Prevent changing the default search provider. Turn off configuration of pop- up windows in tabbed browsing. Turn off tabbed browsing. Prevent configuration of how windows open.
Notify users if Internet Explorer is not the default web browser. Configure Outlook Express. Pop- up allow list. Disable changing accessibility settings. Disable changing Automatic Configuration settings. Disable changing Temporary Internet files settings. Disable changing Calendar and Contact settings. Disable changing certificate settings. Disable changing default browser check. Disable changing color settings. Disable changing connection settings.
Disable Internet Connection wizard. Disable changing font settings. Disable AutoComplete for forms. Turn on the auto- complete feature for user names and passwords on forms. Disable changing home page settings. Disable changing language settings.
Disable changing link color settings. Disable changing Messaging settings. Prevent managing pop- up exception list. Turn off pop- up management. Disable changing Profile Assistant settings. Prevent changing proxy settings.
Disable changing ratings settings. Disable the Reset Web Settings feature. Turn off the auto- complete feature for web addresses. Prevent participation in the Customer Experience Improvement Program. Turn off suggestions for all user- installed providers. Turn off the quick pick menu. Search: Disable Find Files via F3 within the browser.
Search: Disable Search Customization. Disable changing secondary home page settings. Restrict search providers to a specific list. Prevent configuration of new tab creation. Set tab process growth. Turn off ability to pin sites in Internet Explorer on the desktop. Turn on ActiveX Filtering. Location and Sensors. Turn off location scripting. Turn off location. Turn off sensors. Microsoft Management Console. Extension snap- ins. AppleTalk Routing. Authorization Manager. Certification Authority Policy Settings.
Connection Sharing NAT. Device Manager. Event Viewer. Event Viewer Windows Vista. IAS Logging. IGMP Routing. IP Routing. IPX Routing. Logical and Mapped Drives. OSPF Routing. Public Key Policies.
RIP Routing. Removable Storage. Remote Access. SMTP Protocol. Send Console Message. Service Dependencies. Shared Folders Ext. System Properties. Extended View Web View. Group Policy snap- in extensions. Administrative Templates Computers. Administrative Templates Users. Internet Explorer Maintenance. IP Security Policy Management. NAP Client Configuration. Remote Installation Services. Security Settings. Software Installation Computers. Software Installation Users. Windows Firewall with Advanced Security.
Resultant Set of Policy snap- in extensions. Group Policy Management. Group Policy Object Editor. Group Policy tab for Active Directory Tools. Resultant Set of Policy snap- in.
ADSI Edit. Active Directory Domains and Trusts. Active Directory Sites and Services. Active Directory Users and Computers. Certification Authority. Certificate Templates. Component Services. Computer Management. Distributed File System. Disk Defragmenter. Disk Management. Enterprise PKI.
FAX Service. Failover Clusters Manager. FrontPage Server Extensions. Internet Information Services. Indexing Service. IP Security Monitor. Local Users and Groups. Net Framework Configuration. Online Responder. Performance Logs and Alerts. QoS Admission Control. Routing and Remote Access. Removable Storage Management. Remote Desktops. Security Configuration and Analysis. Security Templates. Server Manager.
System Information. TPM Management. Remote Desktop Services Configuration. WMI Control. Wireless Monitor. ActiveX Control. Link to Web Address. Restrict the user from entering author mode. Restrict users to the explicitly permitted list of snap- ins. Application Sharing. Disable application Sharing. Prevent Control. Prevent Sharing.
Prevent Sharing Command Prompts. Prevent Desktop Sharing. Prevent Sharing Explorer windows. Prevent Application Sharing in true color. Disable Audio. Prevent changing DirectSound Audio setting. Disable full duplex Audio. Prevent receiving Video. Prevent sending Video. Limit the bandwidth of Audio and Video. Options Page. Disable the Advanced Calling button. Hide the Audio page. Hide the General page. Hide the Security page. Hide the Video page. Allow persisting automatic acceptance of Calls.
Disable Chat. Disable Whiteboard. Disable NetMeeting 2. Enable Automatic Configuration. Prevent adding Directory servers. Prevent automatic acceptance of Calls. Prevent changing Call placement method. Disable Directory services. Prevent receiving files. Prevent sending files. Prevent viewing Web directory. Limit the size of sent files. Set the intranet support Web page.
