Group Policy in Windows 7 (Computer Configuration)

6to4 Relay Name
\Network\TCPIP Settings\IPv6 Transition Technologies

6to4 Relay Name Resolution Interval
\Network\TCPIP Settings\IPv6 Transition Technologies

6to4 State
\Network\TCPIP Settings\IPv6 Transition Technologies

Access data sources across domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Access data sources across domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Access data sources across domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Access data sources across domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Access data sources across domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Access data sources across domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Access data sources across domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Access data sources across domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Access data sources across domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Access data sources across domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Action on server disconnect
\Network\Offline Files

Activate Shutdown Event Tracker System State Data feature
\System

ActiveX installation policy for sites in Trusted zones
\Windows Components\ActiveX Installer Service

Add a specific list of search providers to the user's search provider list
\Windows Components\Internet Explorer

Add primary intranet search location
\Windows Components\Search

Add Printer wizard - Network scan page (Managed network)
\Printers

Add Printer wizard - Network scan page (Unmanaged network)
\Printers

Add secondary intranet search locations
\Windows Components\Search

Add the Administrators security group to roaming user profiles
\System\User Profiles

Add-on List
\Windows Components\Internet Explorer\Security Features\Add-on Management

Admin Script
\DirectAccess Connectivity Assistant

Admin-approved behaviors
\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction

Administratively assigned offline files
\Network\Offline Files

All Processes
\Windows Components\Internet Explorer\Application Compatibility\Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt

All Processes
\Windows Components\Internet Explorer\Security Features\Add-on Management

All Processes
\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction

All Processes
\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling

All Processes
\Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security

All Processes
\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature

All Processes
\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction

All Processes
\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown

All Processes
\Windows Components\Internet Explorer\Security Features\Notification bar

All Processes
\Windows Components\Internet Explorer\Security Features\Object Caching Protection

All Processes
\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation

All Processes
\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install

All Processes
\Windows Components\Internet Explorer\Security Features\Restrict File Download

All Processes
\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions

All Removable Storage classes: Deny all access
\System\Removable Storage Access

All Removable Storage: Allow direct access in remote sessions
\System\Removable Storage Access

Allow .rdp files from unknown publishers
\Windows Components\Remote Desktop Services\Remote Desktop Connection Client

Allow .rdp files from valid publishers and user's default .rdp settings
\Windows Components\Remote Desktop Services\Remote Desktop Connection Client

Allow access to BitLocker-protected fixed data drives from earlier versions of Windows
\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Allow access to BitLocker-protected removable data drives from earlier versions of Windows
\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Allow active content from CDs to run on user machines
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Allow active content over restricted protocols to access my computer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow active content over restricted protocols to access my computer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow active content over restricted protocols to access my computer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow active content over restricted protocols to access my computer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow active content over restricted protocols to access my computer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow active scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow active scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow active scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow active scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow active scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow active scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow active scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow active scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow active scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow active scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow admin to install from Remote Desktop Services session
\Windows Components\Windows Installer

Allow administrators to override Device Installation Restriction policies
\System\Device Installation\Device Installation Restrictions

Allow Applications to Prevent Automatic Sleep (On Battery)
\System\Power Management\Sleep Settings

Allow Applications to Prevent Automatic Sleep (Plugged In)
\System\Power Management\Sleep Settings

Allow audio and video playback redirection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

Allow audio recording redirection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

Allow automatic configuration of listeners
\Windows Components\Windows Remote Management (WinRM)\WinRM Service

Allow Automatic Sleep with Open Network Files (On Battery)
\System\Power Management\Sleep Settings

Allow Automatic Sleep with Open Network Files (Plugged In)
\System\Power Management\Sleep Settings

Allow Automatic Updates immediate installation
\Windows Components\Windows Update

Allow Basic authentication
\Windows Components\Windows Remote Management (WinRM)\WinRM Client

Allow Basic authentication
\Windows Components\Windows Remote Management (WinRM)\WinRM Service

Allow binary and script behaviors
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow binary and script behaviors
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow binary and script behaviors
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow binary and script behaviors
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow binary and script behaviors
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow binary and script behaviors
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow binary and script behaviors
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow binary and script behaviors
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow binary and script behaviors
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow binary and script behaviors
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow BITS Peercaching
\Network\Background Intelligent Transfer Service (BITS)

Allow certificates with no extended key usage certificate attribute
\Windows Components\Smart Card

Allow Corporate redirection of Customer Experience Improvement uploads
\Windows Components\Windows Customer Experience Improvement Program

Allow CredSSP authentication
\Windows Components\Windows Remote Management (WinRM)\WinRM Client

Allow CredSSP authentication
\Windows Components\Windows Remote Management (WinRM)\WinRM Service

Allow Cross-Forest User Policy and Roaming User Profiles
\System\Group Policy

Allow cryptography algorithms compatible with Windows NT 4.0
\System\Net Logon

Allow cut, copy or paste operations from the clipboard via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow cut, copy or paste operations from the clipboard via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow cut, copy or paste operations from the clipboard via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow cut, copy or paste operations from the clipboard via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow cut, copy or paste operations from the clipboard via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow cut, copy or paste operations from the clipboard via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow cut, copy or paste operations from the clipboard via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow cut, copy or paste operations from the clipboard via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow cut, copy or paste operations from the clipboard via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow cut, copy or paste operations from the clipboard via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow Delegating Default Credentials
\System\Credentials Delegation

Allow Delegating Default Credentials with NTLM-only Server Authentication
\System\Credentials Delegation

Allow Delegating Fresh Credentials
\System\Credentials Delegation

Allow Delegating Fresh Credentials with NTLM-only Server Authentication
\System\Credentials Delegation

Allow Delegating Saved Credentials
\System\Credentials Delegation

Allow Delegating Saved Credentials with NTLM-only Server Authentication
\System\Credentials Delegation

Allow Distributed Link Tracking clients to use domain resources
\System

Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries
\Network\DNS Client

Allow domain users to log on using biometrics
\Windows Components\Biometrics

Allow drag and drop or copy and paste files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow drag and drop or copy and paste files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow drag and drop or copy and paste files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow drag and drop or copy and paste files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow drag and drop or copy and paste files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow drag and drop or copy and paste files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow drag and drop or copy and paste files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow drag and drop or copy and paste files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow drag and drop or copy and paste files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow drag and drop or copy and paste files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow ECC certificates to be used for logon and authentication
\Windows Components\Smart Card

Allow enhanced PINs for startup
\Windows Components\BitLocker Drive Encryption\Operating System Drives

Allow Enhanced Storage certificate provisioning
\System\Enhanced Storage Access

Allow file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow font downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow font downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow font downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow font downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow font downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow font downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow font downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow font downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow font downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow font downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow indexing of encrypted files
\Windows Components\Search

Allow Install On Demand (except Internet Explorer)
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Allow Install On Demand (Internet Explorer)
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Allow installation of desktop items
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow installation of desktop items
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow installation of desktop items
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow installation of desktop items
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow installation of desktop items
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow installation of desktop items
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow installation of desktop items
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow installation of desktop items
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow installation of desktop items
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow installation of desktop items
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow installation of devices that match any of these device IDs
\System\Device Installation\Device Installation Restrictions

Allow installation of devices using drivers that match these device setup classes
\System\Device Installation\Device Installation Restrictions

Allow Integrated Unblock screen to be displayed at the time of logon
\Windows Components\Smart Card

Allow Internet Explorer 8 Shutdown Behavior
\Windows Components\Internet Explorer

Allow local activation security check exemptions
\System\Distributed COM\Application Compatibility Settings

Allow logon scripts when NetBIOS or WINS is disabled
\System\Scripts

Allow META REFRESH
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow META REFRESH
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow META REFRESH
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow META REFRESH
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow META REFRESH
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow META REFRESH
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow META REFRESH
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow META REFRESH
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow META REFRESH
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow META REFRESH
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow Microsoft IT DirectAccess Setup to manage NRPT on-off setting
\Microsoft IT DirectAccess Setup

Allow non-administrators to install drivers for these device setup classes
\System\Driver Installation

Allow non-administrators to receive update notifications
\Windows Components\Windows Update

Allow only system backup
\Windows Components\Backup\Server

Allow only USB root hub connected Enhanced Storage devices
\System\Enhanced Storage Access

Allow only Vista or later connections
\System\Remote Assistance

Allow OpenSearch queries in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow OpenSearch queries in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow OpenSearch queries in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow OpenSearch queries in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow OpenSearch queries in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow OpenSearch queries in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow OpenSearch queries in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow OpenSearch queries in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow OpenSearch queries in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow OpenSearch queries in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow or Disallow use of the Offline Files feature
\Network\Offline Files

Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow Print Spooler to accept client connections
\Printers

Allow printers to be published
\Printers

Allow pruning of published printers
\Printers

Allow RDP redirection of other supported RemoteFX USB devices from this computer
\Windows Components\Remote Desktop Services\Remote Desktop Connection Client\RemoteFX USB Device Redirection

Allow remote access to the Plug and Play interface
\System\Device Installation

Allow Remote Shell Access
\Windows Components\Windows Remote Shell

Allow restore of system to default state
\System\Recovery

Allow scripting of Internet Explorer web browser control
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow scripting of Internet Explorer web browser control
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow scripting of Internet Explorer web browser control
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow scripting of Internet Explorer web browser control
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow scripting of Internet Explorer web browser control
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow scripting of Internet Explorer web browser control
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow scripting of Internet Explorer web browser control
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow scripting of Internet Explorer web browser control
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow scripting of Internet Explorer web browser control
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow scripting of Internet Explorer web browser control
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow script-initiated windows without size or position constraints
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow script-initiated windows without size or position constraints
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow script-initiated windows without size or position constraints
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow script-initiated windows without size or position constraints
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow script-initiated windows without size or position constraints
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow script-initiated windows without size or position constraints
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow script-initiated windows without size or position constraints
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow script-initiated windows without size or position constraints
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow script-initiated windows without size or position constraints
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow script-initiated windows without size or position constraints
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow Scriptlets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow Scriptlets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow Scriptlets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow Scriptlets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow Scriptlets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow Scriptlets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow Scriptlets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow Scriptlets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow Scriptlets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow Scriptlets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow signature keys valid for Logon
\Windows Components\Smart Card

Allow signed updates from an intranet Microsoft update service location
\Windows Components\Windows Update

Allow software to run or install even if the signature is invalid
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Allow Standby States (S1-S3) When Sleeping (On Battery)
\System\Power Management\Sleep Settings

Allow Standby States (S1-S3) When Sleeping (Plugged In)
\System\Power Management\Sleep Settings

Allow status bar updates via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow status bar updates via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow status bar updates via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow status bar updates via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow status bar updates via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow status bar updates via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow status bar updates via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow status bar updates via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow status bar updates via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow status bar updates via script
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow the use of biometrics
\Windows Components\Biometrics

Allow third-party browser extensions
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Allow time invalid certificates
\Windows Components\Smart Card

Allow time zone redirection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

Allow unencrypted traffic
\Windows Components\Windows Remote Management (WinRM)\WinRM Client

Allow unencrypted traffic
\Windows Components\Windows Remote Management (WinRM)\WinRM Service

Allow use of diacritics
\Windows Components\Search

Allow user name hint
\Windows Components\Smart Card

Allow users to connect remotely using Remote Desktop Services
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections

Allow users to log on using biometrics
\Windows Components\Biometrics

Allow video and animation on a Web page that uses a legacy media player
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow video and animation on a Web page that uses a legacy media player
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow video and animation on a Web page that uses a legacy media player
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow video and animation on a Web page that uses a legacy media player
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow video and animation on a Web page that uses a legacy media player
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow video and animation on a Web page that uses a legacy media player
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow video and animation on a Web page that uses a legacy media player
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow video and animation on a Web page that uses a legacy media player
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow video and animation on a Web page that uses a legacy media player
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow video and animation on a Web page that uses a legacy media player
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow websites to open windows without address or status bars
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow websites to open windows without address or status bars
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow websites to open windows without address or status bars
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow websites to open windows without address or status bars
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow websites to open windows without address or status bars
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow websites to open windows without address or status bars
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow websites to open windows without address or status bars
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow websites to open windows without address or status bars
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow websites to open windows without address or status bars
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow websites to open windows without address or status bars
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Allow websites to prompt for information using scripted windows
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Allow websites to prompt for information using scripted windows
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Allow websites to prompt for information using scripted windows
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Allow websites to prompt for information using scripted windows
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Allow websites to prompt for information using scripted windows
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Allow websites to prompt for information using scripted windows
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Allow websites to prompt for information using scripted windows
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Allow websites to prompt for information using scripted windows
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Allow websites to prompt for information using scripted windows
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Allow websites to prompt for information using scripted windows
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Always install with elevated privileges
\Windows Components\Windows Installer

Always prompt for password upon connection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security

Always render print jobs on the server
\Printers

Always show desktop on connection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Always use classic logon
\System\Logon

Always use custom logon background
\System\Logon

Always use local ADM files for Group Policy Object Editor
\System\Group Policy

Always wait for the network at computer startup and logon
\System\Logon

Apply policy to removable media
\System\Disk Quotas

Apply the default user logon picture to all users
\Control Panel\User Accounts

Approved Installation Sites for ActiveX Controls
\Windows Components\ActiveX Installer Service

Assign a default domain for logon
\System\Logon

At logoff, delete local copy of user??s offline files
\Network\Offline Files

Automated Site Coverage by the DC Locator DNS SRV Records
\System\Net Logon\DC Locator DNS Records

Automatic prompting for ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Automatic prompting for ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Automatic prompting for ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Automatic prompting for ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Automatic prompting for ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Automatic prompting for ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Automatic prompting for ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Automatic prompting for ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Automatic prompting for ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Automatic prompting for ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Automatic prompting for file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Automatic prompting for file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Automatic prompting for file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Automatic prompting for file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Automatic prompting for file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Automatic prompting for file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Automatic prompting for file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Automatic prompting for file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Automatic prompting for file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Automatic prompting for file downloads
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Automatic reconnection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections

Automatic Updates detection frequency
\Windows Components\Windows Update

Automatically check for Internet Explorer updates
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Automatically enable newly installed add-ons
\Windows Components\Internet Explorer

Automatically publish new printers in Active Directory
\Printers

Background upload of a roaming user profile's registry file while user is logged on
\System\User Profiles

Backup log automatically when full
\Windows Components\Event Log Service\Application

Backup log automatically when full
\Windows Components\Event Log Service\Security

Backup log automatically when full
\Windows Components\Event Log Service\Setup

Backup log automatically when full
\Windows Components\Event Log Service\System

Baseline file cache maximum size
\Windows Components\Windows Installer

Best effort service type
\Network\QoS Packet Scheduler\DSCP value of conforming packets

Best effort service type
\Network\QoS Packet Scheduler\DSCP value of non-conforming packets

Best effort service type
\Network\QoS Packet Scheduler\Layer-2 priority value

Cache transforms in secure location on workstation
\Windows Components\Windows Installer

CD and DVD: Deny execute access
\System\Removable Storage Access

CD and DVD: Deny read access
\System\Removable Storage Access

CD and DVD: Deny write access
\System\Removable Storage Access

Certificate age for renew
\Microsoft IT DirectAccess Setup

Check for New Signatures Before Scheduled Scans
\Windows Components\Windows Defender

Check for server certificate revocation
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Check for signatures on downloaded programs
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Check published state
\Printers

Choose default folder for recovery password
\Windows Components\BitLocker Drive Encryption

Choose drive encryption method and cipher strength
\Windows Components\BitLocker Drive Encryption

Choose how BitLocker-protected fixed drives can be recovered
\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Choose how BitLocker-protected operating system drives can be recovered
\Windows Components\BitLocker Drive Encryption\Operating System Drives

Choose how BitLocker-protected removable drives can be recovered
\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Choose how users can recover BitLocker-protected drives (Windows Server 2008 and Windows Vista)
\Windows Components\BitLocker Drive Encryption

Communities
\Network\SNMP

Computer location
\Printers

Configuration of wireless settings using Windows Connect Now
\Network\Windows Connect Now

Configure Automatic Updates
\Windows Components\Windows Update

Configure Background Sync
\Network\Offline Files

Configure BranchCache for network files
\Network\BranchCache

Configure Corporate Windows Error Reporting
\Windows Components\Windows Error Reporting\Advanced Error Reporting Settings

Configure Corrupted File Recovery Behavior
\System\Troubleshooting and Diagnostics\Corrupted File Recovery

Configure Default consent
\Windows Components\Windows Error Reporting\Consent

Configure Delete Browsing History on exit
\Windows Components\Internet Explorer\Delete Browsing History

Configure device installation time-out
\System\Device Installation

Configure Error Reporting
\Windows Components\Windows Error Reporting

Configure keep-alive connection interval
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections

Configure list of Enhanced Storage devices usable on your computer
\System\Enhanced Storage Access

Configure list of IEEE 1667 silos usable on your computer
\System\Enhanced Storage Access

Configure Microsoft SpyNet Reporting
\Windows Components\Windows Defender

Configure minimum PIN length for startup
\Windows Components\BitLocker Drive Encryption\Operating System Drives

Configure MSI Corrupted File Recovery Behavior
\System\Troubleshooting and Diagnostics\MSI Corrupted File Recovery

Configure new tab page default behavior
\Windows Components\Internet Explorer

Configure RD Connection Broker farm name
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\RD Connection Broker

Configure RD Connection Broker server name
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\RD Connection Broker

Configure Reliability WMI Providers
\Windows Components\Windows Reliability Analysis

Configure RemoteFX
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Configure Report Archive
\Windows Components\Windows Error Reporting\Advanced Error Reporting Settings

Configure Report Queue
\Windows Components\Windows Error Reporting\Advanced Error Reporting Settings

Configure root certificate clean up
\Windows Components\Smart Card

Configure Scenario Execution Level
\System\Troubleshooting and Diagnostics\Fault Tolerant Heap

Configure Scenario Execution Level
\System\Troubleshooting and Diagnostics\Windows Boot Performance Diagnostics

Configure Scenario Execution Level
\System\Troubleshooting and Diagnostics\Windows Memory Leak Diagnosis

Configure Scenario Execution Level
\System\Troubleshooting and Diagnostics\Windows Resource Exhaustion Detection and Resolution

Configure Scenario Execution Level
\System\Troubleshooting and Diagnostics\Windows Shutdown Performance Diagnostics

Configure Scenario Execution Level
\System\Troubleshooting and Diagnostics\Windows Standby/Resume Performance Diagnostics

Configure Scenario Execution Level
\System\Troubleshooting and Diagnostics\Windows System Responsiveness Performance Diagnostics

Configure Scheduled Maintenance Behavior
\System\Troubleshooting and Diagnostics\Scheduled Maintenance

Configure Security Policy for Scripted Diagnostics
\System\Troubleshooting and Diagnostics\Scripted Diagnostics

Configure server authentication for client
\Windows Components\Remote Desktop Services\Remote Desktop Connection Client

Configure Slow link speed
\Network\Offline Files

Configure slow-link mode
\Network\Offline Files

Configure the list of blocked TPM commands
\System\Trusted Platform Module Services

Configure the server address, refresh interval, and issuer certificate authority of a target Subscription Manager
\Windows Components\Event Forwarding

Configure TPM platform validation profile
\Windows Components\BitLocker Drive Encryption\Operating System Drives

Configure use of passwords for fixed data drives
\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Configure use of passwords for removable data drives
\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Configure use of smart cards on fixed data drives
\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Configure use of smart cards on removable data drives
\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Configure Windows NTP Client
\System\Windows Time Service\Time Providers

Connection-Specific DNS Suffix
\Network\DNS Client

Contact PDC on logon failure
\System\Net Logon

Control rich previews for attachments
\Windows Components\Search

Control use of BitLocker on removable drives
\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Controlled load service type
\Network\QoS Packet Scheduler\DSCP value of conforming packets

Controlled load service type
\Network\QoS Packet Scheduler\DSCP value of non-conforming packets

Controlled load service type
\Network\QoS Packet Scheduler\Layer-2 priority value

Corporate DNS Probe Host Address
\Network\Network Connectivity Status Indicator

Corporate DNS Probe Host Name
\Network\Network Connectivity Status Indicator

Corporate Portal Site
\DirectAccess Connectivity Assistant

Corporate Resources
\DirectAccess Connectivity Assistant

Corporate Site Prefix List
\Network\Network Connectivity Status Indicator

Corporate Website Probe URL
\Network\Network Connectivity Status Indicator

Critical Battery Notification Action
\System\Power Management\Notification Settings

Critical Battery Notification Level
\System\Power Management\Notification Settings

Custom Classes: Deny read access
\System\Removable Storage Access

Custom Classes: Deny write access
\System\Removable Storage Access

Custom support URL in the Printers folder's left pane
\Printers

Customize Command Labels
\Windows Components\Internet Explorer\Toolbars

Customize consent settings
\Windows Components\Windows Error Reporting\Consent

Customize User Agent String
\Windows Components\Internet Explorer

Customize Warning Messages
\System\Remote Assistance

DC Locator DNS records not registered by the DCs
\System\Net Logon\DC Locator DNS Records

Default application reporting settings
\Windows Components\Windows Error Reporting\Advanced Error Reporting Settings

Default behavior for AutoRun
\Windows Components\AutoPlay Policies

Default cache size
\Network\Offline Files

Default excluded paths
\Windows Components\Search

Default indexed paths
\Windows Components\Search

Default quota limit and warning level
\System\Disk Quotas

Define Activation Security Check exemptions
\System\Distributed COM\Application Compatibility Settings

Define host name-to-Kerberos realm mappings
\System\Kerberos

Define interoperable Kerberos V5 realm settings
\System\Kerberos

Delay Restart for scheduled installations
\Windows Components\Windows Update

Delete cached copies of roaming profiles
\System\User Profiles

Delete data from devices running Microsoft firmware when a user logs off from the computer.
\Windows Components\Windows SideShow

Delete user profiles older than a specified number of days on system restart
\System\User Profiles

Deny all add-ons unless specifically allowed in the Add-on List
\Windows Components\Internet Explorer\Security Features\Add-on Management

Deny Delegating Default Credentials
\System\Credentials Delegation

Deny Delegating Fresh Credentials
\System\Credentials Delegation

Deny Delegating Saved Credentials
\System\Credentials Delegation

Deny logoff of an administrator logged in to the console session
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections

Deny write access to fixed drives not protected by BitLocker
\Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Deny write access to removable drives not protected by BitLocker
\Windows Components\BitLocker Drive Encryption\Removable Data Drives

Deploy default Accelerators
\Windows Components\Internet Explorer\Accelerators

Deploy non-default Accelerators
\Windows Components\Internet Explorer\Accelerators

Detect application failures caused by deprecated COM objects
\System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics

Detect application failures caused by deprecated Windows DLLs
\System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics

Detect application install failures
\System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics

Detect application installers that need to be run as administrator
\System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics

Detect applications unable to launch installers under UAC
\System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics

Diagnostics: Configure scenario execution level
\System\Troubleshooting and Diagnostics

Diagnostics: Configure scenario retention
\System\Troubleshooting and Diagnostics

Directory pruning interval
\Printers

Directory pruning priority
\Printers

Directory pruning retry
\Printers

Disable "Configuring History"
\Windows Components\Internet Explorer\Delete Browsing History

Disable .NET Framework Setup
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Disable .NET Framework Setup
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Disable .NET Framework Setup
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Disable .NET Framework Setup
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Disable .NET Framework Setup
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Disable .NET Framework Setup
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Disable .NET Framework Setup
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Disable .NET Framework Setup
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Disable .NET Framework Setup
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Disable .NET Framework Setup
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Disable add-on performance notifications
\Windows Components\Internet Explorer

