Category: Windows Server 2003, Windows XP and Windows 2000 only

Prevents the system from updating the Administrative Templates source files automatically when you open the Group Policy Object Editor. Administrators might want to use this if they are concerned about the amount of space used on the system volume of a DC. By default when you start the Group Policy Object Editor a timestamp comparison is performed on the source files in the local %SYSTEMROOT% -> inf directory and the source files stored in the GPO. If the local files are newer they are copied into the GPO. Changing the status of this setting to Enabled will keep any source files from copying to the GPO. Changing the status of this setting to Disabled will enforce the default behavior. Files will always be copied to the GPO if they have a later timestamp. NOTE: If the Computer Configuration policy setting “Always use local ADM files for the Group Policy Object Editor” is enabled the state of this setting is ignored and always treated as Enabled.

Determines how the system responds when a user tries to install device driver files that are not digitally signed. This setting establishes the least secure response permitted on the systems of users in the group. Users can use System in Control Panel to select a more secure setting but when this setting is enabled the system does not implement any setting less secure than the one the setting established. When you enable this setting use the drop-down box to specify the desired response. — “Ignore” directs the system to proceed with the installation even if it includes unsigned files. — “Warn” notifies the user that files are not digitally signed and lets the user decide whether to stop or to proceed with the installation and whether to permit unsigned files to be installed. “Warn” is the default. — “Block” directs the system to refuse to install unsigned files. As a result the installation stops and none of the files in the driver package are installed. To change driver file security without specifying a setting use System in Control Panel. Right-click My Computer click Properties click the Hardware tab and then click the Driver Signing button.

Remote shared folders are not added to Network Locations whenever you open a document in the shared folder. If you disable this setting or do not configure it when you open a document in a remote shared folder the system adds a connection to the shared folder to Network Locations. If you enable this setting shared folders are not added to Network Locations automatically when you open a document in the shared folder.

This policy setting hides the Properties menu command on the shortcut menu for the My Documents icon. If you enable this policy setting the Properties menu command will not be displayed when the user does any of the following:Right-clicks the My Documents icon. Clicks the My Documents icon and then opens the File menu. Clicks the My Documents icon and then presses ALT+ENTER. If you disable or do not configure this policy setting the Properties menu command is displayed.

Removes most occurrences of the My Documents icon. This setting removes the My Documents icon from the desktop from File Explorer from programs that use the File Explorer windows and from the standard Open dialog box. This setting does not prevent the user from using other methods to gain access to the contents of the My Documents folder. This setting does not remove the My Documents icon from the Start menu. To do so use the “Remove My Documents icon from Start Menu” setting. Note: To make changes to this setting effective you must log off from and log back on to Windows 2000 Professional.

Removes Active Desktop content and prevents users from adding Active Desktop content. This setting removes all Active Desktop items from the desktop. It also removes the Web tab from Display in Control Panel. As a result users cannot add Web pages or pictures from the Internet or an intranet to the desktop. Note: This setting does not disable Active Desktop. Users can still use image formats such as JPEG and GIF for their desktop wallpaper.

Prevents users from changing the properties of Web content items on their Active Desktop. This setting disables the Properties button on the Web tab in Display in Control Panel. Also it removes the Properties item from the menu for each item on the Active Desktop. As a result users cannot change the properties of an item such as its synchronization schedule password or display characteristics.

Prevents users from deleting Web content from their Active Desktop. This setting removes the Delete button from the Web tab in Display in Control Panel. As a result users can temporarily remove but not delete Web content from their Active Desktop. This setting does not prevent users from adding Web content to their Active Desktop. Also see the “Prohibit closing items” and “Disable all items” settings.