Set Call Security options. Network Projector. Turn off Connect to a Network Projector. Network Sharing. Prevent users from sharing files within their profile. Presentation Settings. Turn off Windows presentation settings. Remote Desktop Services. RD Gateway. Set RD Gateway authentication method. Enable connection through RD Gateway. Set RD Gateway server address. Remote Desktop Connection Client. Do not allow passwords to be saved.
Specify SHA1 thumbprints of certificates representing trusted. Remote Desktop Session Host. Set rules for remote control of Remote Desktop Services user sessions. Printer Redirection. Use Remote Desktop Easy Print printer driver first. Remote Session Environment. Start a program on connection. Session Time Limits. Set time limit for disconnected sessions. Set time limit for active but idle Remote Desktop Services sessions. Set time limit for active Remote Desktop Services sessions.
Terminate session when time limits are reached. RSS Feeds. Turn off background synchronization for feeds and Web Slices.
Prevent downloading of enclosures. Prevent subscribing to or deleting a feed or a Web Slice. Prevent automatic discovery of feeds and Web Slices.
Prevent access to feed list. Default excluded paths. Default indexed paths. Prevent indexing certain paths. Prevent customization of indexed locations in Control Panel. Sound Recorder. Do not allow Sound Recorder to run. Tablet PC. Do not allow Inkball to run. Do not allow Windows Journal to be run.
Do not allow printing to Journal Note Writer. Do not allow Snipping Tool to run. Turn off pen feedback. Handwriting personalization. Turn off automatic learning. Hardware Buttons. Prevent Back- ESC mapping. Prevent launch an application. Prevent press and hold. Turn off hardware buttons. Input Panel. Turn off AutoComplete integration with Input Panel.
Prevent Input Panel tab from appearing. Turn off password security in Input Panel. Disable text prediction. Include rarely used Chinese, Kanji, or Hanja characters. Turn off tolerant and Z- shaped scratch- out gestures. Pen Flicks Learning. Prevent Flicks Learning Mode. Pen UX Behaviors. Prevent flicks. Tablet PC Pen Training. Touch Input. Turn off Touch Panning. Turn off Tablet PC touch input. Task Scheduler. Prohibit Browse. Prohibit Drag- and- Drop. Prevent Task Run or End.
Hide Property Pages. Prohibit New Task Creation. Prohibit Task Deletion. Windows Anytime Upgrade. Prevent Windows Anytime Upgrade from running. Windows Calendar. Turn off Windows Calendar. Windows Color System. Prohibit installing or uninstalling color profiles.
Windows Error Reporting. Advanced Error Reporting Settings. Configure Report Archive. List of applications to be excluded. Configure Report Queue. Customize consent settings. Ignore custom consent settings. Configure Default consent. Disable Windows Error Reporting. Disable Logging. Do not send additional data. Windows Explorer. Common Open File Dialog. Hide the common dialog back button.
Hide the dropdown list of recent files. Hide the common dialog places bar. Items displayed in Places Bar. Explorer Frame Pane. Turn off Details Pane. Turn off Preview Pane. Previous Versions. Prevent restoring previous versions from backups. Hide previous versions list for local files. Prevent restoring local previous versions. Hide previous versions list for remote files.
Prevent restoring remote previous versions. Hide previous versions of files on backup location. Turn off the display of thumbnails and only display icons. Turn off the display of thumbnails and only display icons on network folders.
Turn off the caching of thumbnails in hidden thumbs. Do not display the Welcome Center at user logon. Turn on Classic Shell. Display confirmation dialog when deleting files. Disable binding directly to IPropertySetStorage without intermediate layers. Turn off Windows Libraries features that rely on indexed file data. Disable Known Folders. Turn off display of recent search entries in the Windows Explorer search box. Allow only per user or approved shell extensions. Turn off the display of snippets in Content view mode.
Do not track Shell shortcuts during roaming. Maximum number of recent documents. Remove CD Burning features. Turn off caching of thumbnail pictures. Remove UI to change menu animation setting.
Remove UI to change keyboard navigation indicator setting. Remove DFS tab. Hide these specified drives in My Computer. No Entire Network in Network Locations. Remove File menu from Windows Explorer.
