Tag: Computer Configuration
Enable Hotspot Authentication
This policy setting defines whether Wi-Fi hotspots are probed for Wireless Internet Service Provider roaming (WISPr) protocol support. If a Wi-Fi hotspot supports the WISPr protocol users can submit credentials when manually connecting to the network. If authentication is successful users will be connected automatically on subsequent attempts. Credentials can also be configured by network operators. If you enable this policy setting or if you do not configure this policy setting Wi-Fi hotspots are automatically probed for WISPR protocol support. If you disable this policy setting Wi-Fi hotspots are not probed for WISPr protocol support and users can only authenticate with Wi-Fi hotspots using a web browser.
Restrict potentially unsafe HTML Help functions to specified folders
This policy setting allows you to restrict certain HTML Help commands to function only in HTML Help (. chm) files within specified folders and their subfolders. Alternatively you can disable these commands on the entire system. It is strongly recommended that only folders requiring administrative privileges be added to this policy setting. If you enable this policy setting the commands function only for . chm files in the specified folders and their subfolders. To restrict the commands to one or more folders enable the policy setting and enter the desired folders in the text box on the Settings tab of the Policy Properties dialog box. Use a semicolon to separate folders. For example to restrict the commands to only . chm files in the %windir% -> help folder and D: -> somefolder add the following string to the edit box: “%windir% -> help;D: -> somefolder”. Note: An environment variable may be used (for example %windir%) as long as it is defined on the system. For example %programfiles% is not defined on some early versions of Windows. The “Shortcut” command is used to add a link to a Help topic and runs executables that are external to the Help file. The “WinHelp” command is used to add a link to a Help topic and runs a WinHLP32. exe Help (. hlp) file. To disallow the “Shortcut” and “WinHelp” commands on the entire local system enable the policy setting and leave the text box on the Settings tab of the Policy Properties dialog box blank. If you disable or do not configure this policy setting these commands are fully functional for all Help files. Note: Only folders on the local computer can be specified in this policy setting. You cannot use this policy setting to enable the “Shortcut” and “WinHelp” commands for . chm files that are stored on mapped drives or accessed using UNC paths. For additional options see the “Restrict these programs from being launched from Help” policy.
Restrict these programs from being launched from Help
This policy setting allows you to restrict programs from being run from online Help. If you enable this policy setting you can prevent specified programs from being run from Help. When you enable this policy setting enter the file names names of the programs you want to restrict separated by commas. If you disable or do not configure this policy setting users can run all applications from online Help. Note: You can also restrict users from running applications by using the Software Restriction Policy settings available in Computer Configuration -> Security Settings. Note: This policy setting is available under Computer Configuration and User Configuration. If both are settings are used any programs listed in either of these locations cannot launched from Help
Turn off Data Execution Prevention for HTML Help Executible
This policy setting allows you to exclude HTML Help Executable from being monitored by software-enforced Data Execution Prevention. Data Execution Prevention (DEP) is designed to block malicious code that takes advantage of exception-handling mechanisms in Windows by monitoring your programs to make sure that they use system memory safely. If you enable this policy setting DEP for HTML Help Executable is turned off. This will allow certain legacy ActiveX controls to function without DEP shutting down HTML Help Executable. If you disable or do not configure this policy setting DEP is turned on for HTML Help Executable. This provides an additional security benefit but HTLM Help stops if DEP detects system memory abnormalities.
Turn off Active Help
This policy setting specifies whether active content links in trusted assistance content are rendered. By default the Help viewer renders trusted assistance content with active elements such as ShellExecute links and Guided Help links. If you enable this policy setting active content links are not rendered. The text is displayed but there are no clickable links for these elements. If you disable or do not configure this policy setting the default behavior applies (Help viewer renders trusted assistance content with active elements).
Configure Start Menu preference logging and tracing
This policy setting allows you to configure the level of detail recorded by event logging for the Start Menu preference extension and to turn on tracing for the Start Menu extension. Logging and tracing provide diagnostic information for troubleshooting. If you enable this policy setting you can configure event logging and turn on tracing for the Start Menu extension for client computers. If you disable or do not configure this policy setting by default event logging for this extension includes only warnings and errors and tracing for this extension is turned off. Notes:1. User Configuration tracing: To perform tracing for items in this preference extension listed under User Configuration you must provide a path in the “User trace” box to the location where a user trace file can be created on the client computer and you must turn on the “Tracing” option. If there are no preference items under User Configuration in this extension no user trace file is created. 2. Computer Configuration tracing: This preference extension is available under User Configuration only so computer configuration tracing is not applicable. 3. Group Policy Modeling query tracing: To perform tracing for items in this preference extension when you perform a Group Policy Modeling query you must provide a path in the “Planning trace” box to the location where a planning trace file can be created on the computer where you run modeling and you must turn on the “Tracing” option. If you are not performing Group Policy Modeling or there are no preference items in this extension no planning trace file is created.
