Hide “Installed Updates” page

This setting prevents users from accessing “Installed Updates” page from the “View installed updates” task. “Installed Updates” allows users to view and uninstall updates currently installed on the computer. The updates are often downloaded directly from Windows Update or from various program publishers. If this setting is disabled or not configured the “View installed updates” task and the “Installed Updates” page will be available to all users. This setting does not prevent users from using other tools and methods to install or uninstall programs.

Hide “Programs and Features” page

This setting prevents users from accessing “Programs and Features” to view uninstall change or repair programs that are currently installed on the computer. If this setting is disabled or not configured “Programs and Features” will be available to all users. This setting does not prevent users from using other tools and methods to view or uninstall programs. It also does not prevent users from linking to related Programs Control Panel Features including Windows Features Get Programs or Windows Marketplace.

Hide the Programs Control Panel

This setting prevents users from using the Programs Control Panel in Category View and Programs and Features in Classic View. The Programs Control Panel allows users to uninstall change and repair programs enable and disable Windows Features set program defaults view installed updates and purchase software from Windows Marketplace. Programs published or assigned to the user by the system administrator also appear in the Programs Control Panel. If this setting is disabled or not configured the Programs Control Panel in Category View and Programs and Features in Classic View will be available to all users. When enabled this setting takes precedence over the other settings in this folder. This setting does not prevent users from using other tools and methods to install or uninstall programs.

Point and Print Restrictions

This policy setting controls the client Point and Print behavior including the security prompts for Windows Vista computers. The policy setting applies only to non-Print Administrator clients and only to computers that are members of a domain. If you enable this policy setting: -Windows XP and later clients will only download print driver components from a list of explicitly named servers. If a compatible print driver is available on the client a printer connection will be made. If a compatible print driver is not available on the client no connection will be made. -You can configure Windows Vista clients so that security warnings and elevated command prompts do not appear when users Point and Print or when printer connection drivers need to be updated. If you do not configure this policy setting: -Windows Vista client computers can point and print to any server. -Windows Vista computers will show a warning and an elevated command prompt when users create a printer connection to any server using Point and Print. -Windows Vista computers will show a warning and an elevated command prompt when an existing printer connection driver needs to be updated. -Windows Server 2003 and Windows XP client computers can create a printer connection to any server in their forest using Point and Print. If you disable this policy setting: -Windows Vista client computers can create a printer connection to any server using Point and Print. -Windows Vista computers will not show a warning or an elevated command prompt when users create a printer connection to any server using Point and Print. -Windows Vista computers will not show a warning or an elevated command prompt when an existing printer connection driver needs to be updated. -Windows Server 2003 and Windows XP client computers can create a printer connection to any server using Point and Print. -The “Users can only point and print to computers in their forest” setting applies only to Windows Server 2003 and Windows XP SP1 (and later service packs).

Package Point and print – Approved servers

Restricts package point and print to approved servers. This policy setting restricts package point and print connections to approved servers. This setting only applies to Package Point and Print connections and is completely independent from the “Point and Print Restrictions” policy that governs the behavior of non-package point and print connections. Windows Vista and later clients will attempt to make a non-package point and print connection anytime a package point and print connection fails including attempts that are blocked by this policy. Administrators may need to set both policies to block all print connections to a specific print server. If this setting is enabled users will only be able to package point and print to print servers approved by the network administrator. When using package point and print client computers will check the driver signature of all drivers that are downloaded from print servers. If this setting is disabled or not configured package point and print will not be restricted to specific print servers.

Only use Package Point and print

This policy restricts clients computers to use package point and print only. If this setting is enabled users will only be able to point and print to printers that use package-aware drivers. When using package point and print client computers will check the driver signature of all drivers that are downloaded from print servers. If this setting is disabled or not configured users will not be restricted to package-aware point and print only.

Add Printer wizard – Network scan page (Unmanaged network)

This policy sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on an unmanaged network (when the computer is not able to reach a domain controller e. g. a domain-joined laptop on a home network. )If this setting is disabled the network scan page will not be displayed. If this setting is not configured the Add Printer wizard will display the default number of printers of each type:TCP/IP printers: 50Web Services printers: 50Bluetooth printers: 10Shared printers: 50If you would like to not display printers of a certain type enable this policy and set the number of printers to display to 0.

Always render print jobs on the server

When printing through a print server determines whether the print spooler on the client will process print jobs itself or pass them on to the server to do the work. This policy setting only effects printing to a Windows print server. If you enable this policy setting on a client machine the client spooler will not process print jobs before sending them to the print server. This decreases the workload on the client at the expense of increasing the load on the server. If you disable this policy setting on a client machine the client itself will process print jobs into printer device commands. These commands will then be sent to the print server and the server will simply pass the commands to the printer. This increases the workload of the client while decreasing the load on the server. If you do not enable this policy setting the behavior is the same as disabling it. Note: This policy does not determine whether offline printing will be available to the client. The client print spooler can always queue print jobs when not connected to the print server. Upon reconnecting to the server the client will submit any pending print jobs. Note: Some printer drivers require a custom print processor. In some cases the custom print processor may not be installed on the client machine such as when the print server does not support transferring print processors during point-and-print. In the case of a print processor mismatch the client spooler will always send jobs to the print server for rendering. Disabling the above policy setting does not override this behavior. Note: In cases where the client print driver does not match the server print driver (mismatched connection) the client will always process the print job regardless of the setting of this policy.

Add Printer wizard – Network scan page (Managed network)

If you enable this policy setting it sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on a managed network (when the computer is able to reach a domain controller e. g. a domain-joined laptop on a corporate network. ) If this policy setting is disabled the network scan page will not be displayed. If this policy setting is not configured the Add Printer wizard will display the default number of printers of each type: Directory printers: 20 TCP/IP printers: 0 Web Services printers: 0 Bluetooth printers: 10 Shared printers: 0 In order to view available Web Services printers on your network ensure that network discovery is turned on. To turn on network discovery click “Start” click “Control Panel” and then click “Network and Internet”. On the “Network and Internet” page click “Network and Sharing Center”. On the Network and Sharing Center page click “Change advanced sharing settings”. On the Advanced sharing settings page click the arrow next to “Domain” arrow click “turn on network discovery” and then click “Save changes”. If you would like to not display printers of a certain type enable this policy and set the number of printers to display to 0.

Prevent restoring remote previous versions

This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a file on a file share. If you enable this policy setting the Restore button is disabled when the user selects a previous version corresponding to a file on a file share. If you disable this policy setting the Restore button remains active for a previous version corresponding to a file on a file share. If the user clicks the Restore button Windows attempts to restore the file from the file share. If you do not configure this policy setting it is disabled by default. The Restore button is active when the previous version is of a file on a file share.