Removes the Folder Options menu item from the Tools menu. Remove Hardware tab. Hides the Manage item on the Windows Explorer context menu. Remove Shared Documents from My Computer. Do not move deleted files to the Recycle Bin. Do not request alternate credentials. Remove the Search the Internet "Search again" link. Remove Security tab. Remove Search button from Windows Explorer. Turn off numerical sorting in Windows Explorer. Remove Windows Explorer's default context menu.
Prevent access to drives from My Computer. Request credentials for network installations. Maximum allowed Recycle Bin size. Turn off shell protocol protected mode. Pin Internet search sites to the "Search again" links and the Start menu. Display the menu bar in Windows Explorer. Prevent users from adding files to the root of their Users Files folder. Turn off common control and window animations.
Windows Installer. Always install with elevated privileges. Prevent removable media source for any install. Prohibit rollback. Search orde. Windows Logon Options. Remove logon hours expiration warnings. Set action to take when logon hours expire. Report when logon server was not available during user logon.
Windows Mail. Turn off the communities features. Turn off Windows Mail application. Windows Media Center. Do not allow Windows Media Center to run. Windows Media Player.
Configure MMS Proxy. Hide Network Tab. Configure Network Buffering. Streaming Media Protocols. Allow Screen Saver. Prevent Codec Download. User Interface. Do Not Show Anchor. Hide Privacy Tab. Hide Security Tab. The Directory pruning retry setting determines the number of times that the attempt is retried. The default value is two retries. The Directory Pruning Interval setting determines the time interval between retries.
The default value is eight hours. If the computer has not responded by the last contact attempt, its printers are pruned from the directory. Pre-populate printer search location text: Enables the physical Location Tracking setting for Windows printers. Use Location Tracking to design a location scheme for your enterprise and assign computers and printers to locations in the scheme.
Location Tracking overrides the standard method that is used to locate and associate computers and printers. The standard method uses a printer's IP address and subnet mask to estimate its physical location and proximity to computers. If you enable this setting, users can browse for printers by location without knowing the printer's location or location naming scheme. By default, if you enable the Group Policy Computer location setting, the default location that you entered appears in the Location field.
Printer Browsing: If you enable this setting, the print subsystem announces shared printers for printer browsing. You should disable this setting if you do not want the print subsystem to add shared printers to the browse list. If this setting is not configured, shared printers are not added to the browse list if a Directory service is available but are added if a Directory service is unavailable. Prune printers that are not automatically republished: This setting determines whether printers can be pruned from the directory.
It is usually best to leave this setting unconfigured. However, if you find that printers are being pruned even though the computer from which they are published is functioning and on the network, you can enable this policy to prevent the pruning service from deleting the published printers during network outages or situations in which dial-up links that are up only intermittently are used.
To prevent printers from being removed from Active Directory, enable this policy, and retain the default selection of Never in the Prune non-republishing printers list. Web-based printing: This policy bit is designed for administrators to disable Internet printing entirely. When this policy bit is selected, none of the shared printers on the server are published to the web, and none of the shared printers are able to accept incoming jobs from other clients by using HTTP.
MSC, and then press Enter. Right-click the newly created Group Policy Object, and then click Edit. This opens Group Policy Management Editor. The following additional settings can be enabled under Computer Configuration :. Add Printer wizard - Network scan page Managed network : This policy sets the maximum number of printers of each type that the Add Printer wizard will display on a computer on a managed network when the computer is able to reach a domain controller for example, a domain-joined laptop on a corporate network.
Add Printer wizard - Network scan page Unmanaged network : This policy sets the maximum number of printers of each type that the Add Printer wizard will display on a computer on an unmanaged network when the computer is not able to reach a domain controller for example, a domain-joined laptop on a home network. Always render print jobs on the server: When printing through a print server, determines whether the print spooler on the client will process print jobs itself or pass them on to the server to do the work.
This policy setting affects printing to a Windows print server only. Execute print drivers in isolated processes: This policy setting determines whether the print spooler will execute print drivers in an isolated or separate process. When print drivers are loaded in an isolated process or isolated processes , a print driver failure will not cause the print spooler service to fail. Extend Point and Print connection to search Windows Update: This policy setting allows you to manage where client computers search for Point and Print drivers.
If you enable this policy setting, the client computer will continue to search for compatible Point and Print drivers from Windows Update after it fails to find the compatible driver from the local driver store and the server driver cache.