Disable Automatic Install of Internet Explorer components
\Windows Components\Internet Explorer

Disable binding directly to IPropertySetStorage without intermediate layers.
\Windows Components\Windows Explorer

Disable Browser Geolocation
\Windows Components\Internet Explorer

Disable changing Automatic Configuration settings
\Windows Components\Internet Explorer

Disable changing connection settings
\Windows Components\Internet Explorer

Disable changing proxy settings
\Windows Components\Internet Explorer

Disable changing secondary home page settings
\Windows Components\Internet Explorer

Disable delete notifications on all volumes
\System\Filesystem

Disable IE security prompt for Windows Installer scripts
\Windows Components\Windows Installer

Disable Import/Export Settings wizard
\Windows Components\Internet Explorer

Disable indexer backoff
\Windows Components\Search

Disable Logging
\Windows Components\Windows Error Reporting

Disable logging via package settings
\Windows Components\Windows Installer

Disable or enable software Secure Attention Sequence
\Windows Components\Windows Logon Options

Disable password strength validation for Peer Grouping
\Network\Microsoft Peer-to-Peer Networking Services

Disable Periodic Check for Internet Explorer software updates
\Windows Components\Internet Explorer

Disable Per-User Installation of ActiveX Controls
\Windows Components\Internet Explorer

Disable remote Desktop Sharing
\Windows Components\NetMeeting

Disable showing the splash screen
\Windows Components\Internet Explorer

Disable software update shell notifications on program launch
\Windows Components\Internet Explorer

Disable text prediction
\Windows Components\Tablet PC\Input Panel

Disable the Advanced page
\Windows Components\Internet Explorer\Internet Control Panel

Disable the Connections page
\Windows Components\Internet Explorer\Internet Control Panel

Disable the Content page
\Windows Components\Internet Explorer\Internet Control Panel

Disable the General page
\Windows Components\Internet Explorer\Internet Control Panel

Disable the Privacy page
\Windows Components\Internet Explorer\Internet Control Panel

Disable the Programs page
\Windows Components\Internet Explorer\Internet Control Panel

Disable the Security page
\Windows Components\Internet Explorer\Internet Control Panel

Disable toolbars and extensions when InPrivate Browsing starts
\Windows Components\Internet Explorer\Privacy

Disable Windows Error Reporting
\Windows Components\Windows Error Reporting

Disable Windows Installer
\Windows Components\Windows Installer

Disallow changing of geographic location
\System\Locale Services

Disallow Digest authentication
\Windows Components\Windows Remote Management (WinRM)\WinRM Client

Disallow installation of printers using kernel-mode drivers
\Printers

Disallow Interactive Users from generating Resultant Set of Policy data
\System\Group Policy

Disallow Kerberos authentication
\Windows Components\Windows Remote Management (WinRM)\WinRM Client

Disallow Kerberos authentication
\Windows Components\Windows Remote Management (WinRM)\WinRM Service

Disallow locally attached storage as backup target
\Windows Components\Backup\Server

Disallow Negotiate authentication
\Windows Components\Windows Remote Management (WinRM)\WinRM Client

Disallow Negotiate authentication
\Windows Components\Windows Remote Management (WinRM)\WinRM Service

Disallow network as backup target
\Windows Components\Backup\Server

Disallow optical media as backup target
\Windows Components\Backup\Server

Disallow run-once backups
\Windows Components\Backup\Server

Disallow selection of Custom Locales
\System\Locale Services

Disallow user override of locale settings
\System\Locale Services

Disk Diagnostic: Configure custom alert text
\System\Troubleshooting and Diagnostics\Disk Diagnostic

Disk Diagnostic: Configure execution level
\System\Troubleshooting and Diagnostics\Disk Diagnostic

Disk Quota policy processing
\System\Group Policy

Display a custom message title when device installation is prevented by a policy setting
\System\Device Installation\Device Installation Restrictions

Display a custom message when installation is prevented by a policy setting
\System\Device Installation\Device Installation Restrictions

Display Error Notification
\Windows Components\Windows Error Reporting

Display information about previous logons during user logon
\Windows Components\Windows Logon Options

Display mixed content
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Display mixed content
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Display mixed content
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Display mixed content
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Display mixed content
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Display mixed content
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Display mixed content
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Display mixed content
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Display mixed content
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Display mixed content
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Display Shutdown Event Tracker
\System

Display string when smart card is blocked
\Windows Components\Smart Card

DNS Servers
\Network\DNS Client

DNS Suffix Search List
\Network\DNS Client

Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box
\Windows Components\Windows Update

Do not allow adding new targets via manual configuration
\System\iSCSI\iSCSI Target Discovery

Do not allow additional session logins
\System\iSCSI\General iSCSI

Do not allow changes to initiator CHAP secret
\System\iSCSI\iSCSI Security

Do not allow changes to initiator iqn name
\System\iSCSI\General iSCSI

Do not allow client printer redirection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Printer Redirection

Do not allow clipboard redirection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

Do not allow color changes
\Windows Components\Desktop Window Manager\Window Frame Coloring

Do not allow COM port redirection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

Do not allow compression on all NTFS volumes
\System\Filesystem\NTFS

Do not allow connections without IPSec
\System\iSCSI\iSCSI Security

Do not allow desktop composition
\Windows Components\Desktop Window Manager

Do not allow Digital Locker to run
\Windows Components\Digital Locker

Do not allow drive redirection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

Do not allow encryption on all NTFS volumes
\System\Filesystem\NTFS

Do not allow Flip3D invocation
\Windows Components\Desktop Window Manager

Do not allow Inkball to run
\Windows Components\Tablet PC\Accessories

Do not allow local administrators to customize permissions
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security

Do not allow LPT port redirection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

Do not allow manual configuration of discovered targets
\System\iSCSI\iSCSI Target Discovery

Do not allow manual configuration of iSNS servers
\System\iSCSI\iSCSI Target Discovery

Do not allow manual configuration of target portals
\System\iSCSI\iSCSI Target Discovery

Do not allow non-Enhanced Storage removable devices
\System\Enhanced Storage Access

Do not allow password authentication of Enhanced Storage devices
\System\Enhanced Storage Access

Do not allow passwords to be saved
\Windows Components\Remote Desktop Services\Remote Desktop Connection Client

Do not allow printing to Journal Note Writer
\Windows Components\Tablet PC\Accessories

Do not allow resetting Internet Explorer settings
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Do not allow sessions without mutual CHAP
\System\iSCSI\iSCSI Security

Do not allow sessions without one way CHAP
\System\iSCSI\iSCSI Security

Do not allow smart card device redirection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

Do not allow Snipping Tool to run
\Windows Components\Tablet PC\Accessories

Do not allow Sound Recorder to run
\Windows Components\Sound Recorder

Do not allow supported Plug and Play device redirection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

Do not allow the BITS client to use Windows Branch Cache
\Network\Background Intelligent Transfer Service (BITS)

Do not allow the computer to act as a BITS Peercaching client
\Network\Background Intelligent Transfer Service (BITS)

Do not allow the computer to act as a BITS Peercaching server
\Network\Background Intelligent Transfer Service (BITS)

Do not allow users to enable or disable add-ons
\Windows Components\Internet Explorer

Do not allow web search
\Windows Components\Search

Do not allow window animations
\Windows Components\Desktop Window Manager

Do not allow Windows Journal to be run
\Windows Components\Tablet PC\Accessories

Do not allow Windows Media Center to run
\Windows Components\Windows Media Center

Do not allow Windows Messenger to be run
\Windows Components\Windows Messenger

Do not automatically encrypt files moved to encrypted folders
\System

Do not automatically start Windows Messenger initially
\Windows Components\Windows Messenger

Do not check for user ownership of Roaming Profile Folders
\System\User Profiles

Do not collect InPrivate Filtering data
\Windows Components\Internet Explorer\Privacy

Do not delete temp folder upon exit
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Temporary folders

Do not detect slow network connections
\System\User Profiles

Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box
\Windows Components\Windows Update

Do not forcefully unload the users registry at user logoff
\System\User Profiles

Do not log users on with temporary profiles
\System\User Profiles

Do not process incoming mailslot messages used for domain controller location based on NetBIOS domain names
\System\Net Logon\DC Locator DNS Records

Do not process the legacy run list
\System\Logon

Do not process the run once list
\System\Logon

Do not prompt for client certificate selection when no certificates or only one certificate exists.
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Do not prompt for client certificate selection when no certificates or only one certificate exists.
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Do not prompt for client certificate selection when no certificates or only one certificate exists.
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Do not prompt for client certificate selection when no certificates or only one certificate exists.
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Do not prompt for client certificate selection when no certificates or only one certificate exists.
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Do not prompt for client certificate selection when no certificates or only one certificate exists.
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Do not prompt for client certificate selection when no certificates or only one certificate exists.
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Do not prompt for client certificate selection when no certificates or only one certificate exists.
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Do not prompt for client certificate selection when no certificates or only one certificate exists.
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Do not prompt for client certificate selection when no certificates or only one certificate exists.
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Do not save encrypted pages to disk
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Do not send a Windows error report when a generic driver is installed on a device
\System\Device Installation

Do not send additional data
\Windows Components\Windows Error Reporting

Do not set default client printer to be default printer in a session
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Printer Redirection

Do Not Show First Use Dialog Boxes
\Windows Components\Windows Media Player

Do not show the "local access only" network icon
\Network\Network Connections

Do not turn off system power after a Windows system shutdown has occurred.
\System

Do not use temporary folders per session
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Temporary folders

Domain Controller Address Type Returned
\System\Net Logon\DC Locator DNS Records

Domain Location Determination URL
\Network\Network Connectivity Status Indicator

Don't display the Getting Started welcome screen at logon
\System\Logon

Don't set the always do this checkbox
\Windows Components\AutoPlay Policies

Download missing COM components
\System

Download signed ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Download signed ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Download signed ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Download signed ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Download signed ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Download signed ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Download signed ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Download signed ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Download signed ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Download signed ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Download unsigned ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Download unsigned ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Download unsigned ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Download unsigned ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Download unsigned ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Download unsigned ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Download unsigned ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Download unsigned ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Download unsigned ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Download unsigned ActiveX controls
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

DTEs
\DirectAccess Connectivity Assistant

Dynamic Registration of the DC Locator DNS Records
\System\Net Logon\DC Locator DNS Records

Dynamic Update
\Network\DNS Client

EFS recovery policy processing
\System\Group Policy

Empty Temporary Internet Files folder when browser is closed
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Enable alternative codecs in HTML5 media elements
\Windows Components\Internet Explorer\Internet Settings\Advanced settings\Multimedia

Enable client-side targeting
\Windows Components\Windows Update

Enable disk quotas
\System\Disk Quotas

Enable indexing of online delegate mailboxes
\Windows Components\Search

Enable indexing uncached Exchange folders
\Windows Components\Search

Enable Microsoft IT DirectAccess Setup
\Microsoft IT DirectAccess Setup

Enable MIME Sniffing
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Enable MIME Sniffing
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Enable MIME Sniffing
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Enable MIME Sniffing
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Enable MIME Sniffing
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Enable MIME Sniffing
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Enable MIME Sniffing
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Enable MIME Sniffing
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Enable MIME Sniffing
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Enable MIME Sniffing
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Enable Native XMLHttpRequest Support
\Windows Components\Internet Explorer\Security Features\AJAX

Enable NTFS pagefile encryption
\System\Filesystem\NTFS

Enable Persistent Time Stamp
\System

Enable throttling for online mail indexing
\Windows Components\Search

Enable Transparent Caching
\Network\Offline Files

Enable user control over installs
\Windows Components\Windows Installer

Enable user to browse for source while elevated
\Windows Components\Windows Installer

Enable user to patch elevated products
\Windows Components\Windows Installer

Enable user to use media source while elevated
\Windows Components\Windows Installer

