In diesem Artikel finden Sie die Liste der Gerätespezifischen Vorlagen von Microsoft Intune. Release Stand ist 2304, also April 2023. Mehr Details und Hintergründe, sowie etwas Statistik finden Sie in dem Artikel „Administrative Vorlagen in Intune (Version 2304)“. Die Benutzerspezifischen Vorlagen finden Sie in dem Artikel „Benutzerspezifische Administrativen Vorlagen in Intune (Version 2304)“
| Name | PolicyPath | Category |
|---|---|---|
| Force a specific background and accent color | \Control Panel\Personalization | Security |
| Prevent changing lock screen and logon image | \Control Panel\Personalization | Security |
| Force a specific default lock screen and logon image | \Control Panel\Personalization | Security |
| Do not display the lock screen | \Control Panel\Personalization | Security |
| Force a specific Start background | \Control Panel\Personalization | Security |
| Prevent changing start menu background | \Control Panel\Personalization | Security |
| Prevent enabling lock screen camera | \Control Panel\Personalization | Security |
| Prevent enabling lock screen slide show | \Control Panel\Personalization | Security |
| Restricts the UI language Windows uses for all logged users | \Control Panel\Regional and Language Options | Security |
| Turn off automatic learning | \Control Panel\Regional and Language Options\Handwriting personalization | Security |
| Apply the default account picture to all users | \Control Panel\User Accounts | Security |
| URLs that will be granted access to video capture devices without prompt | \Google\Google Chrome | Google Chrome |
| Require online OCSP/CRL checks for local trust anchors | \Google\Google Chrome | Google Chrome |
| Allow QUIC protocol | \Google\Google Chrome | Google Chrome |
| Allow media autoplay on a allowlist of URL patterns | \Google\Google Chrome | Google Chrome |
| Enable or disable spell checking web service | \Google\Google Chrome | Google Chrome |
| Configure the color of the browser’s theme | \Google\Google Chrome | Google Chrome |
| URLs where AutoOpenFileTypes can apply | \Google\Google Chrome | Google Chrome |
| Use hardware acceleration when available | \Google\Google Chrome | Google Chrome |
| Enable ending processes in Task Manager | \Google\Google Chrome | Google Chrome |
| Enable the Click to Call Feature | \Google\Google Chrome | Google Chrome |
| Specify URI template of desired DNS-over-HTTPS resolver | \Google\Google Chrome | Google Chrome |
| Enable Site Isolation for specified origins | \Google\Google Chrome | Google Chrome |
| Allow user cloud policies to override Chrome Browser Cloud Management policies. | \Google\Google Chrome | Google Chrome |
| Add restrictions on managed accounts | \Google\Google Chrome | Google Chrome |
| Explicitly allowed network ports | \Google\Google Chrome | Google Chrome |
| Allow Google Lens region search menu item to be shown in context menu if supported. | \Google\Google Chrome | Google Chrome |
| Do not set window.opener for links targeting _blank | \Google\Google Chrome | Google Chrome |
| Control where Developer Tools can be used | \Google\Google Chrome | Google Chrome |
| Specifies whether to allow insecure websites to make requests to more-private network endpoints | \Google\Google Chrome | Google Chrome |
| DNS interception checks enabled | \Google\Google Chrome | Google Chrome |
| Disable proceeding from the Safe Browsing warning page | \Google\Google Chrome | Google Chrome |
| URLs for which local IPs are exposed in WebRTC ICE candidates | \Google\Google Chrome | Google Chrome |
| Allow or deny video capture | \Google\Google Chrome | Google Chrome |
| Allow Dinosaur Easter Egg Game | \Google\Google Chrome | Google Chrome |
| Allow Chrome to block navigations toward external protocols in sandboxed iframes | \Google\Google Chrome | Google Chrome |
| Allow merging dictionary policies from different sources | \Google\Google Chrome | Google Chrome |
| Enable URL-keyed anonymized data collection | \Google\Google Chrome | Google Chrome |
| Enable add person in user manager | \Google\Google Chrome | Google Chrome |
| Allow download restrictions | \Google\Google Chrome | Google Chrome |
| Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes | \Google\Google Chrome | Google Chrome |
| Enable Safe Browsing for trusted sources | \Google\Google Chrome | Google Chrome |
| Set the time interval for relaunch | \Google\Google Chrome | Google Chrome |
| Allow the audio process to run with priority above normal on Windows | \Google\Google Chrome | Google Chrome |
| Enable Bookmark Bar | \Google\Google Chrome | Google Chrome |
| Enable guest mode in browser | \Google\Google Chrome | Google Chrome |
| Enable mandatory cloud management enrollment | \Google\Google Chrome | Google Chrome |
| Control the IntensiveWakeUpThrottling feature. | \Google\Google Chrome | Google Chrome |
| Enable globally scoped HTTP auth cache | \Google\Google Chrome | Google Chrome |
| Allow websites to query for available payment methods. | \Google\Google Chrome | Google Chrome |
| Enable desktop sharing in the omnibox and 3-dot menu | \Google\Google Chrome | Google Chrome |
| Set download directory | \Google\Google Chrome | Google Chrome |
| Origins or hostname patterns for which restrictions oninsecure origins should not apply | \Google\Google Chrome | Google Chrome |
| Set disk cache directory | \Google\Google Chrome | Google Chrome |
| Hide the web store from the New Tab Page and app launcher | \Google\Google Chrome | Google Chrome |
| Controls the mode of DNS-over-HTTPS | \Google\Google Chrome | Google Chrome |
| Specifies whether the display-capture permissions-policy is checked or skipped. | \Google\Google Chrome | Google Chrome |
| Allow user feedback | \Google\Google Chrome | Google Chrome |
| Show history clusters on the Chrome history page | \Google\Google Chrome | Google Chrome |
| Import bookmarks from default browser on first run | \Google\Google Chrome | Google Chrome |
| Allow queries to a Google time service | \Google\Google Chrome | Google Chrome |
| Enable Window Occlusion | \Google\Google Chrome | Google Chrome |
| Enable Translate | \Google\Google Chrome | Google Chrome |
| Define domains allowed to access Google Workspace | \Google\Google Chrome | Google Chrome |
| Limits the number of user data snapshots retained for use in case of emergency rollback. | \Google\Google Chrome | Google Chrome |
| Suppress lookalike domain warnings on domains | \Google\Google Chrome | Google Chrome |
| Enable or disable bookmark editing | \Google\Google Chrome | Google Chrome |
| Enable showing full-tab promotional content | \Google\Google Chrome | Google Chrome |
| Set the roaming profile directory | \Google\Google Chrome | Google Chrome |
| Enable spellcheck | \Google\Google Chrome | Google Chrome |
| Force WebSQL in third-party contexts to be re-enabled. | \Google\Google Chrome | Google Chrome |
| Fetch keepalive duration on Shutdown | \Google\Google Chrome | Google Chrome |
| Disable saving browser history | \Google\Google Chrome | Google Chrome |
| Suppress the unsupported OS warning | \Google\Google Chrome | Google Chrome |
| Ads setting for sites with intrusive ads | \Google\Google Chrome | Google Chrome |
| Configure the content and order of preferred languages | \Google\Google Chrome | Google Chrome |
| Import browsing history from default browser on first run | \Google\Google Chrome | Google Chrome |
| Allow Google Cast to connect to Cast devices on all IP addresses. | \Google\Google Chrome | Google Chrome |
| Enable online OCSP/CRL checks | \Google\Google Chrome | Google Chrome |
| Allow or deny audio capture | \Google\Google Chrome | Google Chrome |
| Always Open PDF files externally | \Google\Google Chrome | Google Chrome |
| Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context | \Google\Google Chrome | Google Chrome |
| Show the apps shortcut in the bookmark bar | \Google\Google Chrome | Google Chrome |
| Sets managed configuration values to websites to specific origins | \Google\Google Chrome | Google Chrome |
| Specifies whether WebAssembly modules can be sent cross-origin | \Google\Google Chrome | Google Chrome |
| Enforce browser guest mode | \Google\Google Chrome | Google Chrome |
| Allow collection of WebRTC event logs from Google services | \Google\Google Chrome | Google Chrome |
| CECPQ2 post-quantum key-agreement enabled for TLS | \Google\Google Chrome | Google Chrome |
| Show an „Always open“ checkbox in external protocol dialog. | \Google\Google Chrome | Google Chrome |
| Allow fullscreen mode | \Google\Google Chrome | Google Chrome |
| Force disable spellcheck languages | \Google\Google Chrome | Google Chrome |
| Notify a user that a browser relaunch or device restart is recommended or required | \Google\Google Chrome | Google Chrome |
| Enable scrolling to text specified in URL fragments | \Google\Google Chrome | Google Chrome |
| Enables the concept of policy atomic groups | \Google\Google Chrome | Google Chrome |
| CORS non-wildcard request headers support | \Google\Google Chrome | Google Chrome |
| Import search engines from default browser on first run | \Google\Google Chrome | Google Chrome |
| Restrict the range of local UDP ports used by WebRTC | \Google\Google Chrome | Google Chrome |
| Enable Get Image Descriptions from Google. | \Google\Google Chrome | Google Chrome |
| Allow remote debugging | \Google\Google Chrome | Google Chrome |
| Enable component updates in Google Chrome | \Google\Google Chrome | Google Chrome |
| Enable Chrome Cleanup on Windows | \Google\Google Chrome | Google Chrome |
| Suppress JavaScript Dialogs triggered from different origin subframes | \Google\Google Chrome | Google Chrome |
| Control how Chrome Cleanup reports data to Google | \Google\Google Chrome | Google Chrome |
| Allow using the deprecated U2F Security Key API | \Google\Google Chrome | Google Chrome |
| Force minimum YouTube Restricted Mode | \Google\Google Chrome | Google Chrome |
| List of types that should be excluded from synchronization | \Google\Google Chrome | Google Chrome |
| Block third party cookies | \Google\Google Chrome | Google Chrome |
| Configure list of force-installed Web Apps | \Google\Google Chrome | Google Chrome |
| Browser experiments icon in toolbar | \Google\Google Chrome | Google Chrome |
| Block access to a list of URLs | \Google\Google Chrome | Google Chrome |
| Show cards on the New Tab Page | \Google\Google Chrome | Google Chrome |
| Allow the listed sites to make requests to more-private network endpoints from insecure contexts. | \Google\Google Chrome | Google Chrome |
| Set user data directory | \Google\Google Chrome | Google Chrome |
| Refresh rate for user policy | \Google\Google Chrome | Google Chrome |
| URLs that will be granted access to audio capture devices without prompt | \Google\Google Chrome | Google Chrome |
| Enable warnings for insecure forms | \Google\Google Chrome | Google Chrome |
| Define a list of protocols that can launch an external application from listed origins without prompting the user | \Google\Google Chrome | Google Chrome |
| Control use of the Headless Mode | \Google\Google Chrome | Google Chrome |
| Google Chrome cloud policy overrides Platform policy. | \Google\Google Chrome | Google Chrome |
| Disable taking screenshots | \Google\Google Chrome | Google Chrome |
| Enable the creation of roaming copies for Google Chrome profile data | \Google\Google Chrome | Google Chrome |
| Disable synchronization of data with Google | \Google\Google Chrome | Google Chrome |
| Enable network prediction | \Google\Google Chrome | Google Chrome |
| Allow access to a list of URLs | \Google\Google Chrome | Google Chrome |
| Enable the Shared Clipboard Feature | \Google\Google Chrome | Google Chrome |
| Disable Certificate Transparency enforcement for a list of URLs | \Google\Google Chrome | Google Chrome |
| Import saved passwords from default browser on first run | \Google\Google Chrome | Google Chrome |
| Maximum fetch delay after a policy invalidation | \Google\Google Chrome | Google Chrome |
| The IP handling policy of WebRTC | \Google\Google Chrome | Google Chrome |
| Allow HTTPS-Only Mode to be enabled | \Google\Google Chrome | Google Chrome |
| Minimum SSL version enabled | \Google\Google Chrome | Google Chrome |
| Disable Certificate Transparency enforcement for a list of Legacy Certificate Authorities | \Google\Google Chrome | Google Chrome |
| Enable AutoFill for credit cards | \Google\Google Chrome | Google Chrome |
| Force enable spellcheck languages | \Google\Google Chrome | Google Chrome |
| Allow default search provider context menu search access | \Google\Google Chrome | Google Chrome |
| Block Browser Legacy Extension Points | \Google\Google Chrome | Google Chrome |
| Browser sign in settings | \Google\Google Chrome | Google Chrome |
| Allow the audio sandbox to run | \Google\Google Chrome | Google Chrome |
| Enable Renderer Code Integrity | \Google\Google Chrome | Google Chrome |
| Require Site Isolation for every site | \Google\Google Chrome | Google Chrome |
| Allow DNS queries for additional DNS record types | \Google\Google Chrome | Google Chrome |
| Set the time period for update notifications | \Google\Google Chrome | Google Chrome |
| URLs/domains automatically permitted direct Security Key attestation | \Google\Google Chrome | Google Chrome |
| The enrollment token of cloud policy on desktop | \Google\Google Chrome | Google Chrome |
| Maximal number of concurrent connections to the proxy server | \Google\Google Chrome | Google Chrome |
| Continue running background apps when Google Chrome is closed | \Google\Google Chrome | Google Chrome |
| Enable third party software injection blocking | \Google\Google Chrome | Google Chrome |
| Enable AutoFill for addresses | \Google\Google Chrome | Google Chrome |
| Enables experimental policies | \Google\Google Chrome | Google Chrome |
| Allow proceeding from the SSL warning page on specific origins | \Google\Google Chrome | Google Chrome |
| Enables managed extensions to use the Enterprise Hardware Platform API | \Google\Google Chrome | Google Chrome |
| Allow media autoplay | \Google\Google Chrome | Google Chrome |
| Managed Bookmarks | \Google\Google Chrome | Google Chrome |
| Abusive Experience Intervention Enforce | \Google\Google Chrome | Google Chrome |
| Set disk cache size in bytes | \Google\Google Chrome | Google Chrome |
| Enable search suggestions | \Google\Google Chrome | Google Chrome |
| Enable alternate error pages | \Google\Google Chrome | Google Chrome |
| Enable reporting of usage and crash-related data | \Google\Google Chrome | Google Chrome |
| Disable support for 3D graphics APIs | \Google\Google Chrome | Google Chrome |
| Ask where to save each file before downloading | \Google\Google Chrome | Google Chrome |
| Enable lock icon in the omnibox for secure connections | \Google\Google Chrome | Google Chrome |
| Proxy settings | \Google\Google Chrome | Google Chrome |
| Restrict which Google accounts are allowed to be set as browser primary accounts in Google Chrome | \Google\Google Chrome | Google Chrome |
| Import autofill form data from default browser on first run | \Google\Google Chrome | Google Chrome |
| Allow merging list policies from different sources | \Google\Google Chrome | Google Chrome |
| Enables merging of user cloud policies into machine-level policies | \Google\Google Chrome | Google Chrome |
| Import of homepage from default browser on first run | \Google\Google Chrome | Google Chrome |
| List of file types that should be automatically opened on download | \Google\Google Chrome | Google Chrome |
| Profile picker availability on startup | \Google\Google Chrome | Google Chrome |
| Determine the availability of variations | \Google\Google Chrome | Google Chrome |
| Clear Browsing Data on Exit | \Google\Google Chrome | Google Chrome |
| Enable security warnings for command-line flags | \Google\Google Chrome | Google Chrome |
| Allows a page to perform synchronous XHR requests during page dismissal. | \Google\Google Chrome | Google Chrome |
| Intranet Redirection Behavior | \Google\Google Chrome | Google Chrome |
| Show Full URLs | \Google\Google Chrome | Google Chrome |
| Enable signin interception | \Google\Google Chrome | Google Chrome |
| Browsing Data Lifetime Settings | \Google\Google Chrome | Google Chrome |
| Enable the network service sandbox | \Google\Google Chrome | Google Chrome |
| Allow proceeding from the SSL warning page | \Google\Google Chrome | Google Chrome |
| Set Google Chrome as Default Browser | \Google\Google Chrome | Google Chrome |
| Allow legacy TLS/DTLS downgrade in WebRTC | \Google\Google Chrome | Google Chrome |
| List of names that will bypass the HSTS policy check | \Google\Google Chrome | Google Chrome |
| Enable additional protections for users enrolled in the Advanced Protection program | \Google\Google Chrome | Google Chrome |
| Use built-in DNS client | \Google\Google Chrome | Google Chrome |
| Enable Signed HTTP Exchange (SXG) support | \Google\Google Chrome | Google Chrome |
| Force Google SafeSearch | \Google\Google Chrome | Google Chrome |
| Allow users to customize the background on the New Tab page | \Google\Google Chrome | Google Chrome |
| Ephemeral profile | \Google\Google Chrome | Google Chrome |
| Allow invocation of file selection dialogs | \Google\Google Chrome | Google Chrome |
| Set limit on megabytes of memory a single Chrome instance can use. | \Google\Google Chrome | Google Chrome |
| Enable Media Recommendations | \Google\Google Chrome | Google Chrome |
| Enable WPAD optimization | \Google\Google Chrome | Google Chrome |
| Enable Ambient Authentication for profile types. | \Google\Google Chrome | Google Chrome |
| Incognito mode availability | \Google\Google Chrome | Google Chrome |
| Enable deleting browser and download history | \Google\Google Chrome | Google Chrome |
| Application locale | \Google\Google Chrome | Google Chrome |
| Control SafeSites adult content filtering. | \Google\Google Chrome | Google Chrome |
| Import autofill form data from default browser on first run | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Import browsing history from default browser on first run | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Continue running background apps when Google Chrome is closed | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Enable reporting of usage and crash-related data | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Allow download restrictions | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Enable alternate error pages | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Enable Safe Browsing for trusted sources | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Enable Translate | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Show Full URLs | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Enable Bookmark Bar | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Enable AutoFill for addresses | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Set default download directory | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Enable AutoFill for credit cards | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Import bookmarks from default browser on first run | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Block third party cookies | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Enable or disable spell checking web service | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Allow default search provider context menu search access | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Import search engines from default browser on first run | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Enable search suggestions | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Always Open PDF files externally | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Application locale | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Import saved passwords from default browser on first run | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Set download directory | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Enable network prediction | \Google\Google Chrome – Default Settings (users can override) | Google Chrome |
| Register protocol handlers | \Google\Google Chrome – Default Settings (users can override)\Content settings | Google Chrome |
| Default search provider suggest URL | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Parameters for search URL which uses POST | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Parameters for suggest URL which uses POST | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Parameter providing search-by-image feature for the default search provider | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Default search provider icon | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| List of alternate URLs for the default search provider | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Default search provider keyword | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Default search provider search URL | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Default search provider new tab page URL | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Default search provider encodings | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Enable the default search provider | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Parameters for image URL which uses POST | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Default search provider name | \Google\Google Chrome – Default Settings (users can override)\Default search provider | Google Chrome |
| Enable Safe Browsing | \Google\Google Chrome – Default Settings (users can override)\Deprecated policies | Google Chrome |
| Enable AutoFill | \Google\Google Chrome – Default Settings (users can override)\Deprecated policies | Google Chrome |
| Enable saving passwords to the password manager | \Google\Google Chrome – Default Settings (users can override)\Password manager | Google Chrome |
| Enable leak detection for entered credentials | \Google\Google Chrome – Default Settings (users can override)\Password manager | Google Chrome |
| Print Headers and Footers | \Google\Google Chrome – Default Settings (users can override)\Printing | Google Chrome |
| Use System Default Printer as Default | \Google\Google Chrome – Default Settings (users can override)\Printing | Google Chrome |
| Print PDF as Image Default | \Google\Google Chrome – Default Settings (users can override)\Printing | Google Chrome |
| Enable network prediction | \Google\Google Chrome – Default Settings (users can override)\Removed policies | Google Chrome |
| Default search provider instant URL | \Google\Google Chrome – Default Settings (users can override)\Removed policies | Google Chrome |
| Clear site data on browser shutdown (deprecated) | \Google\Google Chrome – Default Settings (users can override)\Removed policies | Google Chrome |
| Enable Instant | \Google\Google Chrome – Default Settings (users can override)\Removed policies | Google Chrome |
| Parameter controlling search term placement for the default search provider | \Google\Google Chrome – Default Settings (users can override)\Removed policies | Google Chrome |
| Parameters for instant URL which uses POST | \Google\Google Chrome – Default Settings (users can override)\Removed policies | Google Chrome |
| Safe Browsing Protection Level | \Google\Google Chrome – Default Settings (users can override)\Safe Browsing settings | Google Chrome |
| Configure the home page URL | \Google\Google Chrome – Default Settings (users can override)\Startup, Home page and New Tab page | Google Chrome |
| URLs to open on startup | \Google\Google Chrome – Default Settings (users can override)\Startup, Home page and New Tab page | Google Chrome |
| Show Home button on toolbar | \Google\Google Chrome – Default Settings (users can override)\Startup, Home page and New Tab page | Google Chrome |
| Use New Tab Page as homepage | \Google\Google Chrome – Default Settings (users can override)\Startup, Home page and New Tab page | Google Chrome |
| Action on startup | \Google\Google Chrome – Default Settings (users can override)\Startup, Home page and New Tab page | Google Chrome |
| Allow Desktop, Window, and Tab capture by these origins | \Google\Google Chrome\Allow or deny screen capture | Google Chrome |
| Allow Same Origin Tab capture by these origins | \Google\Google Chrome\Allow or deny screen capture | Google Chrome |
| Allow Window and Tab capture by these origins | \Google\Google Chrome\Allow or deny screen capture | Google Chrome |
| Allow or deny screen capture | \Google\Google Chrome\Allow or deny screen capture | Google Chrome |
| Allow Tab capture by these origins | \Google\Google Chrome\Allow or deny screen capture | Google Chrome |
| Control use of the Web Bluetooth API | \Google\Google Chrome\Content settings | Google Chrome |
| Automatically select client certificates for these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Block WebUSB on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Block read access via the File System API on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Allow notifications on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Block cookies on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Block access to sensors on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Block the Serial API on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Block JavaScript on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Allow popups on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Allow the Serial API on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Block insecure content on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Allow images on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Automatically grant permission to these sites to connect to USB devices with the given vendor and product IDs. | \Google\Google Chrome\Content settings | Google Chrome |
| Block images on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Default notification setting | \Google\Google Chrome\Content settings | Google Chrome |
| Control use of insecure content exceptions | \Google\Google Chrome\Content settings | Google Chrome |
| Allow insecure content on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Allow cookies on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Control use of JavaScript JIT | \Google\Google Chrome\Content settings | Google Chrome |
| Control use of the Serial API | \Google\Google Chrome\Content settings | Google Chrome |
| Allow read access via the File System API on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Control use of the WebUSB API | \Google\Google Chrome\Content settings | Google Chrome |
| Block notifications on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Allow JavaScript on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Control use of the File System API for writing | \Google\Google Chrome\Content settings | Google Chrome |
| Automatically grant permission to sites to connect all serial ports. | \Google\Google Chrome\Content settings | Google Chrome |
| Allow JavaScript to use JIT on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Allow write access to files and directories on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Automatically grant permission to sites to connect to USB serial devices. | \Google\Google Chrome\Content settings | Google Chrome |
| Default cookies setting | \Google\Google Chrome\Content settings | Google Chrome |
| Block JavaScript from using JIT on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Allow WebUSB on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Control use of the File System API for reading | \Google\Google Chrome\Content settings | Google Chrome |
| Block write access to files and directories on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Block popups on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Default images setting | \Google\Google Chrome\Content settings | Google Chrome |
| Default sensors setting | \Google\Google Chrome\Content settings | Google Chrome |
| Default geolocation setting | \Google\Google Chrome\Content settings | Google Chrome |
| Default popups setting | \Google\Google Chrome\Content settings | Google Chrome |
| Revert to legacy SameSite behavior for cookies on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Allow access to sensors on these sites | \Google\Google Chrome\Content settings | Google Chrome |
| Default JavaScript setting | \Google\Google Chrome\Content settings | Google Chrome |
| Limit cookies from matching URLs to the current session | \Google\Google Chrome\Content settings | Google Chrome |
| Default search provider name | \Google\Google Chrome\Default search provider | Google Chrome |
| Parameters for suggest URL which uses POST | \Google\Google Chrome\Default search provider | Google Chrome |
| Default search provider suggest URL | \Google\Google Chrome\Default search provider | Google Chrome |
| Default search provider new tab page URL | \Google\Google Chrome\Default search provider | Google Chrome |
| Default search provider encodings | \Google\Google Chrome\Default search provider | Google Chrome |
| Parameters for search URL which uses POST | \Google\Google Chrome\Default search provider | Google Chrome |
| Default search provider icon | \Google\Google Chrome\Default search provider | Google Chrome |
| Parameters for image URL which uses POST | \Google\Google Chrome\Default search provider | Google Chrome |
| List of alternate URLs for the default search provider | \Google\Google Chrome\Default search provider | Google Chrome |
| Default search provider keyword | \Google\Google Chrome\Default search provider | Google Chrome |
| Enable the default search provider | \Google\Google Chrome\Default search provider | Google Chrome |
| Parameter providing search-by-image feature for the default search provider | \Google\Google Chrome\Default search provider | Google Chrome |
| Default search provider search URL | \Google\Google Chrome\Default search provider | Google Chrome |
| URL to a proxy .pac file | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Configure the list of domains on which Safe Browsing will not trigger warnings. | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Disable Developer Tools | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Default mediastream setting | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Allow access to a list of URLs | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Choose how to specify proxy server settings | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Proxy bypass rules | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Enable JavaScript | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Configure native messaging whitelist | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Allow media autoplay on a whitelist of URL patterns | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Configure native messaging blocklist | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Enable force sign in for Google Chrome | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Choose how to specify proxy server settings | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Allow sign in to Google Chrome | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Disable URL protocol schemes | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Enable Incognito mode | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Enable Safe Browsing | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Configure extension installation blacklist | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Origins or hostname patterns for which restrictions oninsecure origins should not apply | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Force SafeSearch | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Enable Native Window Occlusion | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Block access to a list of URLs | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Force YouTube Safety Mode | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Address or URL of proxy server | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Configure the required domain name for remote access clients | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Enable AutoFill | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Force disable spellcheck languages | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Authentication server whitelist | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Configure the required domain name for remote access hosts | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Configure extension installation whitelist | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Enable stricter treatment for mixed content | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Kerberos delegation server whitelist | \Google\Google Chrome\Deprecated policies | Google Chrome |
