gpedit.msc all setting

GPO Policies

Filed under: Group Policy Editor.Microsoft Configuration (gpedit.msc) — Leave a comment

September 20, 2011

Group Policy is a feature of the Microsoft Windows NT family of operating systems. Group Policy is a set of rules which control the working environment of user accounts and computer accounts. Group Policy provides the centralized management and configuration of operating systems, applications and users’ settings in an Active Directory environment. In other words, Group Policy in part controls what users can and cannot do on a computer system. Although Group Policy is more often seen in use for enterprise environments, it is also common in schools, smaller businesses and other kinds of smaller organizations. Group Policy is often used to restrict certain actions that may pose potential security risks, for example: to block access to the Task Manager, restrict access to certain folders, disable the downloading of executable files and so on.
Prevent users to access Control.exe (Control Panel)
Gpedit.msc\user configuration\administrative templates\control panel\Probihit access to the Control Panel: Enable(State)
Remove all control panel items from the control panel window and the start menu.
Gpedit.msc\user configuration\administrative templates\control panel\Show only specified Control Panel items: Enable(State)\List of allowed Control Panel items(Options)
How to hide specified applets from the control panel
Gpedit.msc\user configuration\administrative templates\control panel\Hide specified Control Panel items: Enable(State)
Remove the add/remove windows components button from the add or remove programs bar
Gpedit.msc\user configuration\administrative templates\control panel\add or remove programs\Hide Add/Remove Windows Components page: Enable(state)
How to Disable Screen saver in Windows 7
Gpedit.msc\user configuration\administrative templates\control panel\personalization\Enable Screen saver: Disable(state)
Prevent users from adding or changing the background design of the desktop
Gpedit.msc\user configuration\administrative templates\control panel\personalization\Prevent changing desktop background: Enable(state)
How to set a password protected screen saver
Gpedit.msc\user configuration\administrative templates\control panel\personalization\Password protect the screen saver: Enable(State)
Prevent users from accessing Installed updates page from the view installed update page status
Gpedit.msc\user configuration\administrative templates\control panel\programs\Hide “Installed Updates” page: Enable(State)
Prevent users from accessing programs and features to view, install, change or repair programs that are currently installed on the computer
Gpedit.msc\user configuration\administrative templates\control panel\programs\Hide “Programs and Features” page: Enable(State)
Prevent users from accessing the turn windows features on or off task from the programs control panel in category view, programs and features in Classic view and Get Programs
Gpedit.msc\user configuration\administrative templates\control panel\programs\Hide “Windows Features”: Enable(State)
Remove set program access and default page from  the programs control panel
Gpedit.msc\user configuration\administrative templates\control panel\programs\Hide “Set Program Access and Computer Defaults” Page: Enable(State)
Remove administrative option from the regional and language options control panel
Gpedit.msc\user configuration\administrative templates\control panel\regional and language options\Hide Regional and Language Options administrative options: Enable(State)
Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Computer, and Network Locations.
Gpedit.msc\user configuration\administrative templates\desktop\Hide and disable all items on the desktop: Enable(State)
Prevents users from using the Desktop Cleanup Wizard
Gpedit.msc\user configuration\administrative templates\desktop\Remove the Desktop Cleanup Wizard: Enable(State)
Properties option will not be present when the user right-clicks My Computer or clicks Computer and then goes to the File menu.  Likewise, Alt-Enter does nothing when Computer is selected
Gpedit.msc\user configuration\administrative templates\desktop\Remove Properties from the Computer icon context menu: Enable(State)
Properties option will not be present when the user right-clicks on Recycle Bin or opens Recycle Bin and then clicks File. Likewise, Alt-Enter does nothing when Recycle Bin is selected
Gpedit.msc\user configuration\administrative templates\desktop\Remove Properties from the Recycle Bin context menu: Enable(State)
