Category: At least Windows Vista
Set time (in seconds) to force reboot
This policy setting configures the amount of time (in seconds) that the operating system waits to reboot in order to enforce a change in access rights to removable storage devices. If you enable this policy setting you can set the number of seconds you want the system to wait until a reboot. If you disable or do not configure this setting the operating system does not force a reboot. Note: If no reboot is forced the access right does not take effect until the operating system is restarted.
Customize warning messages
This policy setting lets you customize warning messages. The “Display warning message before sharing control” policy setting allows you to specify a custom message to display before a user shares control of his or her computer. The “Display warning message before connecting” policy setting allows you to specify a custom message to display before a user allows a connection to his or her computer. If you enable this policy setting the warning message you specify overrides the default message that is seen by the novice. If you disable this policy setting the user sees the default warning message. If you do not configure this policy setting the user sees the default warning message.
Turn on bandwidth optimization
This policy setting allows you to improve performance in low bandwidth scenarios. This setting is incrementally scaled from “No optimization” to “Full optimization”. Each incremental setting includes the previous optimization setting. For example:”Turn off background” will include the following optimizations:-No full window drag-Turn off background”Full optimization” will include the following optimizations:-Use 16-bit color (8-bit color in Windows Vista)-Turn off font smoothing (not supported in Windows Vista)-No full window drag-Turn off backgroundIf you enable this policy setting bandwidth optimization occurs at the level specified. If you disable this policy setting application-based settings are used. If you do not configure this policy setting application-based settings are used.
Allow only Windows Vista or later connections
This policy setting enables Remote Assistance invitations to be generated with improved encryption so that only computers running this version (or later versions) of the operating system can connect. This policy setting does not affect Remote Assistance connections that are initiated by instant messaging contacts or the unsolicited Offer Remote Assistance. If you enable this policy setting only computers running this version (or later versions) of the operating system can connect to this computer. If you disable this policy setting computers running this version and a previous version of the operating system can connect to this computer. If you do not configure this policy setting users can configure the setting in System Properties in the Control Panel.
Turn on session logging
This policy setting allows you to turn logging on or off. Log files are located in the user’s Documents folder under Remote Assistance. If you enable this policy setting log files are generated. If you disable this policy setting log files are not generated. If you do not configure this setting application-based settings are used.
Custom Classes: Deny read access
This policy setting denies read access to custom removable storage classes. If you enable this policy setting read access is denied to these removable storage classes. If you disable or do not configure this policy setting read access is allowed to these removable storage classes.
Configure Scenario Execution Level
Determines the execution level for Windows Resource Exhaustion Detection and Resolution. If you enable this policy setting you must select an execution level from the dropdown menu. If you select problem detection and troubleshooting only the Diagnostic Policy Service (DPS) will detect Windows Resource Exhaustion problems and attempt to determine their root causes. These root causes will be logged to the event log when detected but no corrective action will be taken. If you select detection troubleshooting and resolution the DPS will detect Windows Resource Exhaustion problems and indicate to the user that assisted resolution is available. If you disable this policy setting Windows will not be able to detect troubleshoot or resolve any Windows Resource Exhaustion problems that are handled by the DPS. If you do not configure this policy setting the DPS will enable Windows Resource Exhaustion for resolution by default. This policy setting takes effect only if the diagnostics-wide scenario execution policy is not configured. No system restart or service restart is required for this policy to take effect: changes take effect immediately. This policy setting will only take effect when the Diagnostic Policy Service is in the running state. When the service is stopped or disabled diagnostic scenarios will not be executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console.
Hide “Windows Features”
This setting prevents users from accessing the “Turn Windows features on or off” task from the Programs Control Panel in Category View Programs and Features in Classic View and Get Programs. As a result users cannot view enable or disable various Windows features and services. If this setting is disabled or is not configured the “Turn Windows features on or off” task will be available to all users. This setting does not prevent users from using other tools and methods to configure services or enable or disable program components.
Hide “Get Programs” page
Prevents users from viewing or installing published programs from the network. This setting prevents users from accessing the “Get Programs” page from the Programs Control Panel in Category View Programs and Features in Classic View and the “Install a program from the netowrk” task. The “Get Programs” page lists published programs and provides an easy way to install them. Published programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically system administrators publish programs to notify users of their availability to recommend their use or to enable users to install them without having to search for installation files. If this setting is enabled users cannot view the programs that have been published by the system administrator and they cannot use the “Get Programs” page to install published programs. Enabling this feature does not prevent users from installing programs by using other methods. Users will still be able to view and installed assigned (partially installed) programs that are offered on the desktop or on the Start menu. If this setting is disabled or is not configured the “Install a program from the network” task to the “Get Programs” page will be available to all users. Note: If the “Hide Programs Control Panel” setting is enabled this setting is ignored.
Hide “Set Program Access and Computer Defaults” page
This setting removes the Set Program Access and Defaults page from the Programs Control Panel. As a result users cannot view or change the associated page. The Set Program Access and Computer Defaults page allows administrators to specify default programs for certain activities such as Web browsing or sending e-mail as well as specify the programs that are accessible from the Start menu desktop and other locations. If this setting is disabled or not configured the Set Program Access and Defaults button is available to all users. This setting does not prevent users from using other tools and methods to change program access or defaults. This setting does not prevent the Default Programs icon from appearing on the Start menu.