Tag: Computer Configuration
Restrict system locales
This policy setting restricts the permitted system locales to the specified list. If the list is empty it locks the system locale to its current value. This policy setting does not change the existing system locale; however the next time that an administrator attempts to change the computer’s system locale they will be restricted to the specified list. The locale list is specified using language names separated by a semicolon (;). For example en-US is English (United States). Specifying “en-US;en-CA” would restrict the system locale to English (United States) and English (Canada). If you enable this policy setting administrators can select a system locale only from the specified system locale list. If you disable or do not configure this policy setting administrators can select any system locale shipped with the operating system.
Disallow selection of Custom Locales
This policy setting prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of locales that are installed with the operating system. This does not affect the selection of replacement locales. To prevent the selection of replacement locales adjust the permissions of the %windir% -> Globalization directory to prevent the installation of locales by unauthorized users. The policy setting “Restrict user locales” can also be enabled to disallow selection of a custom locale even if this policy setting is not configured. If you enable this policy setting the user cannot select a custom locale as their user locale but they can still select a replacement locale if one is installed. If you disable or do not configure this policy setting the user can select a custom locale as their user locale. If this policy setting is enabled at the machine level it cannot be disabled by a per-user policy setting. If this policy setting is disabled at the machine level the per-user policy setting will be ignored. If this policy setting is not configured at the machine level restrictions will be based on per-user policy settings. To set this policy setting on a per-user basis make sure that you do not configure the per-machine policy setting.
Turn off game updates
Manages download of game update information from Windows Metadata Services. If you enable this setting game update information will not be downloaded. If you disable or do not configure this setting game update information will be downloaded from Windows Metadata Services.
Redirect folders on primary computers only
This policy setting controls whether folders are redirected on a user’s primary computers only. This policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data such as on a meeting room computer or on a computer in a remote office. To designate a user’s primary computers an administrator must use management software or a script to add primary computer attributes to the user’s account in Active Directory Domain Services (AD DS). This policy setting also requires the Windows Server 2012 version of the Active Directory schema to function. If you enable this policy setting and the user has redirected folders such as the Documents and Pictures folders the folders are redirected on the user’s primary computer only. If you disable or do not configure this policy setting and the user has redirected folders the folders are redirected on every computer that the user logs on to. Note: If you enable this policy setting in Computer Configuration and User Configuration the Computer Configuration policy setting takes precedence.
Use localized subfolder names when redirecting Start Menu and My Documents
This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Programs Startup My Music My Pictures and My Videos subfolders when redirecting the parent Start Menu and legacy My Documents folder respectively. If you enable this policy setting Windows Vista Windows 7 Windows 8 and Windows Server 2012 will use localized folder names for these subfolders when redirecting the Start Menu or legacy My Documents folder. If you disable or not configure this policy setting Windows Vista Windows 7 Windows 8 and Windows Server 2012 will use the standard English names for these subfolders when redirecting the Start Menu or legacy My Documents folder. Note: This policy is valid only on Windows Vista Windows 7 Windows 8 and Windows Server 2012 when it processes a legacy redirection policy already deployed for these folders in your existing localized environment.
Enable / disable TXF deprecated features
TXF deprecated features included savepoints secondary RM miniversion and roll forward. Please enable it if you want to use the APIs.
Disable delete notifications on all volumes
Delete notification is a feature that notifies the underlying storage device of clusters that are freed due to a file delete operation. A value of 0 the default will enable delete notifications for all volumes. A value of 1 will disable delete notifications for all volumes.
Short name creation options
These settings provide control over whether or not short names are generated during file creation. Some applications require short names for compatibility but short names have a negative performance impact on the system. If you enable short names on all volumes then short names will always be generated. If you disable them on all volumes then they will never be generated. If you set short name creation to be configurable on a per volume basis then an on-disk flag will determine whether or not short names are created on a given volume. If you disable short name creation on all data volumes then short names will only be generated for files created on the system volume.
Enable NTFS pagefile encryption
Encrypting the page file prevents malicious users from reading data that has been paged to disk but also adds processing overhead for filesystem operations. Enabling this setting will cause the page files to be encrypted.
Do not allow encryption on all NTFS volumes
Encryption can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of encrypted files