off
HKLM\Software\Policies\Microsoft\Windows\NetCache!S
yncAtLogoff
USER Administrative
Templates\Network\Offline Files
Pol_SyncAtLogon Synchronize all offline files
when logging on
HKLM\Software\Policies\Microsoft\Windows\NetCache!S
yncAtLogon
USER Administrative
Templates\Network\Offline Files
Pol_SyncAtSuspend Synchronize offline files
before suspend
HKLM\Software\Policies\Microsoft\Windows\NetCache!S
yncAtSuspend
USER Administrative Templates\Shared
Folders
PublishDfsRoots Allow DFS roots to be
published
HKLM\Software\Policies\Microsoft\Windows
NT\SharedFolders!PublishDfsRoots
USER Administrative Templates\Shared
Folders
PublishSharedFolders Allow shared folders to be
published
HKLM\Software\Policies\Microsoft\Windows
NT\SharedFolders!PublishSharedFolders
USER Administrative
Templates\Shell\Restrictions
DisableClose Remove Shut Down
command from Start menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoClose
USER Administrative
Templates\Shell\Restrictions
HideDesktop Hide all items on desktop HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoDesktop
USER Administrative
Templates\Shell\Restrictions
HideDrives Hide drives in My Computer HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoDrives
USER Administrative
Templates\Shell\Restrictions
HideNetHood Hide Network Neighborhood HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoNetHood
USER Administrative
Templates\Shell\Restrictions
NoEntireNetwork No Entire Network in
Network Neighborhood
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoEntireNetwork
USER Administrative
Templates\Shell\Restrictions
NoSaveSettings Don't save settings at exit HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoSaveSettings
USER Administrative
Templates\Shell\Restrictions
NoWorkgroupContents No workgroup contents in
Network Neighborhood
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoWorkgroupContents
USER Administrative RemoveFind Remove Find command HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 55
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Templates\Shell\Restrictions from Start menu ies\Explorer!NoFind
USER Administrative
Templates\Shell\Restrictions
RemoveFolders Remove folders from
Settings on Start menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSetFolders
USER Administrative
Templates\Shell\Restrictions
RemoveRun Remove Run command from
Start menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoRun
USER Administrative
Templates\Shell\Restrictions
RemoveTaskbar Remove Taskbar from
Settings on Start menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSetTaskbar
USER Administrative Templates\Start
Menu and Taskbar
ClearRecentDocsOnExit Clear history of recently
opened documents on exit
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!ClearRecentDocsOnExit
USER Administrative Templates\Start
Menu and Taskbar
ForceStartMenuLogOff Add Logoff to the Start Menu HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!ForceStartMenuLogOff
USER Administrative Templates\Start
Menu and Taskbar
GreyMSIAds Gray unavailable Windows
Installer programs Start
Menu shortcuts
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!GreyMSIAds
USER Administrative Templates\Start
Menu and Taskbar
Intellimenus Turn off personalized menus HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Intellimenus
USER Administrative Templates\Start
Menu and Taskbar
LockTaskbar Lock the Taskbar HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!LockTaskbar
USER Administrative Templates\Start
Menu and Taskbar
MemCheckBoxInRunDlg Add Run in Separate
Memory Space check box to
Run dialog box
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!MemCheckBoxInRunDlg
USER Administrative Templates\Start
Menu and Taskbar
NoAutoTrayNotify Turn off notification area
cleanup
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoAutoTrayNotify
USER Administrative Templates\Start
Menu and Taskbar
NoBalloonTip Remove Balloon Tips on
Start Menu items
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSMBalloonTip
USER Administrative Templates\Start
Menu and Taskbar
NoChangeStartMenu Remove Drag-and-drop
context menus on the Start
Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoChangeStartMenu
USER Administrative Templates\Start
Menu and Taskbar
NoClose Remove and prevent access
to the Shut Down command
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoClose
USER Administrative Templates\Start
Menu and Taskbar
NoCommonGroups Remove common program
groups from Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoCommonGroups
Active Directory Training Seminar: Group Policy Programming/Registry Reference
56 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Start
Menu and Taskbar
NoFavoritesMenu Remove Favorites menu
from Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoFavoritesMenu
USER Administrative Templates\Start
Menu and Taskbar
NoFind Remove Search menu from
Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoFind
USER Administrative Templates\Start
Menu and Taskbar
NoFrequentUsedPrograms Remove frequent programs
list from the Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoStartMenuMFUprogramsList
USER Administrative Templates\Start
Menu and Taskbar
NoHelp Remove Help menu from
Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSMHelp
USER Administrative Templates\Start
Menu and Taskbar
NoInstrumentation Turn off user tracking HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoInstrumentation
USER Administrative Templates\Start
Menu and Taskbar
NoMoreProgramsList Remove All Programs list
from the Start menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoStartMenuMorePrograms
USER Administrative Templates\Start
Menu and Taskbar
NoNetAndDialupConnect Remove Network
Connections from Start
Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoNetworkConnections
USER Administrative Templates\Start
Menu and Taskbar
NoPinnedPrograms Remove pinned programs
list from the Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoStartMenuPinnedList
USER Administrative Templates\Start
Menu and Taskbar
NoRecentDocsHistory Do not keep history of
recently opened documents
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoRecentDocsHistory
USER Administrative Templates\Start
Menu and Taskbar
NoRecentDocsMenu Remove Documents menu
from Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoRecentDocsMenu
USER Administrative Templates\Start
Menu and Taskbar
NoResolveSearch Do not use the search-
based method when
resolving shell shortcuts
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoResolveSearch
USER Administrative Templates\Start
Menu and Taskbar
NoResolveTrack Do not use the tracking-
based method when
resolving shell shortcuts
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoResolveTrack
USER Administrative Templates\Start
Menu and Taskbar
NoRun Remove Run menu from
Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoRun
USER Administrative Templates\Start
Menu and Taskbar
NoSetFolders Remove programs on
Settings menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSetFolders
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 57
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Start
Menu and Taskbar
NoSetTaskbar Prevent changes to Taskbar
and Start Menu Settings
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSetTaskbar
USER Administrative Templates\Start
Menu and Taskbar
NoSMConfigurePrograms Remove Set Program
Access and Defaults from
Start menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSMConfigurePrograms
USER Administrative Templates\Start
Menu and Taskbar
NoSMMyDocuments Remove My Documents icon
from Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSMMyDocs
USER Administrative Templates\Start
Menu and Taskbar
NoSMMyMusic Remove My Music icon from
Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoStartMenuMyMusic
USER Administrative Templates\Start
Menu and Taskbar
NoSMMyNetworkPlaces Remove My Network Places
icon from Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoStartMenuNetworkPlaces
USER Administrative Templates\Start
Menu and Taskbar
NoSMMyPictures Remove My Pictures icon
from Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSMMyPictures
USER Administrative Templates\Start
Menu and Taskbar
NoStartMenuSubFolders Remove user's folders from
the Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoStartMenuSubFolders
USER Administrative Templates\Start
Menu and Taskbar
NoStartPage Force classic Start Menu HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSimpleStartMenu
USER Administrative Templates\Start
Menu and Taskbar
NoTaskBarClock Remove Clock from the
system notification area
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!HideClock
USER Administrative Templates\Start
Menu and Taskbar
NoTaskGrouping Prevent grouping of taskbar
items
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoTaskGrouping
USER Administrative Templates\Start
Menu and Taskbar
NoToolbarsOnTaskbar Do not display any custom
toolbars in the taskbar
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoToolbarsOnTaskbar
USER Administrative Templates\Start
Menu and Taskbar
NoTrayContextMenu Remove access to the
context menus for the
taskbar
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoTrayContextMenu
USER Administrative Templates\Start
Menu and Taskbar
NoTrayItemsDisplay Hide the notification area HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoTrayItemsDisplay
USER Administrative Templates\Start
Menu and Taskbar
NoUserNameOnStartMenu Remove user name from
Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoUserNameInStartMenu
USER Administrative Templates\Start NoWindowsUpdate Remove links and access to HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Active Directory Training Seminar: Group Policy Programming/Registry Reference
58 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Menu and Taskbar Windows Update ies\Explorer!NoWindowsUpdate
USER Administrative Templates\Start
Menu and Taskbar
RemoveUnDockPCButton Remove the Undock PC
button from the Start Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoStartMenuEjectPC
USER Administrative Templates\Start
Menu and Taskbar
StartMenuLogOff Remove Logoff on the Start
Menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!StartMenuLogOff
USER Administrative Templates\System AppMgmt_COM_SearchForCLSID Download missing COM
components
HKLM\Software\Policies\Microsoft\Windows\App
Management!COMClassStore
USER Administrative Templates\System Autorun Turn off Autoplay HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoDriveTypeAutoRun
USER Administrative Templates\System DisableCMD Prevent access to the
command prompt
HKLM\Software\Policies\Microsoft\Windows\System!Disa
bleCMD
USER Administrative Templates\System DisableRegedit Prevent access to registry
editing tools
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!DisableRegistryTools
USER Administrative Templates\System DisallowApps Don't run specified Windows
applications
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!DisallowRun,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer\DisallowRun!{1,2,3,...}
USER Administrative Templates\System DriverSearchPlaces Configure driver search
locations
HKLM\Software\Policies\Microsoft\Windows\DriverSearc
hing!DontSearchFloppies,
HKLM\Software\Policies\Microsoft\Windows\DriverSearc
hing!DontSearchCD,
HKLM\Software\Policies\Microsoft\Windows\DriverSearc
hing!DontSearchWindowsUpdate
USER Administrative Templates\System DriverSearchPlaces_DontPromptFor
WindowsUpdate
Turn off Windows Update
device driver search prompt
HKLM\Software\Policies\Microsoft\Windows\DriverSearc
hing!DontPromptForWindowsUpdate
USER Administrative Templates\System DriverSigning Code signing for device
drivers
HKLM\Software\Policies\Microsoft\Windows NT\Driver
Signing!BehaviorOnFailedVerify
USER Administrative Templates\System NoAutoUpdate Windows Automatic Updates HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoAutoUpdate
USER Administrative Templates\System NoWelcomeTips Don't display the Getting
Started welcome screen at
logon
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoWelcomeScreen
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 59
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\System RestrictApps Run only allowed Windows
applications
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!RestrictRun,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer\RestrictRun!{1,2,3,...}
USER Administrative Templates\System RestrictRunFromHelp Restrict these programs
from being launched from
