|
------------------------------------------------------------------
-
Disable the Ability to Right Click on the Desktop
This tweak removes the context menu that would normally appear when the user right clicks on the desktop or in the Explorer right results pane.
-
Remove Properties from "Computer"
This restriction remove the properties option from Computer and hides the "System Properties" screen.
-
Deny Access to the Display Settings Page
This option disables the display settings page from the personalization page.
-
Show Windows Version on Desktop
Early versions of Windows showed the version number on the desktop, this feature was removed in the released version. This tweak can be used to enable the feature and allow you to quickly locate which version of Windows is running. The Windows version may be hidden behind the taskbar when you have Active Desktop enabled. If this is the case disable Active Desktop to view the label.
-
Hide All Items on the Desktop
Enabling this options hides all the items and programs on the Windows desktop.
-
Screen Saver Password Protection Policy
This restriction determines whether the screen saver is password protected and prevents users from changing the password-protection setting.
-
...
-
Hide Disk Drive (s)
This setting allows you to control which drives are visible in Computer and Explorer. It is possible to hide all drives or just selected ones.
-
Prevent Access to Disk Drive (s)
This restriction prevents users from using Computer or Explorer to access the content of selected drives. Also, they cannot use Run, Map Network Drive, or the Dir command to view the directories on these drives.
-
Add a Menu Option to Copy to a Folder
This
tweak allows you to easily copy files
and folders by adding a new right-click
menu options to "Copy To Folder...".
Simply highlight the file, right-click
the option and select the destination
folder.
-
Disable the Recycle Bin Properties Option
This tweak allows you to restrict access to the "Properties" option on the Recycle Bin right-click context menu.
-
Disable the Ability to Customize Command Bar
By right clicking on a command bar you are usually given the option to Customize, which allows you to change which functions are available from the command bar. This tweak allows you to disable that function.
-
Hide the 'Run as administrator' Option from the Context Menu
This setting allows you to restrict the ability for users to have access to the 'Run as administrator' service when right clicking on executables files and shortcuts.
-
Disable Folder Options Menu
This tweak allows you to hide the Folder Options function from the folder Tools menu. Allowing you to restrict access to numerous advanced folder features.
-
Show Encrypted and Compressed Files in an Alternate Color
This setting controls whether encrypted/compressed files and folders are shown in explorer using a different color to make them easily distinguishable.
-
...
-
Disable the Windows Key
This tweak disables the Windows key that is found between the Ctrl and Alt keys on a Windows enhanced keyboard.
-
Disable CD/DVD Burning
This restriction is used to disable the use of the inbuilt CD/DVD recording functions of Windows.
-
Disable USB Storage Devices
Using this tweak, when you insert a USB Storage Device, you will hear the normal insert sound from your computer, but the USB Storage Device will not be accessible from "Computer".
-
Prevent Writing to USB Storage Devices
This restriction, prevents writing to USB storage devices.
-
Disable UnPnP Discovery Service
Windows includes support for Universal Plug and Play (UnPnP) which allows UnPnP devices to be connected over a network. There are currently limited UnPnP devices available and due to a recent security flaw it may be advisable to disable these services.
-
Enable Active Windows Tracking
This tweak allows you to bring running programs to the foreground just by moving you mouse of the application window. This is similar to the X-Mouse feature found on UNIX operating systems.
-
...
-
Hide the Welcome Screen of Login
This setting hides the welcome screen, that is normally displayed each time the user logs on to your Windows.
-
Restrict Showing the Last Username
This restriction removes the ability to view which user was last logged onto a computer by clearing the username box on the login screen.
-
Disable the Creation of Last Known Good
This setting allows you to disable the creation of the Last Known Good configuration, which stores a copy of the configuration after each successful boot-up.
-
Require Users to Press Ctrl+Alt+Delete Before Logon
This setting controls whether users are required to press Ctrl + Alt + Delete as a security precaution before logging into the system. This guarantees that the authentic windows logon prompt appears, protecting the system from programs that mimic a logon to retrieve password information.
-
Legal Notice Dialog Box Before Logon
Use these fields to create a dialog box that will be presented to any user before logging onto the system. This is useful where you are required by law to warn people that it is illegal to attempt to logon without being an authorized user.
