Tag: User Configuration
Prevent customization of indexed locations in Control Panel
If enabled Search and Indexing Options in Control Panel does not allow opening the Modify Locations dialog. Otherwise it can be opened. Disabled by default.
Prevent adding UNC locations to index from Control Panel
Enabling this policy prevents users from adding UNC locations to the index from the Search and Indexing Options in Control Panel. Any UNC locations that have already been added to the index by the user will not be removed. When this policy is disabled or not configured users will be able to add UNC locations to the index. This policy has no effect if the Files on Microsoft Networks add-in is not installed. Disabled by default.
Run Windows PowerShell scripts first at user logon logoff
This policy setting determines whether Windows PowerShell scripts are run before non-Windows PowerShell scripts during user logon and logoff. By default Windows PowerShell scripts run after non-Windows PowerShell scripts. If you enable this policy setting within each applicable Group Policy Object (GPO) PowerShell scripts are run before non-PowerShell scripts during user logon and logoff. For example assume the following scenario: There are three GPOs (GPO A GPO B and GPO C). This policy setting is enabled in GPO A. GPO B and GPO C include the following user logon scripts:GPO B: B. cmd B. ps1GPO C: C. cmd C. ps1Assume also that there are two users Qin Hong and Tamara Johnston. For Qin GPOs A B and C are applied. Therefore the scripts for GPOs B and C run in the following order for Qin:Within GPO B: B. ps1 B. cmdWithin GPO C: C. ps1 C. cmd For Tamara GPOs B and C are applied but not GPO A. Therefore the scripts for GPOs B and C run in the following order for Tamara:Within GPO B: B. cmd B. ps1Within GPO C: C. cmd C. ps1Note: This policy setting determines the order in which user logon and logoff scripts are run within all applicable GPOs. You can override this policy setting for specific script types within a specific GPO by configuring the following policy settings for the GPO: User Configuration -> Policies -> Windows Settings -> Scripts (Logon/Logoff) -> LogonUser Configuration -> Policies -> Windows Settings -> Scripts (Logon/Logoff) -> LogoffThis policy setting appears in the Computer Configuration and User Configuration folders. The policy setting set in Computer Configuration takes precedence over the setting set in User Configuration.
Display instructions in logon scripts as they run
This policy setting displays the instructions in logon scripts as they run. Logon scripts are batch files of instructions that run when the user logs on. By default the system does not display the instructions in logon scripts. If you enable this policy setting the system displays each instruction in the logon script as it runs. The instructions appear in a command window. This policy setting is designed for advanced users. If you disable or do not configure this policy setting the instructions are suppressed.
Run logon scripts synchronously
This policy setting directs the system to wait for logon scripts to finish running before it starts the File Explorer interface program and creates the desktop. If you enable this policy setting File Explorer does not start until the logon scripts have finished running. This policy setting ensures that logon script processing is complete before the user starts working but it can delay the appearance of the desktop. If you disable or do not configure this policy setting the logon scripts and File Explorer are not synchronized and can run simultaneously. This policy setting appears in the Computer Configuration and User Configuration folders. The policy setting set in Computer Configuration takes precedence over the policy setting set in User Configuration.
Display instructions in logoff scripts as they run
This policy setting displays the instructions in logoff scripts as they run. Logoff scripts are batch files of instructions that run when the user logs off. By default the system does not display the instructions in the logoff script. If you enable this policy setting the system displays each instruction in the logoff script as it runs. The instructions appear in a command window. This policy setting is designed for advanced users. If you disable or do not configure this policy setting the instructions are suppressed.
Run legacy logon scripts hidden
This policy setting hides the instructions in logon scripts written for Windows NT 4. 0 and earlier. Logon scripts are batch files of instructions that run when the user logs on. By default Windows 2000 displays the instructions in logon scripts written for Windows NT 4. 0 and earlier in a command window as they run although it does not display logon scripts written for Windows 2000. If you enable this setting Windows 2000 does not display logon scripts written for Windows NT 4. 0 and earlier. If you disable or do not configure this policy setting Windows 2000 displays login scripts written for Windows NT 4. 0 and earlier. Also see the “Run Logon Scripts Visible” setting.
WPD Devices: Deny write access
This policy setting denies write access to removable disks which may include media players cellular phones auxiliary displays and CE devices. If you enable this policy setting write access is denied to this removable storage class. If you disable or do not configure this policy setting write access is allowed to this removable storage class.
WPD Devices: Deny read access
This policy setting denies read access to removable disks which may include media players cellular phones auxiliary displays and CE devices. If you enable this policy setting read access is denied to this removable storage class. If you disable or do not configure this policy setting read access is allowed to this removable storage class.
Tape Drives: Deny write access
This policy setting denies write access to the Tape Drive removable storage class. If you enable this policy setting write access is denied to this removable storage class. If you disable or do not configure this policy setting write access is allowed to this removable storage class.