Enable Windows NTP Client
\System\Windows Time Service\Time Providers

Enable Windows NTP Server
\System\Windows Time Service\Time Providers

Enable/Disable PerfTrack
\System\Troubleshooting and Diagnostics\Windows Performance PerfTrack

Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates
\Windows Components\Windows Update

Encrypt the Offline Files cache
\Network\Offline Files

Enforce disk quota limit
\System\Disk Quotas

Enforce Full Screen Mode
\Windows Components\Internet Explorer

Enforce Removal of Remote Desktop Wallpaper
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Enforce upgrade component rules
\Windows Components\Windows Installer

Enumerate administrator accounts on elevation
\Windows Components\Credential User Interface

Event logging level
\Network\Offline Files

Events.asp program
\Windows Components\Event Viewer

Events.asp program command line parameters
\Windows Components\Event Viewer

Events.asp URL
\Windows Components\Event Viewer

Exclude credential providers
\System\Logon

Exclude files from being cached
\Network\Offline Files

Execute print drivers in isolated processes
\Printers

Expected dial-up delay on logon
\System\Net Logon

Extend Point and Print connection to search Windows Update
\Printers

Files not cached
\Network\Offline Files

Filter duplicate logon certificates
\Windows Components\Smart Card

Final DC Discovery Retry Setting for Background Callers
\System\Net Logon

Floppy Drives: Deny execute access
\System\Removable Storage Access

Floppy Drives: Deny read access
\System\Removable Storage Access

Floppy Drives: Deny write access
\System\Removable Storage Access

Folder Redirection policy processing
\System\Group Policy

For tablet pen input, don??t show the Input Panel icon
\Windows Components\Tablet PC\Input Panel

For touch input, don??t show the Input Panel icon
\Windows Components\Tablet PC\Input Panel

Force Rediscovery Interval
\System\Net Logon\DC Locator DNS Records

Force selected system UI language to overwrite the user UI language
\Control Panel\Regional and Language Options

Force the reading of all certificates from the smart card
\Windows Components\Smart Card

ForwarderResourceUsage
\Windows Components\Event Forwarding

Global Configuration Settings
\System\Windows Time Service

Go to an intranet site for a single word entry in the Address bar
\Windows Components\Internet Explorer\Internet Settings\Advanced settings\Browsing

Group Policy refresh interval for computers
\System\Group Policy

Group Policy refresh interval for domain controllers
\System\Group Policy

Group Policy slow link detection
\System\Group Policy

Guaranteed service type
\Network\QoS Packet Scheduler\DSCP value of conforming packets

Guaranteed service type
\Network\QoS Packet Scheduler\DSCP value of non-conforming packets

Guaranteed service type
\Network\QoS Packet Scheduler\Layer-2 priority value

Hash Publication for BranchCache
\Network\Lanman Server

Hide Advanced Properties Checkbox in Add Scheduled Task Wizard
\Windows Components\Task Scheduler

Hide entry points for Fast User Switching
\System\Logon

Hide notifications about RD Licensing problems that affect the RD Session Host server
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Licensing

Hide previous versions list for local files
\Windows Components\Windows Explorer\Previous Versions

Hide previous versions list for remote files
\Windows Components\Windows Explorer\Previous Versions

Hide previous versions of files on backup location
\Windows Components\Windows Explorer\Previous Versions

Hide Property Pages
\Windows Components\Task Scheduler

Hide the Command Bar
\Windows Components\Internet Explorer\Toolbars

Hide the file scan progress window
\System\Windows File Protection

Hide the Status Bar
\Windows Components\Internet Explorer\Toolbars

HRA 1
\Microsoft IT DirectAccess NAP Settings

HRA 2
\Microsoft IT DirectAccess NAP Settings

HRA 3
\Microsoft IT DirectAccess NAP Settings

HRA 4
\Microsoft IT DirectAccess NAP Settings

HRA 5
\Microsoft IT DirectAccess NAP Settings

HRA 6
\Microsoft IT DirectAccess NAP Settings

Ignore custom consent settings
\Windows Components\Windows Error Reporting\Consent

Ignore Delegation Failure
\System\Remote Procedure Call

Ignore the default list of blocked TPM commands
\System\Trusted Platform Module Services

Ignore the local list of blocked TPM commands
\System\Trusted Platform Module Services

IKEFlags
\Microsoft IT DirectAccess IKEFlags

Include local directory path when uploading files to a server
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Include local directory path when uploading files to a server
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Include local directory path when uploading files to a server
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Include local directory path when uploading files to a server
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Include local directory path when uploading files to a server
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Include local directory path when uploading files to a server
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Include local directory path when uploading files to a server
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Include local directory path when uploading files to a server
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Include local directory path when uploading files to a server
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Include local directory path when uploading files to a server
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Include rarely used Chinese, Kanji, or Hanja characters
\Windows Components\Tablet PC\Input Panel

Include updated Web site lists from Microsoft
\Windows Components\Internet Explorer\Compatibility View

Indexer data location
\Windows Components\Search

Initial DC Discovery Retry Setting for Background Callers
\System\Net Logon

Initial reminder balloon lifetime
\Network\Offline Files

Initialize and script ActiveX controls not marked as safe
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Initialize and script ActiveX controls not marked as safe
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Initialize and script ActiveX controls not marked as safe
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Initialize and script ActiveX controls not marked as safe
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Initialize and script ActiveX controls not marked as safe
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Initialize and script ActiveX controls not marked as safe
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Initialize and script ActiveX controls not marked as safe
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Initialize and script ActiveX controls not marked as safe
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Initialize and script ActiveX controls not marked as safe
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Initialize and script ActiveX controls not marked as safe
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

InPrivate Filtering Threshold
\Windows Components\Internet Explorer\Privacy

Install binaries signed by MD2 and MD4 signing technologies
\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction

Internet Explorer Maintenance policy processing
\System\Group Policy

Internet Explorer Processes
\Windows Components\Internet Explorer\Application Compatibility\Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\Notification bar

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\Object Caching Protection

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\Restrict File Download

Internet Explorer Processes
\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions

Internet Zone Restricted Protocols
\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protocols Per Security Zone

Internet Zone Template
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Intranet Sites: Include all local (intranet) sites not listed in other zones
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Intranet Sites: Include all network paths (UNCs)
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Intranet Sites: Include all sites that bypass the proxy server
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Intranet Zone Restricted Protocols
\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protocols Per Security Zone

Intranet Zone Template
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

IP Security policy processing
\System\Group Policy

IP-HTTPS State
\Network\TCPIP Settings\IPv6 Transition Technologies

ISATAP Router Name
\Network\TCPIP Settings\IPv6 Transition Technologies

ISATAP State
\Network\TCPIP Settings\IPv6 Transition Technologies

Java permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Java permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Java permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Java permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Java permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Java permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Java permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Java permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Java permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Java permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Join RD Connection Broker
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\RD Connection Broker

Launching applications and files in an IFRAME
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Launching applications and files in an IFRAME
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Launching applications and files in an IFRAME
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Launching applications and files in an IFRAME
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Launching applications and files in an IFRAME
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Launching applications and files in an IFRAME
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Launching applications and files in an IFRAME
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Launching applications and files in an IFRAME
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Launching applications and files in an IFRAME
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Launching applications and files in an IFRAME
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Launching programs and unsafe files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Launching programs and unsafe files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Launching programs and unsafe files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Launching programs and unsafe files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Launching programs and unsafe files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Launching programs and unsafe files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Launching programs and unsafe files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Launching programs and unsafe files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Launching programs and unsafe files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Launching programs and unsafe files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Leave Windows Installer and Group Policy Software Installation Data
\System\User Profiles

License server security group
\Windows Components\Remote Desktop Services\RD Licensing

Limit audio playback quality
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

Limit disk space used by offline files
\Network\Offline Files

Limit maximum color depth
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Limit maximum display resolution
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Limit maximum number of monitors
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Limit number of connections
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections

Limit outstanding packets
\Network\QoS Packet Scheduler

Limit reservable bandwidth
\Network\QoS Packet Scheduler

Limit the age of files in the BITS Peercache
\Network\Background Intelligent Transfer Service (BITS)

Limit the BITS Peercache size
\Network\Background Intelligent Transfer Service (BITS)

Limit the maximum BITS job download time
\Network\Background Intelligent Transfer Service (BITS)

Limit the maximum network bandwidth for BITS background transfers
\Network\Background Intelligent Transfer Service (BITS)

Limit the maximum network bandwidth used for Peercaching
\Network\Background Intelligent Transfer Service (BITS)

Limit the maximum number of BITS jobs for each user
\Network\Background Intelligent Transfer Service (BITS)

Limit the maximum number of BITS jobs for this computer
\Network\Background Intelligent Transfer Service (BITS)

Limit the maximum number of files allowed in a BITS job
\Network\Background Intelligent Transfer Service (BITS)

Limit the maximum number of ranges that can be added to the file in a BITS job
\Network\Background Intelligent Transfer Service (BITS)

Limit the size of the entire roaming user profile cache
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Profiles

Limit Windows File Protection cache size
\System\Windows File Protection

List of applications to always report errors for
\Windows Components\Windows Error Reporting\Advanced Error Reporting Settings

List of applications to be excluded
\Windows Components\Windows Error Reporting\Advanced Error Reporting Settings

List of applications to never report errors for
\Windows Components\Windows Error Reporting\Advanced Error Reporting Settings

Local Machine Zone Restricted Protocols
\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protocols Per Security Zone

Local Machine Zone Template
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

LocalNamesOn
\DirectAccess Connectivity Assistant

Location of the DCs hosting a domain with single label DNS name
\System\Net Logon\DC Locator DNS Records

Lock all Toolbars
\Windows Components\Internet Explorer\Toolbars

Lock Enhanced Storage when the computer is locked
\System\Enhanced Storage Access

Locked-Down Internet Zone Template
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Locked-Down Intranet Zone Template
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Locked-Down Local Machine Zone Template
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Locked-Down Restricted Sites Zone Template
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Locked-Down Trusted Sites Zone Template
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Log Access
\Windows Components\Event Log Service\Application

Log Access
\Windows Components\Event Log Service\Security

Log Access
\Windows Components\Event Log Service\Setup

Log Access
\Windows Components\Event Log Service\System

Log directory pruning retry events
\Printers

Log event when quota limit exceeded
\System\Disk Quotas

Log event when quota warning level exceeded
\System\Disk Quotas

Log File Debug Output Level
\System\Net Logon

Log File Path
\Windows Components\Event Log Service\Application

Log File Path
\Windows Components\Event Log Service\Security

Log File Path
\Windows Components\Event Log Service\Setup

Log File Path
\Windows Components\Event Log Service\System

Logging
\Windows Components\Windows Installer

Logon options
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Logon options
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Logon options
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Logon options
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Logon options
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Logon options
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Logon options
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Logon options
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Logon options
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Logon options
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Loose XAML files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Loose XAML files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Loose XAML files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Loose XAML files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Loose XAML files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Loose XAML files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Loose XAML files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Loose XAML files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Loose XAML files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Loose XAML files
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Low Battery Notification Action
\System\Power Management\Notification Settings

Low Battery Notification Level
\System\Power Management\Notification Settings

Make Parental Controls control panel visible on a Domain
\Windows Components\Parental Controls

Make proxy settings per-machine (rather than per-user)
\Windows Components\Internet Explorer

MaxConcurrentUsers
\Windows Components\Windows Remote Shell

Maximum DC Discovery Retry Interval Setting for Background Callers
\System\Net Logon

Maximum Log File Size
\System\Net Logon

Maximum Log Size (KB)
\Windows Components\Event Log Service\Application

Maximum Log Size (KB)
\Windows Components\Event Log Service\Security

Maximum Log Size (KB)
\Windows Components\Event Log Service\Setup

Maximum Log Size (KB)
\Windows Components\Event Log Service\System

Maximum number of connections per server (HTTP 1.0)
\Windows Components\Internet Explorer\Security Features\AJAX

Maximum number of connections per server (HTTP 1.1)
\Windows Components\Internet Explorer\Security Features\AJAX

Maximum retries to unload and update user profile
\System\User Profiles

Maximum time before hibernate for mobile DirectAccess clients
\Microsoft IT DirectAccess Setup

