Hide the “Add programs from Microsoft” option

Removes the “Add programs from Microsoft” section from the Add New Programs page. This setting prevents users from using Add or Remove Programs to connect to Windows Update. If you disable this setting or do not configure it “Add programs from Microsoft” is available to all users. This setting does not prevent users from using other tools and methods to connect to Windows Update. Note: If the “Hide Add New Programs page” setting is enabled this setting is ignored.

Hide the “Add a program from CD-ROM or floppy disk” option

Removes the “Add a program from CD-ROM or floppy disk” section from the Add New Programs page. This prevents users from using Add or Remove Programs to install programs from removable media. If you disable this setting or do not configure it the “Add a program from CD-ROM or floppy disk” option is available to all users. This setting does not prevent users from using other tools and methods to add or remove program components. Note: If the “Hide Add New Programs page” setting is enabled this setting is ignored. Also if the “Prevent removable media source for any install” setting (located in User Configuration -> Administrative Templates -> Windows Components -> Windows Installer) is enabled users cannot add programs from removable media regardless of this setting.

Specify default category for Add New Programs

Specifies the category of programs that appears when users open the “Add New Programs” page. If you enable this setting only the programs in the category you specify are displayed when the “Add New Programs” page opens. Users can use the Category box on the “Add New Programs” page to display programs in other categories. To use this setting type the name of a category in the Category box for this setting. You must enter a category that is already defined in Add or Remove Programs. To define a category use Software Installation. If you disable this setting or do not configure it all programs (Category: All) are displayed when the “Add New Programs” page opens. You can use this setting to direct users to the programs they are most likely to need. Note: This setting is ignored if either the “Remove Add or Remove Programs” setting or the “Hide Add New Programs page” setting is enabled.

Establish ActiveX installation policy for sites in Trusted zones

This policy setting controls the installation of ActiveX controls for sites in Trusted zone. If you enable this policy setting ActiveX controls are installed according to the settings defined by this policy setting. If you disable or do not configure this policy setting ActiveX controls prompt the user before installation. If the trusted site uses the HTTPS protocol this policy setting can also control how ActiveX Installer Service responds to certificate errors. By default all HTTPS connections must supply a server certificate that passes all validation criteria. If you are aware that a trusted site has a certificate error but you want to trust it anyway you can select the certificate errors that you want to ignore. Note: This policy setting applies to all sites in Trusted zones.

Approved Installation Sites for ActiveX Controls

This policy setting determines which ActiveX installation sites standard users in your organization can use to install ActiveX controls on their computers. When this setting is enabled the administrator can create a list of approved Activex Install sites specified by host URL. If you enable this setting the administrator can create a list of approved ActiveX Install sites specified by host URL. If you disable or do not configure this policy setting ActiveX controls prompt the user for administrative credentials before installation. Note: Wild card characters cannot be used when specifying the host URLs.