| Configure the list of force-installed apps and extensions | \Google\Google Chrome\Extensions | Google Chrome |
| Blocks external extensions from being installed | \Google\Google Chrome\Extensions | Google Chrome |
| Configure extension, app, and user script install sources | \Google\Google Chrome\Extensions | Google Chrome |
| Extension management settings | \Google\Google Chrome\Extensions | Google Chrome |
| Configure allowed app/extension types | \Google\Google Chrome\Extensions | Google Chrome |
| Configure extension installation blocklist | \Google\Google Chrome\Extensions | Google Chrome |
| Configure extension installation allow list | \Google\Google Chrome\Extensions | Google Chrome |
| Enable Google Cast | \Google\Google Chrome\Google Cast | Google Chrome |
| Show the Google Cast toolbar icon | \Google\Google Chrome\Google Cast | Google Chrome |
| Authentication server allowlist | \Google\Google Chrome\HTTP authentication | Google Chrome |
| Cross-origin HTTP Authentication prompts | \Google\Google Chrome\HTTP authentication | Google Chrome |
| Allow Basic authentication for HTTP | \Google\Google Chrome\HTTP authentication | Google Chrome |
| Supported authentication schemes | \Google\Google Chrome\HTTP authentication | Google Chrome |
| Disable CNAME lookup when negotiating Kerberos authentication | \Google\Google Chrome\HTTP authentication | Google Chrome |
| Include non-standard port in Kerberos SPN | \Google\Google Chrome\HTTP authentication | Google Chrome |
| Kerberos delegation server allowlist | \Google\Google Chrome\HTTP authentication | Google Chrome |
| Websites that should never trigger a browser switch. | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| Enable the Legacy Browser Support feature. | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| Use Internet Explorer’s SiteList policy for Legacy Browser Support. | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| Delay before launching alternative browser (milliseconds) | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| Command-line parameters for the alternative browser. | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| URL of an XML file that contains URLs that should never trigger a browser switch. | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| Command-line parameters for switching from the alternative browser. | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| Keep last tab open in Chrome. | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| URL of an XML file that contains URLs to load in an alternative browser. | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| Sitelist parsing mode | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| Websites to open in alternative browser | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| Alternative browser to launch for configured websites. | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| Path to Chrome for switching from the alternative browser. | \Google\Google Chrome\Legacy Browser Support | Google Chrome |
| Allow user-level Native Messaging hosts (installed without admin permissions) | \Google\Google Chrome\Native Messaging | Google Chrome |
| Configure native messaging blocklist | \Google\Google Chrome\Native Messaging | Google Chrome |
| Configure native messaging allowlist | \Google\Google Chrome\Native Messaging | Google Chrome |
| Prompt for the client certificate when multiple certificates match. | \Google\Google Chrome\Other | Google Chrome |
| Enable saving passwords to the password manager | \Google\Google Chrome\Password manager | Google Chrome |
| Enable leak detection for entered credentials | \Google\Google Chrome\Password manager | Google Chrome |
| Print PDF as Image Available | \Google\Google Chrome\Printing | Google Chrome |
| Use System Default Printer as Default | \Google\Google Chrome\Printing | Google Chrome |
| Default background graphics printing mode | \Google\Google Chrome\Printing | Google Chrome |
| Print Rasterize PDF DPI | \Google\Google Chrome\Printing | Google Chrome |
| Enable printing | \Google\Google Chrome\Printing | Google Chrome |
| Disable printer types on the deny list | \Google\Google Chrome\Printing | Google Chrome |
| Restrict background graphics printing mode | \Google\Google Chrome\Printing | Google Chrome |
| Print Rasterization Mode | \Google\Google Chrome\Printing | Google Chrome |
| Default printer selection rules | \Google\Google Chrome\Printing | Google Chrome |
| Disable Print Preview | \Google\Google Chrome\Printing | Google Chrome |
| Print Headers and Footers | \Google\Google Chrome\Printing | Google Chrome |
| Enable submission of documents to Google Cloud Print | \Google\Google Chrome\Printing | Google Chrome |
| Enable Google Cloud Print proxy | \Google\Google Chrome\Printing | Google Chrome |
| Print PostScript Mode | \Google\Google Chrome\Printing | Google Chrome |
| Default printing page size | \Google\Google Chrome\Printing | Google Chrome |
| Allow remote access connections to this machine | \Google\Google Chrome\Remote access | Google Chrome |
| Allow remote access users to transfer files to/from the host | \Google\Google Chrome\Remote access | Google Chrome |
| Configure the required domain names for remote access clients | \Google\Google Chrome\Remote access | Google Chrome |
| Allow remote support connections to this machine | \Google\Google Chrome\Remote access | Google Chrome |
| Configure the required domain names for remote access hosts | \Google\Google Chrome\Remote access | Google Chrome |
| Enable the use of relay servers by the remote access host | \Google\Google Chrome\Remote access | Google Chrome |
| Enable or disable PIN-less authentication for remote access hosts | \Google\Google Chrome\Remote access | Google Chrome |
| Restrict the UDP port range used by the remote access host | \Google\Google Chrome\Remote access | Google Chrome |
| Enable curtaining of remote access hosts | \Google\Google Chrome\Remote access | Google Chrome |
| Maximum session duration allowed for remote access connections | \Google\Google Chrome\Remote access | Google Chrome |
| Enable firewall traversal from remote access host | \Google\Google Chrome\Remote access | Google Chrome |
| The maximum size, in bytes, that can be transferred between client and host via clipboard synchronization | \Google\Google Chrome\Remote access | Google Chrome |
| Allow remote users to interact with elevated windows in remote assistance sessions | \Google\Google Chrome\Remote access | Google Chrome |
| Suppress Google Cloud Print deprecation messages | \Google\Google Chrome\Removed policies | Google Chrome |
| Default search provider instant URL | \Google\Google Chrome\Removed policies | Google Chrome |
| Block the File Handling API on these web apps | \Google\Google Chrome\Removed policies | Google Chrome |
| Block the Flash plugin on these sites | \Google\Google Chrome\Removed policies | Google Chrome |
| Maximum SSL version enabled | \Google\Google Chrome\Removed policies | Google Chrome |
| Specify a list of disabled plugins | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable RC4 cipher suites in TLS | \Google\Google Chrome\Removed policies | Google Chrome |
| Clear site data on browser shutdown (deprecated) | \Google\Google Chrome\Removed policies | Google Chrome |
| The enrollment token of cloud policy on desktop | \Google\Google Chrome\Removed policies | Google Chrome |
| Default Flash setting | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable trust in Symantec Corporation’s Legacy PKI Infrastructure | \Google\Google Chrome\Removed policies | Google Chrome |
| Suppress the Google Chrome Frame turndown prompt | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable chrome://devices | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable sending downloads to Google for deep scanning for users enrolled in the Advanced Protection program | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable firewall traversal from remote access client | \Google\Google Chrome\Removed policies | Google Chrome |
| Use Legacy Form Controls until M84. | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow SHA-1 signed certificates issued by local trust anchors | \Google\Google Chrome\Removed policies | Google Chrome |
| Policy overrides for Debug builds of the remote access host | \Google\Google Chrome\Removed policies | Google Chrome |
| Set media disk cache size in bytes | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable creation of supervised users | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow insecure algorithms in integrity checks on extension updates and installs | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable HTTP/0.9 support on non-default ports | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable CORS check mitigations in the new CORS implementation | \Google\Google Chrome\Removed policies | Google Chrome |
| Configure the TalkGadget prefix for remote access hosts | \Google\Google Chrome\Removed policies | Google Chrome |
| Control use of the File Handling API | \Google\Google Chrome\Removed policies | Google Chrome |
| Force networking code to run in the browser process | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow WebDriver to Override Incompatible Policies | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow sites to simultaneously navigate and open pop-ups | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow the Flash plugin on these sites | \Google\Google Chrome\Removed policies | Google Chrome |
| Always runs plugins that require authorization (deprecated) | \Google\Google Chrome\Removed policies | Google Chrome |
| Block key generation on these sites | \Google\Google Chrome\Removed policies | Google Chrome |
| Always render the following URL patterns in Google Chrome Frame | \Google\Google Chrome\Removed policies | Google Chrome |
| Set Google Chrome Frame user data directory | \Google\Google Chrome\Removed policies | Google Chrome |
| Prevent app promotions from appearing on the new tab page | \Google\Google Chrome\Removed policies | Google Chrome |
| Re-enable Web Components v0 API until M84. | \Google\Google Chrome\Removed policies | Google Chrome |
| Use a default referrer policy of no-referrer-when-downgrade. | \Google\Google Chrome\Removed policies | Google Chrome |
| Allows the AppCache feature to be re-enabled even if it is off by default. | \Google\Google Chrome\Removed policies | Google Chrome |
| Disable TLS False Start | \Google\Google Chrome\Removed policies | Google Chrome |
| Always render the following URL patterns in the host browser | \Google\Google Chrome\Removed policies | Google Chrome |
| Allows a page to show popups during its unloading | \Google\Google Chrome\Removed policies | Google Chrome |
| Extend Flash content setting to all content (deprecated) | \Google\Google Chrome\Removed policies | Google Chrome |
| Minimum TLS version to fallback to | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable 3DES cipher suites in TLS | \Google\Google Chrome\Removed policies | Google Chrome |
| Control the User-Agent Client Hints feature. | \Google\Google Chrome\Removed policies | Google Chrome |
| Additional command line parameters for Google Chrome | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable showing the welcome page on the first browser launch following OS upgrade | \Google\Google Chrome\Removed policies | Google Chrome |
| Use the legacy CORS implementation rather than new CORS | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable the old web-based signin flow | \Google\Google Chrome\Removed policies | Google Chrome |
| Enterprise web store name (deprecated) | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow certificates issued by local trust anchors without subjectAlternativeName extension | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable deprecated privet printing | \Google\Google Chrome\Removed policies | Google Chrome |
| Disable SPDY protocol | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow running plugins that are outdated | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow users to opt in to Safe Browsing extended reporting | \Google\Google Chrome\Removed policies | Google Chrome |
| Enterprise web store URL (deprecated) | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable DHE cipher suites in TLS | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable deprecated web platform features for a limited time | \Google\Google Chrome\Removed policies | Google Chrome |
| Default HTML renderer for Google Chrome Frame | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable a TLS 1.3 security feature for local trust anchors. | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow Google Chrome Frame to handle the listed content types | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable network prediction | \Google\Google Chrome\Removed policies | Google Chrome |
| Specify a list of enabled plugins | \Google\Google Chrome\Removed policies | Google Chrome |
| Specify a list of plugins that the user can enable or disable | \Google\Google Chrome\Removed policies | Google Chrome |
| Default key generation setting | \Google\Google Chrome\Removed policies | Google Chrome |
| Parameters for instant URL which uses POST | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow users to show passwords in Password Manager (deprecated) | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow key generation on these sites | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow the File Handling API on these web apps | \Google\Google Chrome\Removed policies | Google Chrome |
| Default legacy SameSite cookie behavior setting | \Google\Google Chrome\Removed policies | Google Chrome |
| Allow background tabs freeze | \Google\Google Chrome\Removed policies | Google Chrome |
| Skip the meta tag check in Google Chrome Frame | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable two-factor authentication for remote access hosts | \Google\Google Chrome\Removed policies | Google Chrome |
| Parameter controlling search term placement for the default search provider | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable Instant | \Google\Google Chrome\Removed policies | Google Chrome |
| Enable PAC URL stripping (for https://) | \Google\Google Chrome\Removed policies | Google Chrome |
| Specify whether the plugin finder should be disabled (deprecated) | \Google\Google Chrome\Removed policies | Google Chrome |
| Safe Browsing Protection Level | \Google\Google Chrome\Safe Browsing settings | Google Chrome |
| Configure the list of enterprise login URLs where password protection service should capture salted hashes of passwords. | \Google\Google Chrome\Safe Browsing settings | Google Chrome |
| Password protection warning trigger | \Google\Google Chrome\Safe Browsing settings | Google Chrome |
| Configure the list of domains on which Safe Browsing will not trigger warnings. | \Google\Google Chrome\Safe Browsing settings | Google Chrome |
| Configure the change password URL. | \Google\Google Chrome\Safe Browsing settings | Google Chrome |
| Enable Safe Browsing Extended Reporting | \Google\Google Chrome\Safe Browsing settings | Google Chrome |
| Configure the New Tab page URL | \Google\Google Chrome\Startup, Home page and New Tab page | Google Chrome |
| Configure the home page URL | \Google\Google Chrome\Startup, Home page and New Tab page | Google Chrome |
| Action on startup | \Google\Google Chrome\Startup, Home page and New Tab page | Google Chrome |
| Use New Tab Page as homepage | \Google\Google Chrome\Startup, Home page and New Tab page | Google Chrome |
| Show Home button on toolbar | \Google\Google Chrome\Startup, Home page and New Tab page | Google Chrome |
| URLs to open on startup | \Google\Google Chrome\Startup, Home page and New Tab page | Google Chrome |
| Do not allow password expiration time longer than required by policy | \LAPS | LAPS |
| Password Settings | \LAPS | LAPS |
| Enable local admin password management | \LAPS | LAPS |
| Name of administrator account to manage | \LAPS | LAPS |
| Disables silent configuration of Lists sync on this device. | \List Sync | Other |
| Blocks syncing of external lists via Lists sync | \List Sync | Other |
| Disables Lists sync on this device. | \List Sync | Other |
| Show the Reload in Internet Explorer mode button in the toolbar | \Microsoft Edge | Microsoft Edge |
| Enhance images enabled | \Microsoft Edge | Microsoft Edge |
| Synonyms are provided when using Microsoft Editor spell checker | \Microsoft Edge | Microsoft Edge |
| Disable saving browser history | \Microsoft Edge | Microsoft Edge |
| Allow or block video capture | \Microsoft Edge | Microsoft Edge |
| Send site information to improve Microsoft services (obsolete) | \Microsoft Edge | Microsoft Edge |
| Show an „Always open“ checkbox in external protocol dialog | \Microsoft Edge | Microsoft Edge |
| Force WebSQL in third-party contexts to be re-enabled (deprecated) | \Microsoft Edge | Microsoft Edge |
| Display zoom in IE Mode tabs with DPI Scale included like it is in Internet Explorer | \Microsoft Edge | Microsoft Edge |
| Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode | \Microsoft Edge | Microsoft Edge |
| Configure the Enterprise Mode Site List | \Microsoft Edge | Microsoft Edge |
| Allow download restrictions | \Microsoft Edge | Microsoft Edge |
| Allow the Web widget at Windows startup | \Microsoft Edge | Microsoft Edge |
| Enable Signed HTTP Exchange (SXG) support | \Microsoft Edge | Microsoft Edge |
| Hide the one-time redirection dialog and the banner on Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Use a default referrer policy of no-referrer-when-downgrade (obsolete) | \Microsoft Edge | Microsoft Edge |
| Send required and optional diagnostic data about browser usage | \Microsoft Edge | Microsoft Edge |
| Search Filters Enabled | \Microsoft Edge | Microsoft Edge |
| Allows users to edit favorites | \Microsoft Edge | Microsoft Edge |
| Show Microsoft Office shortcut in favorites bar (deprecated) | \Microsoft Edge | Microsoft Edge |
| Enable ending processes in the Browser task manager | \Microsoft Edge | Microsoft Edge |
| Allow sites configured for Internet Explorer mode to open in Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Spell checking provided by Microsoft Editor | \Microsoft Edge | Microsoft Edge |
| Allow QUIC protocol | \Microsoft Edge | Microsoft Edge |
| Enable site isolation for every site | \Microsoft Edge | Microsoft Edge |
| Let users snip a Math problem and get the solution with a step-by-step explanation in Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Configure the Share experience | \Microsoft Edge | Microsoft Edge |
| Enable Microsoft Search in Bing suggestions in the address bar | \Microsoft Edge | Microsoft Edge |
| Block tracking of users‘ web-browsing activity | \Microsoft Edge | Microsoft Edge |
| Enable the network service sandbox | \Microsoft Edge | Microsoft Edge |
| Clear history for IE and IE mode every time you exit | \Microsoft Edge | Microsoft Edge |
| Configure Related Matches in Find on Page | \Microsoft Edge | Microsoft Edge |
| Automatically import another browser’s data and settings at first run | \Microsoft Edge | Microsoft Edge |
| Notify a user that a browser restart is recommended or required for pending updates | \Microsoft Edge | Microsoft Edge |
| Re-enable Web Components v0 API until M84 (obsolete) | \Microsoft Edge | Microsoft Edge |
| Allow default search provider context menu search access | \Microsoft Edge | Microsoft Edge |
| Enable Follow service in Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context | \Microsoft Edge | Microsoft Edge |
| Configure the list of types that are included for synchronization | \Microsoft Edge | Microsoft Edge |
| Force minimum YouTube Restricted Mode | \Microsoft Edge | Microsoft Edge |
| Allow launching of local files in Internet Explorer mode | \Microsoft Edge | Microsoft Edge |
| Force WebSQL to be enabled | \Microsoft Edge | Microsoft Edge |
| Allow importing of extensions | \Microsoft Edge | Microsoft Edge |
| Fetch keepalive duration on shutdown | \Microsoft Edge | Microsoft Edge |
| Block the Serial API on specific sites | \Microsoft Edge | Microsoft Edge |
| Shows button on native PDF viewer in Microsoft Edge that allows users to sign up for Adobe Acrobat subscription | \Microsoft Edge | Microsoft Edge |
| Set the roaming profile directory | \Microsoft Edge | Microsoft Edge |
| Get Image Descriptions from Microsoft Enabled | \Microsoft Edge | Microsoft Edge |
| Block access to a specified list of services and export targets in Collections | \Microsoft Edge | Microsoft Edge |
| Allow using the deprecated U2F Security Key API (deprecated) | \Microsoft Edge | Microsoft Edge |
| Enhance the security state in Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Configure browser process code integrity guard setting | \Microsoft Edge | Microsoft Edge |
| Configure whether Microsoft Edge should automatically select a certificate when there are multiple certificate matches for a site configured with „AutoSelectCertificateForUrls“ | \Microsoft Edge | Microsoft Edge |
| Always use the OS capture engine to avoid issues with capturing Internet Explorer mode tabs | \Microsoft Edge | Microsoft Edge |
| Suppress the unsupported OS warning | \Microsoft Edge | Microsoft Edge |
| Configure the pixel adjustment between window.open widths sourced from IE mode pages vs. Edge mode pages | \Microsoft Edge | Microsoft Edge |
| JavaScript setTimeout will not be clamped until a higher nesting threshold is set (deprecated) | \Microsoft Edge | Microsoft Edge |
| Enable AutoFill for credit cards | \Microsoft Edge | Microsoft Edge |
| Block clipboard use on specific sites | \Microsoft Edge | Microsoft Edge |
| Redirect incompatible sites from Internet Explorer to Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Use Windows proxy resolver (deprecated) | \Microsoft Edge | Microsoft Edge |
| Disable Certificate Transparency enforcement for a list of subjectPublicKeyInfo hashes | \Microsoft Edge | Microsoft Edge |
| Web Select Enabled | \Microsoft Edge | Microsoft Edge |
| Discover feature In Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Extend Adobe Flash content setting to all content (obsolete) | \Microsoft Edge | Microsoft Edge |
| Open local files in Internet Explorer mode file extension allow list | \Microsoft Edge | Microsoft Edge |
| List of file types that should be automatically opened on download | \Microsoft Edge | Microsoft Edge |
| Enable specific spellcheck languages | \Microsoft Edge | Microsoft Edge |
| Enable spellcheck | \Microsoft Edge | Microsoft Edge |
| Live captions allowed | \Microsoft Edge | Microsoft Edge |
| Enable renderer code integrity | \Microsoft Edge | Microsoft Edge |
| Text prediction enabled by default | \Microsoft Edge | Microsoft Edge |
| Allow Save page as in Internet Explorer mode | \Microsoft Edge | Microsoft Edge |
| Enable resolution of navigation errors using a web service | \Microsoft Edge | Microsoft Edge |
| Enable a TLS 1.3 security feature for local trust anchors (obsolete) | \Microsoft Edge | Microsoft Edge |
| Allow queries to a Browser Network Time service | \Microsoft Edge | Microsoft Edge |
| Specifies whether the display-capture permissions-policy is checked or skipped | \Microsoft Edge | Microsoft Edge |
| Enable deleting browser and download history | \Microsoft Edge | Microsoft Edge |
| Control Javascript setTimeout() function minimum timeout (deprecated) | \Microsoft Edge | Microsoft Edge |
| Force disable spellcheck languages | \Microsoft Edge | Microsoft Edge |
| Allow recommendations and promotional notifications from Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Enable support for Windows OS routing table rules when making peer to peer connections via WebRTC | \Microsoft Edge | Microsoft Edge |
| Configure the list of types that are excluded from synchronization | \Microsoft Edge | Microsoft Edge |
| Microsoft Edge Insider Promotion Enabled | \Microsoft Edge | Microsoft Edge |
| Enable travel assistance | \Microsoft Edge | Microsoft Edge |
| Prompt the user to select a certificate when multiple certificates match | \Microsoft Edge | Microsoft Edge |
| Suggest similar pages when a webpage can’t be found | \Microsoft Edge | Microsoft Edge |
| Configure enhanced hang detection for Internet Explorer mode | \Microsoft Edge | Microsoft Edge |
| Disable Certificate Transparency enforcement for specific URLs | \Microsoft Edge | Microsoft Edge |
| Allow importing of Cookies | \Microsoft Edge | Microsoft Edge |
| Allow surf game | \Microsoft Edge | Microsoft Edge |
| Configure Online Text To Speech | \Microsoft Edge | Microsoft Edge |
| Enable favorites bar | \Microsoft Edge | Microsoft Edge |
| Websites or domains that don’t need permission to use direct Security Key attestation | \Microsoft Edge | Microsoft Edge |
| Ask where to save downloaded files | \Microsoft Edge | Microsoft Edge |
| Set download directory | \Microsoft Edge | Microsoft Edge |
| Block access to a list of URLs | \Microsoft Edge | Microsoft Edge |
| Limits the number of user data snapshots retained for use in case of emergency rollback | \Microsoft Edge | Microsoft Edge |
| Allow access to sensors on specific sites | \Microsoft Edge | Microsoft Edge |
| Hide the First-run experience and splash screen | \Microsoft Edge | Microsoft Edge |
| Force WebSQL in non-secure contexts to be enabled (deprecated) | \Microsoft Edge | Microsoft Edge |
| Configure the list of names that will bypass the HSTS policy check | \Microsoft Edge | Microsoft Edge |
| Block third party cookies | \Microsoft Edge | Microsoft Edge |
| Enable web capture feature in Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users | \Microsoft Edge | Microsoft Edge |
| Allow the audio process to run with priority above normal on Windows | \Microsoft Edge | Microsoft Edge |
| Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled | \Microsoft Edge | Microsoft Edge |
| Allow pages to send synchronous XHR requests during page dismissal (deprecated) | \Microsoft Edge | Microsoft Edge |
| Specify URI template of desired DNS-over-HTTPS resolver | \Microsoft Edge | Microsoft Edge |
| Enable Native Window Occlusion (deprecated) | \Microsoft Edge | Microsoft Edge |
| Configure Automatic HTTPS | \Microsoft Edge | Microsoft Edge |
| Visual search enabled | \Microsoft Edge | Microsoft Edge |
| Configure address bar editing | \Microsoft Edge | Microsoft Edge |
| Allows the AppCache feature to be re-enabled, even if it’s turned off by default | \Microsoft Edge | Microsoft Edge |
| Single sign-on for work or school sites using this profile enabled | \Microsoft Edge | Microsoft Edge |
| Allow users to access the Outlook menu | \Microsoft Edge | Microsoft Edge |
| Enable globally scoped HTTP auth cache | \Microsoft Edge | Microsoft Edge |
| URLs where AutoOpenFileTypes can apply | \Microsoft Edge | Microsoft Edge |
| Configures availability of a vertical layout for tabs on the side of the browser | \Microsoft Edge | Microsoft Edge |
| Force networking code to run in the browser process (obsolete) | \Microsoft Edge | Microsoft Edge |
| Allow users to open files using the DirectInvoke protocol | \Microsoft Edge | Microsoft Edge |
| Allow single sign-on for Microsoft sites using this profile | \Microsoft Edge | Microsoft Edge |
| Disable synchronization of data using Microsoft sync services | \Microsoft Edge | Microsoft Edge |
| Block all ads on Bing search results | \Microsoft Edge | Microsoft Edge |
| Allow Internet Explorer mode testing (deprecated) | \Microsoft Edge | Microsoft Edge |
| Continue running background apps after Microsoft Edge closes | \Microsoft Edge | Microsoft Edge |
| Allow Google Cast to connect to Cast devices on all IP addresses | \Microsoft Edge | Microsoft Edge |
| Ads setting for sites with intrusive ads | \Microsoft Edge | Microsoft Edge |
| Intranet Redirection Behavior | \Microsoft Edge | Microsoft Edge |
| Control communication with the Experimentation and Configuration Service | \Microsoft Edge | Microsoft Edge |
| Enable online OCSP/CRL checks | \Microsoft Edge | Microsoft Edge |
| Enforce Google SafeSearch | \Microsoft Edge | Microsoft Edge |
| Enable Drop feature in Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Enable or disable the User-Agent Reduction | \Microsoft Edge | Microsoft Edge |
| Enable full-tab promotional content | \Microsoft Edge | Microsoft Edge |
| Set the time period for update notifications | \Microsoft Edge | Microsoft Edge |
| Allow Pin to taskbar wizard | \Microsoft Edge | Microsoft Edge |
| Show Microsoft Rewards experiences | \Microsoft Edge | Microsoft Edge |
| CECPQ2 post-quantum key-agreement enabled for TLS | \Microsoft Edge | Microsoft Edge |
| Default sensors setting | \Microsoft Edge | Microsoft Edge |
| Configure Internet Explorer integration | \Microsoft Edge | Microsoft Edge |
| Set the time interval for relaunch | \Microsoft Edge | Microsoft Edge |
| Enables Microsoft Edge mini menu | \Microsoft Edge | Microsoft Edge |
| Enable usage and crash-related data reporting (obsolete) | \Microsoft Edge | Microsoft Edge |
| Control the mode of DNS-over-HTTPS | \Microsoft Edge | Microsoft Edge |
| Use built-in DNS client | \Microsoft Edge | Microsoft Edge |
| Enable the Web widget | \Microsoft Edge | Microsoft Edge |
| Manage QuickView Office files capability in Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Enable Translate | \Microsoft Edge | Microsoft Edge |
| Allow importing of autofill form data | \Microsoft Edge | Microsoft Edge |
| Enable using roaming copies for Microsoft Edge profile data | \Microsoft Edge | Microsoft Edge |
| Allow Microsoft Edge to block navigations to external protocols in a sandboxed iframe | \Microsoft Edge | Microsoft Edge |
| Disable support for 3D graphics APIs | \Microsoft Edge | Microsoft Edge |
| Configure reporting of potentially misconfigured neutral site URLs to the M365 Admin Center Site Lists app | \Microsoft Edge | Microsoft Edge |
| Show Hubs Sidebar | \Microsoft Edge | Microsoft Edge |
| Shopping in Microsoft Edge Enabled | \Microsoft Edge | Microsoft Edge |
| AutoLaunch Protocols Component Enabled | \Microsoft Edge | Microsoft Edge |
| In-app support Enabled | \Microsoft Edge | Microsoft Edge |
| Set disk cache size, in bytes | \Microsoft Edge | Microsoft Edge |
| Block access to sensors on specific sites | \Microsoft Edge | Microsoft Edge |
| Allow access to the Enterprise Mode Site List Manager tool | \Microsoft Edge | Microsoft Edge |
| Enable 3DES cipher suites in TLS | \Microsoft Edge | Microsoft Edge |
| Allow file selection dialogs | \Microsoft Edge | Microsoft Edge |
| Enable Proactive Authentication (obsolete) | \Microsoft Edge | Microsoft Edge |
| Allow importing of browser settings | \Microsoft Edge | Microsoft Edge |
| Enable Ambient Authentication for InPrivate and Guest profiles | \Microsoft Edge | Microsoft Edge |
| Default clipboard site permission | \Microsoft Edge | Microsoft Edge |
| Allow WebDriver to Override Incompatible Policies (deprecated) | \Microsoft Edge | Microsoft Edge |
| Allow importing of payment info | \Microsoft Edge | Microsoft Edge |
| Define a list of allowed URLs | \Microsoft Edge | Microsoft Edge |
| Configure the View in File Explorer feature for SharePoint pages in Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Allow local MHTML files to open automatically in Internet Explorer mode | \Microsoft Edge | Microsoft Edge |
| Configure the list of domains for which enhance security mode will always be enforced | \Microsoft Edge | Microsoft Edge |
| TLS Encrypted ClientHello Enabled | \Microsoft Edge | Microsoft Edge |
| Get user confirmation before closing a browser window with multiple tabs | \Microsoft Edge | Microsoft Edge |
| Sets managed configuration values for websites to specific origins | \Microsoft Edge | Microsoft Edge |
| Always open PDF files externally | \Microsoft Edge | Microsoft Edge |
| Disable taking screenshots | \Microsoft Edge | Microsoft Edge |
| Enable Windows to search local Microsoft Edge browsing data | \Microsoft Edge | Microsoft Edge |
| Specify the TLS cipher suites to disable | \Microsoft Edge | Microsoft Edge |
| Allow users to proceed from the HTTPS warning page | \Microsoft Edge | Microsoft Edge |
| Configure Do Not Track | \Microsoft Edge | Microsoft Edge |
| Minimum TLS version enabled (deprecated) | \Microsoft Edge | Microsoft Edge |
| Set WPAD optimization | \Microsoft Edge | Microsoft Edge |
