Wso

Windows Security Officer

1 of 29

Windows Security Officer Version: 7.1.1.2

Report date: 6/28/2009 7:14:04 AM

Computer name: HEAVENHRHWRV7M

Domain::User name: HEAVENH-RHWRV7M::Administrator

Windows Common Restrictions \ System Restricting Access to the Event Logs

* Stopping the

The Windows NT event log contains records documenting application, security and system events taking place on the machine. This tweak allows you to restrict access to administrators and system accounts only.

KnownDLLs Vulnerability

In Windows NT, core operating system DLLs are kept in virtual memory and shared between the programs running on the system. This has exposed a vulnerability thatcould allow a user to gain administrative privileges on the computer the user is interactively logged onto.

Securing Network Access to CD-ROM Drives

This setting determines whether data in the CD-ROM drive is accessible to other users. This value entry satisfies, in part, the C2 security requirement that you must be able to secure removable media.

Securing Network Access to Floppy Drives

This setting determines whether data in the floppy disk drive is accessible to other users. This value entry satisfies, in part, the C2 security requirement that you must be able to secure removable media.

* Control the Automatic By default if the Windows NT user interface or one of its components fails, the Restarting of the Shell

interface is restarted automatically, the can be changed so that you must restart the interface by logging off and logging on again manually.

Clear the Page File at System Shutdown

Windows normally does not not clear or recreate the page file. On a heavy used system this can be both a security threat and performance drop. Enabling this setting will cause Windows to clear the page file whenever the system is shutdown.

Disable Windows Installer

This restriction allows you to prevent users (not admins) from adding and removing software applications with Windows Installer.

Enable Remote Assistance

The Remote Assistance feature is a convenient way for an administrator to remotely connect to a computer and with permission view the screen, move the mouse, use the keyboard and chat online.

Secure Desktop Restriction

This restriction is used to stop interactive users from snooping on other user sessions by exploiting a Windows vulnerability. This feature is enabled by default but may interfere with some software applications.

* Enable Advanced File This setting is used to enable the ability to control advanced NTFS permissions System and Sharing Security

on local and shared files.

Disable Menu Bars and the Start Button

This tweak can be used to disable the menu bar in standard Windows applications and the Start Button.

Disable Storage of Credentials and .NET Passwords

This setting controls the storage of authentication credentials and .NET passwords on the local system. By disabling this feature, passwords will not be stored.

Windows Security Officer

2 of 29

Disable System Restore Tools and Settings

System Restore allows users to revert Windows settings and configuration changes to an earlier point in time (called Restore Points). This tweak can be used to restrict user access to the System Restore tools and settings.

Disable Group Policy Objects

This setting is used to disable the use of group policy objects on the local computer.

Change Default Administrator Ownership

Windows XP may assign the ownership of some file system objects to the Administrator account, instead of the Administrators group. This behaviour may not be desirable where there are multiple administrative users.

Secure Access to Removable Drives

This setting determines whether the ability to access removable drives is available to other users.

* Reboot Windows After a Crash

This parameter controls whether Windows should automatically reboot after a system failure or if the blue crash screen should be displayed.

Skip the Open With web service prompt

Normally when you attempt to open an unknown file type a popup message is shown asking whether you would like to use the online web service to find the appropriate program to open the file. This setting allows you to disable this prompt, causing the Open With dialog to display immediately.

Speed-up Access to AVI Media Files

Windows XP can run slowly when attempting to access a folder that contains a large number of AVI (Audio Video Interleave) media files. This tweak speeds the process up by stopping Windows from extracting file information from AVIs.

Show Detailed Information in Device Manager

If you require additional information about a device that is not typically displayed in Device Manager, you can use this tweak to make Device Manager show detailed device information.

Show All Hidden Devices in Device Manager

Devices that are installed but are not currently connected to the computer (such as a Universal Serial Bus (USB) device or 'ghosted' devices) are not normally displayed in Device Manager. This tweak causes all devices to be shown.

Disable the Recycle Bin

This setting is used to disable the use of the recycle bin and permanently remove all deleted items instead. This enables the same functionality as holding the Shift key while deleting items.

Disable the Creation of Last Known Good

This setting allows you to disable the creation of the LastKnownGood configuration, which stores a copy of the configuration after each successful boot-up.

Automatically Ending Hung Applications

When this tweak is enabled it will force Windows to shutdown immediately ending all tasks without attempting to safely close any applications that have hung.

Show Encryption Commands on the Shortcut Menu

You may find it easier to use the Encrypting File System (EFS) by placing 'Encrypt' and 'Decrypt' commands on the Windows Explorer context menu when a file is right-clicked with the mouse.

Search for All File Types

Windows normally only includes registered file types when searching for files and folders. This tweak can be used to enable searching of all file types.

Manage Floppy Access from Recovery Console

If this setting is enabled, a user has full access to all drives on the system and can copy files from the hard drive to the floppy disk when using the Recovery Console.

Enable NTP Time Server

This setting is used to enable the local machine to act as a Network Time Protocol (NTP) server. When enabled other machines can synchronise their clocks with this machine.

Windows Security Officer

3 of 29

Windows Common Restrictions \ Network Disable File Sharing

When 'File and Printer sharing...' is installed it allows users to make services available to other users on a network, this functionality can be disabled by changing this setting.

Disable Printer Sharing

When 'File and Printer sharing...' is installed it allows users to make services available to other users on a network, this functionality can be disabled by changing this setting.

Hide Share Passwords with Asterisks

This setting controls whether the password typed when accessing a file share is shown in clear text or as asterisks.

Disable Caching of Domain Password

Enabling this setting, disables the caching of the NT domain password, and therefore it will need to be re-entered to access additional domain resources.

Automatic Hidden Shares

This key controls whether the administration shares are created ie. c$ and d$. Set this option to disable admin shares for a server and for a workstation.

Disabling Save Password option in Dial-Up Networking

When you dial a phonebook entry in Dial-Up Networking (DUN), you can use the 'Save Password' option so that your DUN password is cached and you will not need to enter it on successive dial attempts. This key disables that option.

Hiding Servers from the Browser List

If you have a secure server or workstation you wish to hide from the general browser list, use this option.

Restricting Information Available to Anonymous Logon Users

Windows NT has a feature where anonymous logon users can list domain user names and enumerate share names. Customers who want enhanced security have requested the ability to optionally restrict this functionality.

Disable File Caching for the Workstation Service

If you are experiencing problems with workstations flushing data to the server, then you can use this tweak to disable or enable file caching.

Use System-Wide Proxy Settings

This setting allows you to change the scope of the Internet proxy configuration and specify whether all users should share system-wide or individual settings.

Delete Cached Copies of Roaming Profiles

This setting enables Windows to delete the cached profile of any roaming users when they log off the system. This will help to maintain profile integrity and save disk space where that are numerous mobile users.

Disable the Printer Server When this option is enabled, the print spooler does not send shared printer information to other print servers. Browse Thread Control Automatic DNS Server Cache Updates

This value disables that automatic cache updated from the DNS root servers. Useful when there is a problem with the root servers, or if you wish to completely control DNS updates.

Keep Remote Connections Active After Logging Off

When you log off from a Windows client any Remote Access Service (RAS) connections will be automatically disconnected. Enable this setting to remain connected after logging off.

Disable Automatic Modem If remote connections are enabled in Windows, the system may try to initiate an Internet connection at Windows startup or at the start of many Connections at Startup applications. This setting disables that behaviour. Disable SSDP Discovery in Windows Messenger

Windows Messenger uses the Simple Service Discovery Protocol (SSDP) to attempt to locate upstream Internet gateways on UDP port 1900. This tweak allows you to disable Universal Plug and Play Network Address Translation discovery to reduce bandwidth and increase security.