Help
HKLM\Software\Policies\Microsoft\Windows\System!Disa
bleInHelp
USER Administrative Templates\System ShellName Custom user interface HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!Shell
USER Administrative Templates\System Y2K Century interpretation for
Year 2000
HKLM\Software\Policies\Microsoft\Control
Panel\International\Calendars\TwoDigitYearMax!1
USER Administrative
Templates\System\Ctrl+Alt+Del
Options
DisableChangePassword Remove Change Password HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!DisableChangePassword
USER Administrative
Templates\System\Ctrl+Alt+Del
Options
DisableLockComputer Remove Lock Computer HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!DisableLockWorkstation
USER Administrative
Templates\System\Ctrl+Alt+Del
Options
DisableTaskMgr Remove Task Manager HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!DisableTaskMgr
USER Administrative
Templates\System\Ctrl+Alt+Del
Options
NoLogoff Remove Logoff HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoLogoff
USER Administrative
Templates\System\Group Policy
DenyRsopToInteractiveUser Disallow Interactive Users
from generating Resultant
Set of Policy data
HKLM\Software\Policies\Microsoft\Windows\System!Den
yRsopToInteractiveUser
USER Administrative
Templates\System\Group Policy
DisableAutoADMUpdate Turn off automatic update of
ADM files
HKLM\Software\Policies\Microsoft\Windows\Group
Policy Editor!DisableAutoADMUpdate
USER Administrative
Templates\System\Group Policy
EnforcePoliciesOnly Enforce Show Policies Only HKLM\Software\Policies\Microsoft\Windows\Group
Policy Editor!ShowPoliciesOnly
USER Administrative
Templates\System\Group Policy
GPDCOptions Group Policy domain
controller selection
HKLM\Software\Policies\Microsoft\Windows\Group
Policy Editor!DCOption
Active Directory Training Seminar: Group Policy Programming/Registry Reference
60 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative
Templates\System\Group Policy
GPTransferRate Group Policy slow link
detection
HKLM\Software\Policies\Microsoft\Windows\System!Gro
upPolicyMinTransferRate
USER Administrative
Templates\System\Group Policy
GroupPolicyRefreshRateUser Group Policy refresh interval
for users
HKLM\Software\Policies\Microsoft\Windows\System!Gro
upPolicyRefreshTime,
HKLM\Software\Policies\Microsoft\Windows\System!Gro
upPolicyRefreshTimeOffset
USER Administrative
Templates\System\Group Policy
NewGPODisplayName Default name for new Group
Policy objects
HKLM\Software\Policies\Microsoft\Windows\Group
Policy Editor!GPODisplayName
USER Administrative
Templates\System\Group Policy
NewGPOLinksDisabled Create new Group Policy
object links disabled by
default
HKLM\Software\Policies\Microsoft\Windows\Group
Policy Editor!NewGPOLinksDisabled
USER Administrative
Templates\System\Internet
Communication Management
InternetManagement_RestrictCommu
nication
Restrict Internet
communication
HKLM\Software\Policies\Microsoft\InternetManagement!
RestrictCommunication,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoPublishingWizard,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoWebServices,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoOnlinePrintsWizard,
HKLM\Software\Policies\Microsoft\Messenger\Client!CEI
P,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoInternetOpenWith,
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableHTTPPrinting,
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableWebPnPDownload,
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
CodecDownload,
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
WebHelp,
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
WebPublish,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoPublishingWizard,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoWebServices,
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 61
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoOnlinePrintsWizard,
HKLM\Software\Policies\Microsoft\Messenger\Client!CEI
P,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoInternetOpenWith,
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableHTTPPrinting,
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableWebPnPDownload,
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
CodecDownload,
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
WebHelp,
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
WebPublish
USER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
DisableHTTPPrinting Turn off printing over HTTP HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableHTTPPrinting
USER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
DisableWebPnPDownload Turn off downloading of print
drivers over HTTP
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DisableWebPnPDownload
USER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
MovieMaker_PreventCodecDownload Turn off Windows Movie
Maker automatic codec
downloads
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
CodecDownload
USER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
MovieMaker_PreventWebHelp Turn off Windows Movie
Maker online Web links
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
WebHelp
USER Administrative MovieMaker_PreventWebPublish Turn off Windows Movie HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
Active Directory Training Seminar: Group Policy Programming/Registry Reference
62 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Templates\System\Internet
Communication
Management\Internet
Communication settings
Maker saving to online video
hosting provider
WebPublish
USER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
ShellNoUseInternetOpenWith Turn off Internet File
Association service
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoInternetOpenWith
USER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
ShellPreventWPWDownload Turn off Internet download
for Web publishing and
online ordering wizards
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoWebServices
USER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
ShellRemoveOrderPrints Turn off the Order Prints
picture task
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoOnlinePrintsWizard
USER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
ShellRemovePublishToWeb Turn off the Publish to Web
task for files and folders
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoPublishingWizard
USER Administrative
Templates\System\Internet
Communication
Management\Internet
Communication settings
WinMSG_NoInstrumentation Turn off the Windows
Messenger Customer
Experience Improvement
Program
HKLM\Software\Policies\Microsoft\Messenger\Client!CEI
P
USER Administrative
Templates\System\Logon
DisableExplorerRunLegacy Do not process the legacy
run list
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!DisableCurrentUserRun
USER Administrative
Templates\System\Logon
DisableExplorerRunOnceLegacy Do not process the run once
list
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!DisableCurrentUserRunOnce
USER Administrative
Templates\System\Logon
Run Run these programs at user
logon
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer\Run!{1,2,3,...}
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 63
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative
Templates\System\Power
Management
PW_PromptPasswordOnResume Prompt for password on
resume from hibernate /
suspend
HKLM\Software\Policies\Microsoft\Windows\System\Pow
er!PromptPasswordOnResume
USER Administrative
Templates\System\Restrictions
DisableRegedit Disable Registry editing
tools
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!DisableRegistryTools
USER Administrative Templates\System\Restrictions
USER Administrative
Templates\System\Scripts
Run_Legacy_Logon_Script_Hidden Run legacy logon scripts
hidden
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!HideLegacyLogonScripts
USER Administrative
Templates\System\Scripts
Run_Logoff_Script_Visible Run logoff scripts visible HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!HideLogoffScripts
USER Administrative
Templates\System\Scripts
Run_Logon_Script_Sync Run logon scripts
synchronously
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!RunLogonScriptSync
USER Administrative
Templates\System\Scripts
Run_Logon_Script_Visible Run logon scripts visible HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!HideLogonScripts
USER Administrative
Templates\System\User Profiles
Connect_HomeDir_ToRoot Connect home directory to
root of the share
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!ConnectHomeDirToRoot
USER Administrative
Templates\System\User Profiles
ExcludeDirectories Exclude directories in
roaming profile
HKLM\Software\Policies\Microsoft\Windows\System!Excl
udeProfileDirs
USER Administrative
Templates\System\User Profiles
LimitSize Limit profile size HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!EnableProfileQuota,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!ProfileQuotaMessage,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!MaxProfileSize,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!IncludeRegInProQuota,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!WarnUser,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!WarnUserTimeout
USER Administrative
Templates\Temporary Internet Files
(User)
CacheMode Temporary Internet Files
(User)
HKLM\Software\Microsoft\Windows\CurrentVersion\Inter
net Settings!SyncMode5
Active Directory Training Seminar: Group Policy Programming/Registry Reference
64 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Temporary Internet Files (User)
USER Administrative
Templates\Unsupported
Administrative Templates
SystemOnlyPolicy Windows.adm HKLM\Software\Policies
USER Administrative
Templates\Unsupported
Administrative Templates
SystemOnlyPolicyFileCommon Common.adm HKLM\Software\Policies
USER Administrative
Templates\Unsupported
Administrative Templates
SystemOnlyPolicyFileWinnt Winnt.adm HKLM\Software\Policies
USER Administrative Templates\URL
Encoding
Encoding URL Encoding HKLM\Software\Microsoft\Windows\CurrentVersion\Inter
net Settings!UrlEncoding
USER Administrative Templates\Windows
95 Control Panel\Network
CPL_Netwo
rk_Restrict
Restrict Network Control
Panel
USER Administrative Templates\Windows
95 Control Panel\Passwords
CPL_Securi
ty_Restrict
Restrict Passwords Control
Panel
USER Administrative Templates\Windows
95 Control Panel\Printers
CPL_Printer
s_Restrict
Restrict printer settings
USER Administrative Templates\Windows
95 Control Panel\System
CPL_Syste
m_Restrict
Restrict System Control
Panel
USER Administrative Templates\Windows
95 Network\Sharing
DisableFileSharingCtrl Disable file sharing HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoFileSharingControl
USER Administrative Templates\Windows
95 Network\Sharing
DisablePrintSharingCtrl Disable print sharing HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoPrintSharingControl
USER Administrative Templates\Windows
95 Shell\Custom folders
CustomFolders_Desktop Custom desktop icons HKLM\Software\Microsoft\Windows\CurrentVersion\Expl
orer\User Shell Folders!Desktop
USER Administrative Templates\Windows
95 Shell\Custom folders
CustomFolders_NetHood Custom Network
Neighborhood
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NetHood
USER Administrative Templates\Windows
95 Shell\Custom folders
CustomFolders_Programs Custom Programs folder HKLM\Software\Microsoft\Windows\CurrentVersion\Expl
orer\User Shell Folders!Programs
USER Administrative Templates\Windows CustomFolders_StartMenu Custom Start menu HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 65
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
95 Shell\Custom folders ies\Explorer!Start Menu
USER Administrative Templates\Windows
95 Shell\Custom folders
CustomFolders_Startup Custom Startup folder HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Startup
USER Administrative Templates\Windows
95 Shell\Custom folders
HideStartMenuSubfolders Hide Start menu subfolders HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoStartMenuSubFolders
USER Administrative Templates\Windows
95 System\Restrictions
DisableMSDOS Disable MS-DOS prompt HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\WinOldApp!Disabled
USER Administrative Templates\Windows
95 System\Restrictions
DisableSingleMSDOS Disable single-mode MS-
DOS apps
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\WinOldApp!NoRealMode
USER Administrative Templates\Windows
Components\Application
Compatibility
AppCompatPrevent16Bit Prevent access to 16-bit
applications
HKLM\Software\Policies\Microsoft\Windows\AppCompat!