| Allow features to download assets from the Asset Delivery Service | \Microsoft Edge | Microsoft Edge |
| Allow importing of browsing history | \Microsoft Edge | Microsoft Edge |
| Control the IntensiveWakeUpThrottling feature | \Microsoft Edge | Microsoft Edge |
| Allow full screen mode | \Microsoft Edge | Microsoft Edge |
| CORS non-wildcard request header support enabled (deprecated) | \Microsoft Edge | Microsoft Edge |
| Control use of the Serial API | \Microsoft Edge | Microsoft Edge |
| Specify custom help link | \Microsoft Edge | Microsoft Edge |
| Enable Domain Actions Download from Microsoft (obsolete) | \Microsoft Edge | Microsoft Edge |
| Control where security restrictions on insecure origins apply | \Microsoft Edge | Microsoft Edge |
| Enable profile creation from the Identity flyout menu or the Settings page | \Microsoft Edge | Microsoft Edge |
| Browser sign-in settings | \Microsoft Edge | Microsoft Edge |
| Enable security warnings for command-line flags | \Microsoft Edge | Microsoft Edge |
| Enable component updates in Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Specify the number of days that a site remains on the local IE mode site list | \Microsoft Edge | Microsoft Edge |
| Block smart actions for a list of services | \Microsoft Edge | Microsoft Edge |
| Enable the Collections feature | \Microsoft Edge | Microsoft Edge |
| Disable download file type extension-based warnings for specified file types on domains | \Microsoft Edge | Microsoft Edge |
| Allows a page to show popups during its unloading (obsolete) | \Microsoft Edge | Microsoft Edge |
| Set application locale | \Microsoft Edge | Microsoft Edge |
| DNS interception checks enabled | \Microsoft Edge | Microsoft Edge |
| Browsing Data Lifetime Settings | \Microsoft Edge | Microsoft Edge |
| Configure whether a user always has a default profile automatically signed in with their work or school account | \Microsoft Edge | Microsoft Edge |
| Allow freezing of background tabs (obsolete) | \Microsoft Edge | Microsoft Edge |
| Determines whether the Microsoft Root Store and built-in certificate verifier will be used to verify server certificates (deprecated) | \Microsoft Edge | Microsoft Edge |
| Configure ShadowStack crash rollback behavior | \Microsoft Edge | Microsoft Edge |
| Allow download restrictions | \Microsoft Edge | Microsoft Edge |
| Allow media autoplay for websites | \Microsoft Edge | Microsoft Edge |
| Allow remote debugging | \Microsoft Edge | Microsoft Edge |
| Enable search suggestions | \Microsoft Edge | Microsoft Edge |
| Re-enable deprecated web platform features for a limited time (obsolete) | \Microsoft Edge | Microsoft Edge |
| Allow import of data from other browsers on each Microsoft Edge launch | \Microsoft Edge | Microsoft Edge |
| Sites that can access audio capture devices without requesting permission | \Microsoft Edge | Microsoft Edge |
| Configure list of force-installed Web Apps | \Microsoft Edge | Microsoft Edge |
| Enable the User-Agent Client Hints feature (deprecated) | \Microsoft Edge | Microsoft Edge |
| Enable renderer in app container | \Microsoft Edge | Microsoft Edge |
| Allow users to open files using the ClickOnce protocol | \Microsoft Edge | Microsoft Edge |
| Enable site isolation for specific origins | \Microsoft Edge | Microsoft Edge |
| Configure if the ads transparency feature is enabled | \Microsoft Edge | Microsoft Edge |
| Disable download file type extension-based warnings for specified file types on domains | \Microsoft Edge | Microsoft Edge |
| Manage exposure of local IP addressess by WebRTC | \Microsoft Edge | Microsoft Edge |
| Use hardware acceleration when available | \Microsoft Edge | Microsoft Edge |
| Enable AutoFill for addresses | \Microsoft Edge | Microsoft Edge |
| Allow the audio sandbox to run | \Microsoft Edge | Microsoft Edge |
| Configure the list of sites for which Microsoft Edge will attempt to establish a Token Binding with | \Microsoft Edge | Microsoft Edge |
| Save cookies when Microsoft Edge closes | \Microsoft Edge | Microsoft Edge |
| Maximum number of concurrent connections to the proxy server | \Microsoft Edge | Microsoft Edge |
| Control use of the Headless Mode | \Microsoft Edge | Microsoft Edge |
| Allow user feedback | \Microsoft Edge | Microsoft Edge |
| Define a list of protocols that can launch an external application from listed origins without prompting the user | \Microsoft Edge | Microsoft Edge |
| Disable Certificate Transparency enforcement for a list of legacy certificate authorities | \Microsoft Edge | Microsoft Edge |
| Allow users to configure Site safety services | \Microsoft Edge | Microsoft Edge |
| Specify if online OCSP/CRL checks are required for local trust anchors | \Microsoft Edge | Microsoft Edge |
| Allow importing of shortcuts | \Microsoft Edge | Microsoft Edge |
| Search in Sidebar enabled | \Microsoft Edge | Microsoft Edge |
| Wait for Internet Explorer mode tabs to completely unload before ending the browser session | \Microsoft Edge | Microsoft Edge |
| Restrict the range of local UDP ports used by WebRTC | \Microsoft Edge | Microsoft Edge |
| Send all intranet sites to Internet Explorer | \Microsoft Edge | Microsoft Edge |
| Configure how frequently the Enterprise Mode Site List is refreshed | \Microsoft Edge | Microsoft Edge |
| Configure the Enterprise Mode Cloud Site List | \Microsoft Edge | Microsoft Edge |
| Allow certificates signed using SHA-1 when issued by local trust anchors (obsolete) | \Microsoft Edge | Microsoft Edge |
| Allow importing of open tabs | \Microsoft Edge | Microsoft Edge |
| Set the default „share additional operating system region“ setting | \Microsoft Edge | Microsoft Edge |
| XFA support in native PDF reader enabled | \Microsoft Edge | Microsoft Edge |
| Enhanced Security Mode configuraton for Intranet zone sites | \Microsoft Edge | Microsoft Edge |
| Allow importing of startup page settings | \Microsoft Edge | Microsoft Edge |
| Enable browser legacy extension point blocking | \Microsoft Edge | Microsoft Edge |
| Set the background tab inactivity timeout for sleeping tabs | \Microsoft Edge | Microsoft Edge |
| Configure InPrivate mode availability | \Microsoft Edge | Microsoft Edge |
| Clear browsing data when Microsoft Edge closes | \Microsoft Edge | Microsoft Edge |
| Prevent install of the BHO to redirect incompatible sites from Internet Explorer to Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Force direct intranet site navigation instead of searching on single word entries in the Address Bar | \Microsoft Edge | Microsoft Edge |
| Allow importing of search engine settings | \Microsoft Edge | Microsoft Edge |
| Delete old browser data on migration | \Microsoft Edge | Microsoft Edge |
| Allow unconfigured sites to be reloaded in Internet Explorer mode | \Microsoft Edge | Microsoft Edge |
| Control the User-Agent Client Hints GREASE Update feature | \Microsoft Edge | Microsoft Edge |
| Allow the Serial API on specific sites | \Microsoft Edge | Microsoft Edge |
| Re-enable the Event.path API until Microsoft Edge version 115 | \Microsoft Edge | Microsoft Edge |
| Configure the list of commands for which to disable keyboard shortcuts | \Microsoft Edge | Microsoft Edge |
| Allow suggestions from local providers | \Microsoft Edge | Microsoft Edge |
| Allow personalization of ads, Microsoft Edge, search, news and other Microsoft services by sending browsing history, favorites and collections, usage and other browsing data to Microsoft | \Microsoft Edge | Microsoft Edge |
| Control where developer tools can be used | \Microsoft Edge | Microsoft Edge |
| Enable guest mode | \Microsoft Edge | Microsoft Edge |
| Set limit on megabytes of memory a single Microsoft Edge instance can use | \Microsoft Edge | Microsoft Edge |
| Allow importing of saved passwords | \Microsoft Edge | Microsoft Edge |
| Define domains allowed to access Google Workspace | \Microsoft Edge | Microsoft Edge |
| Configure favorites | \Microsoft Edge | Microsoft Edge |
| Enforce Bing SafeSearch | \Microsoft Edge | Microsoft Edge |
| Set a timeout for delay of tab navigation for the Enterprise Mode Site List | \Microsoft Edge | Microsoft Edge |
| Configure reporting of IE Mode user list entries to the M365 Admin Center Site Lists app | \Microsoft Edge | Microsoft Edge |
| Allow users to configure Family safety and Kids Mode | \Microsoft Edge | Microsoft Edge |
| Allow managed extensions to use the Enterprise Hardware Platform API | \Microsoft Edge | Microsoft Edge |
| Enhance the security state in Microsoft Edge | \Microsoft Edge | Microsoft Edge |
| Enable scrolling to text specified in URL fragments | \Microsoft Edge | Microsoft Edge |
| Allow importing of home page settings | \Microsoft Edge | Microsoft Edge |
| Configure Speech Recognition | \Microsoft Edge | Microsoft Edge |
| Double Click feature in Microsoft Edge enabled (only available in China) | \Microsoft Edge | Microsoft Edge |
| Allow users to access the games menu | \Microsoft Edge | Microsoft Edge |
| Configure the list of domains for which enhance security mode will not be enforced | \Microsoft Edge | Microsoft Edge |
| Enable warnings for insecure forms | \Microsoft Edge | Microsoft Edge |
| Explicitly allowed network ports | \Microsoft Edge | Microsoft Edge |
| Allow or deny screen capture | \Microsoft Edge | Microsoft Edge |
| Hide restore pages dialog after browser crash | \Microsoft Edge | Microsoft Edge |
| Clear cached images and files when Microsoft Edge closes | \Microsoft Edge | Microsoft Edge |
| Configure tracking prevention exceptions for specific sites | \Microsoft Edge | Microsoft Edge |
| Define an ordered list of preferred languages that websites should display in if the site supports the language | \Microsoft Edge | Microsoft Edge |
| Set the user data directory | \Microsoft Edge | Microsoft Edge |
| Enable stricter treatment for mixed content (obsolete) | \Microsoft Edge | Microsoft Edge |
| Configure the pixel adjustment between window.open heights sourced from IE mode pages vs. Edge mode pages | \Microsoft Edge | Microsoft Edge |
| Sites that can access video capture devices without requesting permission | \Microsoft Edge | Microsoft Edge |
| Allow or block audio capture | \Microsoft Edge | Microsoft Edge |
| Do not set window.opener for links targeting _blank | \Microsoft Edge | Microsoft Edge |
| Allow importing of favorites | \Microsoft Edge | Microsoft Edge |
| Force synchronization of browser data and do not show the sync consent prompt | \Microsoft Edge | Microsoft Edge |
| Enable use of ephemeral profiles | \Microsoft Edge | Microsoft Edge |
| Configure automatic sign in with an Active Directory domain account when there is no Azure AD domain account | \Microsoft Edge | Microsoft Edge |
| Enable network prediction | \Microsoft Edge | Microsoft Edge |
| Secure mode and Certificate-based Digital Signature validation in native PDF reader | \Microsoft Edge | Microsoft Edge |
| Allow websites to query for available payment methods | \Microsoft Edge | Microsoft Edge |
| Allow media autoplay on specific sites | \Microsoft Edge | Microsoft Edge |
| Set disk cache directory | \Microsoft Edge | Microsoft Edge |
| Save and fill memberships | \Microsoft Edge | Microsoft Edge |
| Manage Search Engines | \Microsoft Edge | Microsoft Edge |
| Show context menu to open a file:// link in Internet Explorer mode | \Microsoft Edge | Microsoft Edge |
| Configure tab lifecycles | \Microsoft Edge | Microsoft Edge |
| Origin-keyed agent clustering enabled by default | \Microsoft Edge | Microsoft Edge |
| Define a list of protocols that can not be silently blocked by anti-flood protection | \Microsoft Edge | Microsoft Edge |
| Restrict exposure of local IP address by WebRTC | \Microsoft Edge | Microsoft Edge |
| Specify how „in-page“ navigations to unconfigured sites behave when started from Internet Explorer mode pages | \Microsoft Edge | Microsoft Edge |
| Restrict which accounts can be used as Microsoft Edge primary accounts | \Microsoft Edge | Microsoft Edge |
| Enables background updates to the list of available templates for Collections and other features that use templates | \Microsoft Edge | Microsoft Edge |
| Allow users to proceed from the HTTPS warning page for specific origins | \Microsoft Edge | Microsoft Edge |
| Require that the Enterprise Mode Site List is available before tab navigation | \Microsoft Edge | Microsoft Edge |
| Allow legacy TLS/DTLS downgrade in WebRTC (deprecated) | \Microsoft Edge | Microsoft Edge |
| Specifies whether WebAssembly modules can be sent cross-origin | \Microsoft Edge | Microsoft Edge |
| Allow clipboard use on specific sites | \Microsoft Edge | Microsoft Edge |
| Allow importing of shortcuts | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Microsoft Edge built-in PDF reader powered by Adobe Acrobat enabled | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Enable travel assistance | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow users to access the Outlook menu | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Shopping in Microsoft Edge Enabled | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Discover feature In Microsoft Edge | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Block smart actions for a list of services | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow download restrictions | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Configure Automatic HTTPS | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Enable Translate | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Clear cached images and files when Microsoft Edge closes | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Enable network prediction | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Save and fill memberships | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Visual search enabled | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Show the Reload in Internet Explorer mode button in the toolbar | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Continue running background apps after Microsoft Edge closes | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Manage Search Engines | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Set download directory | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Set the default „share additional operating system region“ setting | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow users to configure Site safety services | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Clear browsing data when Microsoft Edge closes | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Enables Microsoft Edge mini menu | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow single sign-on for Microsoft sites using this profile | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow importing of Cookies | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow suggestions from local providers | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow importing of favorites | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Enable resolution of navigation errors using a web service | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Get user confirmation before closing a browser window with multiple tabs | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow importing of payment info | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow importing of startup page settings | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Set application locale | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow unconfigured sites to be reloaded in Internet Explorer mode | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Single sign-on for work or school sites using this profile enabled | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow download restrictions | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Enable favorites bar | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow importing of search engine settings | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Redirect incompatible sites from Internet Explorer to Microsoft Edge | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Enable Windows to search local Microsoft Edge browsing data | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Enable search suggestions | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Show Hubs Sidebar | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow importing of browsing history | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Block third party cookies | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Show Microsoft Rewards experiences | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Set the background tab inactivity timeout for sleeping tabs | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Disable synchronization of data using Microsoft sync services | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Search Filters Enabled | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Enable AutoFill for addresses | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow importing of extensions | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow importing of autofill form data | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow features to download assets from the Asset Delivery Service | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow importing of saved passwords | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow importing of open tabs | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Suggest similar pages when a webpage can’t be found | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Enable AutoFill for credit cards | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Allow importing of browser settings | \Microsoft Edge – Default Settings (users can override) | Microsoft Edge |
| Register protocol handlers | \Microsoft Edge – Default Settings (users can override)\Content settings | Microsoft Edge |
| Default search provider encodings | \Microsoft Edge – Default Settings (users can override)\Default search provider | Microsoft Edge |
| Default search provider search URL | \Microsoft Edge – Default Settings (users can override)\Default search provider | Microsoft Edge |
| Specifies the search-by-image feature for the default search provider | \Microsoft Edge – Default Settings (users can override)\Default search provider | Microsoft Edge |
| Configure the new tab page search box experience | \Microsoft Edge – Default Settings (users can override)\Default search provider | Microsoft Edge |
| Default search provider keyword | \Microsoft Edge – Default Settings (users can override)\Default search provider | Microsoft Edge |
| Default search provider name | \Microsoft Edge – Default Settings (users can override)\Default search provider | Microsoft Edge |
| Enable the default search provider | \Microsoft Edge – Default Settings (users can override)\Default search provider | Microsoft Edge |
| Parameters for an image URL that uses POST | \Microsoft Edge – Default Settings (users can override)\Default search provider | Microsoft Edge |
| Default search provider URL for suggestions | \Microsoft Edge – Default Settings (users can override)\Default search provider | Microsoft Edge |
| Configure default state of Allow extensions from other stores setting | \Microsoft Edge – Default Settings (users can override)\Extensions | Microsoft Edge |
| Windows Hello For HTTP Auth Enabled | \Microsoft Edge – Default Settings (users can override)\HTTP authentication | Microsoft Edge |
| Enable sign in click to action dialog | \Microsoft Edge – Default Settings (users can override)\Identity and sign-in | Microsoft Edge |
| Allow users to be alerted if their passwords are found to be unsafe | \Microsoft Edge – Default Settings (users can override)\Password manager and protection | Microsoft Edge |
| Enable saving passwords to the password manager | \Microsoft Edge – Default Settings (users can override)\Password manager and protection | Microsoft Edge |
| Enable Password reveal button | \Microsoft Edge – Default Settings (users can override)\Password manager and protection | Microsoft Edge |
| Enable efficiency mode when the device is connected to a power source | \Microsoft Edge – Default Settings (users can override)\Performance | Microsoft Edge |
| Performance Detector Enabled | \Microsoft Edge – Default Settings (users can override)\Performance | Microsoft Edge |
| Efficiency mode enabled | \Microsoft Edge – Default Settings (users can override)\Performance | Microsoft Edge |
| Configure when efficiency mode should become active | \Microsoft Edge – Default Settings (users can override)\Performance | Microsoft Edge |
| Enable startup boost | \Microsoft Edge – Default Settings (users can override)\Performance | Microsoft Edge |
| Configure when efficiency mode should become active | \Microsoft Edge – Default Settings (users can override)\Performance | Microsoft Edge |
| Sets layout for printing | \Microsoft Edge – Default Settings (users can override)\Printing | Microsoft Edge |
| Configure the sticky print preview settings | \Microsoft Edge – Default Settings (users can override)\Printing | Microsoft Edge |
| Set the system default printer as the default printer | \Microsoft Edge – Default Settings (users can override)\Printing | Microsoft Edge |
| Print headers and footers | \Microsoft Edge – Default Settings (users can override)\Printing | Microsoft Edge |
| Block sleeping tabs on specific sites | \Microsoft Edge – Default Settings (users can override)\Sleeping tabs settings | Microsoft Edge |
| Set the background tab inactivity timeout for sleeping tabs | \Microsoft Edge – Default Settings (users can override)\Sleeping tabs settings | Microsoft Edge |
| Configure sleeping tabs | \Microsoft Edge – Default Settings (users can override)\Sleeping tabs settings | Microsoft Edge |
| Force Microsoft Defender SmartScreen checks on downloads from trusted sources | \Microsoft Edge – Default Settings (users can override)\SmartScreen settings | Microsoft Edge |
| Enable new SmartScreen library | \Microsoft Edge – Default Settings (users can override)\SmartScreen settings | Microsoft Edge |
| Configure Microsoft Defender SmartScreen to block potentially unwanted apps | \Microsoft Edge – Default Settings (users can override)\SmartScreen settings | Microsoft Edge |
| Configure Microsoft Defender SmartScreen | \Microsoft Edge – Default Settings (users can override)\SmartScreen settings | Microsoft Edge |
| Enable Microsoft Defender SmartScreen DNS requests | \Microsoft Edge – Default Settings (users can override)\SmartScreen settings | Microsoft Edge |
| Show Home button on toolbar | \Microsoft Edge – Default Settings (users can override)\Startup, home page and new tab page | Microsoft Edge |
| Configure the home page URL | \Microsoft Edge – Default Settings (users can override)\Startup, home page and new tab page | Microsoft Edge |
| Sites to open when the browser starts | \Microsoft Edge – Default Settings (users can override)\Startup, home page and new tab page | Microsoft Edge |
| Action to take on startup | \Microsoft Edge – Default Settings (users can override)\Startup, home page and new tab page | Microsoft Edge |
| Set the new tab page as the home page | \Microsoft Edge – Default Settings (users can override)\Startup, home page and new tab page | Microsoft Edge |
| Configure the Microsoft Edge new tab page experience (deprecated) | \Microsoft Edge – Default Settings (users can override)\Startup, home page and new tab page | Microsoft Edge |
| Set new tab page quick links | \Microsoft Edge – Default Settings (users can override)\Startup, home page and new tab page | Microsoft Edge |
| Configure the new tab page URL | \Microsoft Edge – Default Settings (users can override)\Startup, home page and new tab page | Microsoft Edge |
| Enable preload of the new tab page for faster rendering | \Microsoft Edge – Default Settings (users can override)\Startup, home page and new tab page | Microsoft Edge |
| Configure Edge TyposquattingChecker | \Microsoft Edge – Default Settings (users can override)\TyposquattingChecker settings | Microsoft Edge |
| Control updater’s communication with the Experimentation and Configuration Service | \Microsoft Edge Update | Microsoft Edge |
| Allow Microsoft Edge Side by Side browser experience | \Microsoft Edge Update\Applications | Microsoft Edge |
| Prevent Desktop Shortcut creation upon install default | \Microsoft Edge Update\Applications | Microsoft Edge |
| Allow installation default | \Microsoft Edge Update\Applications | Microsoft Edge |
| Update policy override default | \Microsoft Edge Update\Applications | Microsoft Edge |
| Allow installation default | \Microsoft Edge Update\Applications | Microsoft Edge |
| Update policy override | \Microsoft Edge Update\Applications\Microsoft Edge | Microsoft Edge |
| Allow installation | \Microsoft Edge Update\Applications\Microsoft Edge | Microsoft Edge |
| Target Channel override | \Microsoft Edge Update\Applications\Microsoft Edge | Microsoft Edge |
| Allow installation | \Microsoft Edge Update\Applications\Microsoft Edge | Microsoft Edge |
| Target version override | \Microsoft Edge Update\Applications\Microsoft Edge | Microsoft Edge |
| Prevent Desktop Shortcut creation upon install | \Microsoft Edge Update\Applications\Microsoft Edge | Microsoft Edge |
| Rollback to Target version | \Microsoft Edge Update\Applications\Microsoft Edge | Microsoft Edge |
| Allow installation | \Microsoft Edge Update\Applications\Microsoft Edge Beta | Microsoft Edge |
| Target version override | \Microsoft Edge Update\Applications\Microsoft Edge Beta | Microsoft Edge |
| Prevent Desktop Shortcut creation upon install | \Microsoft Edge Update\Applications\Microsoft Edge Beta | Microsoft Edge |
| Rollback to Target version | \Microsoft Edge Update\Applications\Microsoft Edge Beta | Microsoft Edge |
| Update policy override | \Microsoft Edge Update\Applications\Microsoft Edge Beta | Microsoft Edge |
| Allow installation | \Microsoft Edge Update\Applications\Microsoft Edge Beta | Microsoft Edge |
| Target version override | \Microsoft Edge Update\Applications\Microsoft Edge Canary | Microsoft Edge |
| Prevent Desktop Shortcut creation upon install | \Microsoft Edge Update\Applications\Microsoft Edge Canary | Microsoft Edge |
| Allow installation | \Microsoft Edge Update\Applications\Microsoft Edge Canary | Microsoft Edge |
| Update policy override | \Microsoft Edge Update\Applications\Microsoft Edge Canary | Microsoft Edge |
| Allow installation | \Microsoft Edge Update\Applications\Microsoft Edge Canary | Microsoft Edge |
| Rollback to Target version | \Microsoft Edge Update\Applications\Microsoft Edge Canary | Microsoft Edge |
| Prevent Desktop Shortcut creation upon install | \Microsoft Edge Update\Applications\Microsoft Edge Dev | Microsoft Edge |
| Allow installation | \Microsoft Edge Update\Applications\Microsoft Edge Dev | Microsoft Edge |
| Update policy override | \Microsoft Edge Update\Applications\Microsoft Edge Dev | Microsoft Edge |
| Allow installation | \Microsoft Edge Update\Applications\Microsoft Edge Dev | Microsoft Edge |
| Rollback to Target version | \Microsoft Edge Update\Applications\Microsoft Edge Dev | Microsoft Edge |
| Target version override | \Microsoft Edge Update\Applications\Microsoft Edge Dev | Microsoft Edge |
| Allow installation | \Microsoft Edge Update\Microsoft Edge WebView | Microsoft Edge |
| Update policy override | \Microsoft Edge Update\Microsoft Edge WebView | Microsoft Edge |
| Allow installation | \Microsoft Edge Update\Microsoft Edge WebView | Microsoft Edge |
| Auto-update check period override | \Microsoft Edge Update\Preferences | Microsoft Edge |
| Time period in each day to suppress auto-update check | \Microsoft Edge Update\Preferences | Microsoft Edge |
| Choose how to specify proxy server settings | \Microsoft Edge Update\Proxy Server | Microsoft Edge |
| URL to a proxy .pac file | \Microsoft Edge Update\Proxy Server | Microsoft Edge |
| Address or URL of proxy server | \Microsoft Edge Update\Proxy Server | Microsoft Edge |
| Control communication with the Experimentation and Configuration Service | \Microsoft Edge WebView2 | Microsoft Edge |
| Configure the location of the browser executable folder | \Microsoft Edge WebView2\Loader Override Settings | Microsoft Edge |
| Set the release channel search order preference | \Microsoft Edge WebView2\Loader Override Settings | Microsoft Edge |
| Application Guard Container Proxy | \Microsoft Edge\Application Guard settings | Microsoft Edge |
| Application Guard Traffic Identification | \Microsoft Edge\Application Guard settings | Microsoft Edge |
| Prevents files from being uploaded while in Application Guard | \Microsoft Edge\Application Guard settings | Microsoft Edge |
| Ignore Application Guard site list configuration and browse Edge normally | \Microsoft Edge\Application Guard settings | Microsoft Edge |
| Application Guard Favorites Sync Enabled | \Microsoft Edge\Application Guard settings | Microsoft Edge |
| Enable Google Cast | \Microsoft Edge\Cast | Microsoft Edge |
| Show the cast icon in the toolbar | \Microsoft Edge\Cast | Microsoft Edge |
| Block multiple automatic downloads in quick succession on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow JavaScript to use JIT on these sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Block write access to files and directories on these sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow the WebHID API on these sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow notifications to set Microsoft Edge as default PDF reader | \Microsoft Edge\Content settings | Microsoft Edge |
| Automatically grant sites permission to connect to USB serial devices | \Microsoft Edge\Content settings | Microsoft Edge |
| Default Adobe Flash setting (obsolete) | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow read access via the File System API on these sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Block JavaScript on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow intranet zone file URL links from Microsoft Edge to open in Windows File Explorer | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow multiple automatic downloads in quick succession on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow listed sites connect to specific HID devices | \Microsoft Edge\Content settings | Microsoft Edge |
| Automatically select client certificates for these sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Default geolocation setting | \Microsoft Edge\Content settings | Microsoft Edge |
| Default JavaScript setting | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow write access to files and directories on these sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Block read access via the File System API on these sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Default automatic downloads setting | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow listed sites to connect to any HID device | \Microsoft Edge\Content settings | Microsoft Edge |
| Block the WebHID API on these sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Grant access to specific sites to connect to specific USB devices | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow insecure content on specified sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow JavaScript on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Block pop-up windows on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Choose whether users can receive customized background images and text, suggestions, notifications, and tips for Microsoft services | \Microsoft Edge\Content settings | Microsoft Edge |
| Control use of the File System API for reading | \Microsoft Edge\Content settings | Microsoft Edge |
| Default notification setting | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow notifications on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Control use of the WebHID API | \Microsoft Edge\Content settings | Microsoft Edge |
| Automatically grant sites permission to connect all serial ports | \Microsoft Edge\Content settings | Microsoft Edge |
| Default images setting | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow cookies on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Block JavaScript from using JIT on these sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Block notifications on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow WebUSB on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Block the Adobe Flash plug-in on specific sites (obsolete) | \Microsoft Edge\Content settings | Microsoft Edge |
