CLIENT SERVER GROUP POLICIES SCHEMA (beta release)
    Policy Local W2ksrv Settings Administartor Domain Settings Default Users Domain Settings Local Client Settings
Computer Configuration
Windows settings/Local policies/Audit policies
Audit account logon events Success, Failure Not configured Not configured Not configured
Audit account management Success, Failure Not configured Not configured Not configured
Audit directory service access No auditing Not configured Not configured Not configured
Audit logon events Success, Failure Not configured Not configured Not configured
Audit object access No auditing Not configured Not configured Not configured
Audit policy change No auditing Not configured Not configured Not configured
Audit privilege use No auditing Not configured Not configured Not configured
Audit process tracking No auditing Not configured Not configured Not configured
Audit system events No auditing Not configured Not configured Not configured
Computer Configuration
Administrative templates/System
Remove Security option from Start menu (Terminal Services only) Not configured Not configured Not configured Not configured
Remove Disconnect item from Start menu (Terminal Services only) Not configured Disabled Enabled Not configured
Disable Boot / Shutdown / Logon / Logoff status messages Not configured Not configured Not configured Not configured
Verbose vs normal status messages Not configured Not configured Not configured Not configured
Disable Autoplay Not configured Not configured Not configured Not configured
Don't display welcome screen at logon Not configured Not configured Not configured Not configured
Run these programs at user logon Not configured Not configured Not configured Not configured
Disable the run once list Not configured Not configured Not configured Not configured
Disable legacy run list Not configured Not configured Not configured Not configured
Do not automatically encrypt files moved to encrypted folders Not configured Not configured Not configured Not configured
Download missing COM components Not configured Not configured Not configured Not configured
Administrative templates/System/Logon
Run logon scripts synchronously Not configured Not configured Not configured Not configured
Run startup scripts asynchronously Not configured Not configured Not configured Not configured
Run startup scripts visible Not configured Not configured Not configured Not configured
Run shutdown scripts visible Not configured Not configured Not configured Not configured
Maximum wait time for Group Policy scripts Not configured Not configured Not configured Not configured
Delete cached copies of roaming profiles Not configured Not configured Not configured Not configured
Do not detect slow network connections Not configured Not configured Not configured Not configured
Slow network connection timeout for user profiles Enabled: 64 Kbps or 20000 ms Enabled: 64 Kbps or 20000 ms Enabled: 64 Kbps or 20000 ms Enabled: 64 Kbps or 20000 ms
Wait for remote user profile Not configured Not configured Not configured Not configured
Prompt user when slow link is detected Enabled Enabled Enabled Enabled
Timeout for dialog boxes Not configured Not configured Not configured Not configured
Log users off when roaming profile fails Not configured Not configured Not configured Not configured
Maximum retries to unload and update user profile Not configured Not configured Not configured Not configured
Add the Administrators security group to roaming user profiles Not configured Not configured Not configured Not configured
User Configuration
Windows Settings/Internet Explorer/URLS
Favourite and Links Not configured Not configured Not configured Not configured
Important Urls HOME=http://www.lnf.infn.it Not configured HOME=http://www.lnf.infn.it Not configured
Channels Not configured Not configured Not configured Not configured
Windows Settings/Internet Explorer/Programs
  Editor:Netscp - Email:Netscape - Newsgroup: Outlook - Internet Call:Netmeeting - Calendar: Outlook - Contact list :Address book - disabilita check default explorer Not configured Editor:Netscp - Email:Netscape - Newsgroup: Outlook - Internet Call:Netmeeting - Calendar: Outlook - Contact list :Address book - disabilita check default explorer Not configured
Windows Settings/Folder Redirections
My Documents Not present Advanced - w2k\AFSUsers: Not Present
  \\%computername%-afs\lnf\user\home\%username%\private\pc\Windocs
Administrative Templates/Windows Components/Netmeeting
Enable Automatic Configuration Not configured Not configured Not configured Not configured
Disable Directory services Enabled Disabled Not configured Not configured
Prevent adding Directory servers Enabled Disabled Not configured Not configured
Prevent viewing Web directory Enabled Disabled Not configured Not configured
Set the intranet support Web page Not configured Not configured Not configured Not configured
Set Call Security options Not configured Not configured Not configured Not configured
Prevent changing Call placement method Enabled Disabled Not configured Not configured
Prevent automatic acceptance of Calls Not configured Not configured Not configured Not configured
Prevent sending files Enabled Disabled Not configured Not configured
Prevent receiving files Enabled Disabled Not configured Not configured
Limit the size of sent files Not configured Not configured Not configured Not configured