VDMDisallowed
USER Administrative Templates\Windows
Components\Internet Explorer
AutoProxyCache Disable caching of Auto-
Proxy scripts
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!EnableAutoProxyResultCache
USER Administrative Templates\Windows
Components\Internet Explorer
Branding_NoExternalBranding Disable external branding of
Internet Explorer
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoExternalBranding
USER Administrative Templates\Windows
Components\Internet Explorer
ControlPanel_RestrictAdvanced Disable changing Advanced
page settings
HKLM\Software\Policies\Microsoft\Internet
Explorer\Control Panel!Advanced
USER Administrative Templates\Windows
Components\Internet Explorer
DialupSettings Use Automatic Detection for
dial-up connections
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!DialupAutodetect
USER Administrative Templates\Windows
Components\Internet Explorer
DisplayScriptFailureUI Display error message on
proxy script download failure
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!DisplayScriptDownloadFailureUI
USER Administrative Templates\Windows
Components\Internet Explorer
FavImportExport Disable importing and
exporting of favorites
HKLM\Software\Policies\Microsoft\Internet
Explorer!DisableImportExportFavorites
USER Administrative Templates\Windows
Components\Internet Explorer
Identities Identity Manager: Prevent
users from using Identities
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Identities!Locked Down
USER Administrative Templates\Windows
Components\Internet Explorer
MediaSettings Configure Media Explorer
Bar
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!No_LaunchMediaBar,
HKLM\Software\Microsoft\Internet
Explorer\media!Autoplay
USER Administrative Templates\Windows
Components\Internet Explorer
OESettings Configure Outlook Express HKLM\Software\Microsoft\Outlook
Express!BlockExeAttachments
Active Directory Training Seminar: Group Policy Programming/Registry Reference
66 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictAccessibility Disable changing
accessibility settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Accessibility
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictAutoconfig Disable changing Automatic
Configuration settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Autoconfig
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictCache Disable changing Temporary
Internet files settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Cache
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictCalendarContact Disable changing Calendar
and Contact settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!CalendarContact
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictCertificates Disable changing certificate
settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Certificates
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictCheckBrowser Disable changing default
browser check
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Check_If_Default
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictColors Disable changing color
settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Colors
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictConnectionSettings Disable changing connection
settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Connection Settings
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictConnectionWizard Disable Internet Connection
wizard
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Connwiz Admin Lock
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictFonts Disable changing font
settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Fonts
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictFormSuggest Disable AutoComplete for
forms
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!FormSuggest
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictFormSuggestPW Do not allow AutoComplete
to save passwords
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!FormSuggest Passwords
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictHistory Disable changing history
settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!History
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictHomePage Disable changing home
page settings
HKLM\Software\Policies\Microsoft\Internet
Explorer\Control Panel!HomePage
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictLanguages Disable changing language
settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Languages
USER Administrative Templates\Windows RestrictLinks Disable changing link color HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 67
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Components\Internet Explorer settings on\Internet Settings!links
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictMessaging Disable changing Messaging
settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Messaging
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictProfiles Disable changing Profile
Assistant settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Profiles
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictProxy Disable changing proxy
settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Proxy
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictRatings Disable changing ratings
settings
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!Ratings
USER Administrative Templates\Windows
Components\Internet Explorer
RestrictResetWebSettings Disable the Reset Web
Settings feature
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings!ResetWebSettings
USER Administrative Templates\Windows
Components\Internet Explorer
Search_NoFindFiles Search: Disable Find Files
via F3 within the browser
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoFindFiles
USER Administrative Templates\Windows
Components\Internet Explorer
Search_NoSearchCustomization Search: Disable Search
Customization
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoSearchCustomizatio
n
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
Carpoint Carpoint HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{DED22F57-FEE2-
11D0-953B-00C04FD9152D}
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
DHTMLEdit DHTML Edit Control HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{2D360201-FFF5-
11D1-8D03-00A0C959BC0A}
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
Flash Shockwave Flash HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{D27CDB6E-AE6D-
11CF-96B8-444553540000}
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
Investor Investor HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{9276B91A-E780-
11d2-8A8D-00C04FA31D93},
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{52ADE293-85E8-
Active Directory Training Seminar: Group Policy Programming/Registry Reference
68 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
11D2-BB22-00104B0EA281}
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
Media_Player Media Player HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{05589FA1-C356-
11CE-BF01-00AA0055595A},
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{22D6F312-B0F6-
11D0-94AB-0080C74C7E95}
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
Menu_Controls Menu Controls HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{275E2FE0-7486-
11D0-89D6-00A0C90C9B67},
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{7823A620-9DD9-
11CF-A662-00AA00C066D2},
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{F5131C24-E56D-
11CF-B78A-444553540000}
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
Microsoft_Agent Microsoft Agent HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{D45FD31B-5C6E-
11D1-9EC1-00C04FD7081F}
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
Microsoft_Chat Microsoft Chat HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{D6526FE0-E651-
11CF-99CB-00C04FD64497}
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
MSNBC MSNBC HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{2FF18E10-DE11-
11D1-8161-00A0C90DD90C}
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
NetShowFile NetShow File Transfer
Control
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{26F24A93-1DA2-
11D0-A334-00AA004A5FC5}
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
Scriptlet Microsoft Scriptlet
Component
HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{AE24FDAE-03C6-
11D1-8B76-0080C744F389}
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 69
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
Components\Internet
Explorer\Administrator Approved
Controls
Survey Microsoft Survey Control HKLM\Software\Policies\Microsoft\Windows\CurrentVersi
on\Internet Settings\AllowedControls!{BD1F006E-174F-
11D2-95C0-00C04F9A8CFA}
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
File_NoBrowserClose File menu: Disable closing
the browser and Explorer
windows
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoBrowserClose
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
File_NoBrowserSaveAs File menu: Disable Save
As... menu option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoBrowserSaveAs
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
File_NoBrowserSaveWebComplete File menu: Disable Save As
Web Page Complete
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoBrowserSaveWebC
omplete
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
File_NoFileNew File menu: Disable New
menu option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoFileNew
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
File_NoFileOpen File menu: Disable Open
menu option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoFileOpen
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
Help_NoFeedback Help menu: Remove 'Send
Feedback' menu option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoHelpItemSendFeedback
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
Help_NoNetscapeHelp Help menu: Remove 'For
Netscape Users' menu
option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoHelpItemNetscapeHelp
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
Help_NoTip Help menu: Remove 'Tip of
the Day' menu option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoHelpItemTipOfTheDay
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
Help_NoTutorial Help menu: Remove 'Tour'
menu option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoHelpItemTutorial
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
NoBrowserContextMenu Disable Context menu HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoBrowserContextMenu
Active Directory Training Seminar: Group Policy Programming/Registry Reference
70 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
NoFavorites Hide Favorites menu HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoFavorites
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
NoOpeninNewWnd Disable Open in New
Window menu option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoOpeninNewWnd
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
NoSelectDownloadDir Disable Save this program
