Category: At least Windows Server 2008 R2 or Windows 7

This policy setting allows you to control whether elliptic curve cryptography (ECC) certificates on a smart card can be used to log on to a domain. If you enable this policy setting ECC certificates on a smart card can be used to log on to a domain. If you disable or do not configure this policy setting ECC certificates on a smart card cannot be used to log on to a domain. Note: This policy setting only affects a user’s ability to log on to a domain. ECC certificates on a smart card that are used for other applications such as document signing are not affected by this policy setting. Note: If you use an ECDSA key to log on you must also have an associated ECDH key to permit logons when you are not connected to the network.

This policy setting allows you to control whether Smart Card Plug and Play is enabled. If you enable or do not configure this policy setting Smart Card Plug and Play will be enabled and the system will attempt to install a Smart Card device driver when a card is inserted in a Smart Card Reader for the first time. If you disable this policy setting Smart Card Plug and Play will be disabled and a device driver will not be installed when a card is inserted in a Smart Card Reader. Note: This policy setting is applied only for smart cards that have passed the Windows Hardware Quality Labs (WHQL) testing process.

This policy setting specifies whether users can add computers to a homegroup. By default users can add their computer to a homegroup on a private network. If you enable this policy setting users cannot add computers to a homegroup. This policy setting does not affect other network sharing features. If you disable or do not configure this policy setting users can add computers to a homegroup. However data on a domain-joined computer is not shared with the homegroup. This policy setting is not configured by default. You must restart the computer for this policy setting to take effect.

Turns off data sharing from the handwriting recognition personalization tool. The handwriting recognition personalization tool tool enables Tablet PC users to adapt handwriting recognition to their own writing style by providing writing samples. The tool can optionally share user writing samples with Microsoft to improve handwriting recognition in future versions of Windows. The tool generates reports and transmits them to Microsoft over a secure connection. If you enable this policy Tablet PC users cannot choose to share writing samples from the handwriting recognition personalization tool with Microsoft. If you disable this policy Tablet PC user writing samples from the handwriting recognition personalization tool will automatically be shared with Microsoft. If you do not configure this policy Tablet PC users can choose whether or not they want to share their writing samples from the handwriting recognition personalization tool with Microsoft.

This policy setting turns off scripting for the location feature. If you enable this policy setting scripts for the location feature will not run. If you disable or do not configure this policy setting all location scripts will run.

This policy setting turns off the sensor feature for this computer. If you enable this policy setting the sensor feature is turned off and all programs on this computer cannot use the sensor feature. If you disable or do not configure this policy setting all programs on this computer can use the sensor feature.