Windows Security Officer

4 of 29

Disable Network Bridge Feature

Windows XP includes a new feature called Network Bridge, which lets you connect disparate media types into one seamless network. This tweak allows you to control forwarding and settings associated with this feature.

Disable Automatically Detect Slow Network Connections

Windows will normally attempt to detect the time-out on network links to determine their speed (high or low). This functionality can be disabled if Windows is having problems determining the speed of your link.

Disable Web Printing

This restriction enables and disables server support for Internet printing. Internet printing lets you display printers on Web pages so they can be viewed, managed, and used across the Internet or an intranet.

Disable Offload IP This setting is used to control whether IP Security (IPSEC) tasks should Security Task Processing be offloaded to a network card with IP security capabilities. Disable the Ability to Remotely Shutdown the Computer Browser Service

It is possible for a malicious user to shut down a computer browser, or all computer browsers, on the same subnet. If all of the computers on the same subnet are shut down, they can then declare their own computer the new master browser.

Disables DHCP Router Discovery

The ICMP Router Discovery Protocol (IRDP) comes enabled by default for Windows clients using DHCP. This can be a security issue because by spoofing IRDP Router Advertisements, an attacker can remotely add default route entries on a remote system.

Hide Computer from the Browser List

If you have a secure server or workstation you wish to hide from the general browser list, then enable this setting.

Disable Distributed Component Object Model (DCOM)

Distributed Component Object Model, or DCOM, provides a method for distributed network applications to communicate with one another. This setting allow you to disable support for DCOM.

Remove the Map and Prevents users from making additional network connections by removing Disconnect Network Drive the Map Network Drive and Disconnect Network Drive buttons from the toolbar in Explorer and also removing them from the Context menu of My Options Computer and the Tools menu of Explorer.

Windows Common Restrictions \ Login and Authentication Stop the system automatically rebooting after Windows Updates

Normally Windows Update will automatically reboot the system when you have your system configured to 'Automatically download recommended updates for my computer and install them' and one or more of those updates requires a reboot. This settings changes the behavior so when users are logged in the system will not automatically reboot.

Show Administrator on When logging into Windows the Administrator account is not normally available on the Welcome screen. This tweak adds it to the Welcome screen the Welcome Screen and allows you to login like a normal account. Hide the Welcome Screen

This setting hides the welcome screen that is normally displayed each time the user logs on to Windows 2000 or XP Professional.

Show Options on Logon Dialog Box

This setting controls whether the options to enter a domain or to log on using a dial-up connection are shown on the Windows logon box.

Use Active Authentication for Unlock and Screen Saver

This setting controls whether a full login should be performed when a workstation is unlocked or a password is used with the screen saver. Normally Windows will not check some settings such as whether the account has been locked out.

Windows Security Officer

5 of 29

Allow Fast User Switching

Fast user switching allows you to quickly switch to another user account without having to close any programs. This setting controls whether fast user switching is available.

Change the Login Window to the classic

This setting controls which type of logon screen is shown, either the classic Windows NT/2000 format or the Windows XP welcome screen.

Disable the Auto Logon When using the automatic login feature it is possible for a user to hold the Shift Override Feature Shift key to bypass the login sequence and enter a username and password. This feature disables the ability to override the function. Customize the Windows Logon and Security Dialog Title

This setting allows you to add additional text to the title of the standard Windows Logon and Windows Security dialog boxes.

Force the Use of Automatic Logon

Normally when a Windows machine is configured to automatically logon to a specified account users can bypass this and enter alternate account information. This tweak forces the machine to auto logon and to ignore any bypass attempts.

* Enable Shutdown from When this setting is enabled a Shutdown button is displayed in authentication Authentication Dialog Box

dialog box when the system first starts. This allows you to shutdown a system without logging in. The button is shown by default on a workstation and removed on a server installation.

Automatic Logon to Windows

Windows includes a feature that allows you to configure the computer to automatically logon to the network, bypassing the Winlogon dialog box.

Do not Display Last User Name

Enabling this key will blank the username box on the logon screen. Preventing people that are logging on from knowing the last user on the system.

* Automatic Administrative Logon to Recovery Console

The recovery console is a command line environment that is used to recover from system problems. This setting controls whether the administrator account will be logged on automatically or be required to enter a password when the recovery console is invoked during startup.

* Show Verbose Security This setting allows you to configure Windows so that you receive verbose Status Messages

startup, shutdown, logon, and logoff status messages. This may be helpful to in troubleshooting slow startup, shutdown, logon, or logoff behaviour.

Require Users to Press This setting controls whether users are required to press Ctrl + Alt + Delete Ctrl+Alt+Delete Before as a security precaution before logging into the system. Logon

* Allow Portables to Undock Before Logon

This setting controls whether users with portable computers have the option to undock the system before they have logged onto the computer.

Disable the Lock Workstation Button

Add this setting to the registry to stop unauthorized users from locking machines from the Windows Security dialog box.

Change the Message Shown on the Logon Box

You can personalize (or legalize) the message displayed on the logon box above the user name and password.

Require Alphanumeric Windows Password

Windows by default will accept anything as a password, including nothing. This setting controls whether Windows will require a alphanumeric password, i.e. a password made from a combination of alpha (A, B, C...) and numeric (1, 2 ,3 ...) characters.

Disabled Password Caching

Normally Windows caches a copy of the users password on the local system to allow for additional automation, this leads to a possible security threat on some systems. Disabling caching means the users passwords are not cached locally. This setting also removes the second Windows password screen and also remove the possibility of networks passwords to get out of

Windows Security Officer

6 of 29

sync.

* Disable Send Plain Text Passwords

When connecting to some SMB servers, such as Samba and LAN Manager for UNIX, you may be required to send unencypted password. This setting enables that functionality.

Prompt for Password on Resume

This setting allows you to configure the computer to always lock and require a password after resuming from hibernate or suspend mode.

Enable Quick Reboot

This setting allows you to use the quick reboot function to restart Windows immediately without shutting down. When enabled, press Shift + Ctrl + Alt + Delete for a quick reboot.

Enable Shutdown Event Tracker

The Shutdown Event Tracker provides a simple and standard mechanism you can use to consistently document the reasons for shutting down or restarting your computer. The information provided is recorded in the system log in Event Viewer.

* Power the Computer

This setting controls whether Windows should automatically power down or reboot your computer once it has finished the shutdown process.

Off After Shutdown

Windows Common Restrictions \ Internet Use System-based Internet Restrictions

* Change the Default Mail Client

Internet restrictions are normally dynamically loaded for each user, therefore settings for one user do not affect the settings of another. This tweak forces Windows to use the local machine settings rather than those of the current user. The setting allows you to change which program is opened and used to send an e-mail messages when you click on a 'mailto:' link in a web page. Value: "C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE" -c IPM.Note /m "%1"

Windows Common Restrictions \ Software Restrictions Change the Search Assistant in Internet Explorer

This tweak allows you to specify an alternate search assistant page, such as Google, in Internet Explorer.

Change the Default By default a Microsoft search page is shown when a user clicks on the Internet Explorer Search 'Search' toolbar button in Internet Explorer. This tweak allows you to specify an alternate search URL. Page Remove Windows Messenger from Internet Explorer

This tweak can be used to remove the integration of Windows Messenger into Internet Explorer. It will remove both the toolbar icon and Tools menu item.

Specify the Location of the Online Support Site

When a user selects 'Online Support' from the Internet Explorer help menu they are usually redirected to a Microsoft web page. This tweak allows you to specify an alternate URL and web site.

Disable Netmeeting Logging

This setting enables the debug logging functions in Microsoft Netmeeting. This may be useful to diagnose faults or connection issues.

