Tag: Computer Configuration

At least Windows Vista

Removable Disks: Deny read access

This policy setting denies read access to removable disks. If you enable this policy setting read access is denied to this removable storage class. If you disable or do not configure this policy setting read access is allowed to this removable storage class.

At least Windows Server 2008 R2 or Windows 7

Floppy Drives: Deny execute access

This policy setting denies execute access to the Floppy Drives removable storage class including USB Floppy Drives. If you enable this policy setting execute access is denied to this removable storage class. If you disable or do not configure this policy setting execute access is allowed to this removable storage class.

At least Windows Vista

Floppy Drives: Deny write access

This policy setting denies write access to the Floppy Drives removable storage class including USB Floppy Drives. If you enable this policy setting write access is denied to this removable storage class. If you disable or do not configure this policy setting write access is allowed to this removable storage class.

At least Windows Vista

Floppy Drives: Deny read access

This policy setting denies read access to the Floppy Drives removable storage class including USB Floppy Drives. If you enable this policy setting read access is denied to this removable storage class. If you disable or do not configure this policy setting read access is allowed to this removable storage class.

At least Windows Vista

Custom Classes: Deny write access

This policy setting denies write access to custom removable storage classes. If you enable this policy setting write access is denied to these removable storage classes. If you disable or do not configure this policy setting write access is allowed to these removable storage classes.

At least Windows Vista

CD and DVD: Deny write access

This policy setting denies write access to the CD and DVD removable storage class. If you enable this policy setting write access is denied to this removable storage class. If you disable or do not configure this policy setting write access is allowed to this removable storage class.

At least Windows Vista

CD and DVD: Deny read access

This policy setting denies read access to the CD and DVD removable storage class. If you enable this policy setting read access is denied to this removable storage class. If you disable or do not configure this policy setting read access is allowed to this removable storage class.

At least Windows Vista

Set time (in seconds) to force reboot

This policy setting configures the amount of time (in seconds) that the operating system waits to reboot in order to enforce a change in access rights to removable storage devices. If you enable this policy setting you can set the number of seconds you want the system to wait until a reboot. If you disable or do not configure this setting the operating system does not force a reboot. Note: If no reboot is forced the access right does not take effect until the operating system is restarted.

At least Windows Server 2003 operating systems or Windows XP Professional

Configure Offer Remote Assistance

This policy setting allows you to turn on or turn off Offer (Unsolicited) Remote Assistance on this computer. If you enable this policy setting users on this computer can get help from their corporate technical support staff using Offer (Unsolicited) Remote Assistance. If you disable this policy setting users on this computer cannot get help from their corporate technical support staff using Offer (Unsolicited) Remote Assistance. If you do not configure this policy setting users on this computer cannot get help from their corporate technical support staff using Offer (Unsolicited) Remote Assistance. If you enable this policy setting you have two ways to allow helpers to provide Remote Assistance: “Allow helpers to only view the computer” or “Allow helpers to remotely control the computer. ” When you configure this policy setting you also specify the list of users or user groups that are allowed to offer remote assistance. To configure the list of helpers click “Show. ” In the window that opens you can enter the names of the helpers. Add each user or group one by one. When you enter the name of the helper user or user groups use the following format: -> or -> If you enable this policy setting you should also enable firewall exceptions to allow Remote Assistance communications. The firewall exceptions required for Offer (Unsolicited) Remote Assistance depend on the version of Windows you are running. Windows Vista and laterEnable the Remote Assistance exception for the domain profile. The exception must contain:Port 135:TCP%WINDIR% -> System32 -> msra. exe%WINDIR% -> System32 -> raserver. exeWindows XP with Service Pack 2 (SP2) and Windows XP Professional x64 Edition with Service Pack 1 (SP1)Port 135:TCP%WINDIR% -> PCHealth -> HelpCtr -> Binaries -> Helpsvc. exe%WINDIR% -> PCHealth -> HelpCtr -> Binaries -> Helpctr. exe%WINDIR% -> System32 -> Sessmgr. exeFor computers running Windows Server 2003 with Service Pack 1 (SP1)Port 135:TCP%WINDIR% -> PCHealth -> HelpCtr -> Binaries -> Helpsvc. exe%WINDIR% -> PCHealth -> HelpCtr -> Binaries -> Helpctr. exeAllow Remote Desktop Exception