Maximum wait time for Group Policy scripts
\System\Scripts

Microsoft IT DirectAccess NAP Settings
\Microsoft IT DirectAccess NAP Settings

Microsoft Support Diagnostic Tool: Configure execution level
\System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool

Microsoft Support Diagnostic Tool: Restrict tool download
\System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool

Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with Support Provider
\System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool

Minimum Idle Connection Timeout for RPC/HTTP connections
\System\Remote Procedure Call

Navigate windows and frames across different domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Navigate windows and frames across different domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Navigate windows and frames across different domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Navigate windows and frames across different domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Navigate windows and frames across different domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Navigate windows and frames across different domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Navigate windows and frames across different domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Navigate windows and frames across different domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Navigate windows and frames across different domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Navigate windows and frames across different domains
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Negative DC Discovery Cache Setting
\System\Net Logon

Netlogon share compatibility
\System\Net Logon

Network control service type
\Network\QoS Packet Scheduler\DSCP value of conforming packets

Network control service type
\Network\QoS Packet Scheduler\DSCP value of non-conforming packets

Network control service type
\Network\QoS Packet Scheduler\Layer-2 priority value

Network Projector Port Setting
\Windows Components\Network Projector

No auto-restart with logged on users for scheduled automatic updates installations
\Windows Components\Windows Update

Non-conforming packets
\Network\QoS Packet Scheduler\Layer-2 priority value

Non-default server disconnect actions
\Network\Offline Files

Notify blocked drivers
\System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics

Notify user of successful smart card driver installation
\Windows Components\Smart Card

Offer Remote Assistance
\System\Remote Assistance

Only allow approved domains to use ActiveX controls without prompt
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Only allow approved domains to use ActiveX controls without prompt
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Only allow approved domains to use ActiveX controls without prompt
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Only allow approved domains to use ActiveX controls without prompt
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Only allow approved domains to use ActiveX controls without prompt
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Only allow approved domains to use ActiveX controls without prompt
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Only allow approved domains to use ActiveX controls without prompt
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Only allow approved domains to use ActiveX controls without prompt
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Only allow approved domains to use ActiveX controls without prompt
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Only allow approved domains to use ActiveX controls without prompt
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Only allow local user profiles
\System\User Profiles

Only use Package Point and print
\Printers

Only use the ActiveX Installer Service for installation of ActiveX Controls
\Windows Components\Internet Explorer

Optimize visual experience for Remote Desktop Services sessions
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Optimize visual experience when using RemoteFX
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Override print driver execution compatibility setting reported by print driver
\Printers

Override the More Gadgets link
\Windows Components\Desktop Gadgets

Package Point and print - Approved servers
\Printers

Permitted Managers
\Network\SNMP

Play animations in web pages
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Play sounds in web pages
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Play videos in web pages
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Point and Print Restrictions
\Printers

Pop-up allow list
\Windows Components\Internet Explorer

PortalName
\DirectAccess Connectivity Assistant

Positive Periodic DC Cache Refresh for Background Callers
\System\Net Logon

Positive Periodic DC Cache Refresh for Non-Background Callers
\System\Net Logon

Pre-populate printer search location text
\Printers

Prevent "Fix settings" functionality
\Windows Components\Internet Explorer

Prevent access to 16-bit applications
\Windows Components\Application Compatibility

Prevent adding UNC locations to index from Control Panel
\Windows Components\Search

Prevent adding user-specified locations to the All Locations menu
\Windows Components\Search

Prevent Automatic Updates
\Windows Components\Windows Media Player

Prevent automatically adding shared folders to the index
\Windows Components\Search

Prevent Back-ESC mapping
\Windows Components\Tablet PC\Hardware Buttons

Prevent backing up to local disks
\Windows Components\Backup\Client

Prevent backing up to network location
\Windows Components\Backup\Client

Prevent backing up to optical media (CD/DVD)
\Windows Components\Backup\Client

Prevent Bypassing SmartScreen Filter Warnings
\Windows Components\Internet Explorer

Prevent clients from querying the index remotely
\Windows Components\Search

Prevent configuration of search from the Address bar
\Windows Components\Internet Explorer\Internet Settings\Advanced settings\Searching

Prevent configuration of top result search in the Address bar
\Windows Components\Internet Explorer\Internet Settings\Advanced settings\Searching

Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point
\System\Device Installation

Prevent customization of indexed locations in Control Panel
\Windows Components\Search

Prevent Deleting ActiveX Filtering and Tracking Protection data
\Windows Components\Internet Explorer\Delete Browsing History

Prevent Deleting Cookies
\Windows Components\Internet Explorer\Delete Browsing History

Prevent Deleting Download History
\Windows Components\Internet Explorer\Delete Browsing History

Prevent Deleting Favorites Site Data
\Windows Components\Internet Explorer\Delete Browsing History

Prevent Deleting Form Data
\Windows Components\Internet Explorer\Delete Browsing History

Prevent Deleting InPrivate Filtering data
\Windows Components\Internet Explorer\Delete Browsing History

Prevent Deleting Passwords
\Windows Components\Internet Explorer\Delete Browsing History

Prevent Deleting Temporary Internet Files
\Windows Components\Internet Explorer\Delete Browsing History

Prevent Deleting Web sites that the User has Visited
\Windows Components\Internet Explorer\Delete Browsing History

Prevent Desktop Shortcut Creation
\Windows Components\Windows Media Player

Prevent device metadata retrieval from the Internet
\System\Device Installation

Prevent display of the user interface for critical errors
\Windows Components\Windows Error Reporting

Prevent displaying advanced indexing options in Control Panel
\Windows Components\Search

Prevent flicks
\Windows Components\Tablet PC\Pen UX Behaviors

Prevent Flicks Learning Mode
\Windows Components\Tablet PC\Pen Flicks Learning

Prevent ignoring certificate errors
\Windows Components\Internet Explorer\Internet Control Panel

Prevent IIS installation
\Windows Components\Internet Information Services

Prevent indexing certain paths
\Windows Components\Search

Prevent indexing e-mail attachments
\Windows Components\Search

Prevent indexing files in offline files cache
\Windows Components\Search

Prevent indexing Microsoft Office Outlook
\Windows Components\Search

Prevent indexing of certain file types
\Windows Components\Search

Prevent indexing public folders
\Windows Components\Search

Prevent indexing when running on battery power to conserve energy
\Windows Components\Search

Prevent Input Panel tab from appearing
\Windows Components\Tablet PC\Input Panel

Prevent installation of devices not described by other policy settings
\System\Device Installation\Device Installation Restrictions

Prevent installation of devices that match any of these device IDs
\System\Device Installation\Device Installation Restrictions

Prevent installation of devices using drivers that match these device setup classes
\System\Device Installation\Device Installation Restrictions

Prevent installation of removable devices
\System\Device Installation\Device Installation Restrictions

Prevent Internet Explorer Search box from displaying
\Windows Components\Internet Explorer

Prevent launch an application
\Windows Components\Tablet PC\Hardware Buttons

Prevent license upgrade
\Windows Components\Remote Desktop Services\RD Licensing

Prevent Media Sharing
\Windows Components\Windows Media Player

Prevent memory overwrite on restart
\Windows Components\BitLocker Drive Encryption

Prevent participation in the Customer Experience Improvement Program
\Windows Components\Internet Explorer

Prevent performance of First Run Customize settings
\Windows Components\Internet Explorer

Prevent plaintext PINs from being returned by Credential Manager
\Windows Components\Smart Card

Prevent press and hold
\Windows Components\Tablet PC\Hardware Buttons

Prevent Quick Launch Toolbar Shortcut Creation
\Windows Components\Windows Media Player

Prevent redirection of devices that match any of these device Ids
\System\Device Redirection\Device Redirection Restrictions

Prevent redirection of USB devices
\System\Device Redirection\Device Redirection Restrictions

Prevent restoring local previous versions
\Windows Components\Windows Explorer\Previous Versions

Prevent restoring previous versions from backups
\Windows Components\Windows Explorer\Previous Versions

Prevent restoring remote previous versions
\Windows Components\Windows Explorer\Previous Versions

Prevent Roaming Profile changes from propagating to the server
\System\User Profiles

Prevent setting of the code download path for each machine
\Windows Components\Internet Explorer\Corporate Settings\Code Download

Prevent Task Run or End
\Windows Components\Task Scheduler

Prevent the computer from joining a homegroup
\Windows Components\HomeGroup

Prevent the configuration of cipher strength update information URLs
\Windows Components\Internet Explorer\Internet Settings\Component Updates\Help Menu > About Internet Explorer

Prevent the deletion of temporary Internet files and cookies
\Windows Components\Internet Explorer\Delete Browsing History

Prevent the user from running the Backup Status and Configuration program
\Windows Components\Backup\Client

Prevent unwanted iFilters and protocol handlers
\Windows Components\Search

Prevent use of Offline Files folder
\Network\Offline Files

Prevent users from bypassing SmartScreen Filter's application reputation warnings about files that are not commonly downloaded from the Internet
\Windows Components\Internet Explorer

Prevent Video Smoothing
\Windows Components\Windows Media Player

Prevent Windows Anytime Upgrade from running.
\Windows Components\Windows Anytime Upgrade

Prevent Windows from sending an error report when a device driver requests additional software during installation
\System\Device Installation

Prevent Windows Media DRM Internet Access
\Windows Components\Windows Media Digital Rights Management

Preview pane location
\Windows Components\Search

Primary DNS Suffix
\Network\DNS Client

Primary DNS Suffix Devolution
\Network\DNS Client

Primary DNS Suffix Devolution Level
\Network\DNS Client

Printer browsing
\Printers

Prioritize all digitally signed drivers equally during the driver ranking and selection process
\System\Device Installation

Priority Set in the DC Locator DNS SRV Records
\System\Net Logon\DC Locator DNS Records

Process List
\Windows Components\Internet Explorer\Application Compatibility\Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt

Process List
\Windows Components\Internet Explorer\Security Features\Add-on Management

Process List
\Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction

Process List
\Windows Components\Internet Explorer\Security Features\Consistent Mime Handling

Process List
\Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security

Process List
\Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature

Process List
\Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction

Process List
\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown

Process List
\Windows Components\Internet Explorer\Security Features\Notification bar

Process List
\Windows Components\Internet Explorer\Security Features\Object Caching Protection

Process List
\Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation

Process List
\Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install

Process List
\Windows Components\Internet Explorer\Security Features\Restrict File Download

Process List
\Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions

Prohibit Access of the Windows Connect Now wizards
\Network\Windows Connect Now

Prohibit Browse
\Windows Components\Task Scheduler

Prohibit Drag-and-Drop
\Windows Components\Task Scheduler

Prohibit Flyweight Patching
\Windows Components\Windows Installer

Prohibit installation and configuration of Network Bridge on your DNS domain network
\Network\Network Connections

Prohibit installing or uninstalling color profiles
\Windows Components\Windows Color System

Prohibit 'Make Available Offline' for these file and folders
\Network\Offline Files

Prohibit New Task Creation
\Windows Components\Task Scheduler

Prohibit non-administrators from applying vendor signed updates
\Windows Components\Windows Installer

Prohibit patching
\Windows Components\Windows Installer

Prohibit removal of updates
\Windows Components\Windows Installer

Prohibit rollback
\Windows Components\Windows Installer

Prohibit Task Deletion
\Windows Components\Task Scheduler

Prohibit use of Internet Connection Firewall on your DNS domain network
\Network\Network Connections

Prohibit use of Internet Connection Sharing on your DNS domain network
\Network\Network Connections

Prohibit Use of Restart Manager
\Windows Components\Windows Installer

Prohibit user configuration of Offline Files
\Network\Offline Files

Prohibit User Installs
\Windows Components\Windows Installer

Prompt for credentials on the client computer
\Windows Components\Remote Desktop Services\Remote Desktop Connection Client

Prompt user when a slow network connection is detected
\System\User Profiles

Propagation of extended error information
\System\Remote Procedure Call

Provide the unique identifiers for your organization
\Windows Components\BitLocker Drive Encryption