Configure Start Menu preference extension policy processing
This policy setting allows you to configure when preference items in the Start Menu preference extension are updated. If you enable this policy setting you can configure processing options for Start Menu preference items. If you disable or do not configure this policy setting Start Menu preference items are allowed to process across a slow network connection to be applied during background processing and to process even if the Group Policy objects (GPOs) are unchanged. By default background processing priority is “Idle. “Notes:1. The “Allow processing across a slow network connection” option updates preference items even when the update is transmitted across a slow network connection such as a telephone line. Updates across slow connections can cause significant delays. 2. The “Do not apply during periodic background processing” option prevents the system from updating affected preference items in the background while the computer is in use. When background updates are disabled preference item changes do not take effect until the next user logon or system restart. 3. The “Process even if the Group Policy objects have not changed” option updates and reapplies the preference items even if the preference items have not changed. Many policy implementations specify that they are updated only when changed. However you might want to update unchanged preference items such as reapplying a desired preference setting in case a user has changed it.
Configure Services preference extension policy processing
This policy setting allows you to configure when preference items in the Services preference extension are updated. If you enable this policy setting you can configure processing options for Service preference items. If you disable or do not configure this policy setting Service preference items are allowed to process across a slow network connection to be applied during background processing and to process even if the Group Policy objects (GPOs) are unchanged. By default background processing priority is “Idle. “Notes:1. The “Allow processing across a slow network connection” option updates preference items even when the update is transmitted across a slow network connection such as a telephone line. Updates across slow connections can cause significant delays. 2. The “Do not apply during periodic background processing” option prevents the system from updating affected preference items in the background while the computer is in use. When background updates are disabled preference item changes do not take effect until the next user logon or system restart. 3. The “Process even if the Group Policy objects have not changed” option updates and reapplies the preference items even if the preference items have not changed. Many policy implementations specify that they are updated only when changed. However you might want to update unchanged preference items such as reapplying a desired preference setting in case a user has changed it.
Configure Scheduled Tasks preference logging and tracing
This policy setting allows you to configure the level of detail recorded by event logging for the Scheduled Tasks preference extension and to turn on tracing for the Scheduled Tasks extension. Logging and tracing provide diagnostic information for troubleshooting. If you enable this policy setting you can configure event logging and turn on tracing for the Scheduled Tasks extension for client computers. If you disable or do not configure this policy setting by default event logging for this extension includes only warnings and errors and tracing for this extension is turned off. Notes:1. User Configuration tracing: To perform tracing for items in this preference extension listed under User Configuration you must provide a path in the “User trace” box to the location where a user trace file can be created on the client computer and you must turn on the “Tracing” option. If there are no preference items under User Configuration in this extension no user trace file is created. 2. Computer Configuration tracing: This preference extension is available under User Configuration only so computer configuration tracing is not applicable. 3. Group Policy Modeling query tracing: To perform tracing for items in this preference extension when you perform a Group Policy Modeling query you must provide a path in the “Planning trace” box to the location where a planning trace file can be created on the computer where you run modeling and you must turn on the “Tracing” option. If you are not performing Group Policy Modeling or there are no preference items in this extension no planning trace file is created.
Configure Scheduled Tasks preference extension policy processing
This policy setting allows you to configure when preference items in the Scheduled Tasks preference extension are updated. If you enable this policy setting you can configure processing options for Scheduled Task and Immediate Task preference items. If you disable or do not configure this policy setting Scheduled Task and Immediate Task preference items are allowed to process across a slow network connection to be applied during background processing and to process even if the Group Policy objects (GPOs) are unchanged. By default background processing priority is “Idle. “Notes:1. The “Allow processing across a slow network connection” option updates preference items even when the update is transmitted across a slow network connection such as a telephone line. Updates across slow connections can cause significant delays. 2. The “Do not apply during periodic background processing” option prevents the system from updating affected preference items in the background while the computer is in use. When background updates are disabled preference item changes do not take effect until the next user logon or system restart. 3. The “Process even if the Group Policy objects have not changed” option updates and reapplies the preference items even if the preference items have not changed. Many policy implementations specify that they are updated only when changed. However you might want to update unchanged preference items such as reapplying a desired preference setting in case a user has changed it.