to disk option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Restrictions!NoSelectDownloadDir
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
Tools_Menu Tools menu: Disable Internet
Options... menu option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoBrowserOptions
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
View_NoTheaterMode View menu: Disable Full
Screen menu option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoTheaterMode
USER Administrative Templates\Windows
Components\Internet
Explorer\Browser menus
View_NoViewSource View menu: Disable Source
menu option
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoViewSource
USER Administrative Templates\Windows
Components\Internet
Explorer\Internet Control Panel
ControlPanel_RestrictAdvancedTab Disable the Advanced page HKLM\Software\Policies\Microsoft\Internet
Explorer\Control Panel!AdvancedTab
USER Administrative Templates\Windows
Components\Internet
Explorer\Internet Control Panel
ControlPanel_RestrictConnectionsTa
b
Disable the Connections
page
HKLM\Software\Policies\Microsoft\Internet
Explorer\Control Panel!ConnectionsTab
USER Administrative Templates\Windows
Components\Internet
Explorer\Internet Control Panel
ControlPanel_RestrictContentTab Disable the Content page HKLM\Software\Policies\Microsoft\Internet
Explorer\Control Panel!ContentTab
USER Administrative Templates\Windows
Components\Internet
Explorer\Internet Control Panel
ControlPanel_RestrictGeneralTab Disable the General page HKLM\Software\Policies\Microsoft\Internet
Explorer\Control Panel!GeneralTab
USER Administrative Templates\Windows
Components\Internet
Explorer\Internet Control Panel
ControlPanel_RestrictPrivacyTab Disable the Privacy page HKLM\Software\Policies\Microsoft\Internet
Explorer\Control Panel!PrivacyTab
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 71
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
Components\Internet
Explorer\Internet Control Panel
ControlPanel_RestrictProgramsTab Disable the Programs page HKLM\Software\Policies\Microsoft\Internet
Explorer\Control Panel!ProgramsTab
USER Administrative Templates\Windows
Components\Internet
Explorer\Internet Control Panel
ControlPanel_RestrictSecurityTab Disable the Security page HKLM\Software\Policies\Microsoft\Internet
Explorer\Control Panel!SecurityTab
USER Administrative Templates\Windows
Components\Internet
Explorer\Offline Pages
MaxSubscription Subscription Limits HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!MaxSubscriptionSize,
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!MaxSubscriptionCount,
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!MinUpdateInterval,
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!UpdateExcludeBegin,
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!UpdateExcludeEnd,
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!MaxWebcrawlLevels
USER Administrative Templates\Windows
Components\Internet
Explorer\Offline Pages
NoAddingChannels Disable adding channels HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoAddingChannels
USER Administrative Templates\Windows
Components\Internet
Explorer\Offline Pages
NoAddingSubscriptions Disable adding schedules
for offline pages
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoAddingSubscriptions
USER Administrative Templates\Windows
Components\Internet
Explorer\Offline Pages
NoChannelLogging Disable offline page hit
logging
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoChannelLogging
USER Administrative Templates\Windows
Components\Internet
Explorer\Offline Pages
NoChannelUI Disable channel user
interface completely
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoChannelUI
USER Administrative Templates\Windows
Components\Internet
Explorer\Offline Pages
NoEditingScheduleGroups Disable editing and creating
of schedule groups
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoEditingScheduleGro
ups
USER Administrative Templates\Windows
Components\Internet
NoEditingSubscriptions Disable editing schedules for
offline pages
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoEditingSubscriptions
Active Directory Training Seminar: Group Policy Programming/Registry Reference
72 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Explorer\Offline Pages
USER Administrative Templates\Windows
Components\Internet
Explorer\Offline Pages
NoRemovingChannels Disable removing channels HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoRemovingChannels
USER Administrative Templates\Windows
Components\Internet
Explorer\Offline Pages
NoRemovingSubscriptions Disable removing schedules
for offline pages
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoRemovingSubscripti
ons
USER Administrative Templates\Windows
Components\Internet
Explorer\Offline Pages
NoScheduledUpdates Disable all scheduled offline
pages
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoScheduledUpdates
USER Administrative Templates\Windows
Components\Internet
Explorer\Offline Pages
NoSubscriptionContent Disable downloading of site
subscription content
HKLM\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions!NoSubscriptionContent
USER Administrative Templates\Windows
Components\Internet
Explorer\Persistence Behavior
Persistence_FileLimits0 File size limits for Local
Machine zone
HKLM\Software\Policies\Microsoft\Internet
Explorer\Persistence\0!DomainLimit,
HKLM\Software\Policies\Microsoft\Internet
Explorer\Persistence\0!DocumentLimit
USER Administrative Templates\Windows
Components\Internet
Explorer\Persistence Behavior
Persistence_FileLimits1 File size limits for Intranet
zone
HKLM\Software\Policies\Microsoft\Internet
Explorer\Persistence\1!DomainLimit,
HKLM\Software\Policies\Microsoft\Internet
Explorer\Persistence\1!DocumentLimit
USER Administrative Templates\Windows
Components\Internet
Explorer\Persistence Behavior
Persistence_FileLimits2 File size limits for Trusted
Sites zone
HKLM\Software\Policies\Microsoft\Internet
Explorer\Persistence\2!DomainLimit,
HKLM\Software\Policies\Microsoft\Internet
Explorer\Persistence\2!DocumentLimit
USER Administrative Templates\Windows
Components\Internet
Explorer\Persistence Behavior
Persistence_FileLimits3 File size limits for Internet
zone
HKLM\Software\Policies\Microsoft\Internet
Explorer\Persistence\3!DomainLimit,
HKLM\Software\Policies\Microsoft\Internet
Explorer\Persistence\3!DocumentLimit
USER Administrative Templates\Windows
Components\Internet
Explorer\Persistence Behavior
Persistence_FileLimits4 File size limits for Restricted
Sites zone
HKLM\Software\Policies\Microsoft\Internet
Explorer\Persistence\4!DomainLimit,
HKLM\Software\Policies\Microsoft\Internet
Explorer\Persistence\4!DocumentLimit
USER Administrative Templates\Windows NoBandCustomize Disable customizing browser HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 73
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Components\Internet
Explorer\Toolbars
toolbars ies\Explorer!NoBandCustomize
USER Administrative Templates\Windows
Components\Internet
Explorer\Toolbars
NoToolbarCustomize Disable customizing browser
toolbar buttons
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoToolbarCustomize
USER Administrative Templates\Windows
Components\Internet
Explorer\Toolbars
ToolbarButtons Configure Toolbar Buttons HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!SpecifyDefaultButtons,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Back,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Forward,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Stop,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Refresh,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Home,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Search,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Favorites,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_History,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Media,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Folders,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Fullscreen,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Tools,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_MailNews,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Size,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Print,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Edit,
Active Directory Training Seminar: Group Policy Programming/Registry Reference
74 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Discussions,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Cut,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Copy,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Paste,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Btn_Encoding
USER Administrative Templates\Windows
Components\Microsoft Management
Console
MMC_Restrict_Author Restrict the user from
entering author mode
HKLM\Software\Policies\Microsoft\MMC!RestrictAuthorM
ode
USER Administrative Templates\Windows
Components\Microsoft Management
Console
MMC_Restrict_To_Permitted_Snapin
s
Restrict users to the
explicitly permitted list of
snap-ins
HKLM\Software\Policies\Microsoft\MMC!RestrictToPermi
ttedSnapins
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_ActiveDirDomTrusts Active Directory Domains
and Trusts
HKLM\Software\Policies\Microsoft\MMC\{EBC53A38-
A23F-11D0-B09B-00C04FD8DCA6}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_ActiveDirSitesServices Active Directory Sites and
Services
HKLM\Software\Policies\Microsoft\MMC\{D967F824-
9968-11D0-B936-00C04FD8D5B0}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_ActiveDirUsersComp Active Directory Users and
Computers
HKLM\Software\Policies\Microsoft\MMC\{E355E538-
1C2E-11D0-8C37-00C04FD8FE93}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_ActiveXControl ActiveX Control HKLM\Software\Policies\Microsoft\MMC\{C96401CF-
0E17-11D3-885B-00C04F72C717}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_ADSI ADSI Edit HKLM\Software\Policies\Microsoft\MMC\{1C5DACFA-
16BA-11D2-81D0-0000F87A7AA3}!Restrict_Run
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 75
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_CertAuth Certification Authority HKLM\Software\Policies\Microsoft\MMC\{de751566-
4cc6-11d1-8ca0-00c04fc297eb}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_Certs Certificates HKLM\Software\Policies\Microsoft\MMC\{53D6AB1D-
2488-11D1-A28C-00C04FB94F17}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_CertsTemplate Certificate Templates HKLM\Software\Policies\Microsoft\MMC\{A994E107-
6854-4F3D-917C-E6F01670F6D3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_ComponentServices Component Services HKLM\Software\Policies\Microsoft\MMC\{C9BC92DF-
5B9A-11D1-8F00-00C04FC2C17B}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_ComputerManagement Computer Management HKLM\Software\Policies\Microsoft\MMC\{58221C67-
EA27-11CF-ADCF-00AA00A80033}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_DeviceManager Device Manager HKLM\Software\Policies\Microsoft\MMC\{90087284-
d6d6-11d0-8353-00a0c90640bf}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_DFS Distributed File System HKLM\Software\Policies\Microsoft\MMC\{677A2D94-
