Category: Windows Server 2003, Windows XP and Windows 2000 only
Prohibit Drag-and-Drop
Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder. This setting disables the Cut Copy Paste and Paste Shortcut items on the context menu and the Edit menu in Scheduled Tasks. It also disables the drag-and-drop features of the Scheduled Tasks folder. As a result users cannot add new scheduled tasks by dragging moving or copying a document or program into the Scheduled tasks folder. This setting does not prevent users from using other methods to create new tasks and it does not prevent users from deleting tasks. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured the setting in Computer Configuration takes precedence over the setting in User Configuration.
Prevent Task Run or End
Prevents users from starting and stopping tasks manually. This setting removes the Run and End Task items from the context menu that appears when you right-click a task. As a result users cannot start tasks manually or force tasks to end before they are finished. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured the setting in Computer Configuration takes precedence over the setting in User Configuration.
Automatically publish new printers in Active Directory
Determines whether the Add Printer Wizard automatically publishes the computer’s shared printers in Active Directory. If you enable this setting or do not configure it the Add Printer Wizard automatically publishes all shared printers. If you disable this setting the Add Printer Wizard does not automatically publish printers. However you can publish shared printers manually. The default behavior is to automatically publish shared printers in Active Directory. Note: This setting is ignored if the “Allow printers to be published” setting is disabled.
Disallow installation of printers using kernel-mode drivers
Determines whether printers using kernel-mode drivers may be installed on the local computer. Kernel-mode drivers have access to system-wide memory and therefore poorly-written kernel-mode drivers can cause stop errors. If you disable this setting or do not configure it then printers using a kernel-mode drivers may be installed on the local computer running Windows XP Home Edition and Windows XP Professional. If you do not configure this setting on Windows Server 2003 family products the installation of kernel-mode printer drivers will be blocked. If you enable this setting installation of a printer using a kernel-mode driver will not be allowed. Note: By applying this policy existing kernel-mode drivers will be disabled upon installation of service packs or reinstallation of the Windows XP operating system. This policy does not apply to 64-bit kernel-mode printer drivers as they cannot be installed and associated with a print queue.
Browse a common web site to find printers
Adds a link to an Internet or intranet Web page to the Add Printer Wizard. You can use this setting to direct users to a Web page from which they can install printers. If you enable this setting and type an Internet or intranet address in the text box the system adds a Browse button to the “Specify a Printer” page in the Add Printer Wizard. The Browse button appears beside the “Connect to a printer on the Internet or on a home or office network” option. When users click Browse the system opens an Internet browser and navigates to the specified URL address to display the available printers. This setting makes it easy for users to find the printers you want them to add. Also see the “Custom support URL in the Printers folder’s left pane” and “Activate Internet printing” settings in “Computer Configuration -> Administrative Templates -> Printers. “
Custom support URL in the Printers folder’s left pane
By default the Printers folder includes a link to the Microsoft Support Web page called “Get help with printing”. It can also include a link to a Web page supplied by the vendor of the currently selected printer. If you enable this policy setting you replace the “Get help with printing” default link with a link to a Web page customized for your enterprise. If you disable this setting or do not configure it or if you do not enter an alternate Internet address the default link will appear in the Printers folder. Note: Web pages links only appear in the Printers folder when Web view is enabled. If Web view is disabled the setting has no effect. (To enable Web view open the Printers folder and on the Tools menu click Folder Options click the General tab and then click “Enable Web content in folders. “) Also see the “Activate Internet printing” setting in this setting folder and the “Browse a common web site to find printers” setting in User Configuration -> Administrative Templates -> Control Panel -> Printers. Web view is affected by the “Turn on Classic Shell” and “Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon” settings in User Configuration -> Administrative Templates -> Windows Components -> Windows Explorer and by the “Enable Active Desktop” setting in User Configuration -> Administrative Templates -> Desktop -> Active Desktop.
Prompt for password on resume from hibernate/suspend
This policy setting allows you to configure client computers to lock and prompt for a password when resuming from a hibernate or suspend state. If you enable this policy setting the client computer is locked and prompted for a password when it is resumed from a suspend or hibernate state. If you disable or do not configure this policy setting users control if their computer is automatically locked or not after performing a resume operation.
Synchronize offline files before suspend
Determines whether offline files are synchonized before a computer is suspended. If you enable this setting offline files are synchronized whenever the computer is suspended. Setting the synchronization action to “Quick” ensures only that all files in the cache are complete. Setting the synchronization action to “Full” ensures that all cached files and folders are up-to-date with the most current version. If you disable or do not configuring this setting files are not synchronized when the computer is suspended. Note: If the computer is suspended by closing the display on a portable computer files are not synchronized. If multiple users are logged on to the computer at the time the computer is suspended a synchronization is not performed.
Synchronize offline files before suspend
Determines whether offline files are synchonized before a computer is suspended. If you enable this setting offline files are synchronized whenever the computer is suspended. Setting the synchronization action to “Quick” ensures only that all files in the cache are complete. Setting the synchronization action to “Full” ensures that all cached files and folders are up-to-date with the most current version. If you disable or do not configuring this setting files are not synchronized when the computer is suspended. Note: If the computer is suspended by closing the display on a portable computer files are not synchronized. If multiple users are logged on to the computer at the time the computer is suspended a synchronization is not performed.
Synchronize all offline files when logging on
Determines whether offline files are fully synchronized when users log on. This setting also disables the “Synchronize all offline files before logging on” option on the Offline Files tab. This prevents users from trying to change the option while a setting controls it. If you enable this setting offline files are fully synchronized at logon. Full synchronization ensures that offline files are complete and current. Enabling this setting automatically enables logon synchronization in Synchronization Manager. If this setting is disabled and Synchronization Manager is configured for logon synchronization the system performs only a quick synchronization. Quick synchronization ensures that files are complete but does not ensure that they are current. If you do not configure this setting and Synchronization Manager is configured for logon synchronization the system performs a quick synchronization by default but users can change this option. This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured the setting in Computer Configuration takes precedence over the setting in User Configuration. Tip: To change the synchronization method without setting a setting in Windows Explorer on the Tools menu click Folder Options click the Offline Files tab and then select the “Synchronize all offline files before logging on” option.