Category: At least Windows Server 2012, Windows 8 or Windows RT
Prevent users from uninstalling applications from Start
If you enable this setting users cannot uninstall apps from Start. If you disable this setting or do not configure it users can access the uninstall command from Start
Show “Run as different user” command on Start
This policy setting shows or hides the “Run as different user” command on the Start application bar. If you enable this setting users can access the “Run as different user” command from Start for applications which support this functionality. If you disable this setting or do not configure it users cannot access the “Run as different user” command from Start for any applications. Note: This setting does not prevent users from using other methods such as the shift right-click menu on application’s jumplists in the taskbar to issue the “Run as different user” command.
Clear history of tile notifications on exit
If you enable this setting the system deletes tile notifications when the user logs off. As a result the Tiles in the start view will always show their default content when the user logs on. In addition any cached versions of these notifications will be cleared when the user logs off. If you disable or do not configure this setting the system retains notifications and when a user logs on the tiles appear just as they did when the user logged off including the history of previous notifications for each tile. This setting does not prevent new notifications from appearing. See the “Turn off Application Notifications” setting to prevent new notifications.
Customize message for Access Denied errors
This policy setting specifies the message that users see when they are denied access to a file or folder. You can customize the Access Denied message to include additional text and links. You can also provide users with the ability to send an email to request access to the file or folder to which they were denied access. If you enable this policy setting users receive a customized Access Denied message from the file servers on which this policy setting is applied. If you disable this policy setting users see a standard Access Denied message that doesn’t provide any of the functionality controlled by this policy setting regardless of the file server configuration. If you do not configure this policy setting users see a standard Access Denied message unless the file server is configured to display the customized Access Denied message. By default users see the standard Access Denied message.
Enable access-denied assistance on client for all file types
This Group Policy Setting should be set on Windows clients to enable access-denied assistance for all file types
File Classification Infrastructure: Display Classification tab in File Explorer
This policy setting controls whether the Classification tab is displayed in the Properties dialog box in File Explorer. The Classification tab enables users to manually classify files by selecting properties from a list. Administrators can define the properties for the organization by using Group Policy and supplement these with properties defined on individual file servers by using File Classification Infrastructure which is part of the File Server Resource Manager role service. If you enable this policy setting the Classification tab is displayed. If you disable or do not configure this policy setting the Classification tab is hidden.
File Classification Infrastructure: Specify classification properties list
This policy setting controls which set of properties is available for classifying files on affected computers. Administrators can define the properties for the organization by using Active Directory Domain Services (AD DS) and then group these properties into lists. Administrators can supplement these properties on individual file servers by using File Classification Infrastructure which is part of the File Server Resource Manager role service. If you enable this policy setting you can select which list of properties is available for classification on the affected computers. If you disable or do not configure this policy setting the Global Resource Property List in AD DS provides the default set of properties.
Do not sync passwords
Prevent the “passwords” group from syncing to and from this PC. This turns off and disables the “passwords” group on the “sync your settings” page in PC settings. If you enable this policy setting the “passwords” group will not be synced. Use the option “Allow users to turn passwords syncing on” so that syncing it turned off by default but not disabled. If you do not set or disable this setting syncing of the “passwords” group is on by default and configurable by the user.
Do not sync personalize
Prevent the “personalize” group from syncing to and from this PC. This turns off and disables the “personalize” group on the “sync your settings” page in PC settings. If you enable this policy setting the “personalize” group will not be synced. Use the option “Allow users to turn personalize syncing on” so that syncing it turned off by default but not disabled. If you do not set or disable this setting syncing of the “personalize” group is on by default and configurable by the user.
Do not sync other Windows settings
Prevent the “Other Windows settings” group from syncing to and from this PC. This turns off and disables the “Other Windows settings” group on the “sync your settings” page in PC settings. If you enable this policy setting the “Other Windows settings” group will not be synced. Use the option “Allow users to turn other Windows settings syncing on” so that syncing it turned off by default but not disabled. If you do not set or disable this setting syncing of the “Other Windows settings” group is on by default and configurable by the user.