Showing posts with label Microsoft Windows 2000 Group Policy Explain. Show all posts
Showing posts with label Microsoft Windows 2000 Group Policy Explain. Show all posts

679-Prohibit Browse


Group Policy : Prohibit Browse

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for existing tasks. This setting removes the Browse button from the Schedule Task Wizard and from the Task tab of the properties dialog box for a task. Also, users cannot edit the Run box or the Start in box that determine the program and path for a task. As a result, when users create a task, they must select a program from the list in the Scheduled Task Wizard, which displays only the tasks that appear on the Start menu and its submenus. Once a task is created, users cannot change the program a task runs. Important: This setting does not prevent users from creating a new task by pasting or dragging any program into the Scheduled Tasks folder. To prevent this action, use the Prohibit Drag-and-Drop setting. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Task Scheduler
Group Policy Registry Settings :
  hkcu\software\policies\microsoft\windows\task scheduler5.0!allow browse


Enhanced by Zemanta

Posted By Ahmed Gamal12:00 AM

675-Prohibit Drag-and-Drop


Group Policy : Prohibit Drag-and-Drop

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder. This setting disables the Cut, Copy, Paste, and Paste shortcut items on the context menu and the Edit menu in Scheduled Tasks. It also disables the drag-and-drop features of the Scheduled Tasks folder. As a result, users cannot add new scheduled tasks by dragging, moving, or copying a document or program into the Scheduled tasks folder. This setting does not prevent users from using other methods to create new tasks, and it does not prevent users from deleting tasks. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Task Scheduler
Group Policy Registry Settings :
  hkcu\software\policies\microsoft\windows\task scheduler5.0!draganddrop


Enhanced by Zemanta

Posted By Ahmed Gamal10:00 PM

674-Prevent Task Run or End


Group Policy : Prevent Task Run or End

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Prevents users from starting and stopping tasks manually. This setting removes the Run and End Task items from the context menu that appears when you right-click a task. As a result, users cannot start tasks manually or force tasks to end before they are finished. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.
Group Policy Computer/User Node :
   USER
Group Policy Path :
Group Policy Registry Settings :
  hkcu\software\policies\microsoft\windows\task scheduler5.0!execution


Enhanced by Zemanta

Posted By Ahmed Gamal9:30 PM

673-Hide Property Pages


Group Policy : Hide Property Pages

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Prevents users from viewing and changing the properties of an existing task. This setting removes the Properties item from the File menu in Scheduled Tasks and from the context menu that appears when you right-click a task. As a result, users cannot change any properties of a task. They can only see the properties that appear in Detail view and in the task preview. This setting prevents users from viewing and changing characteristics such as the program the task runs, its schedule details, idle time and power management settings, and its security context. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration. Tip: This setting affects existing tasks only. To prevent users from changing the properties of newly created tasks, use the Remove Advanced Menu setting.
Group Policy Computer/User Node :
   USER
Group Policy Path :
Group Policy Registry Settings :
  hkcu\software\policies\microsoft\windows\task scheduler5.0!property pages


Enhanced by Zemanta

Posted By Ahmed Gamal9:00 PM

662-Software Installation (Users)


{Group Policy : Software Installation {Users

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-in extensions
  hkcu\software\policies\microsoft\mmc\{bacf5c8a-a3c7-11d1-a760-00c04fb9603f}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal3:30 PM

657-Remote Installation Services


Group Policy : Remote Installation Services

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-in extensions
  hkcu\software\policies\microsoft\mmc\{3060e8ce-7020-11d2-842d-00c04fa372d4}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal1:00 PM

655-Folder Redirection


Group Policy : Folder Redirection

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Group Policy snap-in extensions
  hkcu\software\policies\microsoft\mmc\{88e729d6-bdc1-11d1-bd2a-00c04fb9603f}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal12:00 PM

651-Group Policy tab for Active Directory Tools


Group Policy : Group Policy tab for Active Directory Tools

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory Sites and Services snap-ins. If you enable this setting, the Group Policy tab is displayed in the property sheet for a site, domain, or organizational unit diplayed by the Active Directory Users and Computers and Active Directory Sites and Services snap-ins. If you disable the setting, the Group Policy tab is not displayed in those snap-ins. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this tab is displayed. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users will not have access to the Group Policy tab. To explicitly permit use of the Group Policy tab, enable this setting. If this setting is not configured (or disabled), the Group Policy tab is inaccessible. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users will have access to the Group Policy tab. To explicitly prohibit use of the Group Policy tab, disable this setting. If this setting is not configured (or enabled), the Group Policy tab is accessible. When the Group Policy tab is inaccessible, it does not appear in the site, domain, or organizational unit property sheets.
Group Policy Computer/User Node :
   USER
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy
  hkcu\software\policies\microsoft\mmc\{d70a2bea-a63e-11d1-a7d4-0000f87571e3}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal10:00 AM

637-Public Key Policies


Group Policy : Public Key Policies

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins
  hkcu\software\policies\microsoft\mmc\{34ab8e82-c27e-11d1-a6c0-00c04fb94f17}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal1:00 AM

636-OSPF Routing


Group Policy : OSPF Routing

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins
  hkcu\software\policies\microsoft\mmc\{c2fe4506-d6c2-11d0-a37b-00c04fc9da04}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal12:30 AM

630-IGMP Routing


Group Policy : IGMP Routing

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins
  hkcu\software\policies\microsoft\mmc\{c2fe4508-d6c2-11d0-a37b-00c04fc9da04}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal9:30 PM

629-IAS Logging


Group Policy : IAS Logging

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins
  hkcu\software\policies\microsoft\mmc\{2e19b602-48eb-11d2-83ca-00104bca42cf}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal9:00 PM