* Disable Auto Upgrade with Windows Media Player

When Windows Media Player is used it will periodically check for newer versions via the Internet. This tweak allows you to turn off this checking and notification.

Windows Security Officer

7 of 29

Block Executable Attachments in Outlook Express

Outlook Express normally allows you to view and save all e-mail attachments. This tweak blocks executable files that potentially contain harmful viruses.

Remove Windows Messenger from Outlook Express

This tweak is used to remove MSN Instant Messenger functionality and integration from Outlook Express.

Disable the Ability to Use HTTP Mail in Outlook Express

This tweak is used to specify whether HTTP mail servers, such as Hotmail, can be used or created in Outlook Express.

Disable Account Changes in Outlook Express

This setting disables the ability for users to create or modify any mail, news or directory accounts in Outlook Express.

Change the Messenger Warning Message

When you start a chat in Windows Messenger a warning is shown that says 'Never give out your password or credit card number in an instant message conversation'. This tweak allows you to customize this message for example to display your company chat policy.

Disable Remote Administration of Windows Installer

This setting allows administrators using Windows Terminal Services to remotely install and configure software using Windows Installer.

Disable Ability to Skip Startup Programs

Normally if you hold the Shift key while Windows is loading you can prevent the Startup applications from being launched. This setting disables the ability to by-pass these programs.

Restrict Interactive Services

Windows services normally have the option of interacting with the desktop, to display information and accept input. For security reasons this tweak allows you to restrict service interactivity.

Disable Universal Plug and Play Services

Windows XP includes support for Universal Plug and Play (UnPnP) which allows UnPnP devices to be connected over a network. There are currently limited UnPnP devices available and due to a recent security flaw it may be advisable to disable these services.

User Restrictions \ Control Panel \ Display settings Disable the Display Control Panel

This option disables the display settings control panel icon, and stops users from accessing any display settings.

Hide the Background page

This option hides the background page, stopping users from changing any background display settings.

Hide the Screen Saver page

This option hides the screen saver page from the display settings control, which stops users having access to change screen saver settings.

Hide the Settings page

This option hides the Settings page from the display properties control.

Hide the Appearance page

This setting, once enabled, hides the display settings appearance page.

Hide the Themes Settings This option hides the Themes tag which prevents the user from selecting an alternate theme. Themes normally include a background plus sounds, Page icons and other elements. Disable the 'Windows and This option hides the 'Windows and buttons' style control. buttons' style control

Windows Security Officer

8 of 29

Disable the 'Color scheme' control

This option hides the 'Color scheme' control.

Disable the 'Font size' control

This option hides the 'Font size' control.

Hide the Keyboard Navigation Settings

This restriction disables the 'Hide keyboard navigation indicators until I use the ALT key' option in the Display Control Panel.

Restrict Changes to Animation Settings

This restriction prevents users from selecting the option to animate the movement of windows and menus.

User Restrictions \ Control Panel \ Control Panel Applets not found any tweak

User Restrictions \ Control Panel \ Internet options Disable the Internet Options

Disable the Internet Options

Don't allow to change the Don't allow to change the Home Page in the Internet Options Home Page Disable the General Tab

Disable the General Tab in the Internet Options

Disable the Security Tab

Disable the SecurityTab in the Internet Options

Disable the Content Tab

Disable the Content Tab in the Internet Options

Disable the Connections Tab

Disable the Connections Tab in the Internet Options

Disable the Privacy Tab

Disable the Privacy Tab in the Internet Options

Disable the Programs Tab

Disable the Programs Tab in the Internet Options

Disable the Advanced Tab

Disable the Advanced Tab in the Internet Options

Disable Password Caching in Internet Explorer

When you attempt to view a password-protected site, you are normally prompted to type your username and password with an option to 'Save this password in your password list'. This tweak can be used to disable the ability for users to save passwords.

Disable all options under Disables all options under Accessibility. Accessibility Disable changing Personal Certificate options

Prevents changing Personal Certificate options.

Disable changing Publisher Certificate options

Prevents changing Publisher Certificate options.

Disable changing Site Certificate options

Prevents changing Site Certificate options.

Windows Security Officer

9 of 29

Disable changing Security Levels for the Internet Zone

Prevents changing Security Levels for the Internet Zone.

Disable adding Sites to any zone

Prevents adding Sites to any zone.

Disable changing privacy Prevents changing privacy settings. settings Disable AutoComplete for forms

Prevents AutoComplete for forms.

Disable Prompt me to save password from being displayed

Prevents Prompt me to save password from being displayed.

Disable the Internet Connection Wizard

Prevents the Internet Connection Wizard.

Disable any changes to Temporary Internet Files

Prevents any changes to Temporary Internet Files.

Disable the Reset web Setting button

Prevents the Reset web Setting button.

Prevent changes to advanced settings

Prevents changes to advanced settings.

Prevent changes to Automatic Configuration

Prevents changes to Automatic Configuration.

Prevent changes to temporary file settings

Prevents changes to temporary file settings.

Prevent changes to calendar and contacts

Prevents changes to calendar and contacts.

Prevent changes to security certificates

Prevents changes to security certificates.

Prevent changes to default browser check

Prevents changes to default browser check.

Prevent Color changes

Prevents Color changes.

Prevent changes to connection settings

Prevents changes to connection settings.

Disable the Connection Wizard

Disables the Connection Wizard.

Disable font changes

Disables font changes.

Disable changes to History settings

Disables changes to History settings.

Disable Language changes

Disables Language changes.

Disable Links changes

Disables Links changes.

Disable Messaging changes

Disables Messaging changes.

Windows Security Officer

10 of 29

Disable changes to Profiles

Disables changes to Profiles.

Disable changes to Proxy settings

Disables changes to Proxy settings.

Disable Ratings changes

Disables Ratings changes.

Disable changes to Wallet settings

Disables changes to Wallet settings.

User Restrictions \ Control Panel \ Printers Hide the General and Details Printer Pages

This option hides the printer details and general printer information pages. Once enabled this option stops users from changing specific printer settings.

Disable the Addition of Printers

Any user can add a new printer their system, this option once enabled disables the addition of new printers to the computer.

Disable the Deletion of Printers

Printers can be deleted simply by anyuser pressing the delete key, enabling this setting stops users from being able to delete printers.

User Restrictions \ Control Panel \ Add-Remove Programs Remove Add/Remove Programs

This option disables Add/Remove Programs.

Hide change or remove programs page

This option disables Change and Remove Programs Option

Hide Add New Programs page

This option disables Add Programs

Hide Add/Remove windows components

This option disables Windows Components Wizard

Hide the add a program from CD-ROM or floppy option

This option hides 'Add a program from CD-ROM or disk' option.

Hide Add programs from Microsoft option

This option hides 'Add programs from Microsoft' option.

Hide Add programs fromNetwork option

This option hides 'Add programs from your network' option.

Go directly to Components Wizard

Go directly to Windows Components Wizard.

Remove support information

This option disables Disable Support Information.

Specify default category for Add New Programs

This option is used to hide 'Set Program Access and Defaults' on the Add or Remove Programs page. This feature was introduced with Windows XP SP1 and Windows 2000 SP3 to allow users to configure the default applications used on the PC.

Hide Set Program Access and Defaults in

This restriction is used to hide 'Set Program Access and Defaults' on the Add or Remove Programs page.

Windows Security Officer

11 of 29

Add/Remove Programs

User Restrictions \ Control Panel \ Control panel restrictions Disable Control Panel

This setting allows you to restrict user access to the Control Panel options and settings.

Force the Control Panel Display Style

This setting specifies the visual style of the Control Panel. Allowing you to either force the use of the new XP style, classic style or allow the user to select the preferred style.