-
Enable Automatic Admin Logon to Windows
Windows includes a feature that allows you to configure the computer to automatically logon to the network, bypassing the Winlogon dialog box. You can bypass this function by holding down the SHIFT key during the boot or logoff process. The password is stored in registry, which means anyone who has access to the machine has access to the password.
-
...
-
Restrict Applications Users Can Run
Windows gives the ability to restrict the applications that can be run by users on a workstation.
If you are the person who applies Group Policy, do not apply this restriction to yourself. If applied too broadly, this policy can prevent administrators from running Group Policy or the registry editors. As a result, once applied, you cannot change this policy except by reinstalling Windows.
-
Restrict Users from Running Specific Applications
This setting allows you to specify applications and filenames that users are restricted from running.
-
Disable Task Manager
This setting controls the ability for users to start Task Manager and view processes, running applications and make changes to the priority or state of the individual processes.
-
Disable User Tracking
This setting stops Windows from recording user tracking information including which applications a user runs and which files and documents are being accessed. If this restriction is enabled customized menus and other features that require user tracking information are disabled.
-
Disable Registry Editing Tools
This restriction disables the ability to interactively run the standard Microsoft registry editing tools. This setting will disable all standard Microsoft registry editing tools.
-
Disable Control Panel
This setting allows you to restrict user access to the Control Panel options and settings.
-
Restrict Access to the Windows Update Feature
The Windows Update feature allows users to easily update Windows components and software over the Internet. These settings allow can be used to grant or restrict access to this function.
-
Hide Computer from the Browser List
If you have a secure server or workstation you wish to hide from the general browser list, then enable this setting.
-
...
-
Force the Use of the Classic Start Menu
This restriction forces users to use the classic Windows start menu, instead of the new format introduced with Windows.
-
Disable Drag-and-Drop on the Start Menu
This restriction prevents users from modifying the Start menu by dragging and dropping items.
-
Restrict Access to the Taskbar and Start Menu Properties
This restriction removes the Taskbar and Start Menu item from the Control Panel, and it also can be used to restrict user access to the Taskbar and Start Menu Properties.
-
Remove "All Programs" Button from the Start Menu
This restriction is used to remove the "All Programs" button which displays a list of all the installed applications. This setting only applies to the Windows Start Menu, not the Classic Start Menu.
-
Remove Pinned Programs List from the Start Menu
This restriction removes the pinned programs list from the Start menu. It also removes the Internet and E-mail checkboxes from the Start menu. This setting only applies to the Windows Start Menu, not the Classic Start Menu.
-
Disable Recent Items History
Normally when you open or access a document or file it is added to the list of recent items. This tweak will stop files from being added to the list.
-
...
-
Hide Computer Management Option
This setting allows you to remove the "Manage" option from the Computer context menu. The Computer Management program is used to configure the system.
The computer management application can still be used by running "compmgmt.msc".
-
Restrict Interactive Services
Windows services normally have the option of interacting with the desktop, to display information and accept input. For security reasons this tweak allows you to restrict service interactivity.
-
Restrict Access to the System Restore
System Restore allows users to revert Windows settings and configuration changes to an earlier point in time (called Restore Points). This tweak can be used to restrict user access to the System Restore.
-
...
-
Disable Taskbar Context Menus
This setting removes the context menus (right click on the taskbar) for the system tray, including the Start button, Tab control, and Clock.
-
Lock the Size and Position of the Taskbar
This setting is used to lock or unlock the size and position of the taskbar on the Windows desktop.
-
Prevent Users from Resizing the Taskbar
If you enable this setting, the user will not be able to resize their taskbar to be any other size.
-
Disable the Quick Launch on Taskbar
If enable this setting, the quick launch bar will be disable and you can't be turned on.
-
Enable Group Similar Taskbar Buttons
This setting is used to control whether similar items are grouped together as a single item or are displayed as individual buttons on the taskbar.
-
Remove the Networking Icon on the Taskbar
If you enable this setting, the networking icon will not be displayed in the system notification area.
-
...
|