28D9-11D1-A95B-008048918FB1}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_DiskDefrag Disk Defragmenter HKLM\Software\Policies\Microsoft\MMC\{43668E21-
2636-11D1-A1CE-0080C88593A5}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
MMC_DiskMgmt Disk Management HKLM\Software\Policies\Microsoft\MMC\{8EAD3A12-
B2C1-11d0-83AA-00A0C92C9D5D}!Restrict_Run
Active Directory Training Seminar: Group Policy Programming/Registry Reference
76 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
ins
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_EventViewer Event Viewer HKLM\Software\Policies\Microsoft\MMC\{975797FC-
4E2A-11D0-B702-00C04FD8DBF7}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_FAXService FAX Service HKLM\Software\Policies\Microsoft\MMC\{753EDB4D-
2E1B-11D1-9064-00A0C90AB504}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_FrontPageExt FrontPage Server
Extensions
HKLM\Software\Policies\Microsoft\MMC\{FF5903A8-
78D6-11D1-92F6-006097B01056}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_IAS Internet Authentication
Service (IAS)
HKLM\Software\Policies\Microsoft\MMC\{8F8F8DC0-
5713-11D1-9551-0060B0576642}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_IIS Internet Information Services HKLM\Software\Policies\Microsoft\MMC\{A841B6C2-
7577-11D0-BB1F-00A0C922E79C}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_IndexingService Indexing Service HKLM\Software\Policies\Microsoft\MMC\{95AD72F0-
44CE-11D0-AE29-00AA004B9986}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_IpSecManage IP Security Policy
Management
HKLM\Software\Policies\Microsoft\MMC\{DEA8AFA0-
CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_IpSecMonitor IP Security Monitor HKLM\Software\Policies\Microsoft\MMC\{57C596D0-
9370-40C0-BA0D-AB491B63255D}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
MMC_LinkToWeb Link to Web Address HKLM\Software\Policies\Microsoft\MMC\{C96401D1-
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 77
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Console\Restricted/Permitted snap-
ins
0E17-11D3-885B-00C04F72C717}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_LocalUsersGroups Local Users and Groups HKLM\Software\Policies\Microsoft\MMC\{5D6179C8-
17EC-11D1-9AA9-00C04FD8FE93}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_Net_Framework .Net Framework
Configuration
HKLM\Software\Policies\Microsoft\MMC\{18BA7139-
D98B-43c2-94DA-2604E34E175D}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_PerfLogsAlerts Performance Logs and
Alerts
HKLM\Software\Policies\Microsoft\MMC\{7478EF61-
8C46-11d1-8D99-00A0C913CAD4}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_QoSAdmission QoS Admission Control HKLM\Software\Policies\Microsoft\MMC\{FD57D297-
4FD9-11D1-854E-00C04FC31FD3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_RemoteDesktop Remote Desktops HKLM\Software\Policies\Microsoft\MMC\{3D5D035E-
7721-4B83-A645-6C07A3D403B7}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_RRA Routing and Remote Access HKLM\Software\Policies\Microsoft\MMC\{1AA7F839-
C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_RSM Removable Storage
Management
HKLM\Software\Policies\Microsoft\MMC\{3CB6973D-
3E6F-11D0-95DB-00A024D77700}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_SCA Security Configuration and
Analysis
HKLM\Software\Policies\Microsoft\MMC\{011BE22D-
E453-11D1-945A-00C04FB984F9}!Restrict_Run
Active Directory Training Seminar: Group Policy Programming/Registry Reference
78 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_SecurityTemplates Security Templates HKLM\Software\Policies\Microsoft\MMC\{5ADF5BF6-
E452-11D1-945A-00C04FB984F9}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_Services Services HKLM\Software\Policies\Microsoft\MMC\{58221C66-
EA27-11CF-ADCF-00AA00A80033}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_SharedFolders Shared Folders HKLM\Software\Policies\Microsoft\MMC\{58221C65-
EA27-11CF-ADCF-00AA00A80033}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_SysInfo System Information HKLM\Software\Policies\Microsoft\MMC\{45ac8c63-
23e2-11d1-a696-00c04fd58bc3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_Telephony Telephony HKLM\Software\Policies\Microsoft\MMC\{E26D02A0-
4C1F-11D1-9AA1-00C04FC3357A}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_TerminalServices Terminal Services
Configuration
HKLM\Software\Policies\Microsoft\MMC\{B91B6008-
32D2-11D2-9888-00A0C925F917}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_WirelessMon Wireless Monitor HKLM\Software\Policies\Microsoft\MMC\{23DC5869-
BD9F-46fd-AADD-1F869BA64FC3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins
MMC_WMI WMI Control HKLM\Software\Policies\Microsoft\MMC\{5C659257-
E236-11D2-8899-00104B2AFB46}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
MMC_AppleTalkRouting AppleTalk Routing HKLM\Software\Policies\Microsoft\MMC\{1AA7F83C-
C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 79
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
ins\Extension snap-ins
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_AuthMan Authorization Manager HKLM\Software\Policies\Microsoft\MMC\{1F5EEC01-
1214-4D94-80C5-4BDCD2014DDD}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_CertAuthPolSet Certification Authority Policy
Settings
HKLM\Software\Policies\Microsoft\MMC\{3F276EB4-
70EE-11D1-8A0F-00C04FB93753}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_ConnectionSharingNAT Connection Sharing (NAT) HKLM\Software\Policies\Microsoft\MMC\{C2FE450B-
D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_DCOMCFG DCOM Configuration
Extension
HKLM\Software\Policies\Microsoft\MMC\{9EC88934-
C774-11d1-87F4-00C04FC2C17B}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_DeviceManager Device Manager HKLM\Software\Policies\Microsoft\MMC\{74246bfc-4c96-
11d0-abef-0020af6b0b7a}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_DHCPRelayMgmt DHCP Relay Management HKLM\Software\Policies\Microsoft\MMC\{C2FE4502-
D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_EventViewer Event Viewer HKLM\Software\Policies\Microsoft\MMC\{394C052E-
B830-11D0-9A86-00C04FD8DBF7}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_ExtendView Extended View (Web View) HKLM\Software\Policies\Microsoft\MMC\{B708457E-
DB61-4C55-A92F-0D4B5E9B1224}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
MMC_IASLogging IAS Logging HKLM\Software\Policies\Microsoft\MMC\{2E19B602-
Active Directory Training Seminar: Group Policy Programming/Registry Reference
80 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Console\Restricted/Permitted snap-
ins\Extension snap-ins
48EB-11d2-83CA-00104BCA42CF}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_IGMPRouting IGMP Routing HKLM\Software\Policies\Microsoft\MMC\{C2FE4508-
D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_IPRouting IP Routing HKLM\Software\Policies\Microsoft\MMC\{C2FE4500-
D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_IPXRIPRouting IPX RIP Routing HKLM\Software\Policies\Microsoft\MMC\{90810502-
38F1-11D1-9345-00C04FC9DA04}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_IPXRouting IPX Routing HKLM\Software\Policies\Microsoft\MMC\{90810500-
38F1-11D1-9345-00C04FC9DA04}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_IPXSAPRouting IPX SAP Routing HKLM\Software\Policies\Microsoft\MMC\{90810504-
38F1-11D1-9345-00C04FC9DA04}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_LogicalMappedDrives Logical and Mapped Drives HKLM\Software\Policies\Microsoft\MMC\{6E8E0081-
19CD-11D1-AD91-00AA00B8E05A}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_OSPFRouting OSPF Routing HKLM\Software\Policies\Microsoft\MMC\{C2FE4506-
D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_PublicKey Public Key Policies HKLM\Software\Policies\Microsoft\MMC\{34AB8E82-
C27E-11D1-A6C0-00C04FB94F17}!Restrict_Run
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 81
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_RAS_DialinUser RAS Dialin - User Node HKLM\Software\Policies\Microsoft\MMC\{B52C1E50-
1DD2-11D1-BC43-00C04FC31FD3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_RemoteAccess Remote Access HKLM\Software\Policies\Microsoft\MMC\{5880CD5C-
8EC0-11d1-9570-0060B0576642}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_RemStore Removable Storage HKLM\Software\Policies\Microsoft\MMC\{243E20B0-
48ED-11D2-97DA-00A024D77700}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_RIPRouting RIP Routing HKLM\Software\Policies\Microsoft\MMC\{C2FE4504-
D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_Routing Routing HKLM\Software\Policies\Microsoft\MMC\{DAB1A262-
4FD7-11D1-842C-00C04FB6C218}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_SendConsoleMessage Send Console Message HKLM\Software\Policies\Microsoft\MMC\{B1AFF7D0-
0C49-11D1-BB12-00C04FC9A3A3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_ServiceDependencies Service Dependencies HKLM\Software\Policies\Microsoft\MMC\{BD95BA60-
2E26-AAD1-AD99-00AA00B8E05A}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_SharedFolders_Ext Shared Folders Ext HKLM\Software\Policies\Microsoft\MMC\{58221C69-
EA27-11CF-ADCF-00AA00A80033}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
MMC_SMTPProtocol SMTP Protocol HKLM\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-
11d0-bb77-00aa00a1eab7}!Restrict_Run
Active Directory Training Seminar: Group Policy Programming/Registry Reference
82 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
ins\Extension snap-ins
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_SNMP SNMP HKLM\Software\Policies\Microsoft\MMC\{7AF60DD3-
4979-11D1-8A6C-00C04FC33566}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Extension snap-ins
MMC_SysProp System Properties HKLM\Software\Policies\Microsoft\MMC\{0F3621F1-
23C6-11D1-AD97-00AA00B88E5A}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy
MMC_GroupPolicyManagementSnap
In
Group Policy Management HKLM\Software\Policies\Microsoft\MMC\{E12BBB5D-
D59D-4E61-947A-301D25AE8C23}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy
MMC_GroupPolicySnapIn Group Policy Object Editor HKLM\Software\Policies\Microsoft\MMC\{8FC0B734-
A0E1-11D1-A7D3-0000F87571E3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy
MMC_GroupPolicyTab Group Policy tab for Active
Directory Tools
HKLM\Software\Policies\Microsoft\MMC\{D70A2BEA-
A63E-11D1-A7D4-0000F87571E3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy
MMC_ResultantSetOfPolicySnapIn Resultant Set of Policy
snap-in
HKLM\Software\Policies\Microsoft\MMC\{6DC3804B-
7212-458D-ADB0-9A07E2AE1FA2}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Group Policy snap-
in extensions
MMC_ADMComputers Administrative Templates
(Computers)
HKLM\Software\Policies\Microsoft\MMC\{0F6B957D-
509E-11D1-A7CC-0000F87571E3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Group Policy snap-
in extensions
MMC_ADMUsers Administrative Templates
(Users)
HKLM\Software\Policies\Microsoft\MMC\{0F6B957E-
509E-11D1-A7CC-0000F87571E3}!Restrict_Run
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 83
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Group Policy snap-
in extensions