Prune printers that are not automatically republished
\Printers

Qualitative service type
\Network\QoS Packet Scheduler\DSCP value of conforming packets

Qualitative service type
\Network\QoS Packet Scheduler\DSCP value of non-conforming packets

Qualitative service type
\Network\QoS Packet Scheduler\Layer-2 priority value

Reduce Display Brightness (On Battery)
\System\Power Management\Video and Display Settings

Reduce Display Brightness (Plugged In)
\System\Power Management\Video and Display Settings

Refresh Interval of the DC Locator DNS Records
\System\Net Logon\DC Locator DNS Records

Register DNS records with connection-specific DNS suffix
\Network\DNS Client

Register PTR Records
\Network\DNS Client

Registration Refresh Interval
\Network\DNS Client

Registry policy processing
\System\Group Policy

Reminder balloon frequency
\Network\Offline Files

Reminder balloon lifetime
\Network\Offline Files

Removable Disks: Deny execute access
\System\Removable Storage Access

Removable Disks: Deny read access
\System\Removable Storage Access

Removable Disks: Deny write access
\System\Removable Storage Access

Remove "Disconnect" option from Shut Down dialog
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Remove Boot / Shutdown / Logon / Logoff status messages
\System

Remove browse dialog box for new source
\Windows Components\Windows Installer

Remove 'Make Available Offline'
\Network\Offline Files

Remove Program Compatibility Property Page
\Windows Components\Application Compatibility

Remove users ability to invoke machine policy refresh
\System\Group Policy

Remove Windows Security item from Start menu
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Replace Addresses In Conflicts
\Network\DNS Client

Report operating system errors
\Windows Components\Windows Error Reporting\Advanced Error Reporting Settings

Report unplanned shutdown events
\Windows Components\Windows Error Reporting\Advanced Error Reporting Settings

Report when logon server was not available during user logon
\Windows Components\Windows Logon Options

Re-prompt for restart with scheduled installations
\Windows Components\Windows Update

Require a Password When a Computer Wakes (On Battery)
\System\Power Management\Sleep Settings

Require a Password When a Computer Wakes (Plugged In)
\System\Power Management\Sleep Settings

Require a PIN to access data on devices running Microsoft firmware
\Windows Components\Windows SideShow

Require additional authentication at startup
\Windows Components\BitLocker Drive Encryption\Operating System Drives

Require additional authentication at startup (Windows Server 2008 and Windows Vista)
\Windows Components\BitLocker Drive Encryption\Operating System Drives

Require domain users to elevate when setting a network's location
\Network\Network Connections

Require secure RPC communication
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security

Require strict KDC validation
\System\Kerberos

Require strict target SPN match on remote procedure calls
\System\Kerberos

Require trusted path for credential entry.
\Windows Components\Credential User Interface

Require use of specific security layer for remote (RDP) connections
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security

Require user authentication for remote connections by using Network Level Authentication
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security

Reschedule Automatic Updates scheduled installations
\Windows Components\Windows Update

Reserve Battery Notification Level
\System\Power Management\Notification Settings

Restrict changing the default search provider
\Windows Components\Internet Explorer

Restrict Internet communication
\System\Internet Communication Management

Restrict potentially unsafe HTML Help functions to specified folders
\System

Restrict Remote Desktop Services users to a single Remote Desktop Services session
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections

Restrict search providers to a specific list of providers
\Windows Components\Internet Explorer

Restrict system locales
\System\Locale Services

Restrict these programs from being launched from Help
\System

Restrict unpacking and installation of gadgets that are not digitally signed.
\Windows Components\Desktop Gadgets

Restrict user locales
\System\Locale Services

Restricted Sites Zone Restricted Protocols
\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protocols Per Security Zone

Restricted Sites Zone Template
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Restrictions for Unauthenticated RPC clients
\System\Remote Procedure Call

Restricts the UI language Windows uses for all logged users
\Control Panel\Regional and Language Options

Retain old events
\Windows Components\Event Log Service\Application

Retain old events
\Windows Components\Event Log Service\Security

Retain old events
\Windows Components\Event Log Service\Setup

Retain old events
\Windows Components\Event Log Service\System

Reverse the subject name stored in a certificate when displaying
\Windows Components\Smart Card

Route all traffic through the internal network
\Network\Network Connections

RPC Endpoint Mapper Client Authentication
\System\Remote Procedure Call

RPC Troubleshooting State Information
\System\Remote Procedure Call

Run .NET Framework-reliant components not signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Run .NET Framework-reliant components not signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Run .NET Framework-reliant components not signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Run .NET Framework-reliant components not signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Run .NET Framework-reliant components not signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Run .NET Framework-reliant components not signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Run .NET Framework-reliant components not signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Run .NET Framework-reliant components not signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Run .NET Framework-reliant components not signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Run .NET Framework-reliant components not signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Run .NET Framework-reliant components signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Run .NET Framework-reliant components signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Run .NET Framework-reliant components signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Run .NET Framework-reliant components signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Run .NET Framework-reliant components signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Run .NET Framework-reliant components signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Run .NET Framework-reliant components signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Run .NET Framework-reliant components signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Run .NET Framework-reliant components signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Run .NET Framework-reliant components signed with Authenticode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Run ActiveX controls and plugins
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Run ActiveX controls and plugins
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Run ActiveX controls and plugins
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Run ActiveX controls and plugins
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Run ActiveX controls and plugins
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Run ActiveX controls and plugins
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Run ActiveX controls and plugins
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Run ActiveX controls and plugins
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Run ActiveX controls and plugins
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Run ActiveX controls and plugins
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Run logon scripts synchronously
\System\Scripts

Run shutdown scripts visible
\System\Scripts

Run startup scripts asynchronously
\System\Scripts

Run startup scripts visible
\System\Scripts

Run these programs at user logon
\System\Logon

Run Windows PowerShell scripts first at computer startup, shutdown
\System\Scripts

Run Windows PowerShell scripts first at user logon, logoff
\System\Scripts

Scavenge Interval
\System\Net Logon

Script ActiveX controls marked safe for scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Script ActiveX controls marked safe for scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Script ActiveX controls marked safe for scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Script ActiveX controls marked safe for scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Script ActiveX controls marked safe for scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Script ActiveX controls marked safe for scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Script ActiveX controls marked safe for scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Script ActiveX controls marked safe for scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Script ActiveX controls marked safe for scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Script ActiveX controls marked safe for scripting
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Scripting of Java applets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Scripting of Java applets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Scripting of Java applets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Scripting of Java applets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Scripting of Java applets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Scripting of Java applets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Scripting of Java applets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Scripting of Java applets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Scripting of Java applets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Scripting of Java applets
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Scripts policy processing
\System\Group Policy

Security policy processing
\System\Group Policy

Security Zones: Do not allow users to add/delete sites
\Windows Components\Internet Explorer

Security Zones: Do not allow users to change policies
\Windows Components\Internet Explorer

Security Zones: Use only machine settings
\Windows Components\Internet Explorer

Select an Active Power Plan
\System\Power Management

Select the Lid Switch Action (On Battery)
\System\Power Management\Button Settings

Select the Lid Switch Action (Plugged In)
\System\Power Management\Button Settings

Select the Power Button Action (On Battery)
\System\Power Management\Button Settings

Select the Power Button Action (Plugged In)
\System\Power Management\Button Settings

Select the Sleep Button Action (On Battery)
\System\Power Management\Button Settings

Select the Sleep Button Action (Plugged In)
\System\Power Management\Button Settings

Select the Start Menu Power Button Action (On Battery)
\System\Power Management\Button Settings

Select the Start Menu Power Button Action (Plugged In)
\System\Power Management\Button Settings

Selectively allow the evaluation of a symbolic link
\System\Filesystem

Send internationalized domain names
\Windows Components\Internet Explorer\Internet Control Panel

Server Authentication Certificate Template
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security

Set a support web page link
\Windows Components\Windows Explorer

Set BranchCache Distributed Cache mode
\Network\BranchCache

Set BranchCache Hosted Cache mode
\Network\BranchCache

Set client connection encryption level
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security

Set compression algorithm for RDP data
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Set large or small icon view in desktop search results
\Windows Components\Search

Set location of Stop and Refresh buttons
\Windows Components\Internet Explorer\Toolbars

Set maximum wait time for the network if a user has a roaming user profile or remote home directory
\System\User Profiles

Set path for Remote Desktop Services Roaming User Profile
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Profiles

Set percentage of disk space used for client computer cache
\Network\BranchCache

Set PNRP cloud to resolve only
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds

Set PNRP cloud to resolve only
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds

Set PNRP cloud to resolve only
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds

Set Remote Desktop Services User Home Directory
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Profiles

Set roaming profile path for all users logging onto this computer
\System\User Profiles

Set rules for remote control of Remote Desktop Services user sessions
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections

Set tab process growth
\Windows Components\Internet Explorer

Set the Email IDs to which notifications are to be sent
\Windows Components\Windows System Resource Manager

Set the Remote Desktop licensing mode
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Licensing

Set the Seed Server
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds

Set the Seed Server
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds

Set the Seed Server
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds

Set the SMTP Server used to send notifications
\Windows Components\Windows System Resource Manager

Set the Time interval in minutes for logging accounting data
\Windows Components\Windows System Resource Manager

Set time limit for active but idle Remote Desktop Services sessions
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits

Set time limit for active Remote Desktop Services sessions
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits

Set time limit for disconnected sessions
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits

Set timer resolution
\Network\QoS Packet Scheduler

Set up a maintenance schedule to limit the maximum network bandwidth used for BITS background transfers
\Network\Background Intelligent Transfer Service (BITS)

Set up a work schedule to limit the maximum network bandwidth used for BITS background transfers
\Network\Background Intelligent Transfer Service (BITS)

Set Windows File Protection scanning
\System\Windows File Protection

Sets how often a DFS Client discovers DC's
\Network

Short name creation options
\System\Filesystem\NTFS

Site Name
\System\Net Logon

Site to Zone Assignment List
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Sites Covered by the Application Directory Partition Locator DNS SRV Records
\System\Net Logon\DC Locator DNS Records

Sites Covered by the DC Locator DNS SRV Records
\System\Net Logon\DC Locator DNS Records

Sites Covered by the GC Locator DNS SRV Records
\System\Net Logon\DC Locator DNS Records

Slow network connection timeout for user profiles
\System\User Profiles

Smartcard EKU
\Microsoft IT DirectAccess Setup

Software channel permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Software channel permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Software channel permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Software channel permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Software channel permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Software channel permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Software channel permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Software channel permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Software channel permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Software channel permissions
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Software Installation policy processing
\System\Group Policy

Solicited Remote Assistance
\System\Remote Assistance

Specify a Custom Active Power Plan
\System\Power Management

Specify a default color
\Windows Components\Desktop Window Manager\Window Frame Coloring

Specify channel binding token hardening level
\Windows Components\Windows Remote Management (WinRM)\WinRM Service

Specify idle Timeout
\Windows Components\Windows Remote Shell

Specify intranet Microsoft update service location
\Windows Components\Windows Update

Specify maximum amount of memory in MB per Shell
\Windows Components\Windows Remote Shell

Specify maximum number of processes per Shell
\Windows Components\Windows Remote Shell

Specify maximum number of remote shells per user
\Windows Components\Windows Remote Shell

Specify RD Session Host server fallback printer driver behavior
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Printer Redirection

Specify search order for device driver source locations
\System\Device Installation

Specify SHA1 thumbprints of certificates representing trusted .rdp publishers
\Windows Components\Remote Desktop Services\Remote Desktop Connection Client

Specify Shell Timeout
\Windows Components\Windows Remote Shell

Specify the Display Dim Brightness (On Battery)
\System\Power Management\Video and Display Settings

Specify the Display Dim Brightness (Plugged In)
\System\Power Management\Video and Display Settings

Specify the System Hibernate Timeout (On Battery)
\System\Power Management\Sleep Settings

Specify the System Hibernate Timeout (Plugged In)
\System\Power Management\Sleep Settings