| Block insecure content on specified sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow images on these sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Control use of insecure content exceptions | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow pop-up windows on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Block WebUSB on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Limit cookies from specific websites to the current session | \Microsoft Edge\Content settings | Microsoft Edge |
| Enable default legacy SameSite cookie behavior setting | \Microsoft Edge\Content settings | Microsoft Edge |
| Revert to legacy SameSite behavior for cookies on specified sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Control use of the Web Bluetooth API | \Microsoft Edge\Content settings | Microsoft Edge |
| Block images on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Control use of the WebUSB API | \Microsoft Edge\Content settings | Microsoft Edge |
| Default pop-up window setting | \Microsoft Edge\Content settings | Microsoft Edge |
| Control use of the File System API for writing | \Microsoft Edge\Content settings | Microsoft Edge |
| Automatically grant permission to these sites to connect to HID devices containing top-level collections with the given HID usage | \Microsoft Edge\Content settings | Microsoft Edge |
| Configure cookies | \Microsoft Edge\Content settings | Microsoft Edge |
| Control use of JavaScript JIT | \Microsoft Edge\Content settings | Microsoft Edge |
| Allow the Adobe Flash plug-in on specific sites (obsolete) | \Microsoft Edge\Content settings | Microsoft Edge |
| Block cookies on specific sites | \Microsoft Edge\Content settings | Microsoft Edge |
| Specifies the search-by-image feature for the default search provider | \Microsoft Edge\Default search provider | Microsoft Edge |
| Default search provider URL for suggestions | \Microsoft Edge\Default search provider | Microsoft Edge |
| Default search provider keyword | \Microsoft Edge\Default search provider | Microsoft Edge |
| Default search provider name | \Microsoft Edge\Default search provider | Microsoft Edge |
| Enable the default search provider | \Microsoft Edge\Default search provider | Microsoft Edge |
| Default search provider search URL | \Microsoft Edge\Default search provider | Microsoft Edge |
| Default search provider encodings | \Microsoft Edge\Default search provider | Microsoft Edge |
| Configure the new tab page search box experience | \Microsoft Edge\Default search provider | Microsoft Edge |
| Parameters for an image URL that uses POST | \Microsoft Edge\Default search provider | Microsoft Edge |
| Configure navigation settings per groups of URLs in Microsoft Edge Workspaces | \Microsoft Edge\Edge Workspaces settings | Microsoft Edge |
| Enable Workspaces | \Microsoft Edge\Edge Workspaces settings | Microsoft Edge |
| Configure users ability to override feature flags | \Microsoft Edge\Experimentation | Microsoft Edge |
| Blocks external extensions from being installed | \Microsoft Edge\Extensions | Microsoft Edge |
| Control which extensions are installed silently | \Microsoft Edge\Extensions | Microsoft Edge |
| Configure allowed extension types | \Microsoft Edge\Extensions | Microsoft Edge |
| Allow specific extensions to be installed | \Microsoft Edge\Extensions | Microsoft Edge |
| Configure extension management settings | \Microsoft Edge\Extensions | Microsoft Edge |
| Control which extensions cannot be installed | \Microsoft Edge\Extensions | Microsoft Edge |
| Configure extension and user script install sources | \Microsoft Edge\Extensions | Microsoft Edge |
| Allow Basic authentication for HTTP | \Microsoft Edge\HTTP authentication | Microsoft Edge |
| Allow cross-origin HTTP Authentication prompts | \Microsoft Edge\HTTP authentication | Microsoft Edge |
| Windows Hello For HTTP Auth Enabled | \Microsoft Edge\HTTP authentication | Microsoft Edge |
| Specifies a list of servers that Microsoft Edge can delegate user credentials to | \Microsoft Edge\HTTP authentication | Microsoft Edge |
| Include non-standard port in Kerberos SPN | \Microsoft Edge\HTTP authentication | Microsoft Edge |
| Supported authentication schemes | \Microsoft Edge\HTTP authentication | Microsoft Edge |
| Configure list of allowed authentication servers | \Microsoft Edge\HTTP authentication | Microsoft Edge |
| Disable CNAME lookup when negotiating Kerberos authentication | \Microsoft Edge\HTTP authentication | Microsoft Edge |
| List of origins that allow all HTTP authentication | \Microsoft Edge\HTTP authentication | Microsoft Edge |
| OneAuth Authentication Flow Enforced for signin | \Microsoft Edge\Identity and sign-in | Microsoft Edge |
| Guided Switch Enabled | \Microsoft Edge\Identity and sign-in | Microsoft Edge |
| Enable the linked account feature | \Microsoft Edge\Identity and sign-in | Microsoft Edge |
| Default Profile Setting Enabled | \Microsoft Edge\Identity and sign-in | Microsoft Edge |
| Only on-premises account enabled for implicit sign-in | \Microsoft Edge\Identity and sign-in | Microsoft Edge |
| Enable implicit sign-in | \Microsoft Edge\Identity and sign-in | Microsoft Edge |
| Enable Picture Dictionary feature within Immersive Reader in Microsoft Edge | \Microsoft Edge\Immersive Reader settings | Microsoft Edge |
| Enable Grammar Tools feature within Immersive Reader in Microsoft Edge | \Microsoft Edge\Immersive Reader settings | Microsoft Edge |
| Delete files downloaded as part of kiosk session when Microsoft Edge closes | \Microsoft Edge\Kiosk Mode settings | Microsoft Edge |
| Configure address bar editing for kiosk mode public browsing experience | \Microsoft Edge\Kiosk Mode settings | Microsoft Edge |
| Swipe gestures in Microsoft Edge kiosk mode enabled | \Microsoft Edge\Kiosk Mode settings | Microsoft Edge |
| Mobile App Management Enabled | \Microsoft Edge\Manageability | Microsoft Edge |
| Configure native messaging block list | \Microsoft Edge\Native Messaging | Microsoft Edge |
| Control which native messaging hosts users can use | \Microsoft Edge\Native Messaging | Microsoft Edge |
| Allow user-level native messaging hosts (installed without admin permissions) | \Microsoft Edge\Native Messaging | Microsoft Edge |
| Restrict the length of passwords that can be saved in the Password Manager | \Microsoft Edge\Password manager and protection | Microsoft Edge |
| Allow users to get a strong password suggestion whenever they are creating an account online | \Microsoft Edge\Password manager and protection | Microsoft Edge |
| Configure password protection warning trigger | \Microsoft Edge\Password manager and protection | Microsoft Edge |
| Configure the list of domains for which the password manager UI (Save and Fill) will be disabled | \Microsoft Edge\Password manager and protection | Microsoft Edge |
| Configures a setting that asks users to enter their device password while using password autofill | \Microsoft Edge\Password manager and protection | Microsoft Edge |
| Configures a setting that asks users to enter their device password while using password autofill | \Microsoft Edge\Password manager and protection | Microsoft Edge |
| Configure the change password URL | \Microsoft Edge\Password manager and protection | Microsoft Edge |
| Configure the list of enterprise login URLs where the password protection service should capture salted hashes of a password | \Microsoft Edge\Password manager and protection | Microsoft Edge |
| Enable saving passwords to the password manager | \Microsoft Edge\Password manager and protection | Microsoft Edge |
| Allow users to be alerted if their passwords are found to be unsafe | \Microsoft Edge\Password manager and protection | Microsoft Edge |
| Enable efficiency mode when the device is connected to a power source | \Microsoft Edge\Performance | Microsoft Edge |
| Performance Detector Enabled | \Microsoft Edge\Performance | Microsoft Edge |
| Enable startup boost | \Microsoft Edge\Performance | Microsoft Edge |
| Configure when efficiency mode should become active | \Microsoft Edge\Performance | Microsoft Edge |
| Efficiency mode enabled | \Microsoft Edge\Performance | Microsoft Edge |
| Configure when efficiency mode should become active | \Microsoft Edge\Performance | Microsoft Edge |
| Allow Tab capture by these origins | \Microsoft Edge\Permit or deny screen capture | Microsoft Edge |
| Allow Desktop, Window, and Tab capture by these origins | \Microsoft Edge\Permit or deny screen capture | Microsoft Edge |
| Allow Same Origin Tab capture by these origins | \Microsoft Edge\Permit or deny screen capture | Microsoft Edge |
| Allow Window and Tab capture by these origins | \Microsoft Edge\Permit or deny screen capture | Microsoft Edge |
| Print PDF as Image Default | \Microsoft Edge\Printing | Microsoft Edge |
| Print Rasterization Mode | \Microsoft Edge\Printing | Microsoft Edge |
| Default printer selection rules | \Microsoft Edge\Printing | Microsoft Edge |
| Disable printer types on the deny list | \Microsoft Edge\Printing | Microsoft Edge |
| Restrict background graphics printing mode | \Microsoft Edge\Printing | Microsoft Edge |
| Print using system print dialog | \Microsoft Edge\Printing | Microsoft Edge |
| Enable printing | \Microsoft Edge\Printing | Microsoft Edge |
| Print PostScript Mode | \Microsoft Edge\Printing | Microsoft Edge |
| Print Rasterize PDF DPI | \Microsoft Edge\Printing | Microsoft Edge |
| Sets layout for printing | \Microsoft Edge\Printing | Microsoft Edge |
| Default background graphics printing mode | \Microsoft Edge\Printing | Microsoft Edge |
| Default printing page size | \Microsoft Edge\Printing | Microsoft Edge |
| Configure the sticky print preview settings | \Microsoft Edge\Printing | Microsoft Edge |
| Print preview sticky settings | \Microsoft Edge\Printing | Microsoft Edge |
| Set the system default printer as the default printer | \Microsoft Edge\Printing | Microsoft Edge |
| Print headers and footers | \Microsoft Edge\Printing | Microsoft Edge |
| Allow the listed sites to make requests to more-private network endpoints from insecure contexts | \Microsoft Edge\Private Network Request Settings | Microsoft Edge |
| Specifies whether to allow insecure websites to make requests to more-private network endpoints | \Microsoft Edge\Private Network Request Settings | Microsoft Edge |
| Proxy settings | \Microsoft Edge\Proxy server | Microsoft Edge |
| Configure address or URL of proxy server (deprecated) | \Microsoft Edge\Proxy server | Microsoft Edge |
| Configure proxy server settings (deprecated) | \Microsoft Edge\Proxy server | Microsoft Edge |
| Configure proxy bypass rules (deprecated) | \Microsoft Edge\Proxy server | Microsoft Edge |
| Set the proxy .pac file URL (deprecated) | \Microsoft Edge\Proxy server | Microsoft Edge |
| Configure sleeping tabs | \Microsoft Edge\Sleeping tabs settings | Microsoft Edge |
| Block sleeping tabs on specific sites | \Microsoft Edge\Sleeping tabs settings | Microsoft Edge |
| Set the background tab inactivity timeout for sleeping tabs | \Microsoft Edge\Sleeping tabs settings | Microsoft Edge |
| Configure Microsoft Defender SmartScreen | \Microsoft Edge\SmartScreen settings | Microsoft Edge |
| Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads | \Microsoft Edge\SmartScreen settings | Microsoft Edge |
| Enable Microsoft Defender SmartScreen DNS requests | \Microsoft Edge\SmartScreen settings | Microsoft Edge |
| Prevent bypassing Microsoft Defender SmartScreen prompts for sites | \Microsoft Edge\SmartScreen settings | Microsoft Edge |
| Enable new SmartScreen library | \Microsoft Edge\SmartScreen settings | Microsoft Edge |
| Configure the list of domains for which Microsoft Defender SmartScreen won’t trigger warnings | \Microsoft Edge\SmartScreen settings | Microsoft Edge |
| Configure Microsoft Defender SmartScreen to block potentially unwanted apps | \Microsoft Edge\SmartScreen settings | Microsoft Edge |
| Force Microsoft Defender SmartScreen checks on downloads from trusted sources | \Microsoft Edge\SmartScreen settings | Microsoft Edge |
| Configure the Microsoft Edge new tab page experience (deprecated) | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Allow quick links on the new tab page | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Show Home button on toolbar | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Hide the default top sites from the new tab page | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Configure the home page URL | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Configure the new tab page URL | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Hide App Launcher on Microsoft Edge new tab page | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Set the new tab page as the home page | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Action to take on startup | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Set new tab page company logo (obsolete) | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Configure the background types allowed for the new tab page layout | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Allow users to add and remove their own sites during startup when the RestoreOnStartupURLs policy is configured | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Set new tab page quick links | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Enable preload of the new tab page for faster rendering | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Sites to open when the browser starts | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Allow Microsoft News content on the new tab page | \Microsoft Edge\Startup, home page and new tab page | Microsoft Edge |
| Configure Edge TyposquattingChecker | \Microsoft Edge\TyposquattingChecker settings | Microsoft Edge |
| Default Office theme | \Microsoft Office 2016€ (Machine)\Global Options\Customize | Microsoft Office |
| Use a device-based license for Microsoft 365 Apps for enterprise€ | \Microsoft Office 2016€ (Machine)\Licensing Settings | Microsoft Office |
| Enable EDU Org ID Sign In in Office from Windows Store | \Microsoft Office 2016€ (Machine)\Licensing Settings | Microsoft Office |
| Use Viewer Mode | \Microsoft Office 2016€ (Machine)\Licensing Settings | Microsoft Office |
| Allow extended offline use for Office 365 ProPlus€ | \Microsoft Office 2016 (Machine)\Licensing Settings | Microsoft Office |
| Use shared computer activation | \Microsoft Office 2016 (Machine)\Licensing Settings | Microsoft Office |
| Specify the location to save the licensing token used by shared computer activation | \Microsoft Office 2016 (Machine)\Licensing Settings | Microsoft Office |
| Prevent document inspectors from running | \Microsoft Office 2016 (Machine)\Miscellaneous | Microsoft Office |
| Age out documents older than n days | \Microsoft Office 2016 (Machine)\Miscellaneous | Microsoft Office |
| File Previewing | \Microsoft Office 2016 (Machine)\Miscellaneous | Microsoft Office |
| Age out the locally cached copies of server document versions that are more than n days old | \Microsoft Office 2016 (Machine)\Miscellaneous | Microsoft Office |
| Open Directly in Office Client Application | \Microsoft Office 2016 (Machine)\Miscellaneous | Microsoft Office |
| Set the max size of the Office Document Cache | \Microsoft Office 2016 (Machine)\Miscellaneous | Microsoft Office |
| Show the Update Channel option to allow users to select an update channel | \Microsoft Office 2016 (Machine)\Miscellaneous | Microsoft Office |
| Disable Password Caching | \Microsoft Office 2016 (Machine)\Security Settings | Microsoft Office |
| Disable VBA for Office applications | \Microsoft Office 2016 (Machine)\Security Settings | Microsoft Office |
| Graphics filter import | \Microsoft Office 2016 (Machine)\Security Settings | Microsoft Office |
| Disable Package Repair | \Microsoft Office 2016 (Machine)\Security Settings | Microsoft Office |
| Navigate URL | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Scripted Window Security Restrictions | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Restrict File Download | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Add-on Management | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Saved from URL | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Mime Sniffing Safety Feature | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Information Bar | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Disable user name and password | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Bind to object | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Block popups | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Restrict ActiveX Install | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Local Machine Zone Lockdown Security | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Protection From Zone Elevation | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Object Caching Protection | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Consistent Mime Handling | \Microsoft Office 2016 (Machine)\Security Settings\IE Security | Microsoft Office |
| Delay downloading and installing updates for Office | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Update Channel | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Target Version | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Upgrade Office 2019 to Microsoft 365 Apps for enterprise€ | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Online Repair | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Don?t install Microsoft Teams€ with new installations or updates of Office | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Prevent Office from being updated to a specific version | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Update Path | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Update Deadline | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Management of Microsoft 365 Apps for enterprise€ | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Hide option to enable or disable updates | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Prioritize BITS | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Hide Update Notifications | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Don?t install a background service for Microsoft Search in Bing | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Update Channel | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Enable Automatic Updates | \Microsoft Office 2016 (Machine)\Updates | Microsoft Office |
| Prevent Token Activation dialog from closing | \Microsoft Office 2016 (Machine)\Volume Activation | Microsoft Office |
| Use only Token Activation | \Microsoft Office 2016 (Machine)\Volume Activation | Microsoft Office |
| Allow Map Charts to send geographic data to Bing | \Microsoft Office 2016\Graph settings | Microsoft Office |
| Turn on an external converter as the default for a file extension | \Microsoft PowerPoint 2016 (Machine)\Converters | Microsoft PowerPoint |
| Configure SMB v1 server | \MS Security Guide | Security |
| WDigest Authentication (disabling may require KB2871997) | \MS Security Guide | Security |
| Block Flash activation in Office documents | \MS Security Guide | Security |
| Configure SMB v1 client driver | \MS Security Guide | Security |
| Apply UAC restrictions to local accounts on network logons | \MS Security Guide | Security |
| Turn on Windows Defender protection against Potentially Unwanted Applications (DEPRECATED) | \MS Security Guide | Security |
| Enable Structured Exception Handling Overwrite Protection (SEHOP) | \MS Security Guide | Security |
| Restrict legacy JScript execution for Office | \MS Security Guide | Security |
| MSS: (AutoShareWks) Enable Administrative Shares (recommended except for highly secure environments) | \MSS (Legacy) | Security |
| MSS: (SynAttackProtect) Syn attack protection level (protects against DoS) | \MSS (Legacy) | Security |
| MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted (3 recommended, 5 is default) | \MSS (Legacy) | Security |
| MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS) | \MSS (Legacy) | Security |
| MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing) | \MSS (Legacy) | Security |
| MSS: (AutoReboot) Allow Windows to automatically restart after a system crash (recommended except for highly secure environments) | \MSS (Legacy) | Security |
| MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes | \MSS (Legacy) | Security |
| MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic. | \MSS (Legacy) | Security |
| MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds | \MSS (Legacy) | Security |
| MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended) | \MSS (Legacy) | Security |
| MSS: (TcpMaxConnectResponseRetransmissions) SYN-ACK retransmissions when a connection request is not acknowledged | \MSS (Legacy) | Security |
| MSS: (AutoShareServer) Enable Administrative Shares (recommended except for highly secure environments) | \MSS (Legacy) | Security |
| MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted (3 recommended, 5 is default) | \MSS (Legacy) | Security |
| MSS: (DisableSavePassword) Prevent the dial-up passsword from being saved (recommended) | \MSS (Legacy) | Security |
| MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers | \MSS (Legacy) | Security |
| MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing) | \MSS (Legacy) | Security |
| MSS: (Hidden) Hide Computer From the Browse List (not recommended except for highly secure environments) | \MSS (Legacy) | Security |
| MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended) | \MSS (Legacy) | Security |
| MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning | \MSS (Legacy) | Security |
| MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended) | \MSS (Legacy) | Security |
| MSS: (NtfsDisable8dot3NameCreation) Enable the computer to stop generating 8.3 style filenames | \MSS (Legacy) | Security |
| MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS) | \MSS (Legacy) | Security |
| Configure how often a DFS client discovers domain controllers | \Network | Network |
| Do not allow the BITS client to use Windows Branch Cache | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Allow BITS Peercaching | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Limit the maximum number of BITS jobs for this computer | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Set up a maintenance schedule to limit the maximum network bandwidth used for BITS background transfers | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Limit the BITS Peercache size | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Do not allow the computer to act as a BITS Peercaching client | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Set up a work schedule to limit the maximum network bandwidth used for BITS background transfers | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Do not allow the computer to act as a BITS Peercaching server | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Limit the maximum BITS job download time | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Limit the age of files in the BITS Peercache | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Limit the maximum number of BITS jobs for each user | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Limit the maximum number of files allowed in a BITS job | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Limit the maximum network bandwidth used for Peercaching | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Limit the maximum number of ranges that can be added to the file in a BITS job | \Network\Background Intelligent Transfer Service (BITS) | Network |
| Set percentage of disk space used for client computer cache | \Network\BranchCache | Network |
| Configure Hosted Cache Servers | \Network\BranchCache | Network |
| Set BranchCache Hosted Cache mode | \Network\BranchCache | Network |
| Set age for segments in the data cache | \Network\BranchCache | Network |
| Configure BranchCache for network files | \Network\BranchCache | Network |
| Enable Automatic Hosted Cache Discovery by Service Connection Point | \Network\BranchCache | Network |
| Set BranchCache Distributed Cache mode | \Network\BranchCache | Network |
| Configure Client BranchCache Version Support | \Network\BranchCache | Network |
| Turn on BranchCache | \Network\BranchCache | Network |
| Corporate Resources | \Network\DirectAccess Client Experience Settings | Network |
| IPsec Tunnel Endpoints | \Network\DirectAccess Client Experience Settings | Network |
| DirectAccess Passive Mode | \Network\DirectAccess Client Experience Settings | Network |
| User Interface | \Network\DirectAccess Client Experience Settings | Network |
| Friendly Name | \Network\DirectAccess Client Experience Settings | Network |
| Custom Commands | \Network\DirectAccess Client Experience Settings | Network |
| Support Email Address | \Network\DirectAccess Client Experience Settings | Network |
| Prefer Local Names Allowed | \Network\DirectAccess Client Experience Settings | Network |
| Connection-specific DNS suffix | \Network\DNS Client | Network |
| Turn off smart multi-homed name resolution | \Network\DNS Client | Network |
| Primary DNS suffix devolution | \Network\DNS Client | Network |
| Register PTR records | \Network\DNS Client | Network |
| Turn off multicast name resolution | \Network\DNS Client | Network |
| DNS servers | \Network\DNS Client | Network |
| Turn off smart protocol reordering | \Network\DNS Client | Network |
| Prefer link local responses over DNS when received over a network with higher precedence | \Network\DNS Client | Network |
| Primary DNS suffix | \Network\DNS Client | Network |
| Turn off IDN encoding | \Network\DNS Client | Network |
| Register DNS records with connection-specific DNS suffix | \Network\DNS Client | Network |
| Allow DNS suffix appending to unqualified multi-label name queries | \Network\DNS Client | Network |
| IDN mapping | \Network\DNS Client | Network |
| Replace addresses in conflicts | \Network\DNS Client | Network |
| DNS suffix search list | \Network\DNS Client | Network |
| Allow NetBT queries for fully qualified domain names | \Network\DNS Client | Network |
| Registration refresh interval | \Network\DNS Client | Network |
| Dynamic update | \Network\DNS Client | Network |
| Update top level domain zones | \Network\DNS Client | Network |
| Update security level | \Network\DNS Client | Network |
| TTL value for A and PTR records | \Network\DNS Client | Network |
| Primary DNS suffix devolution level | \Network\DNS Client | Network |
| Enable Hotspot Authentication | \Network\Hotspot Authentication | Network |
| Cipher suite order | \Network\Lanman Server | Security |
| Hash Publication for BranchCache | \Network\Lanman Server | Security |
| Honor cipher suite order | \Network\Lanman Server | Security |
| Hash Version support for BranchCache | \Network\Lanman Server | Security |
| Offline Files Availability on Continuous Availability Shares | \Network\Lanman Workstation | Security |
| Handle Caching on Continuous Availability Shares | \Network\Lanman Workstation | Security |
| Cipher suite order | \Network\Lanman Workstation | Security |
| Turn on Responder (RSPNDR) driver | \Network\Link-Layer Topology Discovery | Network |
| Turn on Mapper I/O (LLTDIO) driver | \Network\Link-Layer Topology Discovery | Network |
| Do not show the „local access only“ network icon | \Network\Network Connections | Network |
| Require domain users to elevate when setting a network’s location | \Network\Network Connections | Network |
| Prohibit installation and configuration of Network Bridge on your DNS domain network | \Network\Network Connections | Network |
| Route all traffic through the internal network | \Network\Network Connections | Network |
| Prohibit use of Internet Connection Firewall on your DNS domain network | \Network\Network Connections | Network |
| Prohibit use of Internet Connection Sharing on your DNS domain network | \Network\Network Connections | Network |
| Specify corporate DNS probe host name | \Network\Network Connectivity Status Indicator | Network |
| Specify passive polling | \Network\Network Connectivity Status Indicator | Network |
| Specify domain location determination URL | \Network\Network Connectivity Status Indicator | Network |
| Specify corporate site prefix list | \Network\Network Connectivity Status Indicator | Network |
| Specify corporate Website probe URL | \Network\Network Connectivity Status Indicator | Network |
| Specify global DNS | \Network\Network Connectivity Status Indicator | Network |
| Specify corporate DNS probe host address | \Network\Network Connectivity Status Indicator | Network |
| Hardened UNC Paths | \Network\Network Provider | Network |
| At logoff, delete local copy of user?s offline files | \Network\Offline Files | Network |
| Remove „Make Available Offline“ for these files and folders | \Network\Offline Files | Network |
| Remove „Work offline“ command | \Network\Offline Files | Network |
| Enable file synchronization on costed networks | \Network\Offline Files | Network |
| Default cache size | \Network\Offline Files | Network |
| Synchronize all offline files before logging off | \Network\Offline Files | Network |
| Initial reminder balloon lifetime | \Network\Offline Files | Network |
| Reminder balloon lifetime | \Network\Offline Files | Network |
| Action on server disconnect | \Network\Offline Files | Network |
| Reminder balloon frequency | \Network\Offline Files | Network |
| Event logging level | \Network\Offline Files | Network |
| Files not cached | \Network\Offline Files | Network |
| Turn on economical application of administratively assigned Offline Files | \Network\Offline Files | Network |
| Turn off reminder balloons | \Network\Offline Files | Network |
| Configure Background Sync | \Network\Offline Files | Network |
| Configure Slow link speed | \Network\Offline Files | Network |
| Allow or Disallow use of the Offline Files feature | \Network\Offline Files | Network |
| Synchronize offline files before suspend | \Network\Offline Files | Network |
| Non-default server disconnect actions | \Network\Offline Files | Network |
| Specify administratively assigned Offline Files | \Network\Offline Files | Network |
| Enable file screens | \Network\Offline Files | Network |
| Configure slow-link mode | \Network\Offline Files | Network |
| Remove „Make Available Offline“ command | \Network\Offline Files | Network |
| Enable Transparent Caching | \Network\Offline Files | Network |
| Encrypt the Offline Files cache | \Network\Offline Files | Network |
| Prevent use of Offline Files folder | \Network\Offline Files | Network |
| Subfolders always available offline | \Network\Offline Files | Network |
| Prohibit user configuration of Offline Files | \Network\Offline Files | Network |
| Synchronize all offline files when logging on | \Network\Offline Files | Network |
| Limit disk space used by Offline Files | \Network\Offline Files | Network |
| Limit reservable bandwidth | \Network\QoS Packet Scheduler | Network |
| Limit outstanding packets | \Network\QoS Packet Scheduler | Network |
| Set timer resolution | \Network\QoS Packet Scheduler | Network |
| Controlled load service type | \Network\QoS Packet Scheduler\DSCP value of conforming packets | Network |
| Qualitative service type | \Network\QoS Packet Scheduler\DSCP value of conforming packets | Network |
| Best effort service type | \Network\QoS Packet Scheduler\DSCP value of conforming packets | Network |
| Guaranteed service type | \Network\QoS Packet Scheduler\DSCP value of conforming packets | Network |
| Network control service type | \Network\QoS Packet Scheduler\DSCP value of conforming packets | Network |
| Qualitative service type | \Network\QoS Packet Scheduler\DSCP value of non-conforming packets | Network |
| Controlled load service type | \Network\QoS Packet Scheduler\DSCP value of non-conforming packets | Network |
| Best effort service type | \Network\QoS Packet Scheduler\DSCP value of non-conforming packets | Network |
| Network control service type | \Network\QoS Packet Scheduler\DSCP value of non-conforming packets | Network |
| Guaranteed service type | \Network\QoS Packet Scheduler\DSCP value of non-conforming packets | Network |
| Guaranteed service type | \Network\QoS Packet Scheduler\Layer-2 priority value | Network |
| Qualitative service type | \Network\QoS Packet Scheduler\Layer-2 priority value | Network |
| Non-conforming packets | \Network\QoS Packet Scheduler\Layer-2 priority value | Network |
| Controlled load service type | \Network\QoS Packet Scheduler\Layer-2 priority value | Network |
| Best effort service type | \Network\QoS Packet Scheduler\Layer-2 priority value | Network |
| Network control service type | \Network\QoS Packet Scheduler\Layer-2 priority value | Network |
| Specify traps for public community | \Network\SNMP | Network |
