Tag: Computer Configuration
Remove Program Compatibility Property Page
This policy controls the visibility of the Program Compatibility property page shell extension. This shell extension is visible on the property context-menu of any program shortcut or executable file. The compatibility property page displays a list of options that can be selected and applied to the application to resolve the most common issues affecting legacy applications. Enabling this policy setting removes the property page from the context-menus but does not affect previous compatibility settings applied to application using this interface.
Prevent access to 16-bit applications
Specifies whether to prevent the MS-DOS subsystem (ntvdm. exe) from running on this computer. This setting affects the launching of 16-bit applications in the operating system. You can use this setting to turn off the MS-DOS subsystem which will reduce resource usage and prevent users from running 16-bit applications. To run any 16-bit application or any application with 16-bit components ntvdm. exe must be allowed to run. The MS-DOS subsystem starts when the first 16-bit application is launched. While the MS-DOS subsystem is running any subsequent 16-bit applications launch faster but overall resource usage on the system is increased. If the status is set to Enabled the MS-DOS subsystem is prevented from running which then prevents any 16-bit applications from running. In addition any 32-bit applications with 16-bit installers or other 16-bit components cannot run. If the status is set to Disabled the MS-DOS subsystem runs for all users on this computer. If the status is set to Not Configured the OS falls back on a local policy set by the registry DWORD value HKEY_LOCAL_MACHINE -> System -> CurrentControlSet -> Control -> WOW -> DisallowedPolicyDefault. If that value is non-0 this prevents all 16-bit applications from running. If that value is 0 16-bit applications are allowed to run. If that value is also not present on Windows 8. 1 and above the OS will launch the 16-bit application support control panel to allow an elevated administrator to make the decision; on windows 7 and downlevel the OS will allow 16-bit applications to run. Note: This setting appears in only Computer Configuration.
Approved Installation Sites for ActiveX Controls
This policy setting determines which ActiveX installation sites standard users in your organization can use to install ActiveX controls on their computers. When this setting is enabled the administrator can create a list of approved Activex Install sites specified by host URL. If you enable this setting the administrator can create a list of approved ActiveX Install sites specified by host URL. If you disable or do not configure this policy setting ActiveX controls prompt the user for administrative credentials before installation. Note: Wild card characters cannot be used when specifying the host URLs.
Establish ActiveX installation policy for sites in Trusted zones
This policy setting controls the installation of ActiveX controls for sites in Trusted zone. If you enable this policy setting ActiveX controls are installed according to the settings defined by this policy setting. If you disable or do not configure this policy setting ActiveX controls prompt the user before installation. If the trusted site uses the HTTPS protocol this policy setting can also control how ActiveX Installer Service responds to certificate errors. By default all HTTPS connections must supply a server certificate that passes all validation criteria. If you are aware that a trusted site has a certificate error but you want to trust it anyway you can select the certificate errors that you want to ignore. Note: This policy setting applies to all sites in Trusted zones.