Disable binding directly to IPropertySetStorage without intermediate layers.

Changes the behavior of IShellFolder::BindToObject for IID_IPropertySetStorage to not bind directly to the IPropertySetStorage implementation and to include the intermediate layers provided by the Property System. This behavior is consistent with Windows Vista’s behavior in this scenario. This disables access to user-defined properties and properties stored in NTFS secondary streams.

Join Microsoft MAPS

This policy setting allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats. The community also helps stop the spread of new malicious software infections. You can choose to send basic or additional information about detected software. Additional information helps Microsoft create new definitions and help it to protect your computer. This information can include things like location of detected items on your computer if harmful software was removed. The information will be automatically collected and sent. In some instances personal information might unintentionally be sent to Microsoft. However Microsoft will not use this information to identify you or contact you. Possible options are:(0x0) Disabled (default)(0x1) Basic membership(0x2) Advanced membershipBasic membership will send basic information to Microsoft about software that has been detected including where the software came from the actions that you apply or that are applied automatically and whether the actions were successful. Advanced membership in addition to basic information will send more information to Microsoft about malicious software spyware and potentially unwanted software including the location of the software file names how the software operates and how it has impacted your computer. If you enable this setting you will join Microsoft MAPS with the membership specified. If you disable or do not configure this setting you will not join Microsoft MAPS.

Check for the latest virus and spyware definitions before running a scheduled scan

This policy setting allows you to manage whether a check for new virus and spyware definitions will occur before running a scan. This setting applies to scheduled scans as well as the command line “mpcmdrun -SigUpdate” but it has no effect on scans initiated manually from the user interface. If you enable this setting a check for new definitions will occur before running a scan. If you disable this setting or do not configure this setting the scan will start using the existing definitions.

Turn off real-time protection

This policy setting turns off real-time protection prompts for known malware detection. Windows Defender alerts you when malware or potentially unwanted software attempts to install itself or to run on your computer. If you enable this policy setting Windows Defender will not prompt users to take actions on malware detections. If you disable or do not configure this policy setting Windows Defender will prompt users to take actions on malware detections.

Turn off Windows Defender

This policy setting turns off Windows Defender. If you enable this policy setting Windows Defender does not run and computers are not scanned for malware or other potentially unwanted software. If you disable or do not configure this policy setting by default Windows Defender runs and computers are scanned for malware and other potentially unwanted software.

Turn off routine remediation

This policy setting allows you to configure whether Windows Defender automatically takes action on all detected threats. The action to be taken on a particular threat is determined by the combination of the policy-defined action user-defined action and the signature-defined action. If you enable this policy setting Windows Defender does not automatically take action on the detected threats but prompts users to choose from the actions available for each threat. If you disable or do not configure this policy setting Windows Defender automatically takes action on all detected threats after a nonconfigurable delay of approximately ten minutes.

Prohibit access of the Windows Connect Now wizards

This policy setting prohibits access to Windows Connect Now (WCN) wizards. If you enable this policy setting the wizards are turned off and users have no access to any of the wizard tasks. All the configuration related tasks including “Set up a wireless router or access point” and “Add a wireless device” are disabled. If you disable or do not configure this policy setting users can access the wizard tasks including “Set up a wireless router or access point” and “Add a wireless device. ” The default for this policy setting allows users to access all WCN wizards.

Configuration of wireless settings using Windows Connect Now

This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the discovery and configuration of devices over Ethernet (UPnP) over In-band 802. 11 Wi-Fi through the Windows Portable Device API (WPD) and via USB Flash drives. Additional options are available to allow discovery and configuration over a specific medium. If you enable this policy setting additional choices are available to turn off the operations over a specific medium. If you disable this policy setting operations are disabled over all media. If you do not configure this policy setting operations are enabled over all media. The default for this policy setting allows operations over all media.

Prohibit installing or uninstalling color profiles

This policy setting affects the ability of users to install or uninstall color profiles. If you enable this policy setting users cannot install new color profiles or uninstall previously installed color profiles. If you disable or do not configure this policy setting all users can install new color profiles. Standard users can uninstall color profiles that they previously installed. Administrators will be able to uninstall all color profiles.

Prohibit installing or uninstalling color profiles

This policy setting affects the ability of users to install or uninstall color profiles. If you enable this policy setting users cannot install new color profiles or uninstall previously installed color profiles. If you disable or do not configure this policy setting all users can install new color profiles. Standard users can uninstall color profiles that they previously installed. Administrators will be able to uninstall all color profiles.