Only use Package Point and print: This policy restricts client computers to use package point and print only. If this setting is enabled, users will be able to point and print only to printers that use package-aware drivers.
When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers. Override print driver execution compatibility setting reported by print driver: This policy setting determines whether the print spooler will override the Driver Isolation compatibility that is reported by the print driver.
This enables executing print drivers in an isolated process even if the driver does not report compatibility. If you enable this policy setting, the print spooler will ignore the Driver Isolation compatibility flag value that is reported by the print driver.
Package Point and print - Approved servers: Restricts package point and print to approved servers. This policy setting restricts package point and print connections to approved servers. This setting applies only to Package Point and Print connections and is completely independent from the "Point and Print Restrictions" policy that governs the behavior of non-package point and print connections.
Clinet that are running Windows Vista or a later version of Windows will try to make a non-package point and print connection any time that a package point and print connection fails. This includes attempts that are blocked by this policy. Administrators may have to set both policies to block all print connections to a specific print server.
If this setting is enabled, users will be able to package point and print only to print servers that are approved by the network administrator. Point and Print Restrictions: This policy setting controls the client Point and Print behavior, including the security prompts for Windows Vista computers.
The policy setting applies only to non-Print Administrator clients, and only to computers that are members of a domain. When the policy setting is enabled, the following conditions obtain:. Windows XP and later clients will only download print driver components from a list of explicitly named servers.
If a compatible print driver is available on the client, a printer connection will be made. If a compatible print driver is not available on the client, no connection will be made. The standard method uses a printer's IP address and subnet mask to estimate its physical location and proximity to computers. If you enable this setting, users can browse for printers by location without knowing the printer's location or location naming scheme.
If you enable the Group Policy Computer location setting, the default location you entered appears in the Location field by default.
If you disable this setting or do not configure it, Location Tracking is disabled. Printer proximity is estimated using the standard method that is, based on IP address and subnet mask. This policy setting determines whether the print spooler will execute print drivers in an isolated or separate process.
When print drivers are loaded in an isolated process or isolated processes , a print driver failure will not cause the print spooler service to fail. If you enable or do not configure this policy setting, the print spooler will execute print drivers in an isolated process by default.
If you disable this policy setting, the print spooler will execute print drivers in the print spooler process. This policy setting determines whether the print spooler will override the Driver Isolation compatibility reported by the print driver. This enables executing print drivers in an isolated process, even if the driver does not report compatibility. If you enable this policy setting, the print spooler isolates all print drivers that do not explicitly opt out of Driver Isolation.
If you disable or do not configure this policy setting, the print spooler uses the Driver Isolation compatibility flag value reported by the print driver. If you enable this policy setting, these searches begin at the location you specify in the "Default Active Directory path" box. Otherwise, searches begin at the root of Active Directory. This setting only provides a starting point for Active Directory searches for printers.
It does not restrict user searches through Active Directory. On domains with Active Directory, shared printer resources are available in Active Directory and are not announced. If you enable this setting, the print spooler announces shared printers to the print browse main servers. If you disable this setting, shared printers are not announced to print browse main servers, even if Active Directory is not available.
If you do not configure this setting, shared printers are announced to browse main servers only when Active Directory is not available. A client license is used each time a client computer announces a printer to a print browse master on the domain.
V4 printer drivers may include an optional, customized user interface known as a printer extension. These extensions may provide access to more device features, but this may not be appropriate for all enterprises. If you disable this policy setting or do not configure it, then all printer extensions that have been installed will be allowed to run.
Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode.
Please rate your experience Yes No. Any additional feedback? Note This setting affects the server side of Internet printing only. Note This policy setting applies only to applications opted into isolation. This policy setting applies only to print drivers loaded by applications. Print drivers loaded by the print spooler are not affected. This policy setting is only checked once during the lifetime of a process.
After changing the policy, a running application must be relaunched before settings take effect. Note Web pages links only appear in the Printers folder when Web view is enabled. Note This setting affects the Add Printer Wizard only. Note This policy does not determine whether offline printing will be available to the client. Note This policy does not apply to bit kernel-mode printer drivers as they cannot be installed and associated with a print queue.
Note Other system or driver policy settings may alter the process in which a print driver is executed. This policy setting applies only to print drivers loaded by the print spooler.
Print drivers loaded by applications are not affected. This policy setting takes effect without restarting the print spooler service.
0コメント