| Specify communities | \Network\SNMP | Network |
| Specify permitted managers | \Network\SNMP | Network |
| ECC Curve Order | \Network\SSL Configuration Settings | Security |
| SSL Cipher Suite Order | \Network\SSL Configuration Settings | Security |
| Set Teredo Refresh Rate | \Network\TCPIP Settings\IPv6 Transition Technologies | Network |
| Set Teredo Default Qualified | \Network\TCPIP Settings\IPv6 Transition Technologies | Network |
| Set ISATAP State | \Network\TCPIP Settings\IPv6 Transition Technologies | Network |
| Set 6to4 Relay Name | \Network\TCPIP Settings\IPv6 Transition Technologies | Network |
| Set Teredo State | \Network\TCPIP Settings\IPv6 Transition Technologies | Network |
| Set IP-HTTPS State | \Network\TCPIP Settings\IPv6 Transition Technologies | Network |
| Set ISATAP Router Name | \Network\TCPIP Settings\IPv6 Transition Technologies | Network |
| Set 6to4 State | \Network\TCPIP Settings\IPv6 Transition Technologies | Network |
| Set Teredo Client Port | \Network\TCPIP Settings\IPv6 Transition Technologies | Network |
| Set Teredo Server Name | \Network\TCPIP Settings\IPv6 Transition Technologies | Network |
| Set 6to4 Relay Name Resolution Interval | \Network\TCPIP Settings\IPv6 Transition Technologies | Network |
| Set IP Stateless Autoconfiguration Limits State | \Network\TCPIP Settings\Parameters | Network |
| Set Window Scaling Heuristics State | \Network\TCPIP Settings\Parameters | Network |
| Prohibit access of the Windows Connect Now wizards | \Network\Windows Connect Now | Network |
| Configuration of wireless settings using Windows Connect Now | \Network\Windows Connect Now | Network |
| Disable power management in connected standby mode | \Network\Windows Connection Manager | Network |
| Prohibit connection to non-domain networks when connected to domain authenticated network | \Network\Windows Connection Manager | Network |
| Enable Windows to soft-disconnect a computer from a network | \Network\Windows Connection Manager | Network |
| Minimize the number of simultaneous connections to the Internet or a Windows Domain | \Network\Windows Connection Manager | Network |
| Prefer PIN pairing | \Network\Wireless Display | Network |
| Require PIN pairing | \Network\Wireless Display | Network |
| Set Cost | \Network\WLAN Service\WLAN Media Cost | Network |
| Set 3G Cost | \Network\WWAN Service\WWAN Media Cost | Network |
| Set 4G Cost | \Network\WWAN Service\WWAN Media Cost | Network |
| Set Per-App Cellular Access UI Visibility | \Network\WWAN Service\WWAN UI Settings | Network |
| Configure team site libraries to sync automatically | \OneDrive | Microsoft OneDrive |
| Prevent the sync app from generating network traffic until users sign in | \OneDrive | Microsoft OneDrive |
| Set the maximum size of a user’s OneDrive that can download automatically | \OneDrive | Microsoft OneDrive |
| Allow OneDrive to disable Windows permission inheritance in folders synced read-only | \OneDrive | Microsoft OneDrive |
| Block syncing OneDrive accounts for specific organizations | \OneDrive | Microsoft OneDrive |
| Convert synced team site files to online-only files | \OneDrive | Microsoft OneDrive |
| Always use the user’s Windows display language when provisioning known folders in OneDrive | \OneDrive | Microsoft OneDrive |
| Enable automatic upload bandwidth management for OneDrive | \OneDrive | Microsoft OneDrive |
| Set the sync app update ring | \OneDrive | Microsoft OneDrive |
| Hide the „Deleted files are removed everywhere“ reminder | \OneDrive | Microsoft OneDrive |
| Disable silently sign in users to the OneDrive sync app with an existing credential that is made available to Microsoft applications | \OneDrive | Microsoft OneDrive |
| Prevent users from redirecting their Windows known folders to their PC | \OneDrive | Microsoft OneDrive |
| Exclude specific kinds of files from being uploaded | \OneDrive | Microsoft OneDrive |
| Prompt users when they delete multiple OneDrive files on their local computer | \OneDrive | Microsoft OneDrive |
| Enable sync health reporting for OneDrive | \OneDrive | Microsoft OneDrive |
| Silently move Windows known folders to OneDrive | \OneDrive | Microsoft OneDrive |
| Warn users who are low on disk space | \OneDrive | Microsoft OneDrive |
| Specify SharePoint Server URL and organization name | \OneDrive | Microsoft OneDrive |
| ?Allow users to contact Microsoft for feedback and support | \OneDrive | Microsoft OneDrive |
| Prevent users from moving their Windows known folders to OneDrive | \OneDrive | Microsoft OneDrive |
| Silently sign in users to the OneDrive sync app with their Windows credentials | \OneDrive | Microsoft OneDrive |
| Prompt users to move Windows known folders to OneDrive | \OneDrive | Microsoft OneDrive |
| Allow syncing OneDrive accounts for only specific organizations | \OneDrive | Microsoft OneDrive |
| Sync Admin Reports | \OneDrive | Microsoft OneDrive |
| Silently move Windows known folders to OneDrive | \OneDrive | Microsoft OneDrive |
| Limit the sync app upload rate to a percentage of throughput | \OneDrive | Microsoft OneDrive |
| Prevent users from syncing libraries and folders shared from other organizations | \OneDrive | Microsoft OneDrive |
| Specify the OneDrive location in a hybrid environment | \OneDrive | Microsoft OneDrive |
| Use OneDrive Files On-Demand | \OneDrive | Microsoft OneDrive |
| Block file downloads when users are low on disk space | \OneDrive | Microsoft OneDrive |
| Cause sync client to ignore normal web proxy detection logic | \OneDrive | Microsoft OneDrive |
| Require users to confirm large delete operations | \OneDrive | Microsoft OneDrive |
| Add Printer wizard – Network scan page (Managed network) | \Printers | Printers |
| Isolate print drivers from applications | \Printers | Printers |
| Extend Point and Print connection to search Windows Update | \Printers | Printers |
| Enable Device Control Printing Restrictions | \Printers | Printers |
| Allow printers to be published | \Printers | Printers |
| List of Approved USB-connected print devices | \Printers | Printers |
| Activate Internet printing | \Printers | Printers |
| Directory pruning priority | \Printers | Printers |
| Change Microsoft XPS Document Writer (MXDW) default output format to the legacy Microsoft XPS format (*.xps) | \Printers | Printers |
| Directory pruning interval | \Printers | Printers |
| Custom support URL in the Printers folder’s left pane | \Printers | Printers |
| Log directory pruning retry events | \Printers | Printers |
| Disallow installation of printers using kernel-mode drivers | \Printers | Printers |
| Override print driver execution compatibility setting reported by print driver | \Printers | Printers |
| Allow pruning of published printers | \Printers | Printers |
| Point and Print Restrictions | \Printers | Printers |
| Add Printer wizard – Network scan page (Unmanaged network) | \Printers | Printers |
| Allow Print Spooler to accept client connections | \Printers | Printers |
| Directory pruning retry | \Printers | Printers |
| Allow job name in event logs | \Printers | Printers |
| Only use Package Point and print | \Printers | Printers |
| Always render print jobs on the server | \Printers | Printers |
| Pre-populate printer search location text | \Printers | Printers |
| Automatically publish new printers in Active Directory | \Printers | Printers |
| Prune printers that are not automatically republished | \Printers | Printers |
| Always rasterize content to be printed using a software rasterizer | \Printers | Printers |
| Package Point and print – Approved servers | \Printers | Printers |
| Execute print drivers in isolated processes | \Printers | Printers |
| Check published state | \Printers | Printers |
| Computer location | \Printers | Printers |
| Printer browsing | \Printers | Printers |
| Do not allow v4 printer drivers to show printer extensions | \Printers | Printers |
| Allow storage of user passwords | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Prevent users from running Microsoft Lync | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Additional server versions supported | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Specify server | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Require logon credentials | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Enable using BITS to download Address Book Service files | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Disable automatic upload of sign-in failure logs | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Disable HTTP fallback for SIP connection | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Configure SIP compression mode | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Global Address Book Download Initial Delay | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Trusted Domain List | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Configure SIP security mode | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Disable server version check | \Skype for Business 2016\Microsoft Lync Feature Policies | Microsoft Skype for Business |
| Remove All Programs list from the Start menu | \Start Menu and Taskbar | Other |
| Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands | \Start Menu and Taskbar | Other |
| Pin Apps to Start when installed | \Start Menu and Taskbar | Other |
| Enable Persistent Time Stamp | \System | Other |
| Allow Distributed Link Tracking clients to use domain resources | \System | Other |
| Download missing COM components | \System | Other |
| Restrict potentially unsafe HTML Help functions to specified folders | \System | Other |
| Specify settings for optional component installation and component repair | \System | Other |
| Do not automatically encrypt files moved to encrypted folders | \System | Other |
| Restrict these programs from being launched from Help | \System | Other |
| Display Shutdown Event Tracker | \System | Other |
| Display highly detailed status messages | \System | Other |
| Remove Boot / Shutdown / Logon / Logoff status messages | \System | Other |
| Do not display Manage Your Server page at logon | \System | Other |
| Turn off Data Execution Prevention for HTML Help Executible | \System | Other |
| Activate Shutdown Event Tracker System State Data feature | \System | Other |
| Do not turn off system power after a Windows system shutdown has occurred. | \System | Other |
| Customize message for Access Denied errors | \System\Access-Denied Assistance | Security |
| Enable access-denied assistance on client for all file types | \System\Access-Denied Assistance | Security |
| Enable App-V Client | \System\App-V | Microsoft App-V |
| Enable Migration Mode | \System\App-V\Client Coexistence | Microsoft App-V |
| Integration Root User | \System\App-V\Integration | Microsoft App-V |
| Roaming Registry Exclusions | \System\App-V\Integration | Microsoft App-V |
| Roaming File Exclusions | \System\App-V\Integration | Microsoft App-V |
| Integration Root Global | \System\App-V\Integration | Microsoft App-V |
| Enable automatic cleanup of unused appv packages | \System\App-V\PackageManagement | Microsoft App-V |
| Publishing Server 4 Settings | \System\App-V\Publishing | Microsoft App-V |
| Publishing Server 1 Settings | \System\App-V\Publishing | Microsoft App-V |
| Publishing Server 5 Settings | \System\App-V\Publishing | Microsoft App-V |
| Publishing Server 3 Settings | \System\App-V\Publishing | Microsoft App-V |
| Publishing Server 2 Settings | \System\App-V\Publishing | Microsoft App-V |
| Enable Publishing Refresh UX | \System\App-V\Publishing | Microsoft App-V |
| Reporting Server | \System\App-V\Reporting | Microsoft App-V |
| Enable Package Scripts | \System\App-V\Scripting | Microsoft App-V |
| Certificate Filter For Client SSL | \System\App-V\Streaming | Microsoft App-V |
| Verify certificate revocation list | \System\App-V\Streaming | Microsoft App-V |
| Shared Content Store (SCS) mode | \System\App-V\Streaming | Microsoft App-V |
| Specify what to load in background (aka AutoLoad) | \System\App-V\Streaming | Microsoft App-V |
| Reestablishment Retries | \System\App-V\Streaming | Microsoft App-V |
| Enable Support for BranchCache | \System\App-V\Streaming | Microsoft App-V |
| Allow First Time Application Launches if on a High Cost Windows 8 Metered Connection | \System\App-V\Streaming | Microsoft App-V |
| Package Source Root | \System\App-V\Streaming | Microsoft App-V |
| Reestablishment Interval | \System\App-V\Streaming | Microsoft App-V |
| Package Installation Root | \System\App-V\Streaming | Microsoft App-V |
| Location Provider | \System\App-V\Streaming | Microsoft App-V |
| Virtual Component Process Allow List | \System\App-V\Virtualization | Microsoft App-V |
| Enable Dynamic Virtualization | \System\App-V\Virtualization | Microsoft App-V |
| Include command line in process creation events | \System\Audit Process Creation | Other |
| Deny delegating default credentials | \System\Credentials Delegation | Security |
| Allow delegating saved credentials | \System\Credentials Delegation | Security |
| Allow delegating fresh credentials | \System\Credentials Delegation | Security |
| Deny delegating saved credentials | \System\Credentials Delegation | Security |
| Encryption Oracle Remediation | \System\Credentials Delegation | Security |
| Restrict delegation of credentials to remote servers | \System\Credentials Delegation | Security |
| Allow delegating saved credentials with NTLM-only server authentication | \System\Credentials Delegation | Security |
| Allow delegating default credentials with NTLM-only server authentication | \System\Credentials Delegation | Security |
| Allow delegating default credentials | \System\Credentials Delegation | Security |
| Remote host allows delegation of non-exportable credentials | \System\Credentials Delegation | Security |
| Deny delegating fresh credentials | \System\Credentials Delegation | Security |
| Allow delegating fresh credentials with NTLM-only server authentication | \System\Credentials Delegation | Security |
| Deploy Windows Defender Application Control | \System\Device Guard | Security |
| Enable Device Health Attestation Monitoring and Reporting | \System\Device Health Attestation Service | Security |
| Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point | \System\Device Installation | Security |
| Specify search order for device driver source locations | \System\Device Installation | Security |
| Configure device installation time-out | \System\Device Installation | Security |
| Prevent device metadata retrieval from the Internet | \System\Device Installation | Security |
| Turn off „Found New Hardware“ balloons during device installation | \System\Device Installation | Security |
| Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria | \System\Device Installation\Device Installation Restrictions | Security |
| Prevent installation of removable devices | \System\Device Installation\Device Installation Restrictions | Security |
| Allow installation of devices using drivers that match these device setup classes | \System\Device Installation\Device Installation Restrictions | Security |
| Display a custom message when installation is prevented by a policy setting | \System\Device Installation\Device Installation Restrictions | Security |
| Prevent installation of devices not described by other policy settings | \System\Device Installation\Device Installation Restrictions | Security |
| Allow installation of devices that match any of these device IDs | \System\Device Installation\Device Installation Restrictions | Security |
| Prevent installation of devices that match any of these device IDs | \System\Device Installation\Device Installation Restrictions | Security |
| Display a custom message title when device installation is prevented by a policy setting | \System\Device Installation\Device Installation Restrictions | Security |
| Allow administrators to override Device Installation Restriction policies | \System\Device Installation\Device Installation Restrictions | Security |
| Prevent installation of devices that match any of these device instance IDs | \System\Device Installation\Device Installation Restrictions | Security |
| Prevent installation of devices using drivers that match these device setup classes | \System\Device Installation\Device Installation Restrictions | Security |
| Allow installation of devices that match any of these device instance IDs | \System\Device Installation\Device Installation Restrictions | Security |
| Time (in seconds) to force reboot when required for policy changes to take effect | \System\Device Installation\Device Installation Restrictions | Security |
| Turn off non-volatile cache feature | \System\Disk NV Cache | Other |
| Turn off solid state mode | \System\Disk NV Cache | Other |
| Turn off boot and resume optimizations | \System\Disk NV Cache | Other |
| Turn off cache power mode | \System\Disk NV Cache | Other |
| Log event when quota limit is exceeded | \System\Disk Quotas | Other |
| Specify default quota limit and warning level | \System\Disk Quotas | Other |
| Enforce disk quota limit | \System\Disk Quotas | Other |
| Apply policy to removable media | \System\Disk Quotas | Other |
| Enable disk quotas | \System\Disk Quotas | Other |
| Log event when quota warning level is exceeded | \System\Disk Quotas | Other |
| Define Activation Security Check exemptions | \System\Distributed COM\Application Compatibility Settings | Other |
| Allow local activation security check exemptions | \System\Distributed COM\Application Compatibility Settings | Other |
| Allow non-administrators to install drivers for these device setup classes | \System\Driver Installation | Other |
| Boot-Start Driver Initialization Policy | \System\Early Launch Antimalware | Security |
| Allow only USB root hub connected Enhanced Storage devices | \System\Enhanced Storage Access | Other |
| Configure list of Enhanced Storage devices usable on your computer | \System\Enhanced Storage Access | Other |
| Do not allow Windows to activate Enhanced Storage devices | \System\Enhanced Storage Access | Other |
| Do not allow non-Enhanced Storage removable devices | \System\Enhanced Storage Access | Other |
| Do not allow password authentication of Enhanced Storage devices | \System\Enhanced Storage Access | Other |
| Lock Enhanced Storage when the computer is locked | \System\Enhanced Storage Access | Other |
| Configure list of IEEE 1667 silos usable on your computer | \System\Enhanced Storage Access | Other |
| File Classification Infrastructure: Specify classification properties list | \System\File Classification Infrastructure | Other |
| File Classification Infrastructure: Display Classification tab in File Explorer | \System\File Classification Infrastructure | Other |
| Allow or Disallow use of encryption to protect the RPC protocol messages between File Share Shadow Copy Provider running on application server and File Share Shadow Copy Agent running on the file servers. | \System\File Share Shadow Copy Provider | Other |
| Disable delete notifications on all volumes | \System\Filesystem | Other |
| Selectively allow the evaluation of a symbolic link | \System\Filesystem | Other |
| Enable Win32 long paths | \System\Filesystem | Other |
| Enable NTFS pagefile encryption | \System\Filesystem\NTFS | Security |
| Short name creation options | \System\Filesystem\NTFS | Security |
| Do not allow compression on all NTFS volumes | \System\Filesystem\NTFS | Security |
| Enable / disable TXF deprecated features | \System\Filesystem\NTFS | Security |
| Do not allow encryption on all NTFS volumes | \System\Filesystem\NTFS | Security |
| Redirect folders on primary computers only | \System\Folder Redirection | Other |
| Use localized subfolder names when redirecting Start Menu and My Documents | \System\Folder Redirection | Other |
| Configure wireless policy processing | \System\Group Policy | Security |
| Configure software Installation policy processing | \System\Group Policy | Security |
| Phone-PC linking on this device | \System\Group Policy | Security |
| Specify startup policy processing wait time | \System\Group Policy | Security |
| Configure folder redirection policy processing | \System\Group Policy | Security |
| Configure Group Policy Caching | \System\Group Policy | Security |
| Remove users‘ ability to invoke machine policy refresh | \System\Group Policy | Security |
| Continue experiences on this device | \System\Group Policy | Security |
| Configure user Group Policy loopback processing mode | \System\Group Policy | Security |
| Turn off Group Policy Client Service AOAC optimization | \System\Group Policy | Security |
| Determine if interactive users can generate Resultant Set of Policy data | \System\Group Policy | Security |
| Configure EFS recovery policy processing | \System\Group Policy | Security |
| Change Group Policy processing to run asynchronously when a slow network connection is detected. | \System\Group Policy | Security |
| Always use local ADM files for Group Policy Object Editor | \System\Group Policy | Security |
| Turn off Local Group Policy Objects processing | \System\Group Policy | Security |
| Configure security policy processing | \System\Group Policy | Security |
| Enable AD/DFS domain controller synchronization during policy refresh | \System\Group Policy | Security |
| Set Group Policy refresh interval for domain controllers | \System\Group Policy | Security |
| Configure Internet Explorer Maintenance policy processing | \System\Group Policy | Security |
| Turn off background refresh of Group Policy | \System\Group Policy | Security |
| Enable Group Policy Caching for Servers | \System\Group Policy | Security |
| Configure IP security policy processing | \System\Group Policy | Security |
| Configure registry policy processing | \System\Group Policy | Security |
| Configure Direct Access connections as a fast network connection | \System\Group Policy | Security |
| Configure disk quota policy processing | \System\Group Policy | Security |
| Configure scripts policy processing | \System\Group Policy | Security |
| Configure wired policy processing | \System\Group Policy | Security |
| Turn off Resultant Set of Policy logging | \System\Group Policy | Security |
| Allow cross-forest user policy and roaming user profiles | \System\Group Policy | Security |
| Set Group Policy refresh interval for computers | \System\Group Policy | Security |
| Specify workplace connectivity wait time for policy processing | \System\Group Policy | Security |
| Configure Group Policy slow link detection | \System\Group Policy | Security |
| Configure Logon Script Delay | \System\Group Policy | Security |
| Restrict Internet communication | \System\Internet Communication Management | Privacy |
| Turn off Registration if URL connection is referring to Microsoft.com | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off access to the Store | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off Internet download for Web publishing and online ordering wizards | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off the „Publish to Web“ task for files and folders | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off printing over HTTP | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off Event Viewer „Events.asp“ links | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off access to all Windows Update features | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off Windows Customer Experience Improvement Program | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off Windows Update device driver searching | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off Automatic Root Certificates Update | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off Search Companion content file updates | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off Help and Support Center Microsoft Knowledge Base search | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off the Windows Messenger Customer Experience Improvement Program | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off Help and Support Center „Did you know?“ content | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off the „Order Prints“ picture task | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off downloading of print drivers over HTTP | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off Internet File Association service | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Turn off Windows Error Reporting | \System\Internet Communication Management\Internet Communication settings | Privacy |
| Do not allow changes to initiator iqn name | \System\iSCSI\General iSCSI | Other |
| Do not allow additional session logins | \System\iSCSI\General iSCSI | Other |
| Do not allow connections without IPSec | \System\iSCSI\iSCSI Security | Security |
| Do not allow sessions without one way CHAP | \System\iSCSI\iSCSI Security | Security |
| Do not allow sessions without mutual CHAP | \System\iSCSI\iSCSI Security | Security |
| Do not allow changes to initiator CHAP secret | \System\iSCSI\iSCSI Security | Security |
| Do not allow manual configuration of target portals | \System\iSCSI\iSCSI Target Discovery | Other |
| Do not allow manual configuration of iSNS servers | \System\iSCSI\iSCSI Target Discovery | Other |
| Do not allow manual configuration of discovered targets | \System\iSCSI\iSCSI Target Discovery | Other |
| Do not allow adding new targets via manual configuration | \System\iSCSI\iSCSI Target Discovery | Other |
| Provide information about previous logons to client computers | \System\KDC | Security |
| KDC support for claims, compound authentication and Kerberos armoring | \System\KDC | Security |
| Warning for large Kerberos tickets | \System\KDC | Security |
| Use forest search order | \System\KDC | Security |
| KDC support for PKInit Freshness Extension | \System\KDC | Security |
| Request compound authentication | \System\KDC | Security |
| Set maximum Kerberos SSPI context token buffer size | \System\Kerberos | Security |
| Require strict KDC validation | \System\Kerberos | Security |
| Require strict target SPN match on remote procedure calls | \System\Kerberos | Security |
| Disable revocation checking for the SSL certificate of KDC proxy servers | \System\Kerberos | Security |
| Specify KDC proxy servers for Kerberos clients | \System\Kerberos | Security |
| Kerberos client support for claims, compound authentication and Kerberos armoring | \System\Kerberos | Security |
| Always send compound authentication first | \System\Kerberos | Security |
| Use forest search order | \System\Kerberos | Security |
| Define interoperable Kerberos V5 realm settings | \System\Kerberos | Security |
| Fail authentication requests when Kerberos armoring is not available | \System\Kerberos | Security |
| Define host name-to-Kerberos realm mappings | \System\Kerberos | Security |
| Support compound authentication | \System\Kerberos | Security |
| Support device authentication using certificate | \System\Kerberos | Security |
| Disallow selection of Custom Locales | \System\Locale Services | Other |
| Disallow copying of user input methods to the system account for sign-in | \System\Locale Services | Other |
| Restrict system locales | \System\Locale Services | Other |
| Disallow changing of geographic location | \System\Locale Services | Other |
| Disallow user override of locale settings | \System\Locale Services | Other |
| Restrict user locales | \System\Locale Services | Other |
| Turn on convenience PIN sign-in | \System\Logon | Security |
| Do not process the run once list | \System\Logon | Security |
| Show clear logon background | \System\Logon | Security |
| Do not display the Getting Started welcome screen at logon | \System\Logon | Security |
| Allow users to select when a password is required when resuming from connected standby | \System\Logon | Security |
| Run these programs at user logon | \System\Logon | Security |
| Exclude credential providers | \System\Logon | Security |
| Assign a default credential provider | \System\Logon | Security |
| Enumerate local users on domain-joined computers | \System\Logon | Security |
| Turn off app notifications on the lock screen | \System\Logon | Security |
| Do not display network selection UI | \System\Logon | Security |
| Block user from showing account details on sign-in | \System\Logon | Security |
| Turn off picture password sign-in | \System\Logon | Security |
| Do not process the legacy run list | \System\Logon | Security |
| Always use custom logon background | \System\Logon | Security |
| Do not enumerate connected users on domain-joined computers | \System\Logon | Security |
| Always wait for the network at computer startup and logon | \System\Logon | Security |
| Untrusted Font Blocking | \System\Mitigation Options | Security |
| Process Mitigation Options | \System\Mitigation Options | Security |
| Use final DC discovery retry setting for background callers | \System\Net Logon | Security |
| Use initial DC discovery retry setting for background callers | \System\Net Logon | Security |
| Allow cryptography algorithms compatible with Windows NT 4.0 | \System\Net Logon | Security |
| Set SYSVOL share compatibility | \System\Net Logon | Security |
| Use urgent mode when pinging domain controllers | \System\Net Logon | Security |
| Specify maximum log file size | \System\Net Logon | Security |
| Specify negative DC Discovery cache setting | \System\Net Logon | Security |
| Use positive periodic DC cache refresh for background callers | \System\Net Logon | Security |
| Use maximum DC discovery retry interval setting for background callers | \System\Net Logon | Security |
| Specify expected dial-up delay on logon | \System\Net Logon | Security |
| Specify positive periodic DC Cache refresh for non-background callers | \System\Net Logon | Security |
| Specify log file debug output level | \System\Net Logon | Security |
| Specify site name | \System\Net Logon | Security |
| Contact PDC on logon failure | \System\Net Logon | Security |
| Set scavenge interval | \System\Net Logon | Security |
| Set Netlogon share compatibility | \System\Net Logon | Security |
| Specify sites covered by the GC Locator DNS SRV Records | \System\Net Logon\DC Locator DNS Records | Security |
| Use DNS name resolution when a single-label domain name is used, by appending different registered DNS suffixes, if the AllowSingleLabelDnsDomain setting is not enabled. | \System\Net Logon\DC Locator DNS Records | Security |
| Set TTL in the DC Locator DNS Records | \System\Net Logon\DC Locator DNS Records | Security |
| Do not use NetBIOS-based discovery for domain controller location when DNS-based discovery fails | \System\Net Logon\DC Locator DNS Records | Security |
| Try Next Closest Site | \System\Net Logon\DC Locator DNS Records | Security |
| Specify Refresh Interval of the DC Locator DNS records | \System\Net Logon\DC Locator DNS Records | Security |
| Force Rediscovery Interval | \System\Net Logon\DC Locator DNS Records | Security |
| Use DNS name resolution with a single-label domain name instead of NetBIOS name resolution to locate the DC | \System\Net Logon\DC Locator DNS Records | Security |
| Specify DC Locator DNS records not registered by the DCs | \System\Net Logon\DC Locator DNS Records | Security |
| Set Weight in the DC Locator DNS SRV records | \System\Net Logon\DC Locator DNS Records | Security |
| Return domain controller address type | \System\Net Logon\DC Locator DNS Records | Security |
| Specify sites covered by the application directory partition DC Locator DNS SRV records | \System\Net Logon\DC Locator DNS Records | Security |
| Use automated site coverage by the DC Locator DNS SRV Records | \System\Net Logon\DC Locator DNS Records | Security |
| Do not process incoming mailslot messages used for domain controller location based on NetBIOS domain names | \System\Net Logon\DC Locator DNS Records | Security |
| Specify sites covered by the DC Locator DNS SRV records | \System\Net Logon\DC Locator DNS Records | Security |
| Specify dynamic registration of the DC Locator DNS Records | \System\Net Logon\DC Locator DNS Records | Security |
| Set Priority in the DC Locator DNS SRV records | \System\Net Logon\DC Locator DNS Records | Security |
| Specify address lookup behavior for DC locator ping | \System\Net Logon\DC Locator DNS Records | Security |
| Select an active power plan | \System\Power Management | Power Management |
| Specify a custom active power plan | \System\Power Management | Power Management |
| Select the Start menu Power button action (on battery) | \System\Power Management\Button Settings | Power Management |
