Author: admin
Turn off shell protocol protected mode
This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol applications can open folders and launch files. The protected mode reduces the functionality of this protocol allowing applications to only open a limited set of folders. Applications are not able to open files with this protocol when it is in the protected mode. It is recommended to leave this protocol in the protected mode to increase the security of Windows. If you enable this policy setting the protocol is fully enabled allowing the opening of folders and files. If you disable this policy setting the protocol is in the protected mode allowing applications to only open a limited set of folders. If you do not configure this policy setting the protocol is in the protected mode allowing applications to only open a limited set of folders.
Maximum allowed Recycle Bin size
Limits the percentage of a volume’s disk space that can be used to store deleted files. If you enable this setting the user has a maximum amount of disk space that may be used for the Recycle Bin on their workstation. If you disable or do not configure this setting users can change the total amount of disk space used by the Recycle Bin. Note: This setting is applied to all volumes.
Request credentials for network installations
Prompts users for alternate logon credentials during network-based installations. This setting displays the “Install Program As Other User” dialog box even when a program is being installed from files on a network computer across a local area network connection. If you disable this setting or do not configure it this dialog box appears only when users are installing programs from local media. The “Install Program as Other User” dialog box prompts the current user for the user name and password of an administrator. This setting allows administrators who have logged on as regular users to install programs without logging off and logging on again using their administrator credentials. If the dialog box does not appear the installation proceeds with the current user’s permissions. If these permissions are not sufficient the installation might fail or it might complete but not include all features. Or it might appear to complete successfully but the installed program might not operate correctly. Note: If it is enabled the “Do not request alternate credentials” setting takes precedence over this setting. When that setting is enabled users are not prompted for alternate logon credentials on any installation.
No Computers Near Me in Network Locations
This policy setting allows you to remove computers in the user’s workgroup and domain from lists of network resources in File Explorer and Network Locations. If you enable this policy setting the system removes the “Computers Near Me” option and the icons representing nearby computers from Network Locations. This policy setting also removes these icons from the Map Network Drive browser. If you disable or do not configure this policy setting computers in the user’s workgroup and domain appear in lists of network resources in File Explorer and Network Locations. This policy setting does not prevent users from connecting to computers in their workgroup or domain by other commonly used methods such as typing the share name in the Run dialog box or the Map Network Drive dialog box. To remove network computers from lists of network resources use the “No Entire Network in Network Locations” policy setting.
Turn off Windows+X hotkeys
Turn off Windows+X hotkeys. Keyboards with a Windows key provide users with shortcuts to common shell features. For example pressing the keyboard sequence Windows+R opens the Run dialog box; pressing Windows+E starts File Explorer. By using this setting you can disable these Windows+X shortcut keys. If you enable this setting the Windows+X shortcut keys are unavailable. If you disable or do not configure this setting the Windows+X shortcut keys are available.
Prevent access to drives from My Computer
Prevents users from using My Computer to gain access to the content of selected drives. If you enable this setting users can browse the directory structure of the selected drives in My Computer or File Explorer but they cannot open folders and access the contents. Also they cannot use the Run dialog box or the Map Network Drive dialog box to view the directories on these drives. To use this setting select a drive or combination of drives from the drop-down list. To allow access to all drive directories disable this setting or select the “Do not restrict drives” option from the drop-down list. Note: The icons representing the specified drives still appear in My Computer but if users double-click the icons a message appears explaining that a setting prevents the action. Also this setting does not prevent users from using programs to access local and network drives. And it does not prevent them from using the Disk Management snap-in to view and change drive characteristics. Also see the “Hide these specified drives in My Computer” setting.
Remove File Explorer’s default context menu
Removes shortcut menus from the desktop and File Explorer. Shortcut menus appear when you right-click an item. If you enable this setting menus do not appear when you right-click the desktop or when you right-click the items in File Explorer. This setting does not prevent users from using other methods to issue commands available on the shortcut menus.
Remove Search button from File Explorer
This policy setting allows you to remove the Search button from the File Explorer toolbar. If you enable this policy setting the Search button is removed from the Standard Buttons toolbar that appears in File Explorer and other programs that use the File Explorer window such as My Computer and Network Locations. Enabling this policy setting does not remove the Search button or affect any search features of Internet browser windows such as the Internet Explorer window. If you disable or do not configure this policy setting the Search button is available from the File Explorer toolbar. This policy setting does not affect the Search items on the File Explorer context menu or on the Start menu. To remove Search from the Start menu use the “Remove Search menu from Start menu” policy setting (in User Configuration -> Administrative Templates -> Start Menu and Taskbar). To hide all context menus use the “Remove File Explorer’s default context menu” policy setting.
Remove Security tab
Removes the Security tab from File Explorer. If you enable this setting users opening the Properties dialog box for all file system objects including folders files shortcuts and drives will not be able to access the Security tab. As a result users will be able to neither change the security settings nor view a list of all users that have access to the resource in question. If you disable or do not configure this setting users will be able to access the security tab.
Do not request alternate credentials
Prevents users from submitting alternate logon credentials to install a program. This setting suppresses the “Install Program As Other User” dialog box for local and network installations. This dialog box which prompts the current user for the user name and password of an administrator appears when users who are not administrators try to install programs locally on their computers. This setting allows administrators who have logged on as regular users to install programs without logging off and logging on again using their administrator credentials. Many programs can be installed only by an administrator. If you enable this setting and a user does not have sufficient permissions to install a program the installation continues with the current user’s logon credentials. As a result the installation might fail or it might complete but not include all features. Or it might appear to complete successfully but the installed program might not operate correctly. If you disable this setting or do not configure it the “Install Program As Other User” dialog box appears whenever users install programs locally on the computer. By default users are not prompted for alternate logon credentials when installing programs from a network share. If enabled this setting overrides the “Request credentials for network installations” setting.