User Restrictions \ Active Desktop Force the Use of Active Desktop

The user is normally given the option of disabling Active Desktop through the display properties. This tweak removes the ability to disable Active Desktop.

Restrict Changes to Active Desktop Settings

This tweak allows you to have Active Desktop enabled, but to restrict any changes to the settings.

Disable Active Desktop

This tweak will disable the use of the Active Desktop feature.

Remove Active Desktop Options from the Settings Menu

The tweak will remove the Active Desktop options from Settings on the Start Menu.

Disable the ability to change wallpapers

The tweak will disable the ability to change wallpapers.

Disable components

The tweak will disable components.

Disable the ability to add components

The tweak will disable the ability to add components.

Disable the ability to delete components

The tweak will disable the ability to delete components.

Disable the ability to edit components

The tweak will disable the ability to edit components.

Prevents adding, dragging, dropping and closing the Taskbar's toolbars

The tweak will prevents adding, dragging, dropping and closing the Taskbar's toolbars.

Restrict adjustments to desktop toolbars

The tweak will restrict adjustments to desktop toolbars.

Only allow bitmaps (BMP) as wallpaper

The tweak will only allow bitmaps (BMP) as wallpaper.

User Restrictions \ Desktop and Explorer Restrict the Screen Saver

This restriction can be used to specify the screen saver or to stop screen savers from running. Also, the Screen Saver settings page is disabled, so users cannot change the screen saver options.

Screen Saver Password Protection Policy

This restriction determines whether the screen saver is password protected and prevents users from changing the password-protection setting.

Windows Security Officer

12 of 29

Enforce Shell Extension Security

This restriction can be used to limit the system to only run files that have an approved shell extension.

Remove the Distributed File System Tab

This restriction removes the Distributed File System (DFS) tab from Windows explorer. This prevents users from viewing or changing the properties of local DFS shares.

Remove the Security Tab

This restriction removes the Security tab from Windows explorer which prevents users from accessing or changing the security permissions of folder and file objects.

Remove the Hardware Tab

This restriction removes the hardware tab from applicable items in the Control Panel and from the local drive properties. This prevents users from changing the hardware device properties.

Remove Properties from This restriction remove the properties option from My Computer and hides the 'System Properties' screen. My Computer Remove the Ability to Modify File Types

This setting allows you to remove the ability to change, add or delete file types using explorer the Folder Options interface.

Remove the Option to Change or Hide Toolbars

By default users are able to select which toolbars are displayed either be right clicking the toolbar itself, or by changing the options from the View menu. This tweak locks the toolbars, removing the ability to change which are displayed.

Disable the Ability to Customize Toolbars

By right clicking on a toolbar you are usually given the option to Customize, which allows you to change which functions are available from the toolbar. This tweak allows you to disable that function.

Disable Folder Options Menu

This tweak allows you to hide the Folder Options function from the folder Tools menu. Allowing you to restrict access to numerous advanced folder features.

Disable the Ability to Right Click on the Desktop

This tweak removes the context menu that would normally appear when the user right clicks on the desktop or in the Explorer right results pane.

Remove File Menu from Explorer

This setting is used to Remove the File option from the Explorers toolbar.

Hide the Network Neighborhood Icon

The Network Neighborhood icon is shown on the Windows desktop whenever Windows networking is installed, by enabling this setting the icon will be hidden.

Hide All Items on the Desktop

Enabling this options hides all the items and programs on the Windows desktop.

Disable the Change Password Button

This setting disables the 'Change Password' button on the Windows Security dialog box. Enabling this setting stops casual users from being able to change the password.

Disable the Windows Hotkeys

This restriction allows you to disable the use of the Windows hotkey combinations that provide shortcuts to the Start Menu and task swapping.

Restore Folder Windows This option controls whether Windows will attempt to re-open any folders that were already open when the system was last shutdown. at Startup Remove Shared Documents from My Computer

The Shared Documents folder allows users to easily share files and folders over a network. This restriction will remove the 'Shared Documents' object from My Computer.

Automatically Expand Folders in Explorer

When using Windows Explorer the selected folder is automatically expanded in the left-hand folder list. This setting allows you to control that functionality.

Windows Security Officer

13 of 29

Show Hidden Operating System Files

This setting controls whether the normally hidden operating system files should be displayed when using explorer to browse the file system.

Launch Folder Windows This setting controls whether each folder window is launched as a separate explorer task. The benefit of this method is that if one window has an error in a Separate Process and crashes the others should be not be affected. The disadvantage is that it takes more system resources for each folder. Remove My Computer from the Desktop and Start Menu

This restriction removes My Computer from the desktop and Start menu.

Disable Desktop Cleanup Wizard

By default Windows will run the Desktop Cleanup Wizard every 60 days to remove unused desktop items and shortcuts. This setting will disable it from running automatically.

* Show Pop-up Descriptions for Explorer and Desktop Items

This setting controls whether pop-up tool tip information and descriptions are shown when the mouse is hovered over desktop and explorer items.

Force Windows to Use the Classic Desktop

This tweak disables the various enhanced features of the Windows shell which are included in newer releases of Windows and Internet Explorer. It will remove features including Active Desktop, Web view, thumbnail views and the quick launch toolbar.

Remove My Network Places

This restriction removes My Network Places icon from Explorer

User Restrictions \ Network Hide the Active Directory Folder in My Network Places

This restriction is used to remove the Active Directory folder from My Network Places. This still allows users to search but not browse the Active Directory.

Restrict add and remove network components

This restriction is used to restrict add and remove network components.

Restrict changes to Advanced Settings

This restriction is used to restrict changes to Advanced Settings.

Restrict changes to advanced TCPIP configuration

This restriction is used to restrict changes to advanced TCPIP configuration.

Restrict changes to protocol and service bindings

This restriction is used to restrict changes to protocol and service bindings.

Restrict deletion of public This restriction is used to restrict deletion of public RAS connections. RAS connections Restrict deletion of RAS connections

This restriction is used to restrict deletion of RAS connections.

Restrict changes to the Dial-up Preferences

This restriction is used to restrict changes to the Dial-up Preferences.

Restrict access to component properties of a LAN connection

This restriction is used to restrict access to component properties of a LAN connection.

Windows Security Officer

14 of 29

Restrict connecting and disconnecting a LAN connection

This restriction is used to restrict connecting and disconnecting a LAN connection.

Restrict access to properties of a LAN connection

This restriction is used to restrict access to properties of a LAN connection.

Disable the Network Connection wizard

This restriction is used to disable the Network Connection wizard.

Disable the Network Connection wizard

This restriction is used to restrict access to properties of public RAS connections.

Restrict access to properties of a RAS connection

This restriction is used to restrict access to properties of a RAS connection.

Restrict connecting and disconnecting a RAS connection

This restriction is used to restrict connecting and disconnecting a RAS connection.

Restrict access to private This restriction is used to restrict access to private RAS connection properties. RAS connection properties Restrict renaming of public RAS connections

This restriction is used to restrict renaming of public RAS connections.

Restrict renaming of connections

This restriction is used to restrict renaming of connections.

Restrict renaming of LAN This restriction is used to restrict renaming of LAN connections. connections Restrict renaming of private RAS connections

This restriction is used to restrict renaming of private RAS connections.

Disable status statistics for an active connection

This restriction is used to disable status statistics for an active connection.

Disable Recent Shares in Network Places

This restriction stops remote shared folders from being added to Network Places whenever you open a document in the shared folder.

Hide Computers Near Me in Network Places

This setting allows you to show or hide the computers listed Near Me in My Network Places.

