Category: At least Windows 2000 Service Pack 1
Prohibit renaming private remote access connections
Determines whether users can rename their private remote access connections. Private connections are those that are available only to one user. To create a private connection on the Connection Availability page in the New Connection Wizard click the “Only for myself” option. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Rename option is disabled for all users (including administrators). Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it the Rename option is enabled for all users’ private remote access connections. Users can rename their private connection by clicking an icon representing the connection or by using the File menu. Note: This setting does not prevent users from using other programs such as Internet Explorer to bypass this setting.
Prohibit changing properties of a private remote access connection
Determines whether users can view and change the properties of their private remote access connections. Private connections are those that are available only to one user. To create a private connection on the Connection Availability page in the New Connection Wizard click the “Only for myself” option. This setting determines whether the Properties menu item is enabled and thus whether the Remote Access Connection Properties dialog box for a private connection is available to users. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Properties menu items are disabled and no users (including administrators) can open the Remote Access Connection Properties dialog box for a private connection. Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it a Properties menu item appears when any user right-clicks the icon representing a private remote access connection. Also when any user selects the connection Properties appears on the File menu. Note: This setting takes precedence over settings that manipulate the availability of features in the Remote Access Connection Properties dialog box. If this setting is enabled nothing within the properties dialog box for a remote access connection will be available to users. Note: This setting does not prevent users from using other programs such as Internet Explorer to bypass this setting.
Prohibit connecting and disconnecting a remote access connection
Determines whether users can connect and disconnect remote access connections. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) double-clicking the icon has no effect and the Connect and Disconnect menu items are disabled for all users (including administrators). Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it the Connect and Disconnect options for remote access connections are available to all users. Users can connect or disconnect a remote access connection by double-clicking the icon representing the connection by right-clicking it or by using the File menu.
Ability to change properties of an all user remote access connection
Determines whether a user can view and change the properties of remote access connections that are available to all users of the computer. To create an all-user remote access connection on the Connection Availability page in the New Connection Wizard click the “For all users” option. This setting determines whether the Properties menu item is enabled and thus whether the Remote Access Connection Properties dialog box is available to users. If you enable this setting a Properties menu item appears when any user right-clicks the icon for a remote access connection. Also when any user selects the connection Properties appears on the File menu. If you disable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Properties menu items are disabled and users (including administrators) cannot open the remote access connection properties dialog box. Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you do not configure this setting only Administrators and Network Configuration Operators can change properties of all-user remote access connections. Note: This setting takes precedence over settings that manipulate the availability of features inside the Remote Access Connection Properties dialog box. If this setting is disabled nothing within the properties dialog box for a remote access connection will be available to users. Note: This setting does not prevent users from using other programs such as Internet Explorer to bypass this setting.
Prohibit access to properties of a LAN connection
Determines whether users can change the properties of a LAN connection. This setting determines whether the Properties menu item is enabled and thus whether the Local Area Connection Properties dialog box is available to users. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Properties menu items are disabled for all users and users cannot open the Local Area Connection Properties dialog box. Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it a Properties menu item appears when users right-click the icon representing a LAN connection. Also when users select the connection Properties is enabled on the File menu. Note: This setting takes precedence over settings that manipulate the availability of features inside the Local Area Connection Properties dialog box. If this setting is enabled nothing within the properties dialog box for a LAN connection is available to users. Note: Nonadministrators have the right to view the properties dialog box for a connection but not to make changes regardless of this setting.
Prohibit access to the Remote Access Preferences item on the Advanced menu
Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled. The Remote Access Preferences item lets users create and change connections before logon and configure automatic dialing and callback features. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) the Remote Access Preferences item is disabled for all users (including administrators). Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it the Remote Access Preferences item is enabled for all users.
Prohibit deletion of remote access connections
Determines whether users can delete remote access connections. If you enable this setting (and enable the “Enable Network Connections settings for Administrators” setting) users (including administrators) cannot delete any remote access connections. This setting also disables the Delete option on the context menu for a remote access connection and on the File menu in the Network Connections folder. Important: If the “Enable Network Connections settings for Administrators” is disabled or not configured this setting will not apply to administrators on post-Windows 2000 computers. If you disable this setting or do not configure it all users can delete their private remote access connections. Private connections are those that are available only to one user. (By default only Administrators and Network Configuration Operators can delete connections available to all users but you can change the default by using the “Ability to delete all user remote access connections” setting. )Important: When enabled this setting takes precedence over the “Ability to delete all user remote access connections” setting. Users cannot delete any remote access connections and the “Ability to delete all user remote access connections” setting is ignored. Note: LAN connections are created and deleted automatically when a LAN adapter is installed or removed. You cannot use the Network Connections folder to create or delete a LAN connection. Note: This setting does not prevent users from using other programs such as Internet Explorer to bypass this setting.
Screen saver timeout
Specifies how much user idle time must elapse before the screen saver is launched. When configured this idle time can be set from a minimum of 1 second to a maximum of 86400 seconds or 24 hours. If set to zero the screen saver will not be started. This setting has no effect under any of the following circumstances: – The setting is disabled or not configured. – The wait time is set to zero. – The “Enable Screen Saver” setting is disabled. – Neither the “Screen saver executable name” setting nor the Screen Saver dialog of the client computer’s Personalization or Display Control Panel specifies a valid existing screen saver program on the client. When not configured whatever wait time is set on the client through the Screen Saver dialog in the Personalization or Display Control Panel is used. The default is 15 minutes.
Password protect the screen saver
Determines whether screen savers used on the computer are password protected. If you enable this setting all screen savers are password protected. If you disable this setting password protection cannot be set on any screen saver. This setting also disables the “Password protected” checkbox on the Screen Saver dialog in the Personalization or Display Control Panel preventing users from changing the password protection setting. If you do not configure this setting users can choose whether or not to set password protection on each screen saver. To ensure that a computer will be password protected enable the “Enable Screen Saver” setting and specify a timeout via the “Screen Saver timeout” setting. Note: To remove the Screen Saver dialog use the “Prevent changing Screen Saver” setting.
Force specific screen saver
Specifies the screen saver for the user’s desktop. If you enable this setting the system displays the specified screen saver on the user’s desktop. Also this setting disables the drop-down list of screen savers in the Screen Saver dialog in the Personalization or Display Control Panel which prevents users from changing the screen saver. If you disable this setting or do not configure it users can select any screen saver. If you enable this setting type the name of the file that contains the screen saver including the . scr file name extension. If the screen saver file is not in the %Systemroot% -> System32 directory type the fully qualified path to the file. If the specified screen saver is not installed on a computer to which this setting applies the setting is ignored. Note: This setting can be superseded by the “Enable Screen Saver” setting. If the “Enable Screen Saver” setting is disabled this setting is ignored and screen savers do not run.