Specify the System Sleep Timeout (On Battery)
\System\Power Management\Sleep Settings

Specify the System Sleep Timeout (Plugged In)
\System\Power Management\Sleep Settings

Specify the Unattended Sleep Timeout (On Battery)
\System\Power Management\Sleep Settings

Specify the Unattended Sleep Timeout (Plugged In)
\System\Power Management\Sleep Settings

Specify Windows File Protection cache location
\System\Windows File Protection

Specify Windows installation file location
\System

Specify Windows Service Pack installation file location
\System

SSL Cipher Suite Order
\Network\SSL Configuration Settings

Start a program on connection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment

Startup policy processing wait time
\System\Group Policy

Stop indexing in the event of limited hard drive space
\Windows Components\Search

Store BitLocker recovery information in Active Directory Domain Services(Windows Server 2008 and Windows Vista)
\Windows Components\BitLocker Drive Encryption

Subfolders always available offline
\Network\Offline Files

Submit non-encrypted form data
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Submit non-encrypted form data
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Submit non-encrypted form data
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Submit non-encrypted form data
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Submit non-encrypted form data
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Submit non-encrypted form data
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Submit non-encrypted form data
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Submit non-encrypted form data
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Submit non-encrypted form data
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Submit non-encrypted form data
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Support Email
\DirectAccess Connectivity Assistant

Switch to the Simplified Chinese (PRC) gestures
\Windows Components\Tablet PC\Input Panel

Synchronize all offline files before logging off
\Network\Offline Files

Synchronize all offline files when logging on
\Network\Offline Files

Synchronize offline files before suspend
\Network\Offline Files

Sysvol share compatibility
\System\Net Logon

Tag Windows Customer Experience Improvement data with Study Identifier
\Windows Components\Windows Customer Experience Improvement Program

Tape Drives: Deny execute access
\System\Removable Storage Access

Tape Drives: Deny read access
\System\Removable Storage Access

Tape Drives: Deny write access
\System\Removable Storage Access

Teredo Client Port
\Network\TCPIP Settings\IPv6 Transition Technologies

Teredo Default Qualified
\Network\TCPIP Settings\IPv6 Transition Technologies

Teredo Refresh Rate
\Network\TCPIP Settings\IPv6 Transition Technologies

Teredo Server Name
\Network\TCPIP Settings\IPv6 Transition Technologies

Teredo State
\Network\TCPIP Settings\IPv6 Transition Technologies

Terminate session when time limits are reached
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits

Time (in seconds) to force reboot
\System\Removable Storage Access

Time (in seconds) to force reboot when required for policy changes to take effect
\System\Device Installation\Device Installation Restrictions

Timeout for dialog boxes
\System\User Profiles

Timeout for fast user switching events
\Windows Components\Biometrics

Timeout for hung logon sessions during shutdown
\Windows Components\Shutdown Options

Timeout for inactive BITS jobs
\Network\Background Intelligent Transfer Service (BITS)

Tpm Computer Certificate EKU
\Microsoft IT DirectAccess Setup

Tpm Computer Certificate Template Name
\Microsoft IT DirectAccess Setup

Tpm Computer Certificate Template Oid
\Microsoft IT DirectAccess Setup

Tpm User Certificate EKU
\Microsoft IT DirectAccess Setup

Tpm User Certificate Template Name
\Microsoft IT DirectAccess Setup

Tpm User Certificate Template Oid
\Microsoft IT DirectAccess Setup

Tracking Protection Threshold
\Windows Components\Internet Explorer\Privacy

Traps for public community
\Network\SNMP

Troubleshooting: Allow users to access and run Troubleshooting Wizards
\System\Troubleshooting and Diagnostics\Scripted Diagnostics

Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via the Windows Online Troubleshooting Service - WOTS)
\System\Troubleshooting and Diagnostics\Scripted Diagnostics

Trusted Hosts
\Windows Components\Windows Remote Management (WinRM)\WinRM Client

Trusted Sites Zone Restricted Protocols
\Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protocols Per Security Zone

Trusted Sites Zone Template
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Try Next Closest Site
\System\Net Logon\DC Locator DNS Records

TTL Set in the A and PTR records
\Network\DNS Client

TTL Set in the DC Locator DNS Records
\System\Net Logon\DC Locator DNS Records

Turn off "Delete Browsing History" functionality
\Windows Components\Internet Explorer\Delete Browsing History

Turn off "Found New Hardware" balloons during device installation
\System\Device Installation

Turn off ability to pin sites
\Windows Components\Internet Explorer

Turn off Accelerators
\Windows Components\Internet Explorer\Accelerators

Turn off access to all Windows Update features
\System\Internet Communication Management\Internet Communication settings

Turn off access to the OEM and Microsoft branding section
\System\Performance Control Panel

Turn off access to the performance center core section
\System\Performance Control Panel

Turn off access to the solutions to performance problems section
\System\Performance Control Panel

Turn off Active Help
\Windows Components\Online Assistance

Turn off ActiveX opt-in prompt
\Windows Components\Internet Explorer

Turn Off Adaptive Display Timeout (On Battery)
\System\Power Management\Video and Display Settings

Turn Off Adaptive Display Timeout (Plugged In)
\System\Power Management\Video and Display Settings

Turn off addition and removal of feeds and Web Slices
\Windows Components\RSS Feeds

Turn off Application Compatibility Engine
\Windows Components\Application Compatibility

Turn off Application Telemetry
\Windows Components\Application Compatibility

Turn off AutoComplete integration with Input Panel
\Windows Components\Tablet PC\Input Panel

Turn off Automatic Crash Recovery Prompt
\Windows Components\Internet Explorer

Turn off automatic learning
\Windows Components\Tablet PC\Handwriting personalization

Turn off Automatic Root Certificates Update
\System\Internet Communication Management\Internet Communication settings

Turn off automatic termination of applications that block or cancel shutdown
\System\Shutdown Options

Turn off automatic wake
\Windows Components\Windows SideShow

Turn off Autoplay
\Windows Components\AutoPlay Policies

Turn off Autoplay for non-volume devices
\Windows Components\AutoPlay Policies

Turn off background refresh of Group Policy
\System\Group Policy

Turn off background sync for feeds and Web Slices
\Windows Components\RSS Feeds

Turn Off Boot and Resume Optimizations
\System\Disk NV Cache

Turn Off Cache Power Mode
\System\Disk NV Cache

Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools
\Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer and Internet Tools

Turn off ClearType
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Turn off Compatibility View
\Windows Components\Internet Explorer\Compatibility View

Turn off Compatibility View button
\Windows Components\Internet Explorer\Compatibility View

Turn off Configuration
\System\System Restore

Turn off configuration of default behavior of new tab creation
\Windows Components\Internet Explorer

Turn off configuration of tabbed browsing pop-up behavior
\Windows Components\Internet Explorer

Turn off configuration of window reuse
\Windows Components\Internet Explorer

Turn off configuring the update check interval (in days)
\Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer and Internet Tools

Turn off Connect to a Network Projector
\Windows Components\Network Projector

Turn off Crash Detection
\Windows Components\Internet Explorer

Turn off creation of System Restore Checkpoints
\Windows Components\Windows Installer

Turn off Cross Document Messaging
\Windows Components\Internet Explorer\Security Features\AJAX

Turn off Data Execution Prevention
\Windows Components\Internet Explorer\Security Features

Turn off Data Execution Prevention for Explorer
\Windows Components\Windows Explorer

Turn off Data Execution Prevention for HTML Help Executible
\System

Turn off Data URI Support
\Windows Components\Internet Explorer\Security Features

Turn off desktop gadgets
\Windows Components\Desktop Gadgets

Turn off Developer Tools
\Windows Components\Internet Explorer\Toolbars

Turn off displaying the Internet Explorer Help Menu
\Windows Components\Internet Explorer

Turn off downloading of enclosures
\Windows Components\RSS Feeds

Turn off downloading of game information
\Windows Components\Game Explorer

Turn off downloading of print drivers over HTTP
\System\Internet Communication Management\Internet Communication settings

Turn off Encryption Support
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Turn off Event Viewer "Events.asp" links
\System\Internet Communication Management\Internet Communication settings

Turn off Favorites bar
\Windows Components\Internet Explorer

Turn off feed and Web Slices discovery
\Windows Components\RSS Feeds

Turn Off First-Run Opt-In
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Turn Off First-Run Opt-In
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Turn Off First-Run Opt-In
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Turn Off First-Run Opt-In
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Turn Off First-Run Opt-In
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Turn Off First-Run Opt-In
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Turn Off First-Run Opt-In
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Turn Off First-Run Opt-In
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Turn Off First-Run Opt-In
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Turn Off First-Run Opt-In
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Turn off game updates
\Windows Components\Game Explorer

Turn off handwriting recognition error reporting
\System\Internet Communication Management\Internet Communication settings

Turn off hardware buttons
\Windows Components\Tablet PC\Hardware Buttons

Turn off heap termination on corruption
\Windows Components\Windows Explorer

Turn off Help and Support Center "Did you know?" content
\System\Internet Communication Management\Internet Communication settings

Turn off Help and Support Center Microsoft Knowledge Base search
\System\Internet Communication Management\Internet Communication settings

Turn Off Hybrid Sleep (On Battery)
\System\Power Management\Sleep Settings

Turn Off Hybrid Sleep (Plugged In)
\System\Power Management\Sleep Settings

Turn off InPrivate Browsing
\Windows Components\Internet Explorer\Privacy

Turn off InPrivate Filtering
\Windows Components\Internet Explorer\Privacy

Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com
\System\Internet Communication Management\Internet Communication settings

Turn off Internet download for Web publishing and online ordering wizards
\System\Internet Communication Management\Internet Communication settings

Turn off Internet File Association service
\System\Internet Communication Management\Internet Communication settings

Turn off legacy remote shutdown interface
\Windows Components\Shutdown Options

Turn off Local Group Policy objects processing
\System\Group Policy

Turn off location
\Windows Components\Location and Sensors

Turn off location scripting
\Windows Components\Location and Sensors

Turn Off Low Battery User Notification
\System\Power Management\Notification Settings

Turn off Managing Phishing filter
\Windows Components\Internet Explorer

Turn off Managing Pop-up Allow list
\Windows Components\Internet Explorer

Turn off managing Pop-up filter level
\Windows Components\Internet Explorer

Turn off Managing SmartScreen Filter for Internet Explorer 8
\Windows Components\Internet Explorer

Turn off Managing SmartScreen Filter for Internet Explorer 9
\Windows Components\Internet Explorer

Turn off Microsoft Peer-to-Peer Networking Services
\Network\Microsoft Peer-to-Peer Networking Services

Turn off Multicast Bootstrap
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds

Turn off Multicast Bootstrap
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds

Turn off Multicast Bootstrap
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds

Turn off Multicast Name Resolution
\Network\DNS Client

Turn Off Non Volatile Cache Feature
\System\Disk NV Cache

Turn off numerical sorting in Windows Explorer
\Windows Components\Windows Explorer

Turn off page zooming functionality
\Windows Components\Internet Explorer

Turn off password security in Input Panel
\Windows Components\Tablet PC\Input Panel

Turn off pen feedback
\Windows Components\Tablet PC\Cursors

Turn off PNRP cloud creation
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds

Turn off PNRP cloud creation
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds

Turn off PNRP cloud creation
\Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds

Turn off pop-up management
\Windows Components\Internet Explorer

Turn off Print Menu
\Windows Components\Internet Explorer\Browser menus

Turn off printing over HTTP
\System\Internet Communication Management\Internet Communication settings

Turn off Problem Steps Recorder
\Windows Components\Application Compatibility

Turn off Profile Assistant
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Turn off Program Compatibility Assistant
\Windows Components\Application Compatibility

Turn off Program Inventory
\Windows Components\Application Compatibility

Turn off Quick Tabs functionality
\Windows Components\Internet Explorer

Turn off Real-Time Monitoring
\Windows Components\Windows Defender

Turn off Registration if URL connection is referring to Microsoft.com
\System\Internet Communication Management\Internet Communication settings