Prevent users from enabling or disabling active desktop or changing the active desktop configuration
Gpedit.msc\user configuration\administrative templates\desktop\desktop\Prohibit changes: Enable(State)
Prevents users from adding Web content to their Active Desktop
Gpedit.msc\user configuration\administrative templates\desktop\desktop\Prohibit adding items: enable(State)
Permits only bitmap images for wallpaper. This setting limits the desktop background (“wallpaper”) to bitmap (.bmp) files. If users select files with other image formats, such as JPEG, GIF, PNG, or HTML, through the Browse button on the Desktop tab, the wallpaper does not load. Files that are autoconverted to a .bmp format, such as JPEG, GIF, and PNG, can be set as Wallpaper by right-clicking the image and selecting “Set as Wallpaper”.
Gpedit.msc\user configuration\administrative templates\desktop\desktop\allow only bitmapped wallpaper: Enable(State)
Advanced button on the Internet Protocol (TCP/IP) Properties dialog box is disabled for all users (including administrators). As a result, users cannot open the Advanced TCP/IP Settings Properties page and modify IP settings, such as DNS and WINS server information.
Gpedit.msc\user configuration\administrative templates\network\network connections\Prohibit TCP/IP advanced configuration: Enable(State)
Disabling Local Area Connection properties dialog box
Gpedit.msc\user configuration\administrative templates\network\network connections\Prohibit access to properties of a LAN connection: Enable(State)
Make New Connection icon does not appear in the Start Menu on in the Network Connections folder
Gpedit.msc\user configuration\administrative templates\network\network connections\Prohibit access to the New Connection Wizard
Synchronizing all offline files before logging off
Gpedit.msc\user configuration\administrative templates\network\offline files\Synchronize all offline files before logging off: Enable(State)
How to Synchronize all offline files when logging on
Gpedit.msc\user configuration\administrative templates\network\offline files\Synchronize all offline files when logging on: Enable(State)
How to clear history of recent opened documents on user logs off
Gpedit.msc\user configuration\administrative templates\start menu and taskbar\Clear history of recently opened documents on exit: Enable(State)
Removing balloon tips on start menu items
Gpedit.msc\user configuration\administrative templates\start menu and taskbar\Remove Balloon Tips on Start Menu items: Enable(State)
Prevents users from performing the following commands from the Start menu or Windows Security screen: Shut Down, Restart, Sleep, and Hibernate. This policy setting does not prevent users from running Windows-based programs that perform these functions.
Gpedit.msc\user configuration\administrative templates\start menu and taskbar\Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands: Enable(State)
How to remove all programs list from the start menu
Gpedit.msc\user configuration\administrative templates\start menu and taskbar\Remove All Programs list from the Start menu: Enable(State)
Preventing operating system and installed programs from creating and displaying shortcuts to recently opened documents
Gpedit.msc\user configuration\administrative templates\start menu and taskbar\Do not keep history of recently opened documents: Enable(State)
Prevent the clock in the system notification area from being displayed
Gpedit.msc\user configuration\administrative templates\start menu and taskbar\Remove Clock from the system notification area: Enable(State)
Remove the user name label from the Start Menu in Windows XP and Windows Server 2003
Gpedit.msc\user configuration\administrative templates\start menu and taskbar\Remove user name from Start Menu: Enable(State)
Preventing users from connecting to the Windows Update Web site
Gpedit.msc\user configuration\administrative templates\start menu and taskbar\Remove links and access to Windows Update: Enable(State)
How to Remove Logoff button from the Start Menu
Gpedit.msc\user configuration\administrative templates\start menu and taskbar\Remove Logoff on the Start Menu: Enable(State)
Prevents user from making any changes to the taskbar settings through the Taskbar Properties dialog
Gpedit.msc\user configuration\administrative templates\start menu and taskbar\Lock all taskbar settings: Enable(State)
How to Prevent users from resizing the taskbar
Gpedit.msc\user configuration\administrative templates\start menu and taskbar\Prevent users from resizing the taskbar: Enable(State)