MMC_FolderRedirection Folder Redirection HKLM\Software\Policies\Microsoft\MMC\{88E729D6-
BDC1-11D1-BD2A-00C04FB9603F}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Group Policy snap-
in extensions
MMC_IEMaintenance Internet Explorer
Maintenance
HKLM\Software\Policies\Microsoft\MMC\{FC715823-
C5FB-11D1-9EEF-00A0C90347FF}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Group Policy snap-
in extensions
MMC_RIS Remote Installation Services HKLM\Software\Policies\Microsoft\MMC\{3060E8CE-
7020-11D2-842D-00C04FA372D4}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Group Policy snap-
in extensions
MMC_ScriptsMachine Scripts (Startup/Shutdown) HKLM\Software\Policies\Microsoft\MMC\{40B6664F-
4972-11D1-A7CA-0000F87571E3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Group Policy snap-
in extensions
MMC_ScriptsUser Scripts (Logon/Logoff) HKLM\Software\Policies\Microsoft\MMC\{40B66650-
4972-11D1-A7CA-0000F87571E3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Group Policy snap-
in extensions
MMC_SecuritySettings Security Settings HKLM\Software\Policies\Microsoft\MMC\{803E14A0-
B4FB-11D0-A0D0-00A0C90F574B}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Group Policy snap-
in extensions
MMC_SoftwareInstalationComputers Software Installation
(Computers)
HKLM\Software\Policies\Microsoft\MMC\{942A8E4F-
A261-11D1-A760-00C04FB9603F}!Restrict_Run
Active Directory Training Seminar: Group Policy Programming/Registry Reference
84 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Group Policy snap-
in extensions
MMC_SoftwareInstallationUsers Software Installation (Users) HKLM\Software\Policies\Microsoft\MMC\{BACF5C8A-
A3C7-11D1-A760-00C04FB9603F}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Group Policy snap-
in extensions
MMC_WirelessNetworkPolicy Wireless Network (IEEE
802.11) Policies
HKLM\Software\Policies\Microsoft\MMC\{2DA6AA7F-
8C88-4194-A558-0D36E7FD3E64}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Resultant Set of
Policy snap-in extensions
MMC_ADMComputers Administrative Templates
(Computers)
HKLM\Software\Policies\Microsoft\MMC\{B6F9C8AE-
EF3A-41C8-A911-37370C331DD4}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Resultant Set of
Policy snap-in extensions
MMC_ADMUsers Administrative Templates
(Users)
HKLM\Software\Policies\Microsoft\MMC\{B6F9C8AF-
EF3A-41C8-A911-37370C331DD4}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Resultant Set of
Policy snap-in extensions
MMC_FolderRedirection Folder Redirection HKLM\Software\Policies\Microsoft\MMC\{c40d66a0-
e90c-46c6-aa3b-473e38c72bf2}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Resultant Set of
Policy snap-in extensions
MMC_IEMaintenance Internet Explorer
Maintenance
HKLM\Software\Policies\Microsoft\MMC\{d524927d-
6c08-46bf-86af-391534d779d3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Resultant Set of
Policy snap-in extensions
MMC_ScriptsMachine Scripts (Startup/Shutdown) HKLM\Software\Policies\Microsoft\MMC\{40B66660-
4972-11d1-A7CA-0000F87571E3}!Restrict_Run
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 85
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Resultant Set of
Policy snap-in extensions
MMC_ScriptsUser Scripts (Logon/Logoff) HKLM\Software\Policies\Microsoft\MMC\{40B66661-
4972-11d1-A7CA-0000F87571E3}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Resultant Set of
Policy snap-in extensions
MMC_SecuritySettings Security Settings HKLM\Software\Policies\Microsoft\MMC\{fe883157-
cebd-4570-b7a2-e4fe06abe626}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Resultant Set of
Policy snap-in extensions
MMC_SoftwareInstalationComputers Software Installation
(Computers)
HKLM\Software\Policies\Microsoft\MMC\{7E45546F-
6D52-4D10-B702-9C2E67232E62}!Restrict_Run
USER Administrative Templates\Windows
Components\Microsoft Management
Console\Restricted/Permitted snap-
ins\Group Policy\Resultant Set of
Policy snap-in extensions
MMC_SoftwareInstallationUsers Software Installation (Users) HKLM\Software\Policies\Microsoft\MMC\{1BC972D6-
555C-4FF7-BE2C-C584021A0A6A}!Restrict_Run
USER Administrative Templates\Windows
Components\NetMeeting
AllowPersistAutoAcceptCalls Allow persisting automatic
acceptance of Calls
HKLM\Software\Policies\Microsoft\Conferencing!PersistA
utoAcceptCalls
USER Administrative Templates\Windows
Components\NetMeeting
DisableChat Disable Chat HKLM\Software\Policies\Microsoft\Conferencing!NoChat
USER Administrative Templates\Windows
Components\NetMeeting
DisableNewWhiteboard Disable Whiteboard HKLM\Software\Policies\Microsoft\Conferencing!NoNew
WhiteBoard
USER Administrative Templates\Windows
Components\NetMeeting
DisableOldWhiteboard Disable NetMeeting 2.x
Whiteboard
HKLM\Software\Policies\Microsoft\Conferencing!NoOld
WhiteBoard
USER Administrative Templates\Windows
Components\NetMeeting
EnableAutoConfiguration Enable Automatic
Configuration
HKLM\Software\Policies\Microsoft\Conferencing!Use
AutoConfig,
HKLM\Software\Policies\Microsoft\Conferencing!ConfigFi
le
USER Administrative Templates\Windows
Components\NetMeeting
PreventAddingNewILS Prevent adding Directory
servers
HKLM\Software\Policies\Microsoft\Conferencing!NoAddi
ngDirectoryServers
Active Directory Training Seminar: Group Policy Programming/Registry Reference
86 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
Components\NetMeeting
PreventAutoAccept Prevent automatic
acceptance of Calls
HKLM\Software\Policies\Microsoft\Conferencing!NoAuto
AcceptCalls
USER Administrative Templates\Windows
Components\NetMeeting
PreventChangingCallMode Prevent changing Call
placement method
HKLM\Software\Policies\Microsoft\Conferencing!NoChan
gingCallMode
USER Administrative Templates\Windows
Components\NetMeeting
PreventDirectoryServices Disable Directory services HKLM\Software\Policies\Microsoft\Conferencing!NoDirec
toryServices
USER Administrative Templates\Windows
Components\NetMeeting
PreventReceivingFiles Prevent receiving files HKLM\Software\Policies\Microsoft\Conferencing!NoRece
ivingFiles
USER Administrative Templates\Windows
Components\NetMeeting
PreventSendingFiles Prevent sending files HKLM\Software\Policies\Microsoft\Conferencing!NoSend
ingFiles
USER Administrative Templates\Windows
Components\NetMeeting
PreventWebDirectory Prevent viewing Web
directory
HKLM\Software\Policies\Microsoft\Conferencing!NoWeb
Directory
USER Administrative Templates\Windows
Components\NetMeeting
RestrictFTSendSize Limit the size of sent files HKLM\Software\Policies\Microsoft\Conferencing!MaxFile
SendSize
USER Administrative Templates\Windows
Components\NetMeeting
SetIntranetSupport Set the intranet support Web
page
HKLM\Software\Policies\Microsoft\Conferencing!Intranet
SupportURL
USER Administrative Templates\Windows
Components\NetMeeting
SetSecurityOptions Set Call Security options HKLM\Software\Policies\Microsoft\Conferencing!CallSec
urity
USER Administrative Templates\Windows
Components\NetMeeting\Application
Sharing
DisableAppSharing Disable application Sharing HKLM\Software\Policies\Microsoft\Conferencing!NoAppS
haring
USER Administrative Templates\Windows
Components\NetMeeting\Application
Sharing
PreventGrantingControl Prevent Control HKLM\Software\Policies\Microsoft\Conferencing!NoAllow
Control
USER Administrative Templates\Windows
Components\NetMeeting\Application
Sharing
PreventSharing Prevent Sharing HKLM\Software\Policies\Microsoft\Conferencing!NoShari
ng
USER Administrative Templates\Windows
Components\NetMeeting\Application
Sharing
PreventSharingCMDPrompt Prevent Sharing Command
Prompts
HKLM\Software\Policies\Microsoft\Conferencing!NoShari
ngDosWindows
USER Administrative Templates\Windows
Components\NetMeeting\Application
PreventSharingDesktop Prevent Desktop Sharing HKLM\Software\Policies\Microsoft\Conferencing!NoShari
ngDesktop
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 87
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Sharing
USER Administrative Templates\Windows
Components\NetMeeting\Application
Sharing
PreventSharingExplorer Prevent Sharing Explorer
windows
HKLM\Software\Policies\Microsoft\Conferencing!NoShari
ngExplorer
USER Administrative Templates\Windows
Components\NetMeeting\Application
Sharing
PreventSharingTrueColor Prevent Application Sharing
in true color
HKLM\Software\Policies\Microsoft\Conferencing!NoTrue
ColorSharing
USER Administrative Templates\Windows
Components\NetMeeting\Audio &
Video
PreventAudio Disable Audio HKLM\Software\Policies\Microsoft\Conferencing!NoAudi
o
USER Administrative Templates\Windows
Components\NetMeeting\Audio &
Video
PreventChangeDirectSound Prevent changing
DirectSound Audio setting
HKLM\Software\Policies\Microsoft\Conferencing!NoChan
geDirectSound
USER Administrative Templates\Windows
Components\NetMeeting\Audio &
Video
PreventFullDuplex Disable full duplex Audio HKLM\Software\Policies\Microsoft\Conferencing!NoFullD
uplex
USER Administrative Templates\Windows
Components\NetMeeting\Audio &
Video
PreventReceivingVideo Prevent receiving Video HKLM\Software\Policies\Microsoft\Conferencing!NoRece
ivingVideo
USER Administrative Templates\Windows
Components\NetMeeting\Audio &
Video
PreventSendingVideo Prevent sending Video HKLM\Software\Policies\Microsoft\Conferencing!NoSend
ingVideo
USER Administrative Templates\Windows
Components\NetMeeting\Audio &
Video
SetAVThroughput Limit the bandwidth of Audio
and Video
HKLM\Software\Policies\Microsoft\Conferencing!Maximu
mBandwidth
USER Administrative Templates\Windows
Components\NetMeeting\Options
Page
DisableAdvCallingButton Disable the Advanced
Calling button
HKLM\Software\Policies\Microsoft\Conferencing!NoAdva
ncedCalling
USER Administrative Templates\Windows
Components\NetMeeting\Options
Page
DisableAudioPage Hide the Audio page HKLM\Software\Policies\Microsoft\Conferencing!NoAudi
oPage
USER Administrative Templates\Windows
Components\NetMeeting\Options
DisableGeneralPage Hide the General page HKLM\Software\Policies\Microsoft\Conferencing!NoGene
ralPage
Active Directory Training Seminar: Group Policy Programming/Registry Reference
88 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Page
USER Administrative Templates\Windows
Components\NetMeeting\Options
Page
DisableSecurityPage Hide the Security page HKLM\Software\Policies\Microsoft\Conferencing!NoSecu
rityPage
USER Administrative Templates\Windows
Components\NetMeeting\Options
Page
DisableVideoPage Hide the Video page HKLM\Software\Policies\Microsoft\Conferencing!NoVide
oPage
USER Administrative Templates\Windows
Components\Task Scheduler
AllowBrowse Prohibit Browse HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Allow Browse
USER Administrative Templates\Windows
Components\Task Scheduler
DisableAdvanced Hide Advanced Properties
Checkbox in Add Scheduled
Task Wizard
HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Disable Advanced
USER Administrative Templates\Windows
Components\Task Scheduler
DragAndDrop Prohibit Drag-and-Drop HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!DragAndDrop
USER Administrative Templates\Windows
Components\Task Scheduler
Execution Prevent Task Run or End HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Execution
USER Administrative Templates\Windows
Components\Task Scheduler