Turn off reminder balloons
\Network\Offline Files

Turn off Reopen Last Browsing Session
\Windows Components\Internet Explorer

Turn off restore functionality
\Windows Components\Backup\Client

Turn off Resultant Set of Policy logging
\System\Group Policy

Turn off Routinely Taking Action
\Windows Components\Windows Defender

Turn off Search Companion content file updates
\System\Internet Communication Management\Internet Communication settings

Turn off sensors
\Windows Components\Location and Sensors

Turn off shell protocol protected mode
\Windows Components\Windows Explorer

Turn Off Solid State Mode
\System\Disk NV Cache

Turn off suggestions for all user-installed providers
\Windows Components\Internet Explorer

Turn off SwitchBack Compatibility Engine
\Windows Components\Application Compatibility

Turn off System Restore
\System\System Restore

Turn off tabbed browsing
\Windows Components\Internet Explorer

Turn off Tablet PC Pen Training
\Windows Components\Tablet PC\Tablet PC Pen Training

Turn off Tablet PC touch input
\Windows Components\Tablet PC\Touch Input

Turn off the "Order Prints" picture task
\System\Internet Communication Management\Internet Communication settings

Turn off the "Publish to Web" task for files and folders
\System\Internet Communication Management\Internet Communication settings

Turn off the ability to back up data files
\Windows Components\Backup\Client

Turn off the ability to create a system image
\Windows Components\Backup\Client

Turn off the activation of the quick pick menu
\Windows Components\Internet Explorer

Turn off the auto-complete feature for web addresses
\Windows Components\Internet Explorer

Turn off the communities features
\Windows Components\Windows Mail

Turn Off the Display (On Battery)
\System\Power Management\Video and Display Settings

Turn Off the Display (Plugged In)
\System\Power Management\Video and Display Settings

Turn off the feed list
\Windows Components\RSS Feeds

Turn Off the Hard Disk (On Battery)
\System\Power Management\Hard Disk Settings

Turn Off the Hard Disk (Plugged In)
\System\Power Management\Hard Disk Settings

Turn off the Security Settings Check feature
\Windows Components\Internet Explorer

Turn off the Windows Messenger Customer Experience Improvement Program
\System\Internet Communication Management\Internet Communication settings

Turn off the XDomainRequest Object
\Windows Components\Internet Explorer\Security Features\AJAX

Turn off tolerant and Z-shaped scratch-out gestures
\Windows Components\Tablet PC\Input Panel

Turn off toolbar upgrade tool
\Windows Components\Internet Explorer\Toolbars

Turn off Touch Panning
\Windows Components\Tablet PC\Touch Input

Turn off tracking of last play time of games in the Games folder
\Windows Components\Game Explorer

Turn off Tracking Protection
\Windows Components\Internet Explorer\Privacy

Turn Off user-installed desktop gadgets
\Windows Components\Desktop Gadgets

Turn off Windows Calendar
\Windows Components\Windows Calendar

Turn off Windows Customer Experience Improvement Program
\System\Internet Communication Management\Internet Communication settings

Turn off Windows Defender
\Windows Components\Windows Defender

Turn off Windows Error Reporting
\System\Internet Communication Management\Internet Communication settings

Turn off Windows HotStart
\System\Windows HotStart

Turn off Windows Mail application
\Windows Components\Windows Mail

Turn off Windows Mobility Center
\Windows Components\Windows Mobility Center

Turn off Windows Network Connectivity Status Indicator active tests
\System\Internet Communication Management\Internet Communication settings

Turn off Windows presentation settings
\Windows Components\Presentation Settings

Turn off Windows Search AutoComplete
\Windows Components\Internet Explorer\Internet Settings\AutoComplete

Turn off Windows SideShow
\Windows Components\Windows SideShow

Turn off Windows Startup Sound
\System\Logon

Turn off Windows Update device driver search prompt
\System\Driver Installation

Turn off Windows Update device driver searching
\System\Internet Communication Management\Internet Communication settings

Turn on Accounting for WSRM
\Windows Components\Windows System Resource Manager

Turn on ActiveX Filtering
\Windows Components\Internet Explorer

Turn on automatic detection of the intranet
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Turn on bandwidth optimization
\System\Remote Assistance

Turn on Basic feed authentication over HTTP
\Windows Components\RSS Feeds

Turn on BranchCache
\Network\BranchCache

Turn on Caret Browsing support
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Turn on certificate propagation from smart card
\Windows Components\Smart Card

Turn On Compatibility HTTP Listener
\Windows Components\Windows Remote Management (WinRM)\WinRM Service

Turn On Compatibility HTTPS Listener
\Windows Components\Windows Remote Management (WinRM)\WinRM Service

Turn on Compatibility Logging
\Windows Components\Internet Explorer

Turn on Cross-Site Scripting (XSS) Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Turn on Cross-Site Scripting (XSS) Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Turn on Cross-Site Scripting (XSS) Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Turn on Cross-Site Scripting (XSS) Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Turn on Cross-Site Scripting (XSS) Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Turn on Cross-Site Scripting (XSS) Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Turn on Cross-Site Scripting (XSS) Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Turn on Cross-Site Scripting (XSS) Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Turn on Cross-Site Scripting (XSS) Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Turn on Cross-Site Scripting (XSS) Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Turn on definition updates through both WSUS and the Microsoft Malware Protection Center
\Windows Components\Windows Defender

Turn on definition updates through both WSUS and Windows Update
\Windows Components\Windows Defender

Turn On Desktop Background Slideshow (On Battery)
\System\Power Management\Video and Display Settings

Turn On Desktop Background Slideshow (Plugged In)
\System\Power Management\Video and Display Settings

Turn on economical application of administratively assigned Offline Files
\Network\Offline Files

Turn on Internet Explorer 7 Standards Mode
\Windows Components\Internet Explorer\Compatibility View

Turn on Internet Explorer Standards Mode for Local Intranet
\Windows Components\Internet Explorer\Compatibility View

Turn on logging
\Windows Components\Event Log Service\Setup

Turn on Mapper I/O (LLTDIO) driver
\Network\Link-Layer Topology Discovery

Turn on menu bar by default
\Windows Components\Internet Explorer

Turn on Notification bar notification for intranet content
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Turn on Protected Mode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Turn on Protected Mode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Turn on Protected Mode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Turn on Protected Mode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Turn on Protected Mode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Turn on Protected Mode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Turn on Protected Mode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Turn on Protected Mode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Turn on Protected Mode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Turn on Protected Mode
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Turn on recommended updates via Automatic Updates
\Windows Components\Windows Update

Turn on Responder (RSPNDR) driver
\Network\Link-Layer Topology Discovery

Turn on root certificate propagation from smart card
\Windows Components\Smart Card

Turn on Security Center (Domain PCs only)
\Windows Components\Security Center

Turn on session logging
\System\Remote Assistance

Turn on Smart Card Plug and Play service
\Windows Components\Smart Card

Turn on Software Notifications
\Windows Components\Windows Update

Turn on Suggested Sites
\Windows Components\Internet Explorer

Turn on the Ability for Applications to Prevent Sleep Transitions (On Battery)
\System\Power Management\Sleep Settings

Turn on the Ability for Applications to Prevent Sleep Transitions (Plugged In)
\System\Power Management\Sleep Settings

Turn on TPM backup to Active Directory Domain Services
\System\Trusted Platform Module Services

Turn on Warn about Certificate Address Mismatch
\Windows Components\Internet Explorer\Internet Control Panel\Security Page

Update Security Level
\Network\DNS Client

Update Top Level Domain Zones
\Network\DNS Client

Use forest search order
\System\Kerberos

Use HTTP 1.1
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Use HTTP 1.1 through proxy connections
\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

Use IP Address Redirection
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\RD Connection Broker

Use large Icons for Command Buttons
\Windows Components\Internet Explorer\Toolbars

Use localized subfolder names when redirecting Start Menu and My Documents
\System\Folder Redirection

Use mandatory profiles on the RD Session Host server
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Profiles

Use Policy Accelerators
\Windows Components\Internet Explorer\Accelerators

Use Policy List of Internet Explorer 7 sites
\Windows Components\Internet Explorer\Compatibility View

Use Policy List of Quirks Mode sites
\Windows Components\Internet Explorer\Compatibility View

Use Pop-up Blocker
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Use Pop-up Blocker
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Use Pop-up Blocker
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Use Pop-up Blocker
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Use Pop-up Blocker
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Use Pop-up Blocker
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Use Pop-up Blocker
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Use Pop-up Blocker
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Use Pop-up Blocker
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Use Pop-up Blocker
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Use Remote Desktop Easy Print printer driver first
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Printer Redirection

Use SmartScreen Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Use SmartScreen Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Use SmartScreen Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Use SmartScreen Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Use SmartScreen Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Use SmartScreen Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Use SmartScreen Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Use SmartScreen Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Use SmartScreen Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Use SmartScreen Filter
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Use the specified Remote Desktop license servers
\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Licensing

Use UTF-8 for mailto links
\Windows Components\Internet Explorer\Internet Control Panel

User Group Policy loopback processing mode
\System\Group Policy

Userdata persistence
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Userdata persistence
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Userdata persistence
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Userdata persistence
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Userdata persistence
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Userdata persistence
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Userdata persistence
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Userdata persistence
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Userdata persistence
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Userdata persistence
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Validate smart card certificate usage rule compliance
\Windows Components\BitLocker Drive Encryption

Verbose vs normal status messages
\System

Verify old and new Folder Redirection targets point to the same share before redirecting
\Windows Components\Windows Explorer

Wait for remote user profile
\System\User Profiles

Web sites in less privileged Web content zones can navigate into this zone
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

Web sites in less privileged Web content zones can navigate into this zone
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

Web sites in less privileged Web content zones can navigate into this zone
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

Web sites in less privileged Web content zones can navigate into this zone
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

Web sites in less privileged Web content zones can navigate into this zone
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

Web sites in less privileged Web content zones can navigate into this zone
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

Web sites in less privileged Web content zones can navigate into this zone
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

Web sites in less privileged Web content zones can navigate into this zone
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

Web sites in less privileged Web content zones can navigate into this zone
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

Web sites in less privileged Web content zones can navigate into this zone
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

Web-based printing
\Printers

Weight Set in the DC Locator DNS SRV Records
\System\Net Logon\DC Locator DNS Records

Windows Firewall: Allow authenticated IPsec bypass
\Network\Network Connections\Windows Firewall

Windows Firewall: Allow ICMP exceptions
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Allow ICMP exceptions
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Allow inbound file and printer sharing exception
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Allow inbound file and printer sharing exception
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Allow inbound remote administration exception
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Allow inbound remote administration exception
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Allow inbound Remote Desktop exceptions
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Allow inbound Remote Desktop exceptions
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Allow inbound UPnP framework exceptions
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Allow inbound UPnP framework exceptions
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Allow local port exceptions
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Allow local port exceptions
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Allow local program exceptions
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Allow local program exceptions
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Allow logging
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Allow logging
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Define inbound port exceptions
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Define inbound port exceptions
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Define inbound program exceptions
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Define inbound program exceptions
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Do not allow exceptions
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Do not allow exceptions
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Prohibit notifications
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Prohibit notifications
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Prohibit unicast response to multicast or broadcast requests
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Prohibit unicast response to multicast or broadcast requests
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Firewall: Protect all network connections
\Network\Network Connections\Windows Firewall\Domain Profile

Windows Firewall: Protect all network connections
\Network\Network Connections\Windows Firewall\Standard Profile

Windows Scaling Heuristics State
\Network\TCPIP Settings\Parameters

Wired policy processing
\System\Group Policy

Wireless policy processing
\System\Group Policy

WPD Devices: Deny read access
\System\Removable Storage Access

WPD Devices: Deny write access
\System\Removable Storage Access

XAML browser applications
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

XAML browser applications
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

XAML browser applications
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

XAML browser applications
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

XAML browser applications
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

XAML browser applications
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

XAML browser applications
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

XAML browser applications
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

XAML browser applications
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

XAML browser applications
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

XPS documents
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

XPS documents
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

XPS documents
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

XPS documents
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

XPS documents
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

XPS documents
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

XPS documents
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

XPS documents
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

XPS documents
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

XPS documents
\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone