Tag: User Configuration

Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins. — If you enable this setting all snap-ins are prohibited except those that you explicitly permit. Use this setting if you plan to prohibit use of most snap-ins. To explicitly permit a snap-in open the Restricted/Permitted snap-ins setting folder and enable the settings representing the snap-in you want to permit. If a snap-in setting in the folder is disabled or not configured the snap-in is prohibited. — If you disable this setting or do not configure it all snap-ins are permitted except those that you explicitly prohibit. Use this setting if you plan to permit use of most snap-ins. To explicitly prohibit a snap-in open the Restricted/Permitted snap-ins setting folder and then disable the settings representing the snap-ins you want to prohibit. If a snap-in setting in the folder is enabled or not configured the snap-in is permitted. When a snap-in is prohibited it does not appear in the Add/Remove Snap-in window in MMC. Also when a user opens a console file that includes a prohibited snap-in the console file opens but the prohibited snap-in does not appear. Note: If you enable this setting and you do not enable any settings in the Restricted/Permitted snap-ins folder users cannot use any MMC snap-ins.

Prevents users from entering author mode. This setting prevents users from opening the Microsoft Management Console (MMC) in author mode explicitly opening console files in author mode and opening any console files that open in author mode by default. As a result users cannot create console files or add or remove snap-ins. Also because they cannot open author-mode console files they cannot use the tools that the files contain. This setting permits users to open MMC user-mode console files such as those on the Administrative Tools menu in Windows 2000 Server family or Windows Server 2003 family. However users cannot open a blank MMC console window on the Start menu. (To open the MMC click Start click Run and type mmc. ) Users also cannot open a blank MMC console window from a command prompt. If you disable this setting or do not configure it users can enter author mode and open author-mode console files.

This policy setting specifies additional programs or documents that Windows starts automatically when a user logs on to the system. If you enable this policy setting you can specify which programs can run at the time the user logs on to this computer that has this policy applied. To specify values for this policy setting click Show. In the Show Contents dialog box in the Value column type the name of the executable program (. exe) file or document file. To specify another name press ENTER and type the name. Unless the file is located in the %Systemroot% directory you must specify the fully qualified path to the file. If you disable or do not configure this policy setting the user will have to start the appropriate programs after logon. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured the system starts the programs specified in the Computer Configuration setting just before it starts the programs specified in the User Configuration setting. Also see the “”Do not process the legacy run list”” and the “”Do not process the run once list”” settings.

This policy setting ignores customized run-once lists. You can create a customized list of additional programs and documents that are started automatically the next time the system starts (but not thereafter). These programs are added to the standard list of programs and services that the system starts. If you enable this policy setting the system ignores the run-once list. If you disable or do not configure this policy setting the system runs the programs in the run-once list. This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration. Note: Customized run-once lists are stored in the registry in HKEY_LOCAL_MACHINE -> Software -> Microsoft -> Windows -> CurrentVersion -> RunOnce. Also see the “”Do not process the legacy run list”” policy setting.

This policy setting ignores the customized run list. You can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows Vista Windows XP Professional and Windows 2000 Professional. These programs are added to the standard run list of programs and services that the system starts. If you enable this policy setting the system ignores the run list for Windows Vista Windows XP Professional and Windows 2000 Professional. If you disable or do not configure this policy setting Windows Vista adds any customized run list configured to its run list. This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration. Note: To create a customized run list by using a policy setting use the “”Run these applications at startup”” policy setting. Also see the “”Do not process the run once list”” policy setting.