Hide Workgroup Content from Network Neighborhood

Enabling this option hides all Workgroup contents from being displayed in Network Neighborhood.

Hide Entire Network in Network Neighborhood

Entire Network is an option under Network Neighborhood that allows users to see all the Workgroups and Domains on the network. Entire Network can be disabled, so users are confined to their own Workgroup or Domain.

Remove the Map and Disconnect Network Drive Options

Prevents users from making additional network connections by removing the Map Network Drive and Disconnect Network Drive buttons from the toolbar in Explorer and also removing them from the Context menu of My Computer and the Tools menu of Explorer.

Remove Log Off from the This tweak allows you to remove the Log Off (Username) option from the Start menu. Start Menu

Windows Security Officer

15 of 29

Disable Automatic Download of COM Components

Windows can be configured to automatically download missing COM classes and objects over the network. This setting allows you to disable or enable this feature.

User Restrictions \ Start Menu and Taskbar Force Logoff on the Start Menu

This setting forces the Logoff button to appear on the Start menu and prevents users from removing or hiding it.

Remove My Network Places from the Start Menu

This restriction hides the My Network Places button on the Windows XP simple Start menu.

Remove the Toolbars on the Taskbar

This restriction is used to remove all the toolbars, including Quick Launch, from the taskbar. It also restricts the ability to re-enable them.

Remove Tray Items from Taskbar

This setting removes and restricts access to the tray icons normally found next to the clock on the taskbar.

Lock the Taskbar

This restriction is used to force the locking of the taskbar and restrict users from making any changes to its position.

Force the Use of the Classic Start Menu

This restriction forces users to use the classic Windows start menu, instead of the new format introduced with Windows XP.

Restrict the Start Menu Log Off Option

This restriction removes the ability for a user to enable the 'Log Off...' option on the Start Menu.

Hide the Taskbar Clock

This setting allows you to remove the clock from the system tray on the taskbar.

Remove the Windows Security on Start Menu

This setting is used to hide the Windows NT Security menu item on the Start Menu of a terminal server session. These settings are compatible with Windows Server 2003.

Remove the Help Option from the Start Menu

This restriction removes the Help option from the Start Menu.

Hide Administrative Tools Menu

As with Windows NT, Windows 2000 has an 'Administrative Tools' folder on the Start Menu. This folder contains powerful administration utilities and therefore can be hidden to avoid accidental use.

Disable Drag-and-Drop on This restriction prevents users from modifying the Start menu by dragging and dropping items. the Start Menu Remove Common Program Groups from Start Menu

Disables the display of common groups when the user selects Programs from the Start menu.

Hide the Taskbar Settings This restriction removes the Taskbar and Start Menu item from the Control Panel, and it also removes the Properties item from the Start on the Start Menu menu context menu. Hide Control Panel, Printer and Network Settings

This restriction removes the Control Panel, Printers and Network Connection settings from the Start menu. If the Taskbar settings are also hidden it causes the Settings menu to be completely removed.

Remove Run from the Start Menu

Removes the ability to launch commands or processes from the Start menu by removing the Run option.

Remove Search from the Start Menu

This restriction removes the Search feature from the Start Menu.

Windows Security Officer

16 of 29

Disable the Shut Down Command

This option allows you to stop users from being able to shutdown the computer by disabling the shut down command.

Disable Taskbar Context Menus

This setting removes the context menus (right click on the taskbar) for the system tray, including the Start button, Tab control, and Clock.

Remove the Start Banner on the Taskbar

Hide the bouncing arrow and the 'Click Here to Begin' caption that appear on the taskbar when you start Windows.

Automatically Hide Inactive Tray Icons

This setting controls whether running tray programs should be hidden automatically when they are not active.

Highlight New Programs on Start Menu

When you install a new Windows program the icon will be highlighted on the Start Menu to allow you to quickly locate it. This tweak controls whether new programs should be highlighted.

Remove the Control Panel Remove the Control Panel Folder from enhanced Start Menu. Folder from Start Menu Remove the My Computer Remove the My Computer Folder from enhanced Start Menu. Folder from Start Menu Remove the My Documents Folder from Start Menu

Remove the My Documents Folder from enhanced Start Menu.

Remove the My Music Folder from Start Menu

Remove the My Music Folder from enhanced Start Menu.

Remove the My Pictures Folder from Start Menu

Remove the My Pictures Folder from enhanced Start Menu.

Remove the Network Connections Folder from Start Menu

Remove the Network Connections from enhanced Start Menu.

Remove Set Program Access and Defaults from Start Menu

This setting is used to remove the 'Set Program Access and Defaults' icon from the Start Menu. This feature was introduced with Windows XP SP1 and Windows 2000 SP3 to allow users to configure the default applications used on the PC.

Remove Frequent Programs List from the Start Menu

This restriction removes the list of frequently used programs from the Start menu.

Remove Pinned Programs This restriction removes the pinned programs list from the Start menu. It also removes the Internet and E-mail checkboxes from the Start menu. List from the Start Menu Remove Username from the Start Menu

This restriction hides the current username normally displayed at the top of the Windows XP Start Menu.

Remove 'All Programs' Button from the Start Menu

This restriction is used to remove the 'All Programs' button which displays a list of all the installed applications.

Remove Undock Computer from Start Menu

This policy is used to hide or display the 'Undock Computer' option on the Start Menu.

Show Favorites on the Start Menu

This setting controls whether the Favorites folder is shown on the Start Menu.

Remove the Printers and Faxes icon from Start Menu

Remove the Printers and Faxes icon from Start Menu.

Windows Security Officer

17 of 29

User Restrictions \ System Restrict use of Management Console (MMC) Snap-ins

Enable this setting, to restrict access to all snap-ins, except those that you explicitly permit via the Group Policy Restricted/Permitted snap-ins setting folder.

Restrict Author Mode in This restriction stops users from opening the Microsoft Management Console and relevant .mmc console files in author mode. Management Console (MMC) Require Windows Script This setting is used to define whether trusted and untrusted scripts should be executed when using signature verification. By requiring a signature the Signature Security system will only execute scripts from verified authors. Disable CD Burning

This restriction is used to disable the use of the inbuilt CD recording functions of Windows.

Request Alternate Installation Credentials

These settings control whether users are prompted to enter alternate logon credentials when installing software as a non administrative user.

Restrict Access to the Windows Update Feature

The Windows Update feature allows users to easily update Windows components and software over the Internet. These settings allow can be used to grant or restrict access to this function.

Disable Registry Editing This restriction disables the ability to interactively run the standard Microsoft registry editing tools such as REGEDIT and REGEDT32. Tools Disable Task Manager

* Read Environment Variables in Autoexec.bat File Disable Save Settings at Exit

This setting controls the ability for users to start Task Manager and view processes, running applications and make changes to the priority or state of the individual processes. When this value is enabled the variables declared in the Autoexec.bat file will be parsed and included in the current user environment. When Windows exits it normally saves the desktop layout, including icon location, appearance and other parameters. This setting disables any changes from being saved therefore allowing you to preserve a configured layout.

Hide the Run as... This setting allows you to restrict the ability for users to have access to the option from the context Run as... service when right clicking on executables files and shortcuts. This tweak also disables the Shift key override feature. menu Disable the Recycle Bin Properties Option

This tweak allows you to restrict access to the 'Properties' option on the Recycle Bin right-click context menu.

Disable Update Device Driver Wizard

This tweak allows you to disable the ability to use Windows Update to locate updated drivers for hardware in Device Manager.

Hide Computer Management Option

This setting allows you to remove the 'Manage' option from the My Computer context menu. The Computer Management program is used to configure the system.

