Category: At least Windows 2000

Prevents users from adjusting the length of desktop toolbars. Also users cannot reposition items or toolbars on docked toolbars. This setting does not prevent users from adding or removing toolbars on the desktop. Note: If users have adjusted their toolbars this setting prevents them from restoring the default configuration. Also see the “Prevent adding dragging dropping and closing the Taskbar’s toolbars” setting.

Removes the Network Locations icon from the desktop. This setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network. Note: In operating systems earlier than Microsoft Windows Vista this policy applies to the My Network Places icon.

Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar. This setting does not prevent the user from starting Internet Explorer by using other methods.

Removes icons shortcuts and other default and user-defined items from the desktop including Briefcase Recycle Bin Computer and Network Locations. Removing icons and shortcuts does not prevent the user from using another method to start the programs or opening the items they represent. Also see “Items displayed in Places Bar” in User Configuration -> Administrative Templates -> Windows Components -> Common Open File Dialog to remove the Desktop icon from the Places Bar. This will help prevent users from saving data to the Desktop.

Prevents users from changing the path to their profile folders. By default a user can change the location of their individual profile folders like Documents Music etc. by typing a new path in the Locations tab of the folder’s Properties dialog box. If you enable this setting users are unable to type a new location in the Target box.

Specifies the maximum number of objects the system displays in response to a command to browse or search Active Directory. This setting affects all browse displays associated with Active Directory such as those in Local Users and Groups Active Directory Users and Computers and dialog boxes used to set permissions for user or group objects in Active Directory. If you enable this setting you can use the “Number of objects returned” box to limit returns from an Active Directory search. If you disable this setting or do not configure it the system displays up to 10000 objects. This consumes approximately 2 MB of memory or disk space. This setting is designed to protect the network and the domain controller from the effect of expansive searches.

Displays the filter bar above the results of an Active Directory search. The filter bar consists of buttons for applying additional filters to search results. If you enable this setting the filter bar appears when the Active Directory Find dialog box opens but users can hide it. If you disable this setting or do not configure it the filter bar does not appear but users can display it by selecting “Filter” on the “View” menu. To see the filter bar open Network Locations click Entire Network and then click Directory. Right-click the name of a Windows domain and click Find. Type the name of an object in the directory such as “Administrator. ” If the filter bar does not appear above the resulting display on the View menu click Filter.

Specifies the desktop background (“wallpaper”) displayed on all users’ desktops. This setting lets you specify the wallpaper on users’ desktops and prevents users from changing the image or its presentation. The wallpaper you specify can be stored in a bitmap (*. bmp) or JPEG (*. jpg) file. To use this setting type the fully qualified path and name of the file that stores the wallpaper image. You can type a local path such as C: -> Windows -> web -> wallpaper -> home. jpg or a UNC path such as -> -> Server -> Share -> Corp. jpg. If the specified file is not available when the user logs on no wallpaper is displayed. Users cannot specify alternative wallpaper. You can also use this setting to specify that the wallpaper image be centered tiled or stretched. Users cannot change this specification. If you disable this setting or do not configure it no wallpaper is displayed. However users can select the wallpaper of their choice. Also see the “Allow only bitmapped wallpaper” in the same location and the “Prevent changing wallpaper” setting in User Configuration -> Administrative Templates -> Control Panel. Note: This setting does not apply to remote desktop server sessions.

This policy setting disables or removes all menu items and buttons that log the user off the system. If you enable this policy setting users will not see the Log off menu item when they press Ctrl+Alt+Del. This will prevent them from logging off unless they restart or shutdown the computer or clicking Log off from the Start menu. Also see the ‘Remove Logoff on the Start Menu’ policy setting. If you disable or do not configure this policy setting users can see and select the Log off menu item when they press Ctrl+Alt+Del.

This policy setting prevents users from starting Task Manager. Task Manager (taskmgr. exe) lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers including system services; find the executable names of programs; and change the priority of the process in which programs run. If you enable this policy setting users will not be able to access Task Manager. If users try to start Task Manager a message appears explaining that a policy prevents the action. If you disable or do not configure this policy setting users can access Task Manager to start and stop programs monitor the performance of their computers view and monitor all programs running on their computers including system services find the executable names of programs and change the priority of the process in which programs run.