Tag: Computer Configuration
Allow users to use media source while elevated
This policy setting allows users to install programs from removable media during privileged installations. If you enable this policy setting all users are permitted to install programs from removable media such as floppy disks and CD-ROMs even when the installation program is running with elevated system privileges. This policy setting does not affect installations that run in the user’s security context. By default users can install from removable media when the installation runs in their own security context. If you disable or do not configure this policy setting by default users can install programs from removable media only when the installation runs in the user’s security context. During privileged installations such as those offered on the desktop or displayed in Add or Remove Programs only system administrators can install from removable media. Also see the “Prevent removable media source for any install” policy setting.
Allow users to browse for source while elevated
This policy setting allows users to search for installation files during privileged installations. If you enable this policy setting the Browse button in the “Use feature from” dialog box is enabled. As a result users can search for installation files even when the installation program is running with elevated system privileges. Because the installation is running with elevated system privileges users can browse through directories that their own permissions would not allow. This policy setting does not affect installations that run in the user’s security context. Also see the “Remove browse dialog box for new source” policy setting. If you disable or do not configure this policy setting by default only system administrators can browse during installations with elevated privileges such as installations offered on the desktop or displayed in Add or Remove Programs.
Configure MSI Corrupted File Recovery behavior
This policy setting allows you to configure the recovery behavior for corrupted MSI files to one of three states:Prompt for Resolution: Detection troubleshooting and recovery of corrupted MSI applications will be turned on. Windows will prompt the user with a dialog box when application reinstallation is required. This is the default recovery behavior on Windows client. Silent: Detection troubleshooting and notification of MSI application to reinstall will occur with no UI. Windows will log an event when corruption is determined and will suggest the application that should be re-installed. This behavior is recommended for headless operation and is the default recovery behavior on Windows server. Troubleshooting Only: Detection and verification of file corruption will be performed without UI. Recovery is not attempted. If you enable this policy setting the recovery behavior for corrupted files is set to either the Prompt For Resolution (default on Windows client) Silent (default on Windows server) or Troubleshooting Only. If you disable this policy setting the troubleshooting and recovery behavior for corrupted files will be disabled. No troubleshooting or resolution will be attempted. If you do not configure this policy setting the recovery behavior for corrupted files will be set to the default recovery behavior. No system or service restarts are required for changes to this policy setting to take immediate effect after a Group Policy refresh. Note: This policy setting will take effect only when the Diagnostic Policy Service (DPS) is in the running state. When the service is stopped or disabled system file recovery will not be attempted. The DPS can be configured with the Services snap-in to the Microsoft Management Console.
Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider
This policy setting configures Microsoft Support Diagnostic Tool (MSDT) interactive communication with the support provider. MSDT gathers diagnostic data for analysis by support professionals. If you enable this policy setting users can use MSDT to collect and send diagnostic data to a support professional to resolve a problem. By default the support provider is set to Microsoft Corporation. If you disable this policy setting MSDT cannot run in support mode and no data can be collected or sent to the support provider. If you do not configure this policy setting MSDT support mode is enabled by default. No reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately.
Microsoft Support Diagnostic Tool: Restrict tool download
This policy setting restricts the tool download policy for Microsoft Support Diagnostic Tool. Microsoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by support professionals. For some problems MSDT may prompt the user to download additional tools for troubleshooting. These tools are required to completely troubleshoot the problem. If tool download is restricted it may not be possible to find the root cause of the problem. If you enable this policy setting for remote troubleshooting MSDT prompts the user to download additional tools to diagnose problems on remote computers only. If you enable this policy setting for local and remote troubleshooting MSDT always prompts for additional tool downloading. If you disable this policy setting MSDT never downloads tools and is unable to diagnose problems on remote computers. If you do not configure this policy setting MSDT prompts the user before downloading any additional tools. No reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately. This policy setting will take effect only when MSDT is enabled. This policy setting will only take effect when the Diagnostic Policy Service (DPS) is in the running state. When the service is stopped or disabled diagnostic scenarios are not executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console.
Microsoft Support Diagnostic Tool: Configure execution level
This policy setting determines the execution level for Microsoft Support Diagnostic Tool. Microsoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by support professionals. If you enable this policy setting administrators can use MSDT to collect and send diagnostic data to a support professional to resolve a problem. If you disable this policy setting MSDT cannot gather diagnostic data. If you do not configure this policy setting MSDT is turned on by default. This policy setting takes effect only if the diagnostics-wide scenario execution policy is not configured. No reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately. This policy setting will only take effect when the Diagnostic Policy Service (DPS) is in the running state. When the service is stopped or disabled diagnostic scenarios will not be executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console.
Automatic Maintenance WakeUp Policy
This policy setting allows you to configure Automatic Maintenance wake up policy. The maintenance wakeup policy specifies if Automatic Maintenance should make a wake request to the OS for the daily scheduled maintenance. Note that if the OS power wake policy is explicitly disabled then this setting has no effect. If you enable this policy setting Automatic Maintenance will attempt to set OS wake policy and make a wake request for the daily scheduled time if required. If you disable or do not configure this policy setting the wake setting as specified in Action Center/Automatic Maintenance Control Panel will apply.
Automatic Maintenance Random Delay
This policy setting allows you to configure Automatic Maintenance activation random delay. The maintenance random delay is the amount of time up to which Automatic Maintenance will delay starting from its Activation Boundary. If you enable this policy setting Automatic Maintenance will delay starting from its Activation Boundary by upto this time. If you do not configure this policy setting 4 hour random delay will be applied to Automatic Maintenance. If you disable this policy setting no random delay will be applied to Automatic Maintenance.
Automatic Maintenance Activation Boundary
This policy setting allows you to configure Automatic Maintenance activation boundary. The maintenance activation boundary is the daily schduled time at which Automatic Maintenance starts If you enable this policy setting this will override the default daily scheduled time as specified in Action Center/Automatic Maintenance Control Panel. If you disable or do not configure this policy setting the daily scheduled time as specified in Action Center/Automatic Maintenance Control Panel will apply.
Turn off Windows presentation settings
This policy setting turns off Windows presentation settings. If you enable this policy setting Windows presentation settings cannot be invoked. If you disable this policy setting Windows presentation settings can be invoked. The presentation settings icon will be displayed in the notification area. This will give users a quick and easy way to configure their system settings before a presentation to block system notifications and screen blanking adjust speaker volume and apply a custom background image. Note: Users will be able to customize their system settings for presentations in Windows Mobility Center. If you do not configure this policy setting Windows presentation settings can be invoked.