User Restrictions \ User Folder Locations Restrict changes to My Music

Restrict changes to My Music

Restrict changes to My Pictures

Restrict changes to My Pictures

Windows Security Officer

18 of 29

Restrict changes to My Documents Restrict changes to My Documents Restrict changes to Favorites

Restrict changes to Favorites

User Restrictions \ Documents and Folders Remove My Music from the This restriction removes My Music from the Documents folder on the Start Menu. Start Menu Remove My Pictures from the Start Menu

This restriction removes My Pictures from the Documents folder on the Start Menu.

Remove My Documents from the Start Menu

This restriction removes My Documents which is shown under the Documents folder on the Start Menu.

Disable Recent Documents Normally when you open or access a document or file it is added to the list of recent documents on the Start Menu. This tweak will stop files History from being added to the list. Remove Network This tweak allows you to hide the Network and Dial-up Connections Connections from the Start option on the Start Menu. Menu Remove Favorites from the This tweak allows you to remove the Favorites folder from the Start Menu. Start Menu Remove Recent Documents from the Start Menu

This setting can be used to remove the recent Documents folder from the Start Menu.

User Restrictions \ Software \ Internet Explorer \ Appearance Show 'Shortcut to' Label on Internet Explorer Links

* Lock the Internet Explorer Toolbars

By default when you hover the mouse over a link in Internet Explorer it will display 'Shortcut to filename.htm' in the status bar. This tweak controls that behaviour so that the full URL can be shown instead. This setting allows you to lock the Internet Explorer toolbars in place so they can not be moved by clicking-and-dragging.

Show Expanded Add to This setting controls whether an expanded or smaller dialog box is shown when a site is added to the Internet Explorer favorites. Favorites Dialog Box Use Smooth Scrolling in Internet Explorer

This setting controls whether the smooth scrolling function is used in Internet Explorer to increase the readability while navigating a page.

Automatically Resize Images in Internet Explorer

This setting controls whether Internet Explorer attempts to automatically resize an image to fit within the window.

Disable the Go Button in Internet Explorer

This setting is used to remove the 'Go' button from the Internet Explorer toolbar.

Display a Background Bitmap on Explorer Toolbars

This tweak allows you to choose a a bitmap image to display as the background for the explorer toolbars.

Disable Expanding Internet Explorer New Menu

Usually when you click on the New menu in Internet Explorer it is expanded to include options like New Window, Message, Post and Internet Call. Using this tweak will stop the menu expanding and therefore only display the 'New

Windows Security Officer

19 of 29

Window' option. Use Personalized Favorites Menu

Internet Explorer has a feature that automatically hides site that are rarely visited from the Favorites menu. This setting allows you to enable or disable the personalized menu feature.

Show Friendly HTTP Error Messages

By default Internet Explorer will show a friendly version of any HTTP errors it receives, for example Error 404 Page Moved. This tweak controls that functionality allowing it to be enabled or disabled.

Change the Internet Explorer Window Title

This setting allows you to customize Internet Explorer by using your own window title. For example you could rename IE to 'My Browser' or anything else you like!

Disable the entire help menu

Disables the entire help menu.

Remove the 'For Netscape Users' menu item

Removes the 'For Netscape Users' menu item.

Remove the 'Send Feedback' menu item

Removes the 'Send Feedback' menu item.

Remove the 'Tip of the Day' menu item

Removes the 'Tip of the Day' menu item.

Remove the 'Tour' (Tutorial) menu item

Removes the 'Tour' (Tutorial) menu item.

Disable the ability to change toolbar selection

Disables the ability to change toolbar selection.

Disable the address bar Disables the address bar. Disable the tool bar

Disables the tool bar.

Disable the links bar

Disables the links bar.

Disable changes to browsers bars

Disables changes to browsers bars.

Disable the ability to Save As

Disables the ability to Save As.

Disable the Favorites

Disables the Favorites.

Disable the File > New command

Disables the File > New command.

Disable the File > Open Disables the File > Open command. command Disable the Find Files command

Disables the Find Files command.

Disable the Forward and Back navigation buttons

Disables the Forward and Back navigation buttons.

Disable Open in New Window option

Disables Open in New Window option.

Remove Print and Print Preview from the File

Removes Print and Print Preview from the File menu.

Windows Security Officer

20 of 29

menu Remove Mail and News menu item

Removes Mail and News menu item.

Hide My Pictures Toolbar in Internet Explorer

When displaying an image in Internet Explorer a floating toolbar is shown that allows you to Save, Print, E-mail or Open the My Pictures folder. This setting allows you to hide the toolbar.

Force Plain Text Format in Internet Explorer

Internet Explorer may not use the 'Text/Plain' Content-Type header field to properly open a text file on a Web site. This setting forces IE to treat those files as text files.

Open Internet Explorer Shortcuts in a New Window

This setting controls whether Internet shortcuts are opened in an existing available Internet Explorer window or whether a new window should be spawned.

User Restrictions \ Software \ Internet Explorer \ Network and Connections Disable Internet Explorer Automatic Proxy Caching

When you configure Internet Explorer to use automatic proxy configuration it caches the returned information. If a proxy server fails you may therefore get an error message even though others are available. With this setting you can disable caching to ensure the browser always checks for the latest proxy information.

Connect to Unicode This setting allows you to control whether Internet Explorer should be able to connect to sites that use multibyte characters in the URL. This is useful when Addresses with connecting to some foreign language sites. Internet Explorer Internet Explorer FTP Mode

Internet Explorer has the ability to display FTP sites as if they were local folders. This tweak controls which mode IE uses for FTP.

User Restrictions \ Software \ Internet Explorer \ Search Features Use Classic Search in Internet Explorer

This tweak allows you to disable the new Search Assistant and use the traditional search interface in Internet Explorer.

Disable the Custom Search Page in Internet Explorer

This setting allows you to disable the use of the custom search page in Internet Explorer.

User Restrictions \ Software \ Internet Explorer \ Security Restrict ActiveX program installations in Internet Explorer

This tweak allows you to restrict the ability to install programs via the ActiveX control using Internet Explorer.

Disable Local Internet Explorer includes an option to load a local stylesheet to set browser Stylesheets in Internet based preferences for web page styles. This feature can be exploited by unauthorized programs to implement unrequested popups and malicious Explorer tracking of user activity. This tweak allows you to disable local stylesheets. Restrict Import and Export of Internet

This restriction can be used to disable the import and export of Internet Explorer cookies and favorites. When users utilize the 'Import and Export' wizard on the File menu they will be shown a message when clicking 'Finish'.

Windows Security Officer

21 of 29

Explorer Settings Disable Caching of Secure Web Pages

This setting controls whether web pages encrypted using Secure Sockets Layer (SSL) should be stored on the hard disk in the temporary Internet cache.

Empty Temporary Internet Files on Exit

This setting controls whether Internet Explorer should delete all of the temporary Internet files stored during the session when the browser is closed.

Disable Save As Web Page Complete

This restriction disables the ability to save complete web pages including images, scripts, linked files and other elements in Internet Explorer.

Disable Access to File URLs in Internet Explorer

Normally you can use the Internet Explorer address bar to access standard files and folders. This setting disables that functionality and only allows access to Internet URLs.

Disable File Download in Internet Explorer

This setting allows you to restrict the ability to download files using Internet Explorer.

Always prompt user when downloading files

Always prompt user when downloading files.

Disable the option of closing Internet Explorer

Disables the option of closing Internet Explorer.

Disable right-click context menu

Disables right-click context menu.

Disable the option of selecting a download directory

Disables the option of selecting a download directory.

Disable the Full Screen view option

Disables the Full Screen view option.

Disable the ability to view the page source HTML

Disables the ability to view the page source HTML.