PropertyPages Hide Property Pages HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Property Pages
USER Administrative Templates\Windows
Components\Task Scheduler
TaskCreation Prohibit New Task Creation HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Task Creation
USER Administrative Templates\Windows
Components\Task Scheduler
TaskDeletion Prohibit Task Deletion HKLM\Software\Policies\Microsoft\Windows\Task
Scheduler5.0!Task Deletion
USER Administrative Templates\Windows
Components\Terminal Services
TS_RemoteControl Sets rules for remote control
of Terminal Services user
sessions
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!Shadow
USER Administrative Templates\Windows
Components\Terminal Services
TS_START_PROGRAM Start a program on
connection
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!InitialProgram,
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!WorkDirectory,
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fInheritInitialProgram
USER Administrative Templates\Windows
Components\Terminal
TS_CLIENT_DISABLE_PASSWORD
_SAVING
Do not allow passwords to
be saved
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!DisablePasswordSaving
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 89
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Services\Client
USER Administrative Templates\Windows
Components\Terminal
Services\Sessions
TS_Session_End_On_Limit Terminate session when
time limits are reached
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fResetBroken
USER Administrative Templates\Windows
Components\Terminal
Services\Sessions
TS_Sessions_Disconnected_Timeout Set time limit for
disconnected sessions
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!MaxDisconnectionTime VALUE 0,
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!MaxDisconnectionTime
USER Administrative Templates\Windows
Components\Terminal
Services\Sessions
TS_Sessions_Idle_Limit Sets a time limit for active
but idle Terminal Services
sessions
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!MaxIdleTime
USER Administrative Templates\Windows
Components\Terminal
Services\Sessions
TS_Sessions_Limits Sets a time limit for active
Terminal Services sessions
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!MaxConnectionTime
USER Administrative Templates\Windows
Components\Terminal
Services\Sessions
TS_Sessions_Reconnect_Same Allow reconnection from
original client only
HKLM\SOFTWARE\Policies\Microsoft\Windows
NT\Terminal Services!fReconnectSame
USER Administrative Templates\Windows
Components\Windows Explorer
ClassicShell Turn on Classic Shell HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!ClassicShell
USER Administrative Templates\Windows
Components\Windows Explorer
ConfirmFileDelete Display confirmation dialog
when deleting files
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!ConfirmFileDelete
USER Administrative Templates\Windows
Components\Windows Explorer
EnforceShellExtensionSecurity Allow only per user or
approved shell extensions
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!EnforceShellExtensionSecurity
USER Administrative Templates\Windows
Components\Windows Explorer
LinkResolveIgnoreLinkInfo Do not track Shell shortcuts
during roaming
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!LinkResolveIgnoreLinkInfo
USER Administrative Templates\Windows
Components\Windows Explorer
MaxRecentDocs Maximum number of recent
documents
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!MaxRecentDocs
USER Administrative Templates\Windows
Components\Windows Explorer
NoCacheThumbNailPictures Turn off caching of
thumbnail pictures
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoThumbnailCache
USER Administrative Templates\Windows
Components\Windows Explorer
NoCDBurning Remove CD Burning
features
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoCDBurning
USER Administrative Templates\Windows NoChangeAnimation Remove UI to change menu HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Active Directory Training Seminar: Group Policy Programming/Registry Reference
90 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Components\Windows Explorer animation setting ies\Explorer!NoChangeAnimation
USER Administrative Templates\Windows
Components\Windows Explorer
NoChangeKeyboardNavigationIndicat
ors
Remove UI to change
keyboard navigation
indicator setting
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoChangeKeyboardNavigationIndicators
USER Administrative Templates\Windows
Components\Windows Explorer
NoDFSTab Remove DFS tab HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoDFSTab
USER Administrative Templates\Windows
Components\Windows Explorer
NoDrives Hide these specified drives
in My Computer
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoDrives
USER Administrative Templates\Windows
Components\Windows Explorer
NoEntireNetwork No Entire Network in My
Network Places
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoEntireNetwork
USER Administrative Templates\Windows
Components\Windows Explorer
NoFileMenu Remove File menu from
Windows Explorer
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoFileMenu
USER Administrative Templates\Windows
Components\Windows Explorer
NoFolderOptions Removes the Folder Options
menu item from the Tools
menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoFolderOptions
USER Administrative Templates\Windows
Components\Windows Explorer
NoHardwareTab Remove Hardware tab HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoHardwareTab
USER Administrative Templates\Windows
Components\Windows Explorer
NoManageMyComputerVerb Hides the Manage item on
the Windows Explorer
context menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoManageMyComputerVerb
USER Administrative Templates\Windows
Components\Windows Explorer
NoMyComputerSharedDocuments Remove Shared Documents
from My Computer
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoSharedDocuments
USER Administrative Templates\Windows
Components\Windows Explorer
NoNetConnectDisconnect Remove Map Network Drive
and Disconnect Network
Drive
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoNetConnectDisconnect
USER Administrative Templates\Windows
Components\Windows Explorer
NoRecycleFiles Do not move deleted files to
the Recycle Bin
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoRecycleFiles
USER Administrative Templates\Windows
Components\Windows Explorer
NoRunAsInstallPrompt Do not request alternate
credentials
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoRunasInstallPrompt
USER Administrative Templates\Windows
Components\Windows Explorer
NoSecurityTab Remove Security tab HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoSecurityTab
USER Administrative Templates\Windows NoShellSearchButton Remove Search button from HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 91
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Components\Windows Explorer Windows Explorer ies\Explorer!NoShellSearchButton
USER Administrative Templates\Windows
Components\Windows Explorer
NoViewContextMenu Remove Windows Explorer's
default context menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoViewContextMenu
USER Administrative Templates\Windows
Components\Windows Explorer
NoViewOnDrive Prevent access to drives
from My Computer
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoViewOnDrive
USER Administrative Templates\Windows
Components\Windows Explorer
NoWindowsHotKeys Turn off Windows+X hotkeys HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!NoWinKeys
USER Administrative Templates\Windows
Components\Windows Explorer
NoWorkgroupContents No Computers Near Me in
My Network Places
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoComputersNearMe
USER Administrative Templates\Windows
Components\Windows Explorer
PromptRunasInstallNetPath Request credentials for
network installations
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!PromptRunasInstallNetPath
USER Administrative Templates\Windows
Components\Windows Explorer
RecycleBinSize Maximum allowed Recycle
Bin size
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Network!RecycleBinSize
USER Administrative Templates\Windows
Components\Windows
Explorer\Common Open File Dialog
NoBackButton Hide the common dialog
back button
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\comdlg32\Placesbar!NoBackButton
USER Administrative Templates\Windows
Components\Windows
Explorer\Common Open File Dialog
NoFileMRU Hide the dropdown list of
recent files
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\comdlg32\Placesbar!NoFileMru
USER Administrative Templates\Windows
Components\Windows
Explorer\Common Open File Dialog
NoPlacesBar Hide the common dialog
places bar
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\comdlg32\Placesbar!NoPlacesBar
USER Administrative Templates\Windows
Components\Windows
Explorer\Common Open File Dialog
PlacesBar Items displayed in Places
Bar
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\comdlg32\Placesbar!Place0,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\comdlg32\Placesbar!Place1,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\comdlg32\Placesbar!Place2,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\comdlg32\Placesbar!Place3,
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\comdlg32\Placesbar!Place4
USER Administrative Templates\Windows AlwaysInstallElevated Always install with elevated HKLM\Software\Policies\Microsoft\Windows\Installer!Alw
Active Directory Training Seminar: Group Policy Programming/Registry Reference
92 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Components\Windows Installer privileges aysInstallElevated
USER Administrative Templates\Windows
Components\Windows Installer
DisableMedia Prevent removable media
source for any install
HKLM\Software\Policies\Microsoft\Windows\Installer!Dis
ableMedia
USER Administrative Templates\Windows
Components\Windows Installer
DisableRollback Prohibit rollback HKLM\Software\Policies\Microsoft\Windows\Installer!Dis
ableRollback
USER Administrative Templates\Windows
Components\Windows Installer
SearchOrder Search order HKLM\Software\Policies\Microsoft\Windows\Installer!Sea
rchOrder
USER Administrative Templates\Windows
Components\Windows Media Player
PreventCDDVDMetadataRetrieval Prevent CD and DVD Media
Information Retrieval
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
PreventCDDVDMetadataRetrieval
USER Administrative Templates\Windows
Components\Windows Media Player
PreventMusicFileMetadataRetrieval Prevent Music File Media
Information Retrieval
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
PreventMusicFileMetadataRetrieval
USER Administrative Templates\Windows
Components\Windows Media Player
PreventRadioPresetsRetrieval Prevent Radio Station
Preset Retrieval
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
PreventRadioPresetsRetrieval
USER Administrative Templates\Windows
Components\Windows Media
Player\Networking