| Select the Start menu Power button action (plugged in) | \System\Power Management\Button Settings | Power Management |
| Turn Off the hard disk (plugged in) | \System\Power Management\Hard Disk Settings | Power Management |
| Turn Off the hard disk (on battery) | \System\Power Management\Hard Disk Settings | Power Management |
| Reserve battery notification level | \System\Power Management\Notification Settings | Power Management |
| Critical battery notification action | \System\Power Management\Notification Settings | Power Management |
| Critical battery notification level | \System\Power Management\Notification Settings | Power Management |
| Turn off low battery user notification | \System\Power Management\Notification Settings | Power Management |
| Low battery notification action | \System\Power Management\Notification Settings | Power Management |
| Low battery notification level | \System\Power Management\Notification Settings | Power Management |
| Turn off Power Throttling | \System\Power Management\Power Throttling Settings | Power Management |
| Allow applications to prevent automatic sleep (on battery) | \System\Power Management\Sleep Settings | Power Management |
| Require a password when a computer wakes (on battery) | \System\Power Management\Sleep Settings | Power Management |
| Allow applications to prevent automatic sleep (plugged in) | \System\Power Management\Sleep Settings | Power Management |
| Allow network connectivity during connected-standby (plugged in) | \System\Power Management\Sleep Settings | Power Management |
| Specify the system hibernate timeout (on battery) | \System\Power Management\Sleep Settings | Power Management |
| Allow standby states (S1-S3) when sleeping (plugged in) | \System\Power Management\Sleep Settings | Power Management |
| Specify the system hibernate timeout (plugged in) | \System\Power Management\Sleep Settings | Power Management |
| Allow standby states (S1-S3) when sleeping (on battery) | \System\Power Management\Sleep Settings | Power Management |
| Turn on the ability for applications to prevent sleep transitions (plugged in) | \System\Power Management\Sleep Settings | Power Management |
| Allow automatic sleep with Open Network Files (on battery) | \System\Power Management\Sleep Settings | Power Management |
| Allow network connectivity during connected-standby (on battery) | \System\Power Management\Sleep Settings | Power Management |
| Specify the system sleep timeout (plugged in) | \System\Power Management\Sleep Settings | Power Management |
| Turn on the ability for applications to prevent sleep transitions (on battery) | \System\Power Management\Sleep Settings | Power Management |
| Specify the system sleep timeout (on battery) | \System\Power Management\Sleep Settings | Power Management |
| Allow automatic sleep with Open Network Files (plugged in) | \System\Power Management\Sleep Settings | Power Management |
| Require a password when a computer wakes (plugged in) | \System\Power Management\Sleep Settings | Power Management |
| Turn off the display (plugged in) | \System\Power Management\Video and Display Settings | Power Management |
| Turn off the display (on battery) | \System\Power Management\Video and Display Settings | Power Management |
| Turn on desktop background slideshow (plugged in) | \System\Power Management\Video and Display Settings | Power Management |
| Turn on desktop background slideshow (on battery) | \System\Power Management\Video and Display Settings | Power Management |
| Allow only Windows Vista or later connections | \System\Remote Assistance | Remote Assistance |
| Configure Solicited Remote Assistance | \System\Remote Assistance | Remote Assistance |
| Turn on session logging | \System\Remote Assistance | Remote Assistance |
| Customize warning messages | \System\Remote Assistance | Remote Assistance |
| Turn on bandwidth optimization | \System\Remote Assistance | Remote Assistance |
| Configure Offer Remote Assistance | \System\Remote Assistance | Remote Assistance |
| Ignore Delegation Failure | \System\Remote Procedure Call | Other |
| Propagate extended error information | \System\Remote Procedure Call | Other |
| Restrict Unauthenticated RPC clients | \System\Remote Procedure Call | Other |
| Enable RPC Endpoint Mapper Client Authentication | \System\Remote Procedure Call | Other |
| Maintain RPC Troubleshooting State Information | \System\Remote Procedure Call | Other |
| Set Minimum Idle Connection Timeout for RPC/HTTP connections | \System\Remote Procedure Call | Other |
| Floppy Drives: Deny write access | \System\Removable Storage Access | Security |
| WPD Devices: Deny read access | \System\Removable Storage Access | Security |
| CD and DVD: Deny write access | \System\Removable Storage Access | Security |
| All Removable Storage: Allow direct access in remote sessions | \System\Removable Storage Access | Security |
| CD and DVD: Deny execute access | \System\Removable Storage Access | Security |
| CD and DVD: Deny read access | \System\Removable Storage Access | Security |
| Floppy Drives: Deny read access | \System\Removable Storage Access | Security |
| Removable Disks: Deny read access | \System\Removable Storage Access | Security |
| All Removable Storage classes: Deny all access | \System\Removable Storage Access | Security |
| Tape Drives: Deny write access | \System\Removable Storage Access | Security |
| Custom Classes: Deny read access | \System\Removable Storage Access | Security |
| Tape Drives: Deny execute access | \System\Removable Storage Access | Security |
| Tape Drives: Deny read access | \System\Removable Storage Access | Security |
| Set time (in seconds) to force reboot | \System\Removable Storage Access | Security |
| WPD Devices: Deny write access | \System\Removable Storage Access | Security |
| Removable Disks: Deny execute access | \System\Removable Storage Access | Security |
| Floppy Drives: Deny execute access | \System\Removable Storage Access | Security |
| Custom Classes: Deny write access | \System\Removable Storage Access | Security |
| Run Windows PowerShell scripts first at user logon, logoff | \System\Scripts | Security |
| Run logon scripts synchronously | \System\Scripts | Security |
| Display instructions in startup scripts as they run | \System\Scripts | Security |
| Run Windows PowerShell scripts first at computer startup, shutdown | \System\Scripts | Security |
| Display instructions in shutdown scripts as they run | \System\Scripts | Security |
| Specify maximum wait time for Group Policy scripts | \System\Scripts | Security |
| Allow logon scripts when NetBIOS or WINS is disabled | \System\Scripts | Security |
| Run startup scripts asynchronously | \System\Scripts | Security |
| Do not display Server Manager automatically at logon | \System\Server Manager | Other |
| Do not display Initial Configuration Tasks window automatically at logon | \System\Server Manager | Other |
| Configure the refresh interval for Server Manager | \System\Server Manager | Other |
| Enable svchost.exe mitigation options | \System\Service Control Manager Settings\Security Settings | Other |
| Require use of fast startup | \System\Shutdown | Other |
| Turn off automatic termination of applications that block or cancel shutdown | \System\Shutdown Options | Other |
| Turn off System Restore | \System\System Restore | Other |
| Turn off Configuration | \System\System Restore | Other |
| Diagnostics: Configure scenario execution level | \System\Troubleshooting and Diagnostics | Other |
| Diagnostics: Configure scenario retention | \System\Troubleshooting and Diagnostics | Other |
| Detect compatibility issues for applications and drivers | \System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics | Other |
| Notify blocked drivers | \System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics | Other |
| Detect application failures caused by deprecated Windows DLLs | \System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics | Other |
| Detect applications unable to launch installers under UAC | \System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics | Other |
| Detect application install failures | \System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics | Other |
| Detect application failures caused by deprecated COM objects | \System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics | Other |
| Detect application installers that need to be run as administrator | \System\Troubleshooting and Diagnostics\Application Compatibility Diagnostics | Other |
| Configure Corrupted File Recovery behavior | \System\Troubleshooting and Diagnostics\Corrupted File Recovery | Other |
| Disk Diagnostic: Configure execution level | \System\Troubleshooting and Diagnostics\Disk Diagnostic | Other |
| Disk Diagnostic: Configure custom alert text | \System\Troubleshooting and Diagnostics\Disk Diagnostic | Other |
| Configure Scenario Execution Level | \System\Troubleshooting and Diagnostics\Fault Tolerant Heap | Other |
| Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider | \System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool | Other |
| Microsoft Support Diagnostic Tool: Restrict tool download | \System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool | Other |
| Microsoft Support Diagnostic Tool: Configure execution level | \System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool | Other |
| Configure MSI Corrupted File Recovery behavior | \System\Troubleshooting and Diagnostics\MSI Corrupted File Recovery | Other |
| Configure Scheduled Maintenance Behavior | \System\Troubleshooting and Diagnostics\Scheduled Maintenance | Other |
| Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via the Windows Online Troubleshooting Service – WOTS) | \System\Troubleshooting and Diagnostics\Scripted Diagnostics | Other |
| Troubleshooting: Allow users to access and run Troubleshooting Wizards | \System\Troubleshooting and Diagnostics\Scripted Diagnostics | Other |
| Configure Security Policy for Scripted Diagnostics | \System\Troubleshooting and Diagnostics\Scripted Diagnostics | Other |
| Configure Scenario Execution Level | \System\Troubleshooting and Diagnostics\Windows Boot Performance Diagnostics | Other |
| Configure Scenario Execution Level | \System\Troubleshooting and Diagnostics\Windows Memory Leak Diagnosis | Other |
| Configure Scenario Execution Level | \System\Troubleshooting and Diagnostics\Windows Resource Exhaustion Detection and Resolution | Other |
| Configure Scenario Execution Level | \System\Troubleshooting and Diagnostics\Windows Shutdown Performance Diagnostics | Other |
| Configure Scenario Execution Level | \System\Troubleshooting and Diagnostics\Windows Standby/Resume Performance Diagnostics | Other |
| Configure Scenario Execution Level | \System\Troubleshooting and Diagnostics\Windows System Responsiveness Performance Diagnostics | Other |
| Standard User Individual Lockout Threshold | \System\Trusted Platform Module Services | Security |
| Standard User Lockout Duration | \System\Trusted Platform Module Services | Security |
| Ignore the default list of blocked TPM commands | \System\Trusted Platform Module Services | Security |
| Configure the list of blocked TPM commands | \System\Trusted Platform Module Services | Security |
| Configure the system to use legacy Dictionary Attack Prevention Parameters setting for TPM 2.0. | \System\Trusted Platform Module Services | Security |
| Configure the system to clear the TPM if it is not in a ready state. | \System\Trusted Platform Module Services | Security |
| Configure the level of TPM owner authorization information available to the operating system | \System\Trusted Platform Module Services | Security |
| Standard User Total Lockout Threshold | \System\Trusted Platform Module Services | Security |
| Ignore the local list of blocked TPM commands | \System\Trusted Platform Module Services | Security |
| Do not log users on with temporary profiles | \System\User Profiles | Other |
| Control slow network connection timeout for user profiles | \System\User Profiles | Other |
| Do not forcefully unload the users registry at user logoff | \System\User Profiles | Other |
| Delete user profiles older than a specified number of days on system restart | \System\User Profiles | Other |
| Set user home folder | \System\User Profiles | Other |
| Leave Windows Installer and Group Policy Software Installation Data | \System\User Profiles | Other |
| User management of sharing user name, account picture, and domain information with apps (not desktop apps) | \System\User Profiles | Other |
| Global Configuration Settings | \System\Windows Time Service | NTP |
| Configure Windows NTP Client | \System\Windows Time Service\Time Providers | NTP |
| Enable Windows NTP Server | \System\Windows Time Service\Time Providers | NTP |
| Enable Windows NTP Client | \System\Windows Time Service\Time Providers | NTP |
| Disable the send-a-smile feature | \Visual Studio\Feedback Settings | Microsoft Visual Studio |
| Disables send-a-smile’s screenshot capability | \Visual Studio\Feedback Settings | Microsoft Visual Studio |
| Disable downloading updates automatically | \Visual Studio\Install and Update Settings | Microsoft Visual Studio |
| Package manifest and payload cache path | \Visual Studio\Install and Update Settings | Microsoft Visual Studio |
| Opt out of administrator updates | \Visual Studio\Install and Update Settings | Microsoft Visual Studio |
| Shared installation path | \Visual Studio\Install and Update Settings | Microsoft Visual Studio |
| Keep package payloads after installation | \Visual Studio\Install and Update Settings | Microsoft Visual Studio |
| Hide the Available tab shown in the Visual Studio Installer | \Visual Studio\Install and Update Settings | Microsoft Visual Studio |
| Remove out-of-support components during updates | \Visual Studio\Install and Update Settings | Microsoft Visual Studio |
| Enable administrator updates | \Visual Studio\Install and Update Settings | Microsoft Visual Studio |
| Disable the ability to rollback or undo a Visual Studio update | \Visual Studio\Install and Update Settings | Microsoft Visual Studio |
| Custom path to the update configuration file | \Visual Studio\Install and Update Settings | Microsoft Visual Studio |
| Allow only company domain accounts | \Visual Studio\Live Share Settings | Microsoft Visual Studio |
| Disable shared read write terminal | \Visual Studio\Live Share Settings | Microsoft Visual Studio |
| Disable shared server | \Visual Studio\Live Share Settings | Microsoft Visual Studio |
| Require guest approval | \Visual Studio\Live Share Settings | Microsoft Visual Studio |
| Disable anonymous guests | \Visual Studio\Live Share Settings | Microsoft Visual Studio |
| Require direct connection | \Visual Studio\Live Share Settings | Microsoft Visual Studio |
| Enable the Visual Studio Customer Experience Improvement Program | \Visual Studio\Privacy Settings | Microsoft Visual Studio |
| Disable IntelliCode custom model training | \Visual Studio\Privacy Settings | Microsoft Visual Studio |
| Approved Installation Sites for ActiveX Controls | \Windows Components\ActiveX Installer Service | Other |
| Establish ActiveX installation policy for sites in Trusted zones | \Windows Components\ActiveX Installer Service | Other |
| Allow deployment operations in special profiles | \Windows Components\App Package Deployment | Other |
| Block launching Universal Windows apps with Windows Runtime API access from hosted content. | \Windows Components\App runtime | Other |
| Turn on dynamic Content URI Rules for Windows store apps | \Windows Components\App runtime | Other |
| Block launching desktop apps associated with a URI scheme | \Windows Components\App runtime | Other |
| Block launching desktop apps associated with a file. | \Windows Components\App runtime | Other |
| Allow Microsoft accounts to be optional | \Windows Components\App runtime | Other |
| Turn off Program Compatibility Assistant | \Windows Components\Application Compatibility | Other |
| Turn off Application Telemetry | \Windows Components\Application Compatibility | Other |
| Prevent access to 16-bit applications | \Windows Components\Application Compatibility | Other |
| Turn off Steps Recorder | \Windows Components\Application Compatibility | Other |
| Turn off SwitchBack Compatibility Engine | \Windows Components\Application Compatibility | Other |
| Turn off Application Compatibility Engine | \Windows Components\Application Compatibility | Other |
| Turn off Inventory Collector | \Windows Components\Application Compatibility | Other |
| Remove Program Compatibility Property Page | \Windows Components\Application Compatibility | Other |
| Turn off Autoplay | \Windows Components\AutoPlay Policies | Other |
| Set the default behavior for AutoRun | \Windows Components\AutoPlay Policies | Other |
| Disallow Autoplay for non-volume devices | \Windows Components\AutoPlay Policies | Other |
| Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later) | \Windows Components\BitLocker Drive Encryption | BitLocker |
| Deny write access to fixed drives not protected by BitLocker | \Windows Components\BitLocker Drive Encryption\Fixed Data Drives | BitLocker |
| Choose how BitLocker-protected fixed drives can be recovered | \Windows Components\BitLocker Drive Encryption\Fixed Data Drives | BitLocker |
| Require additional authentication at startup | \Windows Components\BitLocker Drive Encryption\Operating System Drives | BitLocker |
| Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN. | \Windows Components\BitLocker Drive Encryption\Operating System Drives | BitLocker |
| Choose how BitLocker-protected operating system drives can be recovered | \Windows Components\BitLocker Drive Encryption\Operating System Drives | BitLocker |
| Configure minimum PIN length for startup | \Windows Components\BitLocker Drive Encryption\Operating System Drives | BitLocker |
| Configure pre-boot recovery message and URL | \Windows Components\BitLocker Drive Encryption\Operating System Drives | BitLocker |
| Deny write access to removable drives not protected by BitLocker | \Windows Components\BitLocker Drive Encryption\Removable Data Drives | BitLocker |
| Prevent the use of security questions for local accounts | \Windows Components\Credential User Interface | Security |
| Enumerate administrator accounts on elevation | \Windows Components\Credential User Interface | Security |
| Do not display the password reveal button | \Windows Components\Credential User Interface | Security |
| Require trusted path for credential entry | \Windows Components\Credential User Interface | Security |
| Configure the Commercial ID | \Windows Components\Data Collection and Preview Builds | Privacy |
| Set Business Hours to Limit Background Download Bandwidth | \Windows Components\Delivery Optimization | Network |
| Set Business Hours to Limit Foreground Download Bandwidth | \Windows Components\Delivery Optimization | Network |
| Do not allow window animations | \Windows Components\Desktop Window Manager | Other |
| Specify a default color | \Windows Components\Desktop Window Manager\Window Frame Coloring | Other |
| Do not allow color changes | \Windows Components\Desktop Window Manager\Window Frame Coloring | Other |
| Device compatibility settings | \Windows Components\Device and Driver Compatibility | Other |
| Driver compatibility settings | \Windows Components\Device and Driver Compatibility | Other |
| Do not allow Digital Locker to run | \Windows Components\Digital Locker | Other |
| Configure forwarder resource usage | \Windows Components\Event Forwarding | Other |
| Configure target Subscription Manager | \Windows Components\Event Forwarding | Other |
| Control Event Log behavior when the log file reaches its maximum size | \Windows Components\Event Log Service\Application | Security |
| Control the location of the log file | \Windows Components\Event Log Service\Application | Security |
| Back up log automatically when full | \Windows Components\Event Log Service\Application | Security |
| Specify the maximum log file size (KB) | \Windows Components\Event Log Service\Application | Security |
| Configure log access (legacy) | \Windows Components\Event Log Service\Application | Security |
| Configure log access | \Windows Components\Event Log Service\Application | Security |
| Control Event Log behavior when the log file reaches its maximum size | \Windows Components\Event Log Service\Security | Security |
| Control the location of the log file | \Windows Components\Event Log Service\Security | Security |
| Configure log access | \Windows Components\Event Log Service\Security | Security |
| Specify the maximum log file size (KB) | \Windows Components\Event Log Service\Security | Security |
| Configure log access (legacy) | \Windows Components\Event Log Service\Security | Security |
| Back up log automatically when full | \Windows Components\Event Log Service\Security | Security |
| Control Event Log behavior when the log file reaches its maximum size | \Windows Components\Event Log Service\Setup | Security |
| Specify the maximum log file size (KB) | \Windows Components\Event Log Service\Setup | Security |
| Back up log automatically when full | \Windows Components\Event Log Service\Setup | Security |
| Configure log access (legacy) | \Windows Components\Event Log Service\Setup | Security |
| Turn on logging | \Windows Components\Event Log Service\Setup | Security |
| Control the location of the log file | \Windows Components\Event Log Service\Setup | Security |
| Configure log access | \Windows Components\Event Log Service\Setup | Security |
| Specify the maximum log file size (KB) | \Windows Components\Event Log Service\System | Security |
| Control Event Log behavior when the log file reaches its maximum size | \Windows Components\Event Log Service\System | Security |
| Back up log automatically when full | \Windows Components\Event Log Service\System | Security |
| Configure log access | \Windows Components\Event Log Service\System | Security |
| Configure log access (legacy) | \Windows Components\Event Log Service\System | Security |
| Control the location of the log file | \Windows Components\Event Log Service\System | Security |
| Enable Protected Event Logging | \Windows Components\Event Logging | Other |
| Events.asp program | \Windows Components\Event Viewer | Other |
| Events.asp program command line parameters | \Windows Components\Event Viewer | Other |
| Events.asp URL | \Windows Components\Event Viewer | Other |
| Location where all default Library definition files for users/machines reside. | \Windows Components\File Explorer | Other |
| Show sleep in the power options menu | \Windows Components\File Explorer | Other |
| Turn off heap termination on corruption | \Windows Components\File Explorer | Other |
| Turn off numerical sorting in File Explorer | \Windows Components\File Explorer | Other |
| Disable binding directly to IPropertySetStorage without intermediate layers. | \Windows Components\File Explorer | Other |
| Do not reinitialize a pre-existing roamed user profile when it is loaded on a machine for the first time | \Windows Components\File Explorer | Other |
| Configure Windows Defender SmartScreen | \Windows Components\File Explorer | Other |
| Set a support web page link | \Windows Components\File Explorer | Other |
| Turn off Data Execution Prevention for Explorer | \Windows Components\File Explorer | Other |
| Do not show the ’new application installed‘ notification | \Windows Components\File Explorer | Other |
| Allow the use of remote paths in file shortcut icons | \Windows Components\File Explorer | Other |
| Start File Explorer with ribbon minimized | \Windows Components\File Explorer | Other |
| Show hibernate in the power options menu | \Windows Components\File Explorer | Other |
| Turn off shell protocol protected mode | \Windows Components\File Explorer | Other |
| Verify old and new Folder Redirection targets point to the same share before redirecting | \Windows Components\File Explorer | Other |
| Hide previous versions list for remote files | \Windows Components\File Explorer\Previous Versions | Other |
| Prevent restoring previous versions from backups | \Windows Components\File Explorer\Previous Versions | Other |
| Hide previous versions list for local files | \Windows Components\File Explorer\Previous Versions | Other |
| Prevent restoring remote previous versions | \Windows Components\File Explorer\Previous Versions | Other |
| Hide previous versions of files on backup location | \Windows Components\File Explorer\Previous Versions | Other |
| Prevent restoring local previous versions | \Windows Components\File Explorer\Previous Versions | Other |
| Prevent the computer from joining a homegroup | \Windows Components\HomeGroup | Other |
| Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Disable Periodic Check for Internet Explorer software updates | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Specify default behavior for a new tab | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Enable global window list in Internet Explorer mode | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Use the Enterprise Mode IE website list | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Configure which channel of Microsoft Edge to use for opening redirected sites | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Prevent running First Run wizard | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Allow „Save Target As“ in Internet Explorer mode | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Keep all intranet sites in Internet Explorer | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Prevent changing proxy settings | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Let users turn on and use Enterprise Mode from the Tools menu | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Reset zoom to default for HTML dialogs in Internet Explorer mode | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Turn off the auto-complete feature for web addresses | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Turn off Crash Detection | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Prevent per-user installation of ActiveX controls | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Prevent participation in the Customer Experience Improvement Program | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Prevent changing the default search provider | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Turn on Suggested Sites | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Specify use of ActiveX Installer Service for installation of ActiveX controls | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Disable changing secondary home page settings | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Security Zones: Use only machine settings | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Enable extended hot keys in Internet Explorer mode | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Security Zones: Do not allow users to change policies | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Turn on ActiveX Filtering | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Send all sites not included in the Enterprise Mode Site List to Microsoft Edge. | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Security Zones: Do not allow users to add/delete sites | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Disable HTML Application | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Prevent bypassing SmartScreen Filter warnings | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Turn off the Security Settings Check feature | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Prevent managing SmartScreen Filter | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Disable Internet Explorer 11 as a standalone browser | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Add a specific list of search providers to the user’s list of search providers | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Restrict search providers to a specific list | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Turn off browser geolocation | \Windows Components\Internet Explorer | Microsoft Internet Explorer |
| Turn off Compatibility View | \Windows Components\Internet Explorer\Compatibility View | Microsoft Internet Explorer |
| Turn on Internet Explorer Standards Mode for local intranet | \Windows Components\Internet Explorer\Compatibility View | Microsoft Internet Explorer |
| Use Policy List of Internet Explorer 7 sites | \Windows Components\Internet Explorer\Compatibility View | Microsoft Internet Explorer |
| Prevent deleting websites that the user has visited | \Windows Components\Internet Explorer\Delete Browsing History | Microsoft Internet Explorer |
| Allow deleting browsing history on exit | \Windows Components\Internet Explorer\Delete Browsing History | Microsoft Internet Explorer |
| Disable „Configuring History“ | \Windows Components\Internet Explorer\Delete Browsing History | Microsoft Internet Explorer |
| Prevent ignoring certificate errors | \Windows Components\Internet Explorer\Internet Control Panel | Microsoft Internet Explorer |
| Turn off the flip ahead with page prediction feature | \Windows Components\Internet Explorer\Internet Control Panel\Advanced Page | Microsoft Internet Explorer |
| Turn on Enhanced Protected Mode | \Windows Components\Internet Explorer\Internet Control Panel\Advanced Page | Microsoft Internet Explorer |
| Check for signatures on downloaded programs | \Windows Components\Internet Explorer\Internet Control Panel\Advanced Page | Microsoft Internet Explorer |
| Allow software to run or install even if the signature is invalid | \Windows Components\Internet Explorer\Internet Control Panel\Advanced Page | Microsoft Internet Explorer |
| Check for server certificate revocation | \Windows Components\Internet Explorer\Internet Control Panel\Advanced Page | Microsoft Internet Explorer |
| Turn off encryption support | \Windows Components\Internet Explorer\Internet Control Panel\Advanced Page | Microsoft Internet Explorer |
| Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows | \Windows Components\Internet Explorer\Internet Control Panel\Advanced Page | Microsoft Internet Explorer |
| Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled | \Windows Components\Internet Explorer\Internet Control Panel\Advanced Page | Microsoft Internet Explorer |
| Locked-Down Local Machine Zone Template | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Locked-Down Restricted Sites Zone Template | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Intranet Zone Template | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Intranet Sites: Include all local (intranet) sites not listed in other zones | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Intranet Sites: Include all network paths (UNCs) | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Locked-Down Trusted Sites Zone Template | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Trusted Sites Zone Template | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Restricted Sites Zone Template | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Local Machine Zone Template | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Locked-Down Intranet Zone Template | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Locked-Down Internet Zone Template | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Site to Zone Assignment List | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Internet Zone Template | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Turn on certificate address mismatch warning | \Windows Components\Internet Explorer\Internet Control Panel\Security Page | Microsoft Internet Explorer |
| Enable dragging of content from different domains within a window | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components not signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Web sites in less privileged Web content zones can navigate into this zone | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow updates to status bar via script | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow cut, copy or paste operations from the clipboard via script | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Userdata persistence | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Use Pop-up Blocker | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Turn on SmartScreen Filter scan | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Don’t run antimalware programs against ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Automatic prompting for ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Include local path when user is uploading files to a server | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Automatic prompting for file downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Enable MIME Sniffing | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Logon options | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Download signed ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Launching applications and files in an IFRAME | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Show security warning for potentially unsafe files | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Download unsigned ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow VBScript to run in Internet Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow drag and drop or copy and paste files | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow scripting of Internet Explorer WebBrowser controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow scriptlets | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Access data sources across domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow loading of XAML files | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow only approved domains to use the TDC ActiveX control | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Initialize and script ActiveX controls not marked as safe | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow OpenSearch queries in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Turn on Protected Mode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Java permissions | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow script-initiated windows without size or position constraints | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow font downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow previewing and custom thumbnails of OpenSearch query results in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Turn on Cross-Site Scripting Filter | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Allow only approved domains to use ActiveX controls without prompt | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Enable dragging of content from different domains across windows | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Navigate windows and frames across different domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone | Microsoft Internet Explorer |
| Userdata persistence | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Allow previewing and custom thumbnails of OpenSearch query results in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Allow scriptlets | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Allow font downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Turn on SmartScreen Filter scan | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Navigate windows and frames across different domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Web sites in less privileged Web content zones can navigate into this zone | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Java permissions | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Allow OpenSearch queries in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Automatic prompting for ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Don’t run antimalware programs against ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Access data sources across domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Automatic prompting for file downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Initialize and script ActiveX controls not marked as safe | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components not signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone | Microsoft Internet Explorer |
| Allow OpenSearch queries in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Allow previewing and custom thumbnails of OpenSearch query results in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Userdata persistence | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Allow scriptlets | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Web sites in less privileged Web content zones can navigate into this zone | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Turn on SmartScreen Filter scan | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components not signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Allow font downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Java permissions | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Don’t run antimalware programs against ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Access data sources across domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Navigate windows and frames across different domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Initialize and script ActiveX controls not marked as safe | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Automatic prompting for file downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Automatic prompting for ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components not signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Automatic prompting for file downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Userdata persistence | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Allow scriptlets | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Java permissions | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Access data sources across domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Navigate windows and frames across different domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Allow previewing and custom thumbnails of OpenSearch query results in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Turn on SmartScreen Filter scan | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Allow OpenSearch queries in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Web sites in less privileged Web content zones can navigate into this zone | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Automatic prompting for ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Initialize and script ActiveX controls not marked as safe | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Allow font downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone | Microsoft Internet Explorer |
| Allow font downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Java permissions | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Automatic prompting for ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Turn on SmartScreen Filter scan | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Access data sources across domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Allow previewing and custom thumbnails of OpenSearch query results in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Navigate windows and frames across different domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components not signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Initialize and script ActiveX controls not marked as safe | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Userdata persistence | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Automatic prompting for file downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Allow OpenSearch queries in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Allow scriptlets | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Web sites in less privileged Web content zones can navigate into this zone | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone | Microsoft Internet Explorer |
| Allow scriptlets | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Web sites in less privileged Web content zones can navigate into this zone | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Userdata persistence | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Allow OpenSearch queries in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Access data sources across domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Turn on SmartScreen Filter scan | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Navigate windows and frames across different domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components not signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Java permissions | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Allow previewing and custom thumbnails of OpenSearch query results in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Automatic prompting for ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Automatic prompting for file downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Initialize and script ActiveX controls not marked as safe | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Allow font downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone | Microsoft Internet Explorer |
| Java permissions | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Initialize and script ActiveX controls not marked as safe | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Web sites in less privileged Web content zones can navigate into this zone | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Allow previewing and custom thumbnails of OpenSearch query results in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Allow OpenSearch queries in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Userdata persistence | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Allow scriptlets | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Access data sources across domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Automatic prompting for file downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Navigate windows and frames across different domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Turn on SmartScreen Filter scan | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Allow font downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components not signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Automatic prompting for ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone | Microsoft Internet Explorer |
| Web sites in less privileged Web content zones can navigate into this zone | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components not signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Automatic prompting for file downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Turn on SmartScreen Filter scan | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Access data sources across domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Allow font downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Automatic prompting for ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Allow previewing and custom thumbnails of OpenSearch query results in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Navigate windows and frames across different domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Initialize and script ActiveX controls not marked as safe | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Allow scriptlets | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Allow OpenSearch queries in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Userdata persistence | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Java permissions | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone | Microsoft Internet Explorer |
| Access data sources across domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow scriptlets | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Automatic prompting for file downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Enable dragging of content from different domains across windows | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow VBScript to run in Internet Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Web sites in less privileged Web content zones can navigate into this zone | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Script ActiveX controls marked safe for scripting | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Initialize and script ActiveX controls not marked as safe | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Turn on Cross-Site Scripting Filter | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow font downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Java permissions | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Userdata persistence | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Show security warning for potentially unsafe files | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow loading of XAML files | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Don’t run antimalware programs against ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow only approved domains to use ActiveX controls without prompt | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow previewing and custom thumbnails of OpenSearch query results in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow META REFRESH | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Include local path when user is uploading files to a server | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow active scripting | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow OpenSearch queries in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Enable MIME Sniffing | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Turn on Protected Mode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Navigate windows and frames across different domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow only approved domains to use the TDC ActiveX control | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow binary and script behaviors | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow drag and drop or copy and paste files | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Run ActiveX controls and plugins | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Launching applications and files in an IFRAME | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow scripting of Internet Explorer WebBrowser controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow cut, copy or paste operations from the clipboard via script | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components not signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Turn on SmartScreen Filter scan | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Enable dragging of content from different domains within a window | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Download unsigned ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Download signed ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Logon options | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Automatic prompting for ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Scripting of Java applets | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow file downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow updates to status bar via script | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Use Pop-up Blocker | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow script-initiated windows without size or position constraints | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone | Microsoft Internet Explorer |
| Allow font downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Don’t run antimalware programs against ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Allow previewing and custom thumbnails of OpenSearch query results in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Userdata persistence | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Run .NET Framework-reliant components not signed with Authenticode | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Java permissions | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Navigate windows and frames across different domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Initialize and script ActiveX controls not marked as safe | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Web sites in less privileged Web content zones can navigate into this zone | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Automatic prompting for file downloads | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Automatic prompting for ActiveX controls | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Allow OpenSearch queries in File Explorer | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Access data sources across domains | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Allow scriptlets | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Turn on SmartScreen Filter scan | \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone | Microsoft Internet Explorer |
| Go to an intranet site for a one-word entry in the Address bar | \Windows Components\Internet Explorer\Internet Settings\Advanced settings\Browsing | Microsoft Internet Explorer |
| Turn off InPrivate Browsing | \Windows Components\Internet Explorer\Privacy | Microsoft Internet Explorer |
| Allow fallback to SSL 3.0 (Internet Explorer) | \Windows Components\Internet Explorer\Security Features | Microsoft Internet Explorer |
| Turn off blocking of outdated ActiveX controls for Internet Explorer on specific domains | \Windows Components\Internet Explorer\Security Features\Add-on Management | Microsoft Internet Explorer |
| Remove „Run this time“ button for outdated ActiveX controls in Internet Explorer | \Windows Components\Internet Explorer\Security Features\Add-on Management | Microsoft Internet Explorer |
| Add-on List | \Windows Components\Internet Explorer\Security Features\Add-on Management | Microsoft Internet Explorer |
| Turn off blocking of outdated ActiveX controls for Internet Explorer | \Windows Components\Internet Explorer\Security Features\Add-on Management | Microsoft Internet Explorer |
| Internet Explorer Processes | \Windows Components\Internet Explorer\Security Features\Consistent Mime Handling | Microsoft Internet Explorer |
| Internet Explorer Processes | \Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature | Microsoft Internet Explorer |
| Internet Explorer Processes | \Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction | Microsoft Internet Explorer |
| Internet Explorer Processes | \Windows Components\Internet Explorer\Security Features\Notification bar | Microsoft Internet Explorer |
| Internet Explorer Processes | \Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation | Microsoft Internet Explorer |
| Internet Explorer Processes | \Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install | Microsoft Internet Explorer |
| Internet Explorer Processes | \Windows Components\Internet Explorer\Security Features\Restrict File Download | Microsoft Internet Explorer |
| Internet Explorer Processes | \Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions | Microsoft Internet Explorer |
| Prevent IIS installation | \Windows Components\Internet Information Services | Other |
| Turn off location scripting | \Windows Components\Location and Sensors | Other |
| Turn off sensors | \Windows Components\Location and Sensors | Other |
| Turn off Windows Location Provider | \Windows Components\Location and Sensors\Windows Location Provider | Other |
| Automatic Maintenance Activation Boundary | \Windows Components\Maintenance Scheduler | Other |
| Automatic Maintenance Random Delay | \Windows Components\Maintenance Scheduler | Other |
| Block all consumer Microsoft account user authentication | \Windows Components\Microsoft account | Other |
| Allow antimalware service to remain running always | \Windows Components\Microsoft Defender Antivirus | Security |
| Configure local administrator merge behavior for lists | \Windows Components\Microsoft Defender Antivirus | Security |
| Define addresses to bypass proxy server | \Windows Components\Microsoft Defender Antivirus | Security |
| Define proxy server for connecting to the network | \Windows Components\Microsoft Defender Antivirus | Security |
| Turn off Microsoft Defender Antivirus | \Windows Components\Microsoft Defender Antivirus | Security |
| Allow antimalware service to startup with normal priority | \Windows Components\Microsoft Defender Antivirus | Security |
| Turn off routine remediation | \Windows Components\Microsoft Defender Antivirus | Security |
| Randomize scheduled task times | \Windows Components\Microsoft Defender Antivirus | Security |
| Define proxy auto-config (.pac) for connecting to the network | \Windows Components\Microsoft Defender Antivirus | Security |
| Suppress all notifications | \Windows Components\Microsoft Defender Antivirus\Client Interface | Security |
| Display additional text to clients when they need to perform an action | \Windows Components\Microsoft Defender Antivirus\Client Interface | Security |
| Enable headless UI mode | \Windows Components\Microsoft Defender Antivirus\Client Interface | Security |
| Suppresses reboot notifications | \Windows Components\Microsoft Defender Antivirus\Client Interface | Security |
| Path Exclusions | \Windows Components\Microsoft Defender Antivirus\Exclusions | Security |
| Extension Exclusions | \Windows Components\Microsoft Defender Antivirus\Exclusions | Security |
| Turn off Auto Exclusions | \Windows Components\Microsoft Defender Antivirus\Exclusions | Security |
| Process Exclusions | \Windows Components\Microsoft Defender Antivirus\Exclusions | Security |
| Configure local setting override for reporting to Microsoft MAPS | \Windows Components\Microsoft Defender Antivirus\MAPS | Security |
| Join Microsoft MAPS | \Windows Components\Microsoft Defender Antivirus\MAPS | Security |
| Configure the ‚Block at First Sight‘ feature | \Windows Components\Microsoft Defender Antivirus\MAPS | Security |
| Configure Attack Surface Reduction rules | \Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Attack Surface Reduction | Security |
| Exclude files and paths from Attack Surface Reduction Rules | \Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Attack Surface Reduction | Security |
| Configure allowed applications | \Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Controlled Folder Access | Security |
| Configure protected folders | \Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Controlled Folder Access | Security |
| Enable file hash computation feature | \Windows Components\Microsoft Defender Antivirus\MpEngine | Security |
| Turn on definition retirement | \Windows Components\Microsoft Defender Antivirus\Network Inspection System | Security |
| Turn on protocol recognition | \Windows Components\Microsoft Defender Antivirus\Network Inspection System | Security |
| Specify additional definition sets for network traffic inspection | \Windows Components\Microsoft Defender Antivirus\Network Inspection System | Security |
| Configure local setting override for the removal of items from Quarantine folder | \Windows Components\Microsoft Defender Antivirus\Quarantine | Security |
| Configure removal of items from Quarantine folder | \Windows Components\Microsoft Defender Antivirus\Quarantine | Security |
| Configure local setting override for monitoring for incoming and outgoing file activity | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Monitor file and program activity on your computer | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Configure local setting override for turn on behavior monitoring | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Define the maximum size of downloaded files and attachments to be scanned | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Scan all downloaded files and attachments | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Turn on process scanning whenever real-time protection is enabled | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Turn off real-time protection | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Configure local setting override for monitoring file and program activity on your computer | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Turn on raw volume write notifications | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Turn on behavior monitoring | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Configure local setting override to turn on real-time protection | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Configure local setting override for scanning all downloaded files and attachments | \Windows Components\Microsoft Defender Antivirus\Real-time Protection | Security |
| Configure local setting override for the time of day to run a scheduled full scan to complete remediation | \Windows Components\Microsoft Defender Antivirus\Remediation | Security |
| Specify the day of the week to run a scheduled full scan to complete remediation | \Windows Components\Microsoft Defender Antivirus\Remediation | Security |
| Specify the time of day to run a scheduled full scan to complete remediation | \Windows Components\Microsoft Defender Antivirus\Remediation | Security |
| Configure time out for detections in non-critical failed state | \Windows Components\Microsoft Defender Antivirus\Reporting | Security |
| Configure Windows software trace preprocessor components | \Windows Components\Microsoft Defender Antivirus\Reporting | Security |
| Configure time out for detections in recently remediated state | \Windows Components\Microsoft Defender Antivirus\Reporting | Security |
| Turn off enhanced notifications | \Windows Components\Microsoft Defender Antivirus\Reporting | Security |
| Configure Watson events | \Windows Components\Microsoft Defender Antivirus\Reporting | Security |
| Configure time out for detections requiring additional action | \Windows Components\Microsoft Defender Antivirus\Reporting | Security |
| Configure WPP tracing level | \Windows Components\Microsoft Defender Antivirus\Reporting | Security |
| Configure time out for detections in critically failed state | \Windows Components\Microsoft Defender Antivirus\Reporting | Security |
| Scan archive files | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Allow users to pause scan | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Configure local setting override for schedule scan day | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Specify the maximum depth to scan archive files | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Specify the day of the week to run a scheduled scan | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Start the scheduled scan only when computer is on but not in use | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Run full scan on mapped network drives | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Scan network files | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Turn on e-mail scanning | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Configure local setting override for the scan type to use for a scheduled scan | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Configure local setting override for scheduled quick scan time | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Turn on reparse point scanning | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Specify the interval to run quick scans per day | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Configure local setting override for maximum percentage of CPU utilization | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Configure low CPU priority for scheduled scans | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Turn on removal of items from scan history folder | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Scan packed executables | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Define the number of days after which a catch-up scan is forced | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Configure local setting override for scheduled scan time | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Turn on heuristics | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Specify the time of day to run a scheduled scan | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Scan removable drives | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Specify the maximum size of archive files to be scanned | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Create a system restore point | \Windows Components\Microsoft Defender Antivirus\Scan | Security |
| Define the order of sources for downloading security intelligence updates | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Check for the latest virus and spyware security intelligence on startup | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Define the number of days before virus security intelligence is considered out of date | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Initiate security intelligence update on startup | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Allow real-time security intelligence updates based on reports to Microsoft MAPS | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Allow notifications to disable security intelligence based reports to Microsoft MAPS | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Define security intelligence location for VDI clients. | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Define the number of days after which a catch-up security intelligence update is required | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Specify the time to check for security intelligence updates | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Define the number of days before spyware security intelligence is considered out of date | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Turn on scan after security intelligence update | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Allow security intelligence updates when running on battery power | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Allow security intelligence updates from Microsoft Update | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Specify the day of the week to check for security intelligence updates | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Define file shares for downloading security intelligence updates | \Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates | Security |
| Specify threats upon which default action should not be taken when detected | \Windows Components\Microsoft Defender Antivirus\Threats | Security |
| Do not synchronize Windows Apps | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Contact IT Link Text | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Settings package size warning threshold | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Configure Sync Method | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Settings storage path | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Contact IT URL | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Tray Icon | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Use User Experience Virtualization (UE-V) | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Enable UEV | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Ping the settings storage location before sync | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| First Use Notification | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| VDI Configuration | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Synchronize Windows settings | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Synchronization timeout | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Sync Unlisted Windows Apps | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Sync settings over metered connections even when roaming | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Sync settings over metered connections | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Settings template catalog path | \Windows Components\Microsoft User Experience Virtualization | Microsoft User Experience Virtualization |
| Microsoft Office 365 Lync 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Project 2016 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Outlook 2016 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Visio 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft SharePoint Workspace 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Visio 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft OneNote 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| PowerPoint 2016 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft SharePoint Designer 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Publisher 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Word 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Internet Explorer Common Settings | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Lync 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| OneNote 2016 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Access 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Internet Explorer 8 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Publisher 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Excel 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| WordPad | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Word 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Word 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Common 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Access 2016 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 OneNote 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Lync 2016 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Access 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Project 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Lync 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Outlook 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Publisher 2016 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft SharePoint Designer 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Access 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft OneDrive for Business€ 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Internet Explorer 11 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Excel 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| InfoPath 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Project 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Common 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 OneNote 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 2013 Upload Center | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Outlook 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Project 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| OneNote 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 InfoPath 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Publisher 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Word 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Word 2016 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft PowerPoint 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Publisher 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft PowerPoint 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Outlook 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft OneNote 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Publisher 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Lync 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Word 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Publisher 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft PowerPoint 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Internet Explorer 9 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft OneDrive for Business€ 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 2010 Common Settings | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Project 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 2013 Common Settings | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Visio 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Access 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft InfoPath 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| PowerPoint 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Notepad | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Word 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Common 2016 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Visio 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 PowerPoint 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Outlook 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Lync 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 SharePoint Designer 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Access 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 PowerPoint 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Outlook 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft InfoPath 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Common 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Excel 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Lync 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 2016 Upload Center | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Visio 2016 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Outlook 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Visio 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Project 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 365 Excel 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Visio 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Project 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| SharePoint Designer 2013 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Excel 2016 backup only | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Excel 2010 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Calculator | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Access 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Excel 2016 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft Office 2016 Common Settings | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Microsoft OneNote 2013 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| Internet Explorer 10 | \Windows Components\Microsoft User Experience Virtualization\Applications | Microsoft User Experience Virtualization |
| News | \Windows Components\Microsoft User Experience Virtualization\Windows Apps | Microsoft User Experience Virtualization |
| Sports | \Windows Components\Microsoft User Experience Virtualization\Windows Apps | Microsoft User Experience Virtualization |
| Finance | \Windows Components\Microsoft User Experience Virtualization\Windows Apps | Microsoft User Experience Virtualization |
| Music | \Windows Components\Microsoft User Experience Virtualization\Windows Apps | Microsoft User Experience Virtualization |
| Video | \Windows Components\Microsoft User Experience Virtualization\Windows Apps | Microsoft User Experience Virtualization |
| Maps | \Windows Components\Microsoft User Experience Virtualization\Windows Apps | Microsoft User Experience Virtualization |
| Games | \Windows Components\Microsoft User Experience Virtualization\Windows Apps | Microsoft User Experience Virtualization |
| Travel | \Windows Components\Microsoft User Experience Virtualization\Windows Apps | Microsoft User Experience Virtualization |
| Reader | \Windows Components\Microsoft User Experience Virtualization\Windows Apps | Microsoft User Experience Virtualization |
| Weather | \Windows Components\Microsoft User Experience Virtualization\Windows Apps | Microsoft User Experience Virtualization |
| Turn off Active Help | \Windows Components\Online Assistance | Other |
| Windows To Go Default Startup Options | \Windows Components\Portable Operating System | Other |
| Disallow standby sleep states (S1-S3) when starting from a Windows to Go workspace | \Windows Components\Portable Operating System | Other |
| Allow hibernate (S4) when starting from a Windows To Go workspace | \Windows Components\Portable Operating System | Other |
| Turn off Windows presentation settings | \Windows Components\Presentation Settings | Other |
| Turn off Push To Install service | \Windows Components\Push To Install | Other |
| License server security group | \Windows Components\Remote Desktop Services\RD Licensing | Remote Desktop Services |
| Prevent license upgrade | \Windows Components\Remote Desktop Services\RD Licensing | Remote Desktop Services |
| Turn Off UDP On Client | \Windows Components\Remote Desktop Services\Remote Desktop Connection Client | Remote Desktop Services |
| Do not allow passwords to be saved | \Windows Components\Remote Desktop Services\Remote Desktop Connection Client | Remote Desktop Services |
| Prompt for credentials on the client computer | \Windows Components\Remote Desktop Services\Remote Desktop Connection Client | Remote Desktop Services |
| Do not allow hardware accelerated decoding | \Windows Components\Remote Desktop Services\Remote Desktop Connection Client | Remote Desktop Services |
| Configure server authentication for client | \Windows Components\Remote Desktop Services\Remote Desktop Connection Client | Remote Desktop Services |
| Specify SHA1 thumbprints of certificates representing trusted .rdp publishers | \Windows Components\Remote Desktop Services\Remote Desktop Connection Client | Remote Desktop Services |
| Allow .rdp files from valid publishers and user’s default .rdp settings | \Windows Components\Remote Desktop Services\Remote Desktop Connection Client | Remote Desktop Services |
| Allow .rdp files from unknown publishers | \Windows Components\Remote Desktop Services\Remote Desktop Connection Client | Remote Desktop Services |
| Allow RDP redirection of other supported RemoteFX USB devices from this computer | \Windows Components\Remote Desktop Services\Remote Desktop Connection Client\RemoteFX USB Device Redirection | Remote Desktop Services |
| Allow users to connect remotely by using Remote Desktop Services | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections | Remote Desktop Services |
| Set rules for remote control of Remote Desktop Services user sessions | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections | Remote Desktop Services |
| Automatic reconnection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections | Remote Desktop Services |
| Limit number of connections | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections | Remote Desktop Services |
| Deny logoff of an administrator logged in to the console session | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections | Remote Desktop Services |
| Restrict Remote Desktop Services users to a single Remote Desktop Services session | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections | Remote Desktop Services |
| Select network detection on the server | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections | Remote Desktop Services |
| Select RDP transport protocols | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections | Remote Desktop Services |
| Suspend user sign-in to complete app registration | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections | Remote Desktop Services |
| Configure keep-alive connection interval | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections | Remote Desktop Services |
| Do not allow drive redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection | Remote Desktop Services |
| Limit audio playback quality | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection | Remote Desktop Services |
| Do not allow COM port redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection | Remote Desktop Services |
| Do not allow video capture redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection | Remote Desktop Services |
| Do not allow LPT port redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection | Remote Desktop Services |
| Allow audio recording redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection | Remote Desktop Services |
| Do not allow Clipboard redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection | Remote Desktop Services |
| Allow time zone redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection | Remote Desktop Services |
| Allow audio and video playback redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection | Remote Desktop Services |
| Do not allow supported Plug and Play device redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection | Remote Desktop Services |
| Do not allow smart card device redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection | Remote Desktop Services |
| Set the Remote Desktop licensing mode | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Licensing | Remote Desktop Services |
| Use the specified Remote Desktop license servers | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Licensing | Remote Desktop Services |
| Hide notifications about RD Licensing problems that affect the RD Session Host server | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Licensing | Remote Desktop Services |
| Use Remote Desktop Easy Print printer driver first | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Printer Redirection | Remote Desktop Services |
| Do not set default client printer to be default printer in a session | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Printer Redirection | Remote Desktop Services |
| Do not allow client printer redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Printer Redirection | Remote Desktop Services |
| Specify RD Session Host server fallback printer driver behavior | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Printer Redirection | Remote Desktop Services |
| Use mandatory profiles on the RD Session Host server | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Profiles | Remote Desktop Services |
| Set Remote Desktop Services User Home Directory | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Profiles | Remote Desktop Services |
| Limit the size of the entire roaming user profile cache | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Profiles | Remote Desktop Services |
| Set path for Remote Desktop Services Roaming User Profile | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Profiles | Remote Desktop Services |
| Configure RD Connection Broker server name | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\RD Connection Broker | Remote Desktop Services |
| Configure RD Connection Broker farm name | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\RD Connection Broker | Remote Desktop Services |
| Join RD Connection Broker | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\RD Connection Broker | Remote Desktop Services |
| Use IP Address Redirection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\RD Connection Broker | Remote Desktop Services |
| Remove Windows Security item from Start menu | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Always show desktop on connection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Remove „Disconnect“ option from Shut Down dialog | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Limit number of monitors | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Configure H.264/AVC hardware encoding for Remote Desktop Connections | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Use hardware graphics adapters for all Remote Desktop Services sessions | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Configure compression for RemoteFX data | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Prioritize H.264/AVC 444 graphics mode for Remote Desktop Connections | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Limit maximum color depth | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Enforce Removal of Remote Desktop Wallpaper | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Limit maximum display resolution | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Start a program on connection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Enable RemoteFX encoding for RemoteFX clients designed for Windows Server 2008 R2 SP1 | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Configure image quality for RemoteFX Adaptive Graphics | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Configure RemoteFX Adaptive Graphics | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Use WDDM graphics display driver for Remote Desktop Connections | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Use advanced RemoteFX graphics for RemoteApp | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment | Remote Desktop Services |
| Optimize visual experience for Remote Desktop Service Sessions | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment\RemoteFX for Windows Server 2008 R2 | Remote Desktop Services |
| Configure RemoteFX | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment\RemoteFX for Windows Server 2008 R2 | Remote Desktop Services |
| Optimize visual experience when using RemoteFX | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment\RemoteFX for Windows Server 2008 R2 | Remote Desktop Services |
| Require user authentication for remote connections by using Network Level Authentication | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security | Remote Desktop Services |
| Require secure RPC communication | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security | Remote Desktop Services |
| Always prompt for password upon connection | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security | Remote Desktop Services |
| Require use of specific security layer for remote (RDP) connections | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security | Remote Desktop Services |
| Server authentication certificate template | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security | Remote Desktop Services |
| Do not allow local administrators to customize permissions | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security | Remote Desktop Services |
| Set client connection encryption level | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security | Remote Desktop Services |
| Set time limit for active but idle Remote Desktop Services sessions | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits | Remote Desktop Services |
| End session when time limits are reached | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits | Remote Desktop Services |
| Set time limit for active Remote Desktop Services sessions | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits | Remote Desktop Services |
| Set time limit for disconnected sessions | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits | Remote Desktop Services |
| Do not use temporary folders per session | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Temporary folders | Remote Desktop Services |
| Do not delete temp folders upon exit | \Windows Components\Remote Desktop Services\Remote Desktop Session Host\Temporary folders | Remote Desktop Services |
| Prevent downloading of enclosures | \Windows Components\RSS Feeds | RSS |
| Turn off background synchronization for feeds and Web Slices | \Windows Components\RSS Feeds | RSS |
| Turn on Security Center (Domain PCs only) | \Windows Components\Security Center | Security |
| Turn off legacy remote shutdown interface | \Windows Components\Shutdown Options | Other |
| Timeout for hung logon sessions during shutdown | \Windows Components\Shutdown Options | Other |
| Turn on root certificate propagation from smart card | \Windows Components\Smart Card | Security |
| Force the reading of all certificates from the smart card | \Windows Components\Smart Card | Security |
| Filter duplicate logon certificates | \Windows Components\Smart Card | Security |
| Notify user of successful smart card driver installation | \Windows Components\Smart Card | Security |
| Turn on certificate propagation from smart card | \Windows Components\Smart Card | Security |
| Allow ECC certificates to be used for logon and authentication | \Windows Components\Smart Card | Security |
| Configure root certificate clean up | \Windows Components\Smart Card | Security |
| Allow signature keys valid for Logon | \Windows Components\Smart Card | Security |
| Allow certificates with no extended key usage certificate attribute | \Windows Components\Smart Card | Security |
| Display string when smart card is blocked | \Windows Components\Smart Card | Security |
| Reverse the subject name stored in a certificate when displaying | \Windows Components\Smart Card | Security |
| Allow user name hint | \Windows Components\Smart Card | Security |
| Allow time invalid certificates | \Windows Components\Smart Card | Security |
| Allow Integrated Unblock screen to be displayed at the time of logon | \Windows Components\Smart Card | Security |
| Turn on Smart Card Plug and Play service | \Windows Components\Smart Card | Security |
| Prevent plaintext PINs from being returned by Credential Manager | \Windows Components\Smart Card | Security |
| Do not allow Sound Recorder to run | \Windows Components\Sound Recorder | Other |
| Turn off the offer to update to the latest version of Windows | \Windows Components\Store | Microsoft Store |
| Turn off the Store application | \Windows Components\Store | Microsoft Store |
| Turn off Automatic Download of updates on Win8 machines | \Windows Components\Store | Microsoft Store |
| Do not sync | \Windows Components\Sync your settings | Security |
| Do not sync start settings | \Windows Components\Sync your settings | Security |
| Do not sync app settings | \Windows Components\Sync your settings | Security |
| Do not sync desktop personalization | \Windows Components\Sync your settings | Security |
| Do not sync Apps | \Windows Components\Sync your settings | Security |
| Do not sync other Windows settings | \Windows Components\Sync your settings | Security |
| Do not sync on metered connections | \Windows Components\Sync your settings | Security |
| Do not sync personalize | \Windows Components\Sync your settings | Security |
| Do not sync passwords | \Windows Components\Sync your settings | Security |
| Do not allow Snipping Tool to run | \Windows Components\Tablet PC\Accessories | Other |
| Do not allow printing to Journal Note Writer | \Windows Components\Tablet PC\Accessories | Other |
| Do not allow Inkball to run | \Windows Components\Tablet PC\Accessories | Other |
| Do not allow Windows Journal to be run | \Windows Components\Tablet PC\Accessories | Other |
| Turn off pen feedback | \Windows Components\Tablet PC\Cursors | Other |
| Turn off hardware buttons | \Windows Components\Tablet PC\Hardware Buttons | Other |
| Prevent press and hold | \Windows Components\Tablet PC\Hardware Buttons | Other |
| Prevent Back-ESC mapping | \Windows Components\Tablet PC\Hardware Buttons | Other |
| Prevent launch an application | \Windows Components\Tablet PC\Hardware Buttons | Other |
| Prevent Input Panel tab from appearing | \Windows Components\Tablet PC\Input Panel | Other |
| Turn off tolerant and Z-shaped scratch-out gestures | \Windows Components\Tablet PC\Input Panel | Other |
| Disable text prediction | \Windows Components\Tablet PC\Input Panel | Other |
| For tablet pen input, don?t show the Input Panel icon | \Windows Components\Tablet PC\Input Panel | Other |
| For touch input, don?t show the Input Panel icon | \Windows Components\Tablet PC\Input Panel | Other |
| Turn off AutoComplete integration with Input Panel | \Windows Components\Tablet PC\Input Panel | Other |
| Include rarely used Chinese, Kanji, or Hanja characters | \Windows Components\Tablet PC\Input Panel | Other |
| Turn off password security in Input Panel | \Windows Components\Tablet PC\Input Panel | Other |
| Prevent Flicks Learning Mode | \Windows Components\Tablet PC\Pen Flicks Learning | Other |
| Prevent flicks | \Windows Components\Tablet PC\Pen UX Behaviors | Other |
| Turn off Tablet PC Pen Training | \Windows Components\Tablet PC\Tablet PC Pen Training | Other |
| Turn off Touch Panning | \Windows Components\Tablet PC\Touch Input | Other |
| Turn off Tablet PC touch input | \Windows Components\Tablet PC\Touch Input | Other |
| Cloud Policy Details | \Windows Components\Tenant Restrictions | Other |
| Turn off Windows Calendar | \Windows Components\Windows Calendar | Other |
| Prohibit installing or uninstalling color profiles | \Windows Components\Windows Color System | Other |
| Disable logging | \Windows Components\Windows Error Reporting | Error Reporting |
| Display Error Notification | \Windows Components\Windows Error Reporting | Error Reporting |
| Send additional data when on battery power | \Windows Components\Windows Error Reporting | Error Reporting |
| Do not throttle additional data | \Windows Components\Windows Error Reporting | Error Reporting |
| Do not send additional data | \Windows Components\Windows Error Reporting | Error Reporting |
| Send data when on connected to a restricted/costed network | \Windows Components\Windows Error Reporting | Error Reporting |
| Configure Error Reporting | \Windows Components\Windows Error Reporting | Error Reporting |
| Prevent display of the user interface for critical errors | \Windows Components\Windows Error Reporting | Error Reporting |
| Automatically send memory dumps for OS-generated error reports | \Windows Components\Windows Error Reporting | Error Reporting |
| Disable Windows Error Reporting | \Windows Components\Windows Error Reporting | Error Reporting |
| List of applications to be excluded | \Windows Components\Windows Error Reporting\Advanced Error Reporting Settings | Error Reporting |
| Report unplanned shutdown events | \Windows Components\Windows Error Reporting\Advanced Error Reporting Settings | Error Reporting |
| Configure Report Archive | \Windows Components\Windows Error Reporting\Advanced Error Reporting Settings | Error Reporting |
| Configure Corporate Windows Error Reporting | \Windows Components\Windows Error Reporting\Advanced Error Reporting Settings | Error Reporting |
| Configure Report Queue | \Windows Components\Windows Error Reporting\Advanced Error Reporting Settings | Error Reporting |
| Default application reporting settings | \Windows Components\Windows Error Reporting\Advanced Error Reporting Settings | Error Reporting |
| List of applications to always report errors for | \Windows Components\Windows Error Reporting\Advanced Error Reporting Settings | Error Reporting |
| List of applications to never report errors for | \Windows Components\Windows Error Reporting\Advanced Error Reporting Settings | Error Reporting |
| Report operating system errors | \Windows Components\Windows Error Reporting\Advanced Error Reporting Settings | Error Reporting |
| Configure Default consent | \Windows Components\Windows Error Reporting\Consent | Error Reporting |
| Customize consent settings | \Windows Components\Windows Error Reporting\Consent | Error Reporting |
| Ignore custom consent settings | \Windows Components\Windows Error Reporting\Consent | Error Reporting |
| Allow users to browse for source while elevated | \Windows Components\Windows Installer | Other |
| Prevent embedded UI | \Windows Components\Windows Installer | Other |
| Prohibit use of Restart Manager | \Windows Components\Windows Installer | Other |
| Remove browse dialog box for new source | \Windows Components\Windows Installer | Other |
| Prevent users from using Windows Installer to install updates and upgrades | \Windows Components\Windows Installer | Other |
| Turn off shared components | \Windows Components\Windows Installer | Other |
| Save copies of transform files in a secure location on workstation | \Windows Components\Windows Installer | Other |
| Turn off Windows Installer | \Windows Components\Windows Installer | Other |
| Prohibit non-administrators from applying vendor signed updates | \Windows Components\Windows Installer | Other |
| Allow users to patch elevated products | \Windows Components\Windows Installer | Other |
| Allow users to use media source while elevated | \Windows Components\Windows Installer | Other |
| Prohibit flyweight patching | \Windows Components\Windows Installer | Other |
| Specify the types of events Windows Installer records in its transaction log | \Windows Components\Windows Installer | Other |
| Prohibit rollback | \Windows Components\Windows Installer | Other |
| Turn off logging via package settings | \Windows Components\Windows Installer | Other |
| Prevent Internet Explorer security prompt for Windows Installer scripts | \Windows Components\Windows Installer | Other |
| Prohibit User Installs | \Windows Components\Windows Installer | Other |
| Enforce upgrade component rules | \Windows Components\Windows Installer | Other |
| Prohibit removal of updates | \Windows Components\Windows Installer | Other |
| Turn off creation of System Restore checkpoints | \Windows Components\Windows Installer | Other |
| Control maximum size of baseline file cache | \Windows Components\Windows Installer | Other |
| Report when logon server was not available during user logon | \Windows Components\Windows Logon Options | Security |
| Disable or enable software Secure Attention Sequence | \Windows Components\Windows Logon Options | Security |
| Configure the mode of automatically signing in and locking last interactive user after a restart or cold boot | \Windows Components\Windows Logon Options | Security |
| Display information about previous logons during user logon | \Windows Components\Windows Logon Options | Security |
| Sign-in and lock last interactive user automatically after a restart | \Windows Components\Windows Logon Options | Security |
| Prevent Windows Media DRM Internet Access | \Windows Components\Windows Media Digital Rights Management | Other |
| Do Not Show First Use Dialog Boxes | \Windows Components\Windows Media Player | Microsoft Windows Media Player |
| Prevent Desktop Shortcut Creation | \Windows Components\Windows Media Player | Microsoft Windows Media Player |
| Prevent Video Smoothing | \Windows Components\Windows Media Player | Microsoft Windows Media Player |
| Prevent Media Sharing | \Windows Components\Windows Media Player | Microsoft Windows Media Player |
| Prevent Automatic Updates | \Windows Components\Windows Media Player | Microsoft Windows Media Player |
| Prevent Quick Launch Toolbar Shortcut Creation | \Windows Components\Windows Media Player | Microsoft Windows Media Player |
| Turn off Windows Mobility Center | \Windows Components\Windows Mobility Center | Other |
| Turn on PowerShell Transcription | \Windows Components\Windows PowerShell | Security |
| Set the default source path for Update-Help | \Windows Components\Windows PowerShell | Security |
| Turn on Script Execution | \Windows Components\Windows PowerShell | Security |
| Turn on Module Logging | \Windows Components\Windows PowerShell | Security |
| Turn on PowerShell Script Block Logging | \Windows Components\Windows PowerShell | Security |
| Disallow Negotiate authentication | \Windows Components\Windows Remote Management (WinRM)\WinRM Client | WinRM |
| Disallow Kerberos authentication | \Windows Components\Windows Remote Management (WinRM)\WinRM Client | WinRM |
| Allow unencrypted traffic | \Windows Components\Windows Remote Management (WinRM)\WinRM Client | WinRM |
| Allow CredSSP authentication | \Windows Components\Windows Remote Management (WinRM)\WinRM Client | WinRM |
| Trusted Hosts | \Windows Components\Windows Remote Management (WinRM)\WinRM Client | WinRM |
| Allow Basic authentication | \Windows Components\Windows Remote Management (WinRM)\WinRM Client | WinRM |
| Disallow Digest authentication | \Windows Components\Windows Remote Management (WinRM)\WinRM Client | WinRM |
| Allow remote server management through WinRM | \Windows Components\Windows Remote Management (WinRM)\WinRM Service | WinRM |
| Turn On Compatibility HTTPS Listener | \Windows Components\Windows Remote Management (WinRM)\WinRM Service | WinRM |
| Turn On Compatibility HTTP Listener | \Windows Components\Windows Remote Management (WinRM)\WinRM Service | WinRM |
| Allow Basic authentication | \Windows Components\Windows Remote Management (WinRM)\WinRM Service | WinRM |
| Allow unencrypted traffic | \Windows Components\Windows Remote Management (WinRM)\WinRM Service | WinRM |
| Disallow Negotiate authentication | \Windows Components\Windows Remote Management (WinRM)\WinRM Service | WinRM |
| Allow CredSSP authentication | \Windows Components\Windows Remote Management (WinRM)\WinRM Service | WinRM |
| Disallow WinRM from storing RunAs credentials | \Windows Components\Windows Remote Management (WinRM)\WinRM Service | WinRM |
| Specify channel binding token hardening level | \Windows Components\Windows Remote Management (WinRM)\WinRM Service | WinRM |
| Disallow Kerberos authentication | \Windows Components\Windows Remote Management (WinRM)\WinRM Service | WinRM |
| Specify maximum number of processes per Shell | \Windows Components\Windows Remote Shell | Security |
| Specify maximum amount of memory in MB per Shell | \Windows Components\Windows Remote Shell | Security |
| Specify idle Timeout | \Windows Components\Windows Remote Shell | Security |
| Specify maximum number of remote shells per user | \Windows Components\Windows Remote Shell | Security |
| Allow Remote Shell Access | \Windows Components\Windows Remote Shell | Security |
| MaxConcurrentUsers | \Windows Components\Windows Remote Shell | Security |
| Specify Shell Timeout | \Windows Components\Windows Remote Shell | Security |
| Force automatic setup for all users | \Windows Components\Work Folders | Other |
Schreibe einen Kommentar