Disable Internet Explorer Download Notification

This setting is used to disable download completion notification in Internet Explorer.

Launch Browser Windows in a Separate Process

This setting specifies whether a new process is created for each instance of Internet Explorer that you start. This can prevent one instance of Explorer from affecting other instances if it stops responding.

Specify the Default Internet Explorer Download Directory

This setting is used to specify which directory should be used as the default location to save downloaded files retrieved using Internet Explorer.

Disable Check for Internet Explorer Updates

Internet Explorer 5 and higher has the ability to automatically check for software updates. This tweak controls that feature.

Disable the Auto Complete Mode

This setting controls whether the automatic text completion (AutoComplete) feature of Windows Explorer appends the suggested text to the words as you are typing as well as showing a drop-down list of available values.

* Disable the Internet Explorer Script Debugger

When an Internet Explorer detects an error on a page it has the ability to launch a script debugger to diagnose the problem. This setting controls the use of the Internet Explorer script debugging functions.

Windows Security Officer

22 of 29

Hide the Internet Explorer Icon

This option hides the Internet Explorer icon from the Windows desktop.

User Restrictions \ Software \ Internet Explorer \ Internet Explorer Toolbar Buttons .Remove Selected Internet Explorer Toolbar Buttons

These settings allow you to hide and disable specific buttons on the Internet Explorer toolbar.

Remove the 'Back' button

Remove the 'Back' button on the Internet Explorer toolbar.

Remove the 'Copy' button

Remove the 'Copy' button on the Internet Explorer toolbar.

Remove the 'Cut' button

Remove the 'Cut' button on the Internet Explorer toolbar.

Remove the 'Discussions' button

Remove the 'Discussions' button on the Internet Explorer toolbar.

Remove the 'Edit' button

Remove the 'Edit' button on the Internet Explorer toolbar.

Remove the 'Encoding' button

Remove the 'Encoding' button on the Internet Explorer toolbar.

Remove the 'Favorites' button

Remove the 'Favorites' button on the Internet Explorer toolbar.

Remove the 'Folders' button

Remove the 'Folders' button on the Internet Explorer toolbar.

Remove the 'Forward' button

Remove the 'Forward' button on the Internet Explorer toolbar.

Remove the 'Fullscreen' button

Remove the 'Fullscreen' button on the Internet Explorer toolbar.

Remove the 'History' button

Remove the 'History' button on the Internet Explorer toolbar.

Remove the 'Home' button

Remove the 'Home' button on the Internet Explorer toolbar.

Remove the 'MailNews' button

Remove the 'MailNews' button on the Internet Explorer toolbar.

Remove the 'Media' button

Remove the 'Media' button on the Internet Explorer toolbar.

Remove the 'Paste' button

Remove the 'Paste' button on the Internet Explorer toolbar.

Remove the 'Print' button

Remove the 'Print' button on the Internet Explorer toolbar.

Remove the 'PrintPreview' button

Remove the 'PrintPreview' button on the Internet Explorer toolbar.

Remove the 'Refresh' button

Remove the 'Refresh' button on the Internet Explorer toolbar.

Remove the 'Search' button

Remove the 'Search' button on the Internet Explorer toolbar.

Remove the 'Size' button

Remove the 'Size' button on the Internet Explorer toolbar.

Remove the 'Stop' button

Remove the 'Stop' button on the Internet Explorer toolbar.

Remove the 'Tools' button

Remove the 'Tools' button on the Internet Explorer toolbar.

User Restrictions \ Software \ Netmeeting \ Netmeeting Policies and Restrictions Disable Call Security

Call Security is a new feature in NetMeeting that provides security for data exchanged during NetMeeting chat, whiteboard, shared program, and data

Windows Security Officer

23 of 29

exchange features. Disable Intranet Web Directory

Disable Intranet Web Directory.

Disable Maximum Bandwidth

Disable Maximum Bandwidth.

Disable Adding Directory Servers

Disable Adding Directory Servers.

Disable Advanced Audio

Disable Advanced Audio.

Disable Advanced Calling

Disable Advanced Calling.

Not Allow Control

Not Allow Control.

Disable Application Sharing

Disable Application Sharing.

Disable Audio

Disable Audio.

Disable Audio Control Disable Audio Control. Disable Auto Accepting Calls

Disable Auto Accepting Calls.

Disable Changing Direct Sound

Disable Changing Direct Sound.

Disable Changing Call Disable Changing Call Mode. Mode Disable Chat

Disable Chat.

Disable Directory Services

Disable Directory Services.

Disable Full Duplex

Disable Full Duplex.

Disable General Control

Disable General Control.

Disable New White Board

Disable New White Board.

Disable Old White Board

Disable Old White Board.

Disable Receiving Files

Disable Receiving Files.

Disable Receiving Video

Disable Receiving Video.

Disable Sending Files Disable Sending Files. Disable Sending Video

Disable Sending Video.

Disable Sharing

Disable Sharing.

Disable Sharing Desktop

Disable Sharing Desktop.

Windows Security Officer

24 of 29

Disable Sharing Dos Windows

Disable Sharing Dos Windows.

Disable Sharing Explorer

Disable Sharing Explorer.

Disable Sharing True Color Video

Disable Sharing True Color Video.

Disable Video Control Disable Video Control. Disable Web Directory

Disable Web Directory.

Disable Showing First Disable Showing First Time URL. Time URL Force Using Auto Configuration

Force Using Auto Configuration.

User Restrictions \ Software \ Netmeeting \ User Parameters for Netmeeting Account name

Account name, used to log onto gatekeeper

General comments field General comments field Email Address

Email Address

First Name

First Name

Last Name

Last Name

Location

Location

Phone number

Phone number, used to log onto gatekeeper.

User Name

Displayed when connecting to other H.323 devices.

User Restrictions \ Software \ Media Player Hide the Network tab in Media Player

This restriction hides the Network tab within the Tools > Options menu of Media Player 8.0 and above.

Disable Recent Files in Media Player

This restriction will stop Windows Media Player from storing the names of the played media in the recent file list.

Disable Processing of HTML Scripts in Media Files

This setting is an optional security configuration feature that you can use to turn off the processing of HTML scripts that are contained in Windows Media files.

Hide Anchor Window in Media Player

This setting hides the anchor window which is normally shown when using Windows Media Player in compact or skin mode. It also restricts users from re-enabling the window.

Disable Codec Downloads This restriction prevents audio and video codecs from being downloaded in Windows Media Player. When enabled it also restricts the ability to in Media Player re-enable downloads.

Windows Security Officer

25 of 29

Remove the Radio Bar from Media Player

This tweak allows you to remove the Radio Bar from Windows Media Player.

Remove Media Favorites from Media Player

This tweak allows you to remove Media Favorites from Windows Media Player.

Remove Finding New This tweak allows you to remove Finding New Station from Windows Station from Media Player Media Player. Change the Title of Windows Media Player

This tweak allows you to customize the title bar text shown on Windows Media Player.

Disable DVD Features in Media Player

This setting allows you to use Microsoft Media Player to Play and Open DVDs.

User Restrictions \ Software \ Outlook Express Change the Windows Address Book Location

This setting is used to specify the location of the Windows Address Book (WAB). The Windows Address Book is used by Outlook Express and Internet Mail and News to store contact details.

Change the Start Page for Outlook Express

This setting can be used to change the page that Outlook Express loads in the right-hand window when it first starts-up.

Use Smooth Scrolling in Outlook Express

This setting controls whether smooth scrolling is used when viewing messages in Microsoft Outlook Express.

Disable the Outlook Express Splash Screen

Sick of seeing the Outlook Express splash screen every time you open the program? This settings will allow you to remove it.

