521-Enforce Show Policies Only

Group Policy : Enforce Show Policies Only

 

Group Policy Guide

Group Policy Supported on :

   At least Microsoft Windows 2000

Group Policy Explain :

   Prevents administrators from viewing or using Group Policy preferences. A Group Policy administration (.adm) file can contain both true settings and preferences. True settings, which are fully supported by Group Policy, must use registry entries in the Software\Policies or Software\Microsoft\Windows\CurrentVersion\Policies registry subkeys. Preferences, which are not fully supported, use registry entries in other subkeys. If you enable this setting, the Show Policies Only command is turned on, and administrators cannot turn it off. As a result, Group Policy Object Editor displays only true settings; preferences do not appear. If you disable this setting or do not configure it, the Show Policies Only command is turned on by default, but administrators can view preferences by turning off the Show Policies Only command. Note: To find the Show Policies Only command, in Group Policy Object Editor, click the Administrative Templates folder (either one), right-click the same folder, and then point to View. In Group Policy Object Editor, preferences have a red icon to distinguish them from true settings, which have a blue icon.

Group Policy Computer/User Node :

   USER

Group Policy Path :

   Administrative Templates\System\Group Policy

Group Policy Registry Settings :

  hkcu\software\policies\microsoft\windows\group policy editor!showpoliciesonly