ConfigureHTTPProxySettings Configure HTTP Proxy HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!ProxyPolicy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!ProxyType,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!AutodetectProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!UseProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!UseBrowserProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!UseProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!AutodetectProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!UseBrowserProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!UseBrowserProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!AutodetectProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!UseProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 93
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Protocols\HTTP!ProxyAddress,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!ProxyPort,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!BypassProxyLocal,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\HTTP!BypassProxyLocalAddress
USER Administrative Templates\Windows
Components\Windows Media
Player\Networking
ConfigureMMSProxySettings Configure MMS Proxy HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\MMS!ProxyPolicy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\MMS!ProxyType,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\MMS!AutodetectProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\MMS!UseProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\MMS!UseProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\MMS!AutodetectProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\MMS!ProxyAddress,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\MMS!ProxyPort,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\MMS!BypassProxyLocal,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\MMS!BypassProxyLocalAddress
USER Administrative Templates\Windows
Components\Windows Media
Player\Networking
ConfigureRTSPProxySettings Configure RTSP Proxy HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\RTSP!ProxyPolicy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\RTSP!ProxyType,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\RTSP!AutodetectProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\RTSP!UseProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\RTSP!UseProxy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\RTSP!AutodetectProxy,
Active Directory Training Seminar: Group Policy Programming/Registry Reference
94 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\RTSP!ProxyAddress,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\RTSP!ProxyPort,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\RTSP!BypassProxyLocal,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols\RTSP!BypassProxyLocalAddress
USER Administrative Templates\Windows
Components\Windows Media
Player\Networking
DisableNetworkSettings Hide Network Tab HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
HideNetworkTab
USER Administrative Templates\Windows
Components\Windows Media
Player\Networking
NetworkBuffering Configure Network Buffering HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
NetworkBufferingPolicy,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
BufferingType,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
UseDefaultBuffering,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
UseDefaultBuffering,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
NetworkBuffering
USER Administrative Templates\Windows
Components\Windows Media
Player\Networking
WindowsStreamingMediaProtocols Streaming Media Protocols HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols!WindowsMediaStreamingProtocols,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols!Multicast,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols!UDP,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols!UDPPorts,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols!TCP,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer\
Protocols!HTTP
USER Administrative Templates\Windows
Components\Windows Media
Player\Playback
EnableScreenSaver Allow Screen Saver HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
EnableScreenSaver
USER Administrative Templates\Windows PolicyCodecUpdate Prevent Codec Download HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 95
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
Components\Windows Media
Player\Playback
PreventCodecDownload
USER Administrative Templates\Windows
Components\Windows Media
Player\User Interface
DoNotShowAnchor Do Not Show Anchor HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
DoNotShowAnchor
USER Administrative Templates\Windows
Components\Windows Media
Player\User Interface
HidePrivacyTab Hide Privacy Tab HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
HidePrivacyTab
USER Administrative Templates\Windows
Components\Windows Media
Player\User Interface
HideSecurityTab Hide Security Tab HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
HideSecurityTab
USER Administrative Templates\Windows
Components\Windows Media
Player\User Interface
SkinLockDown Set and Lock Skin HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
SetAndLockSkin,
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!
DefaultSkin
USER Administrative Templates\Windows
Components\Windows Messenger
WinMSG_NoAutoStartWindowsMsg_
User
Do not automatically start
Windows Messenger initially
HKLM\Software\Policies\Microsoft\Messenger\Client!Pre
ventAutoRun
USER Administrative Templates\Windows
Components\Windows Messenger
WinMSG_NoWindowsMsg_User Do not allow Windows
Messenger to be run
HKLM\Software\Policies\Microsoft\Messenger\Client!Pre
ventRun
USER Administrative Templates\Windows
Components\Windows Movie Maker
MovieMaker_Disable Do not allow Windows Movie
Maker to run
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!
MovieMaker
USER Administrative Templates\Windows
Components\Windows Update
RemoveWindowsUpdate Remove access to use all
Windows Update features
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\WindowsUpdate!DisableWindowsUpdateAccess
USER Administrative Templates\Windows
NT Shell\Custom folders
CustomFolders_Desktop Custom desktop icons HKLM\Software\Microsoft\Windows\CurrentVersion\Expl
orer\User Shell Folders!Desktop
USER Administrative Templates\Windows
NT Shell\Custom folders
CustomFolders_NetHood Custom Network
Neighborhood
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NetHood
USER Administrative Templates\Windows
NT Shell\Custom folders
CustomFolders_Programs Custom Programs folder HKLM\Software\Microsoft\Windows\CurrentVersion\Expl
orer\User Shell Folders!Programs
USER Administrative Templates\Windows
NT Shell\Custom folders
CustomFolders_StartMenu Custom Start menu HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!Start Menu
USER Administrative Templates\Windows CustomFolders_Startup Custom Startup folder HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
Active Directory Training Seminar: Group Policy Programming/Registry Reference
96 2004-2005 www.williamstanek.com
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
NT Shell\Custom folders ies\Explorer!Startup
USER Administrative Templates\Windows
NT Shell\Custom folders
HideStartMenuSubfolders Hide Start menu subfolders HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoStartMenuSubFolders
USER Administrative Templates\Windows
NT Shell\Custom user interface
ShellName Custom shell HKLM\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon!Shell
USER Administrative Templates\Windows NT Shell\Restrictions
USER Administrative Templates\Windows
NT Shell\Restrictions
DisableLinkTracking Disable link file tracking HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!LinkResolveIgnoreLinkInfo
USER Administrative Templates\Windows
NT Shell\Restrictions
NoCommonGroups Remove common program
groups from Start menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoCommonGroups
USER Administrative Templates\Windows
NT Shell\Restrictions
NoDisconnectMenu Remove Disconnect item
from Start menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoDisconnect
USER Administrative Templates\Windows
NT Shell\Restrictions
NoFileAssociate Prevent user from changing
file type associations
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoFileAssociate
USER Administrative Templates\Windows
NT Shell\Restrictions
NoFileMenu Remove File menu from
Explorer
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoFileMenu
USER Administrative Templates\Windows
NT Shell\Restrictions
NoGoTo Remove Tools->GoTo menu
from Explorer
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoGoTo
USER Administrative Templates\Windows
NT Shell\Restrictions
NoNetConnectDisconnect Remove the Map Network
Drive and Disconnect
Network Drive options
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoNetConnectDisconnect
USER Administrative Templates\Windows
NT Shell\Restrictions
NoNtSecurityMenu Remove NT Security item
from Start menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoNTSecurity
USER Administrative Templates\Windows
NT Shell\Restrictions
NoOptions Remove View->Options
menu from Explorer
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoOptions
USER Administrative Templates\Windows
NT Shell\Restrictions
NoTrayContextMenu Disable context menus for
the taskbar
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoTrayContextMenu
USER Administrative Templates\Windows
NT Shell\Restrictions
NoViewContextMenu Disable Explorer's default
context menu
HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoViewContextMenu
USER Administrative Templates\Windows
NT System
DisableChangePassword Disable Change Password HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!DisableChangePassword
Active Directory Training Seminar: Group Policy Programming/Registry Reference
2004-2005 www.williamstanek.com 97
Node Policy Path Symbolic Policy Name Full Policy Name Registry Settings
USER Administrative Templates\Windows
NT System
DisableLockWorkstation Disable Lock Workstation HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!DisableLockWorkstation
USER Administrative Templates\Windows
NT System
DisableLogoff Disable Logoff HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\Explorer!NoLogoff
USER Administrative Templates\Windows
NT System
DisableTaskMgr Disable Task Manager HKLM\Software\Microsoft\Windows\CurrentVersion\Polic
ies\System!DisableTaskMgr
USER Administrative Templates\Windows
NT System
Parse_Autoexec Parse Autoexec.bat HKLM\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon!ParseAutoexec
USER Administrative Templates\Windows
NT System
Run_Logon_Script_Sync Run logon scripts
synchronously.
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon!RunLogonScriptSync
USER Administrative Templates\Windows
NT System
ShowWelcome Show welcome tips at logon HKLM\Software\Microsoft\Windows\CurrentVersion\Expl
orer\Tips!Show
USER Administrative Templates\Windows
NT User Profiles
ExcludeDirectories Exclude directories in
roaming profile
HKLM\Software\Policies\Microsoft\Windows\System!Excl
udeProfileDirs
USER Administrative Templates\Windows
NT User Profiles
LimitSize Limit profile size