Disable Colorful Message Backgrounds in Outlook Express

When enabled this setting allows the use of colorful message backgrounds in Outlook Express 4.0 or below.

Change the Outlook Express Window Title

This setting allows you to customize Outlook Express by using your own window title. For example you could rename Outlook Express to 'My Mail Reader' or anything else you like!

Change the Location of the Outlook Express Mail and News Files

This setting allows you to change the location of the mail and news files stored by Outlook Express to another directory or partition.

User Restrictions \ Software \ Windows Messenger Disable Windows Messenger in Outlook

This setting can be used to disable the integration of Windows (MSN) Messenger so that is does not start when using Microsoft Outlook.

Disable MSN Instant Messenger

This restriction is used to disable the ability to run the Microsoft MSN Instant Messenger client.

Disable Collaboration Applications

Disable Collaboration Applications.

Disable FileTransfer

Disable FileTransfer.

Disable PC-to-PC Voice Feature

Disable PC-to-PC Voice Feature.

Windows Security Officer

26 of 29

Disable PC-to-PC Phone Feature

Disable PC-to-PC Phone Feature.

Disable Video

Disable Video.

Prevent Auto Update

Prevent Auto Update.

Prevent Background Download

Prevent Background Download.

Prevent Consumer Version

Prevent Consumer Version.

User Restrictions \ Software \ Task Scheduler Disable Manual Task Control

This restriction disables the ability for users to manually start and stop scheduled tasks. Tasks will continue to run automatically as configured

Disable Drag and Drop Task Scheduling

This restriction disables the ability to drag and drop programs into the Scheduled Tasks folder. This also disables the functionality of the Cut, Copy and Paste shortcut items.

Disable Changes to Task Run Command

This setting restricts changes to the run command and disables the Browse button in the Task Scheduler properties.

Remove Advanced Option This setting removes the 'Open advanced properties for this task when I click Finish' checkbox from the task creation wizard. This should be from Task Scheduler enabled to simplify the process for novice users. Wizard Disable Changes to Task Properties

This setting restricts users from changing the properties of an existing item in Task Scheduler.

Restrict Task Creation and Deletion

These settings allow you to restrict the creation and deletion of items in Task Scheduler.

User Restrictions \ Software \ Office Applications Restrictions Hide the Desktop Folder in the Places Bar

Places Bar is placed at the left side of Microsoft Office Open/Save dialog to allow the user fast access to History, Desktop, My Documents etc. This setting enables you to hide the system folder Desktop.

Hide the Favorites Folder in the Places Bar

Places Bar is placed at the left side of Microsoft Office Open/Save dialog to allow the user fast access to History, Desktop, My Documents etc. This setting enables you to hide the system folder Favorites.

Hide the My Documents Folder in the Places Bar

Places Bar is placed at the left side of Microsoft Office Open/Save dialog to allow the user fast access to History, Desktop, My Documents etc. This setting enables you to hide the system folder My Documents.

Hide the Publishing/Network Places Bar is placed at the left side of Microsoft Office Open/Save dialog to allow the user fast access to History, Desktop, My Documents Folder in the Places Bar etc. This setting enables you to hide the system folder Publishing/Network. Hide theRecent Folder in the Places Bar

Places Bar is placed at the left side of Microsoft Office Open/Save dialog to allow the user fast access to History, Desktop, My Documents etc. This setting enables you to hide the system folder Recent.

Windows Security Officer

27 of 29

User Restrictions \ Drives restrictions Hide Drives in My Computer

This setting allows you to control which drives are visible in My Computer and Explorer. It is possible to hide all drives or just selected ones.

Prevent Access to the Contents of Selected Drives

This restriction prevents users from using My Computer or Explorer to access the content of selected drives. Also, they cannot use Run, Map Network Drive, or the Dir command to view the directories on these drives.

User Restrictions \ Windows Installer Restrict Installations from This tweak stops users from attempting to install a program (with an .msi extension) from removable media, such as CD-ROMs, floppy disks, and Removable Media DVDs. Disable Windows Installer This restriction stops Windows Installer from recording the original state of the system and sequence of changes it makes during installations. This Rollback restriction is designed to reduce the amount of temporary disk space required to install programs. Highlight Missing Windows Installer Programs on the Start Menu

This tweak will change the Start Menu shortcuts to a gray color when their Windows Installer programs are unavailable.

User Restrictions \ File System Enable Full This tweak determines whether the system performs a full or quick Synchronization Method synchronization of offline files when the user logs off, and prevents users, including administrators, from changing the setting. of the Offline Files Do Not Move Deleted Files to the Recycle Bin

When a file or folder is deleted in Windows Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setting, you can change this behavior.

Change Copy and Move When you copy or move a file or folder to another volume, the object inherits the permissions of its new folder. This setting allows you to force Windows NTFS Permissions to preserve the current permissions instead. Automatically Start CD-R and DVD-R Disks

This settings controls whether CD-R(W) and DVD-R(W) disks are automatically started when loaded into the computer.

Show File and Folder Names Using the Correct Case

Some versions of Windows will attempt to adjust the capitalization of files and folders that are in all uppercase to make them more visually pleasing. For example, if you create a folder named 'C:\ALLINCAPS' Windows will actually display it as 'C:\Allincaps'. This feature can be disabled using this tweak.

Disable Using Connected Web Files and Folders

The Windows file system includes a feature to connect web documents and their associated files. If an HTML document is moved or copied all its associated files, including images, JavaScript and style sheets, can also be automatically relocated.

Comprehensive Search for Broken Shortcuts

When the system cannot find the target file of a shortcut it searches all the associated paths. If still not found it performs a comprehensive search of the drive to locate the file. This setting can be used to disable the final

Windows Security Officer

28 of 29

search. Disable Tracking of Broken Shortcut Links

The NTFS File System in Windows automatically attempts to locate broken shortcut destinations by searching all paths that are associated with it. This setting can be used to disable that feature.

Disable Automatic Network Shortcut Resolution

When you create a shortcut to a resource on a mapped network drive, and then remap the same drive to a different network resource, Windows attempts to connect to the original network resource when you access the shortcut.

Disable Low Disk Space This setting controls whether you receive a 'Low Disk Space' warning when free disk space reaches less than 200 megabytes. Notification

User Restrictions \ Restrict Applications Users Can Run Use Restricted Specify applications that users are RESTRICTED from running. Note: If you are the applications list person who applies Group Policy, do not apply this restriction to yourself. If applied too broadly, this policy can prevent administrators from running Group Policy or the registry editors. As a result, once applied, you cannot change this policy except by reinstalling Windows. Use Allowed Specify applications that users are ALLOWED to running only. Note: If you are the applications list person who applies Group Policy, do not apply this restriction to yourself. If applied too broadly, this policy can prevent administrators from running Group Policy or the registry editors. As a result, once applied, you cannot change this policy except by reinstalling Windows. The number of tweaks: 468

User Time Control Weekly Time Restrictions Week Day

Max Allowed Time Allowed Time Intervals

Monday

24:00

All day allowed

Tuesday

24:00

All day allowed

Wednesday 24:00

All day allowed

Thursday

24:00

All day allowed

Friday

24:00

All day allowed

Saturday

24:00

All day allowed

Sunday

24:00

All day allowed

Control Dates Period The user may use PC all time

Extra usage time

Windows Security Officer

29 of 29

Date Since To Duration

Miscellaneous Security Restrictions * Forbid users to change the system time Disable the "Task Manager" Forbid users to change the system time Disable the "Add/Remove Programs" applet in the Control Panel Disable the ability to manage users accounts (add/delete users, change users passwords, etc.) Visit the web page for updates: http://www.mybestsoft.com Copyright © 1998-2008 by 1st Security Software Center