Tag: User Configuration
Disable changing certificate settings
Prevents users from changing certificate settings in Internet Explorer. Certificates are used to verify the identity of software publishers. If you enable this policy the settings in the Certificates area on the Content tab in the Internet Options dialog box appear dimmed. If you disable this policy or do not configure it users can import new certificates remove approved publishers and change settings for certificates that have already been accepted. The “Disable the Content page” policy (located in -> User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel) which removes the Content tab from Internet Explorer in Control Panel takes precedence over this policy. If it is enabled this policy is ignored. Caution: If you enable this policy users can still run the Certificate Manager Import Wizard by double-clicking a software publishing certificate (. spc) file. This wizard enables users to import and configure settings for certificates from software publishers that haven’t already been configured for Internet Explorer.
Disable changing Calendar and Contact settings
Prevents users from changing the default programs for managing schedules and contacts. If you enable this policy the Calendar and Contact combo boxes appear dimmed in the Internet Programs area. To display these options users open the Internet Options dialog box and then click the Programs tab. If you disable this policy or do not configure it users can determine which programs to use for managing schedules and contacts if programs that perform these tasks are installed. This “Disable the Programs Page” policy (located in -> User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel) takes precedence over this policy. If it is enabled this policy is ignored.
Disable changing Temporary Internet files settings
Prevents users from changing the browser cache settings such as the location and amount of disk space to use for the Temporary Internet Files folder. If you enable this policy the browser cache settings appear dimmed. These settings are found in the dialog box that appears when users click the General tab and then click the Settings button in the Internet Options dialog box. If you disable this policy or do not configure it users can change their cache settings. If you set the “Disable the General page” policy (located in -> User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel) you do not need to set this policy because the “Disable the General page” policy removes the General tab from the interface.
Disable changing Automatic Configuration settings
This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Explorer. This setting specifies that Internet explorer use the configuration settings provided in a file by the system administrator. If you enable this policy setting the user will not be able to do automatic configuration. You can import your current connection settings from your machine using Internet Explorer Maintenance under Admin Templates using group policy editor. If you disable or do no configure this policy setting the user will have the freedom to automatically configure these settings.
Disable changing accessibility settings
If you enable this policy the user cannot modify the Accessibility options. All options in the “Accessibility” window on the General Tab in the Internet Options dialog box appear dimmed. If you disable this policy or do not configure it users can change accessibility settings such as overriding fonts and colors on Web pages. If you set the “Disable the General page” policy (located in -> User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel) you do not need to set this policy because the “Disable the General page” policy removes the General tab from the interface.
Pop-up allow list
This policy setting allows you to specify a list of web sites that will be allowed to open pop-up windows regardless of the Internet Explorer process’s Pop-Up Blocker settings. If you enable this policy setting you can enter a list of sites which will be allowed to open pop-up windows regardless of user settings. Only the domain name is allowed so www. contoso. com is valid but not http://www. contoso. com. Wildcards are allowed so *. contoso. com is also valid. If you disable this or do not configure this policy setting you will not be able to provide a default Pop-up Blocker exception list. Note: You can disable users from adding or removing websites to the exception list by enabling “Turn off Managing Pop-up Allow list” policy.
Configure Outlook Express
Allows Administrators to enable and disable the ability for Outlook Express users to save or open attachments that can potentially contain a virus. If you check the block attachments setting users will be unable to open or save attachments that could potentially contain a virus. Users will not be able to disable the blocking of attachments in options. If the block attachments setting is not checked the user can specify to enable or disable the blocking of attachments in options.
Prevent configuration of how windows open
This policy setting allows you to configure how windows open in Internet Explorer when the user clicks links from other applications. If you enable this policy setting the user cannot configure how windows open in Internet Explorer when he or she clicks links from other applications. You must specify one of the following: • Open in an existing Internet Explorer window. If tabbed browsing is enabled a new tab is created in this scenario. • Open a new Internet Explorer window. If you disable or do not configure this policy setting the user can configure how windows open when he or she clicks links from other applications.
Turn off tabbed browsing
This policy setting allows you to turn off tabbed browsing and related entry points from the Internet Explorer user interface. Starting with Windows 8 this policy only applies to Internet Explorer on the desktop. If you enable this policy setting tabbed browsing and related entry points are turned off for Internet Explorer and the user cannot turn them on. If you disable this policy setting tabbed browsing and related entry points appear on the user interface for Internet Explorer and the user cannot turn them off. If you do not configure this policy setting the user can turn on or turn off tabbed browsing.
Prevent changing the default search provider
This policy setting prevents the user from changing the default search provider for the Address bar and the toolbar Search box. If you enable this policy setting the user cannot change the default search provider. If you disable or do not configure this policy setting the user can change the default search provider.