Showing posts with label Windows Registry. Show all posts
Showing posts with label Windows Registry. Show all posts

680-Start a program on connection


Group Policy : Start a program on connection
 
Group Policy Supported on :
Group Policy Explain :
   Configures Terminal Services to run a specified program automatically upon connection. You can use this setting to specify a program to run automatically when a user logs on to a remote computer. By default, Terminal Services sessions provide access to the full Windows desktop, unless otherwise specified with this setting, by the server administrator, or by the user in configuring the client connection. Enabling this setting overrides the Start Program settings set by the server administrator or user. The Start menu and Windows Desktop are not displayed, and when the user exits the program the session is automatically logged off. To use this setting, in Program path and file name, type the fully qualified path and file name of the executable file to be run when the user logs on. If necessary, in Working Directory, type the fully qualified path to the starting directory for the program. If you leave Working Directory blank, the program runs with its default working directory. If the specified program path, file name, or working directory is not the name of a valid directory, the terminal server connection fails with an error message. If the status is set to Enabled, Terminal Services sessions automatically run the specified program and use the specified Working Directory (or the program default directory, if Working Directory is not specified) as the working directory for the program. If the status is set to Disabled or Not Configured, Terminal Services sessions start with the full desktop, unless the server administrator or user specify otherwise. (See Computer Config\Administrative templates\Windows Components\System\Logon\Run these programs at user logon setting.) Note: This setting appears in both Computer Configuration and User Configuration. If both settings are configured, the Computer Configuration setting overrides.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Terminal Services
Group Policy Registry Settings :
  hkcu\software\policies\microsoft\windows nt\terminal services!initialprogram, hkcu\software\policies\microsoft\windows nt\terminal services!workdirectory, hkcu\software\policies\microsoft\windows nt\terminal services!finheritinitialprogram


Enhanced by Zemanta

Posted By Ahmed Gamal12:30 AM

678-Hide Advanced Properties Checkbox in Add Scheduled Task Wizard


Group Policy : Hide Advanced Properties Checkbox in Add Scheduled Task Wizard

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   This setting removes the Open advanced properties for this task when I click Finish checkbox from the last page of the Scheduled Task Wizard. This policy is only designed to simplify task creation for beginning users. The checkbox, when checked, instructs Task Scheduler to automatically open the newly created task's property sheet upon completion of the Add Scheduled Task wizard. The task's property sheet allows users to change task characteristics such as: the program the task runs, details of its schedule, idle time and power management settings, and its security context. Beginning users will often not be interested or confused by having the property sheet displayed automatically. Note that the checkbox is not checked by default even if this setting is Disabled or Not Configured. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Task Scheduler
Group Policy Registry Settings :
  hkcu\software\policies\microsoft\windows\task scheduler5.0!disable advanced


Enhanced by Zemanta

Posted By Ahmed Gamal11:30 PM

676-Prohibit New Task Creation


Group Policy : Prohibit New Task Creation

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Prevents users from creating new tasks. This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also, the system does not respond when users try to move, paste, or drag programs or documents into the Scheduled Tasks folder. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration. Important: This setting does not prevent administrators of a computer from using At.exe to create new tasks or prevent administrators from submitting tasks from remote computers.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Task Scheduler
Group Policy Registry Settings :
  hkcu\software\policies\microsoft\windows\task scheduler5.0!task creation



Enhanced by Zemanta

Posted By Ahmed Gamal10:30 PM

673-Hide Property Pages


Group Policy : Hide Property Pages

 
Group Policy Supported on :
   At least Microsoft Windows 2000
Group Policy Explain :
   Prevents users from viewing and changing the properties of an existing task. This setting removes the Properties item from the File menu in Scheduled Tasks and from the context menu that appears when you right-click a task. As a result, users cannot change any properties of a task. They can only see the properties that appear in Detail view and in the task preview. This setting prevents users from viewing and changing characteristics such as the program the task runs, its schedule details, idle time and power management settings, and its security context. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration. Tip: This setting affects existing tasks only. To prevent users from changing the properties of newly created tasks, use the Remove Advanced Menu setting.
Group Policy Computer/User Node :
   USER
Group Policy Path :
Group Policy Registry Settings :
  hkcu\software\policies\microsoft\windows\task scheduler5.0!property pages


Enhanced by Zemanta

Posted By Ahmed Gamal9:00 PM

672-Software Installation (Users)


{Group Policy : Software Installation {Users

 
Group Policy Supported on :
   At least Microsoft Windows XP Professional or Windows Server 2003 family
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Policy snap-in extensions
  hkcu\software\policies\microsoft\mmc\{1bc972d6-555c-4ff7-be2c-c584021a0a6a}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal8:30 PM

671-Software Installation (Computers)


{Group Policy : Software Installation {Computers

 
Group Policy Supported on :
   At least Microsoft Windows XP Professional or Windows Server 2003 family
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Policy snap-in extensions
  hkcu\software\policies\microsoft\mmc\{7e45546f-6d52-4d10-b702-9c2e67232e62}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal8:00 PM

670-Security Settings


Group Policy : Security Settings

 
Group Policy Supported on :
   At least Microsoft Windows XP Professional or Windows Server 2003 family
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Policy snap-in extensions
  hkcu\software\policies\microsoft\mmc\{fe883157-cebd-4570-b7a2-e4fe06abe626}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal7:30 PM

669-Scripts (Startup/Shutdown)


{Group Policy : Scripts {Startup/Shutdown

 
Group Policy Supported on :
   At least Microsoft Windows XP Professional or Windows Server 2003 family
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Policy snap-in extensions
  hkcu\software\policies\microsoft\mmc\{40b66660-4972-11d1-a7ca-0000f87571e3}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal7:00 PM

668-Scripts (Logon/Logoff)


{Group Policy : Scripts {Logon/Logoff

 
Group Policy Supported on :
   At least Microsoft Windows XP Professional or Windows Server 2003 family
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Policy snap-in extensions
  hkcu\software\policies\microsoft\mmc\{40b66661-4972-11d1-a7ca-0000f87571e3}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal6:30 PM

667-Internet Explorer Maintenance


Group Policy : Internet Explorer Maintenance

 
Group Policy Supported on :
   At least Microsoft Windows XP Professional or Windows Server 2003 family
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Policy snap-in extensions
  hkcu\software\policies\microsoft\mmc\{d524927d-6c08-46bf-86af-391534d779d3}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal6:00 PM

666-Folder Redirection


Group Policy : Folder Redirection

 
Group Policy Supported on :
   At least Microsoft Windows XP Professional or Windows Server 2003 family
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Policy snap-in extensions
  hkcu\software\policies\microsoft\mmc\{c40d66a0-e90c-46c6-aa3b-473e38c72bf2}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal5:30 PM

665-Administrative Templates (Users)


{Group Policy : Administrative Templates {Users

 
Group Policy Supported on :
   At least Microsoft Windows XP Professional or Windows Server 2003 family
Group Policy Explain :
   Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is not configured, the setting of the Restrict users to the explicitly permitted list of snap-ins setting determines whether this snap-in is permitted or prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited. -- If Restrict users to the explicitly permitted list of snap-ins is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted. When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Group Policy\Resultant Set of Policy snap-in extensions
  hkcu\software\policies\microsoft\mmc\{b6f9c8af-ef3a-41c8-a911-37370c331dd4}!restrict_run


Enhanced by Zemanta

Posted By Ahmed Gamal5:00 PM