Category: At least Windows Server 2008 R2 or Windows 7
Do not allow encryption on all NTFS volumes
Encryption can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of encrypted files
Do not allow compression on all NTFS volumes
Compression can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of compressed files.
Set a support web page link
Sets the target of the More Information link that will be displayed when the user attempts to run a program that is blocked by policy.
Turn off Data Execution Prevention for Explorer
Disabling data execution prevention can allow certain legacy plug-in applications to function without terminating Explorer.
Do not throttle additional data
This policy setting determines whether Windows Error Reporting (WER) sends additional second-level report data even if a CAB file containing data about the same event types has already been uploaded to the server. If you enable this policy setting WER does not throttle data; that is WER uploads additional CAB files that can contain data about the same event types as an earlier uploaded report. If you disable or do not configure this policy setting WER throttles data by default; that is WER does not upload more than one CAB file for a report that contains data about the same event types.
Do not throttle additional data
This policy setting determines whether Windows Error Reporting (WER) sends additional second-level report data even if a CAB file containing data about the same event types has already been uploaded to the server. If you enable this policy setting WER does not throttle data; that is WER uploads additional CAB files that can contain data about the same event types as an earlier uploaded report. If you disable or do not configure this policy setting WER throttles data by default; that is WER does not upload more than one CAB file for a report that contains data about the same event types.
Configure list of Enhanced Storage devices usable on your computer
This policy setting allows you to configure a list of Enhanced Storage devices by manufacturer and product ID that are usable on your computer. If you enable this policy setting only Enhanced Storage devices that contain a manufacturer and product ID specified in this policy are usable on your computer. If you disable or do not configure this policy setting all Enhanced Storage devices are usable on your computer.
Configure list of IEEE 1667 silos usable on your computer
This policy setting allows you to create a list of IEEE 1667 silos compliant with the Institute of Electrical and Electronics Engineers Inc. (IEEE) 1667 specification that are usable on your computer. If you enable this policy setting only IEEE 1667 silos that match a silo type identifier specified in this policy are usable on your computer. If you disable or do not configure this policy setting all IEEE 1667 silos on Enhanced Storage devices are usable on your computer.
Do not allow non-Enhanced Storage removable devices
This policy setting configures whether or not non-Enhanced Storage removable devices are allowed on your computer. If you enable this policy setting non-Enhanced Storage removable devices are not allowed on your computer. If you disable or do not configure this policy setting non-Enhanced Storage removable devices are allowed on your computer.
Lock Enhanced Storage when the computer is locked
This policy setting locks Enhanced Storage devices when the computer is locked. This policy setting is supported in Windows Server SKUs only. If you enable this policy setting the Enhanced Storage device remains locked when the computer is locked. If you disable or do not configure this policy setting the Enhanced Storage device state is not changed when the computer is locked.