Disable Chat Enabled Disabled Not configured Not configured
Disable NetMeeting 2.x Whiteboard Enabled Disabled Not configured Not configured
Disable Whiteboard Enabled Disabled Not configured Not configured
Administrative Templates/Windows Components/Netmeeting/Application Sharing
Disable application Sharing Enabled Disabled Not configured Not configured
Prevent Sharing Enabled Disabled Not configured Not configured
Prevent Desktop Sharing Enabled Disabled Not configured Not configured
Prevent Sharing Command Prompts Enabled Disabled Not configured Not configured
Prevent Sharing Explorer windows Enabled Disabled Not configured Not configured
Prevent Control Enabled Disabled Not configured Not configured
Prevent Application Sharing in true color Enabled Disabled Not configured Not configured
Administrative Templates/Windows Components/Netmeeting/Audio video
Limit the bandwidth of Audio and Video Enabled: 85K Disabled Not configured Not configured
Disable Audio Enabled Disabled Not configured Not configured
Disable full duplex Audio Enabled Disabled Not configured Not configured
Prevent changing DirectSound Audio setting Enabled Disabled Not configured Not configured
Prevent sending Video Enabled Disabled Not configured Not configured
Prevent receiving Video Enabled Disabled Not configured Not configured
Administrative Templates/Windows Components/Netmeeting/Option Page
Hide the General page Enabled Disabled Not configured Not configured
Disable the Advanced Calling button Enabled Disabled Not configured Not configured
Hide the Security page Enabled Disabled Not configured Not configured
Hide the Audio page Enabled Disabled Not configured Not configured
Hide the Video page Enabled Disabled Not configured Not configured
Administrative Templates/Windows Components/Internet Eplorer
Search: Disable Search Customization Not configured Not configured Not configured Not configured
Search: Disable Find Files via F3 within the browser Not configured Not configured Not configured Not configured
Disable external branding of Internet Explorer Not configured Not configured Not configured Not configured
Disable importing and exporting of favorites Not configured Not configured Not configured Not configured
Disable changing Advanced page settings Not configured Not configured Not configured Not configured
Disable changing home page settings Enabled Disabled Not configured Not configured
Use Automatic Detection for dial-up connections Disabled Enabled Not configured Not configured
Disable caching of Auto-Proxy scripts Not configured Not configured Not configured Not configured
Display error message on proxy script download failure Not configured Not configured Not configured Not configured
Disable changing Temporary Internet files settings Enabled Disabled Not configured Not configured
Disable changing history settings Enabled Disabled Not configured Not configured
Disable changing color settings Not configured Not configured Not configured Not configured
Disable changing link color settings Not configured Not configured Not configured Not configured
Disable changing font settings Not configured Not configured Not configured Not configured
Disable changing language settings Not configured Not configured Not configured Not configured
Disable changing accessibility settings Not configured Not configured Not configured Not configured
Disable Internet Connection wizard Enabled Disabled Not configured Not configured
Disable changing connection settings Enabled Disabled Not configured Not configured
Disable changing proxy settings Enabled Disabled Not configured Not configured
Disable changing Automatic Configuration settings Enabled Disabled Not configured Not configured
Disable changing ratings settings Enabled Disabled Not configured Not configured
Disable changing certificate settings Not configured Not configured Not configured Not configured
Disable changing Profile Assistant settings Not configured Not configured Not configured Not configured
Disable AutoComplete for forms Enabled Disabled Not configured Not configured
Do not allow AutoComplete to save passwords Enabled Disabled Not configured Not configured
Disable changing Messaging settings Not configured Not configured Not configured Not configured
Disable changing Calendar and Contact settings Enabled Disabled Not configured Not configured
Disable the Reset Web Settings feature Enabled Disabled Not configured Not configured
Disable changing default browser check Enabled Disabled Not configured Not configured
Identity Manager: Prevent users from using Identities Enabled Disabled Not configured Not configured
Administrative Templates/Windows Components/Internet Eplorer/Internet Control Panel
Disable the General page Not configured Not configured Not configured Not configured
Disable the Security page Not configured Not configured Not configured Not configured
Disable the Content page Not configured Not configured Not configured Not configured
Disable the Connections page Enabled Disabled Not configured Not configured
Disable the Programs page Enabled Disabled Not configured Not configured
Disable the Advanced page Not configured Not configured Not configured Not configured
Administrative Templates/Windows Components/Internet Eplorer/Offline Page
Disable adding channels Enabled Disabled Not configured Not configured
Disable removing channels Enabled Disabled Not configured Not configured
Disable adding schedules for offline pages Enabled Disabled Not configured Not configured
Disable editing schedules for offline pages Enabled Disabled Not configured Not configured
Disable removing schedules for offline pages Enabled Disabled Not configured Not configured
Disable offline page hit logging Enabled Disabled Not configured Not configured
Disable all scheduled offline pages Enabled Disabled Not configured Not configured
Disable channel user interface completely Enabled Disabled Not configured Not configured
Disable downloading of site subscription content Not configured Not configured Not configured Not configured
Disable editing and creating of schedule groups Enabled Disabled Not configured Not configured
Subscription Limits Not configured Not configured Not configured Not configured
Administrative Templates/Windows Components/Windows Explorer
Enable Classic Shell Not configured Not configured Not configured Not configured
Removes the Folder Options menu item from the Tools menu Not configured Not configured Not configured Not configured
Remove File menu from Windows Explorer Not configured Not configured Not configured Not configured
Remove "Map Network Drive" and "Disconnect Network Drive" Not configured Not configured Not configured Not configured
Remove Search button from Windows Explorer Not configured Not configured Not configured Not configured
Disable Windows Explorer's default context menu Not configured Not configured Not configured Not configured
Hides the Manage item on the Windows Explorer context menu Not configured Not configured Not configured Not configured
Only allow approved Shell extensions Enabled Disabled Not configured Not configured
Do not track Shell shortcuts during roaming Not configured Not configured Not configured Not configured
Hide these specified drives in My Computer Enabled: All Drives Disabled Not configured Not configured
Prevent access to drives from My Computer Enabled: D only Disabled Not configured Not configured
Hide Hardware tab Enabled Disabled Not configured Not configured
Disable UI to change menu animation setting Enabled Disabled Not configured Not configured
Disable UI to change keyboard navigation indicator setting Enabled Disabled Not configured Not configured
Disable DFS tab Enabled Disabled Not configured Not configured
No "Computers Near Me" in My Network Places Not configured Not configured Not configured Not configured
No "Entire Network" in My Network Places Not configured Not configured Not configured Not configured
Maximum number of recent documents Enabled: 15 Disabled Not configured Not configured
Do not request alternate credentials Not configured Not configured Not configured Not configured
Request credentials for network installations Not configured Not configured Not configured Not configured
Administrative Templates/Start Menu and TaskBar
Remove user's folders from the Start Menu Not configured Not configured Not configured Not configured
Disable and remove links to Windows Update Enabled Disabled Not configured Not configured
Remove common program groups from Start Menu Not configured Not configured Not configured Not configured
Remove Documents menu from Start Menu Not configured Not configured Not configured Not configured
Disable programs on Settings menu Enabled Disabled Not configured Not configured
Remove Network & Dial-up Connections from Start Menu Enabled Disabled Not configured Not configured
Remove Favorites menu from Start Menu Not configured Not configured Not configured Not configured
Remove Search menu from Start Menu Not configured Not configured Not configured Not configured
Remove Help menu from Start Menu Not configured Not configured Not configured Not configured
Remove Run menu from Start Menu Not configured Not configured Not configured Not configured
Add Logoff to the Start Menu Enabled Disabled Not configured Not configured
Disable Logoff on the Start Menu Not configured Not configured Not configured Not configured
Disable and remove the Shut Down command Enabled Disabled Not configured Not configured
Disable drag-and-drop context menus on the Start Menu Enabled Disabled Not configured Not configured
Disable changes to Taskbar and Start Menu Settings Not configured Disabled Not configured Not configured
Disable context menus for the taskbar Not configured Not configured Not configured Not configured
Do not keep history of recently opened documents Not configured Not configured Not configured Not configured
Clear history of recently opened documents on exit Not configured Not configured Not configured Not configured
Disable personalized menus Enabled Disabled Not configured Not configured
Disable user tracking Not configured Not configured Not configured Not configured
Add "Run in Separate Memory Space" check box to Run dialog box Not configured Not configured Not configured Not configured
Do not use the search-based method when resolving shell shortcuts Not configured Not configured Not configured Not configured
Do not use the tracking-based method when resolving shell shortcuts Not configured Not configured Not configured Not configured
Gray unavailable Windows Installer programs Start Menu shortcuts Not configured Not configured Not configured Not configured
Administrative Templates/Desktop Not configured Not configured
Hide all icons on Desktop Not configured Not configured Not configured Not configured
Remove My Documents icon from desktop Not configured Not configured Not configured Not configured
Remove My Documents icon from Start Menu Not configured Not configured Not configured Not configured
Hide My Network Places icon on desktop Not configured Not configured Not configured Not configured
Hide Internet Explorer icon on desktop Not configured Not configured Not configured Not configured
Do not add shares of recently opened documents to My Network Places Not configured Not configured Not configured Not configured
Prohibit user from changing My Documents path Enabled Disabled Not configured Not configured
Disable adding, dragging, dropping and closing the Taskbar's toolbars Enabled Disabled Not configured Not configured
Disable adjusting desktop toolbars Enabled Disabled Not configured Not configured
Don't save settings at exit Not configured Not configured Not configured Not configured
Administrative Templates/Desktop/Active Desktop Not configured Not configured
Enable Active Desktop Disabled Not configured Not configured Not configured
Disable Active Desktop Not configured Not configured Not configured Not configured
Disable all items Enabled Disabled Not configured Not configured
Prohibit changes Enabled Disabled Not configured Not configured
Prohibit adding items Enabled Disabled Not configured Not configured
Prohibit deleting items Enabled Disabled Not configured Not configured
Prohibit editing items Enabled Disabled Not configured Not configured
Prohibit closing items Enabled Disabled Not configured Not configured
Add/Delete items Not configured Not configured Not configured Not configured
Active Desktop Wallpaper Not configured Not configured Not configured Not configured
Allow only bitmapped wallpaper Not configured Not configured Not configured Not configured
Administrative Templates/Desktop/Active Directory Not configured Not configured
Hide Active Diretory folder Enabled Disabled Not configured Not configured
Administrative Templates/Control Panel Not configured Not configured
Disable Control Panel Enabled Disabled Not configured Not configured
Hide specified control panel applets Not configured Not configured Not configured Not configured
Show only specified control panel applets Enabled Disabled Not configured Not configured
Administrative Templates/Control Panel/Add-Remove Programs Not configured Not configured
Disable Add/Remove Programs Enabled Disabled Not configured Not configured
Hide Change or Remove Programs page Enabled Disabled Not configured Not configured
Hide Add New Programs page Enabled Disabled Not configured Not configured
Hide Add/Remove Windows Components page Enabled Disabled Not configured Not configured
Hide the "Add a program from CD-ROM or floppy disk" option Enabled Disabled Not configured Not configured
Hide the "Add programs from Microsoft" option Enabled Disabled Not configured Not configured
Hide the "Add programs from your network" option Enabled Disabled Not configured Not configured
Go directly to Components wizard Enabled Disabled Not configured Not configured
Disable Support Information Enabled Disabled Not configured Not configured
Specify default category for Add New Programs Not configured Not configured Not configured Not configured
Administrative Templates/Control Panel/Display Not configured Not configured
Disable Display in Control Panel Enabled Disabled Not configured Not configured
Hide Background tab Enabled Disabled Not configured Not configured
Disable changing wallpaper Enabled Disabled Not configured Not configured
Hide Appearance tab Enabled Disabled Not configured Not configured
Hide Settings tab Enabled Disabled Not configured Not configured
Hide Screen Saver tab Enabled Disabled Not configured Not configured
Activate screen saver Disabled Disabled Not configured Not configured
Screen saver executable name Not configured Not configured Not configured Not configured
Password protect the screen saver Not configured Not configured Not configured Not configured
Screen Saver timeout Not configured Not configured Not configured Not configured
Administrative Templates/Control Panel/Printers Not configured Not configured
Disable deletion of printers Enabled Disabled Not configured Not configured
Disable addition of printers Enabled Disabled Not configured Not configured
Browse the network to find printers Disabled Enabled Not configured Not configured
Default Active Directory path when searching for printers Not configured Not configured Not configured Not configured
Browse a common web site to find printers Not configured Not configured Not configured Not configured
Administrative Templates/Control Panel/Regional Options
Restrinct selection of win 2000…language Enabled/English Enabled/English Enabled/English Enabled/English
Administrative Templates/Network/off line files
Disable user configuration of Offline Files Enabled Disabled Not configured Not configured
Synchronize all offline files before logging off Not configured Not configured Not configured Not configured
Action on server disconnect Enabled: Work offline Disabled Not configured Not configured
Non-default server disconnect actions Not configured Not configured Not configured Not configured
Disable 'Make Available Offline' Not configured Not configured Not configured Not configured
Prevent use of Offline Files folder Not configured Not configured Not configured Not configured
Administratively assigned offline files Not configured Not configured Not configured Not configured
Disable reminder balloons Enabled Disabled Not configured Not configured
Reminder balloon frequency Not configured Not configured Not configured Not configured
Initial reminder balloon lifetime Not configured Not configured Not configured Not configured
Reminder balloon lifetime Not configured Not configured Not configured Not configured
Event logging level Not configured Not configured Not configured Not configured
Administrative Templates/Network/Network and Dialup connetions
Prohibit deletion of RAS connections Enabled Disabled Not configured Not configured
Prohibit deletion of RAS connections available to all users Enabled Disabled Not configured Not configured
Prohibit connecting and disconnecting a RAS connection Enabled Disabled Not configured Not configured
Prohibit enabling/disabling a LAN connection Enabled Disabled Not configured Not configured
Prohibit access to properties of a LAN connection Enabled Disabled Not configured Not configured
Prohibit access to current user's RAS connection properties Enabled Disabled Not configured Not configured
Prohibit access to properties of RAS connections available to all users Enabled Disabled Not configured Not configured
Prohibit renaming LAN connections or RAS connections available to all users Enabled Disabled Not configured Not configured
Prohibit renaming of RAS connections belonging to the current user Enabled Disabled Not configured Not configured
Prohibit adding and removing components for a LAN or RAS connection Enabled Disabled Not configured Not configured
Prohibit enabling/disabling components of a LAN connection Enabled Disabled Not configured Not configured
Prohibit access to properties of components of a LAN connection Enabled Disabled Not configured Not configured
Prohibit access to properties of components of a RAS connection Enabled Disabled Not configured Not configured
Prohibit access to the Network Connection wizard Enabled Disabled Not configured Not configured
Prohibit viewing of status statistics for an active connection Enabled Disabled Not configured Not configured
Prohibit access to the Dial-up Preferences item on the Advanced menu Enabled Disabled Not configured Not configured
Prohibit access to the Advanced Settings item on the Advanced menu Enabled Disabled Not configured Not configured
Prohibit configuration of connection sharing Enabled Disabled Not configured Not configured
Prohibit TCP/IP advanced configuration Enabled Disabled Not configured Not configured
Administrative Templates/System
Don't display welcome screen at logon Enabled Disabled Not configured Not configured
Century interpretation for Year 2000 Not configured Not configured Not configured Not configured
Code signing for device drivers Not configured Not configured Not configured Not configured
Custom user interface Not configured Not configured Not configured Not configured
Disable the command prompt Not configured Not configured Not configured Not configured
Disable registry editing tools Enabled Disabled Not configured Not configured
Run only allowed Windows applications Not configured Not configured Not configured Not configured
Don't run specified Windows applications Not configured Not configured Not configured Not configured
Disable Autoplay Not configured Not configured Not configured Not configured
Download missing COM components Not configured Not configured Not configured Not configured
Administrative Templates/System/Logon
Disable Task Manager Enabled Disabled Not configured Not configured
Disable Lock Computer Enabled Disabled Not configured Not configured
Disable Change Password Not Configured Disabled Not configured Not configured
Disable Logoff Not configured Not configured Not configured Not configured
Run logon scripts synchronously Not configured Not configured Not configured Not configured
Run legacy logon scripts hidden Not configured Not configured Not configured Not configured
Run logon scripts visible Not configured Not configured Not configured Not configured
Run logoff scripts visible Not configured Not configured Not configured Not configured
Connect home directory to root of the share Not configured Not configured Not configured Not configured
Limit profile size Enabled: 30Mb Disabled Enabled: 30Mb Enabled: 30Mb
Exclude directories in roaming profile Enabled/Local Settings;Temporary Internet Files;History;Temp;Desktop;Start Menu;NetHood;PrintHood;SendTo;My Documents Enabled/Local Settings;Temporary Internet Files;History;Temp;Desktop;Start Menu;NetHood;PrintHood;SendTo;My Documents Enabled/Local Settings;Temporary Internet Files;History;Temp;Desktop;Start Menu;NetHood;PrintHood;SendTo;My Documents Enabled/Local Settings;Temporary Internet Files;History;Temp;Desktop;Start Menu;NetHood;PrintHood;SendTo;My Documents
Run these programs at user logon Not configured - in systemroot è presente il file local_login.bat Enabled: \\w2ksrv\usr\logo_off\logon_admin.bat.pif Enabled: \\w2ksrv\usr\logo_off\logon_user.bat.pif C:\WINNT\\net_login.bat.lnk
Disable the run once list Not configured Not configured Not configured Not configured
Disable legacy run list Not configured Not configured Not configured Not configured