Restrictions

Boot

The following restrictions are available in this group:

  • Disable function keys on boot up - By default Windows 9x enables the interruption keys on boot, these allow you to control the boot process. For example pressing F5 while the "Starting Windows..." message is displayed will boot Windows in Safe Mode. This option allows you to disable the F5, F6 and F8 keys. If you have turned on the restriction Require User's Validation for Windows Access and have not tested it yet, do not enable this restriction until you are sure it does work on your PC properly because it denies access to Safe Mode completely. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.

  • Disable ability to skip startup programs - Normally if you hold the Shift key while Windows is loading you can prevent the Startup applications from being launched. This setting disables the ability to by-pass these programs. Set up the rest "Boot" options to lock your computer more safely. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.

  • Allow booting to the previous operating system - If you installed an upgrade version of Windows 9x, you can normally press F4 to boot your previous version of Windows. This option can be disabled. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.

  • Suppress safe mode warning message - Enabling the setting suppress the safe mode warning message when booting up, and bypasses the Startup menu. In most of cases it can give access to DOS mode if your PC was not properly shut down. We do recommend you to turn on this option if you secure PC entrance by the Require User's Validation for Windows Access option. If you have turned on the Require User's Validation for Windows Access restriction and have not tested it yet, do not enable this restriction until you are sure it does work on your PC properly because it restricts access to Safe Mode. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.

  • Require user's validation for windows access - By default Windows doesn't require a valid username and password combination for a user to create and use a local Windows machine. This functionality can be changed to require this validation. Using this option you can stop unauthorized access to your PC via Cancel button while logging in. If you turn on all boot options, only known users defined in Control Panel will have access to your PC using their own usernames and passwords. You need to create at least one user profile, and to define a password for it. Make sure that Microsoft Family Logon is enabled in the network configuration, and set as Primary Network Logon. Use the item Users of Control Panel to create user profiles. To install Microsoft Family Logon: Open the item Network of Control Panel and check the list of installed network components. If you do not see Microsoft Family Logon there, install it as follows: Press the button Add, choose the item Client in the dialog box, then press the button Add. Choose the item Microsoft from the list of Manufacturers and then the item Microsoft Family Logon from the list of Network Clients, then press the button Ok. The last and very important step is to set Microsoft Family Logon as Primary Network Logon. To do this, use the combo box Primary Network Logon, which is situated below the button Add in the item Network of Control Panel. See How to setup this option correctly. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.

  • Always check password on boot - Use this option to lock your personal computer with a password by starting Screen Lock on Boot. Screen Lock is an application you can use to lock your desktop while you are away (see the icon "1st Screen Lock" on the desktop of your PC). If you turn on this option, it will be impossible to get to your PC without knowing password. You can define the boot password in the folder Screen Lock of Common Restrictions or User Restrictions of the tree. Applicable to Windows 95/98/ME/NT/2000/XP.
    •

    Screen lock

    The following restrictions are available in this group:

  • Screen-lock password - If enabled, the password will be applied to all PC users, so all your users will use this password to get through the built-in screen-lock every time desktop is locked with the built-in screen-lock. If you want to use different passwords for different PC users, set up individual passwords for each user listed in the tree (see the folders "Screen Lock" for each user shown in the tree). Screen Lock is an application you can use to lock your desktop while you are away (see the icon "1st Screen Lock" on the desktop of your PC). Option affects the whole PC. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Screen-lock background image - You can select an image here, which will be used as a background in the built-in screen-lock. You can change the picture as many times as you want. To disable the background picture (make the screen-lock on the black screen), uncheck the checkbox. The image will be applied to all PC users, so all your users will see the same background picture in the built-in screen-lock. If you want to use different images for different PC users, set up individual images for each user listed in the tree (see the folders "Screen Lock" for each user shown in the tree). Option affects the whole PC. Applicable to Windows 95/98/ME/NT/2000/XP.
    •

    Legal notice

    The following options are available in this group:

  • Caption of the legal notice dialog box - This option along with the "Text of the Legal Notice Dialog Box" lets you create a dialog box that will be presented to any user before logging onto the system. This is useful where you are required by law to warn people that it is illegal to attempt to logon without being an authorized user. You must define both Caption and Text of the dialog box to make Windows to show it on the screen. Option affects the whole PC. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Text of the legal notice dialog box - This option along with the "Caption of the Legal Notice Dialog Box" lets you create a dialog box that will be presented to any user before logging onto the system. This is useful where you are required by law to warn people that it is illegal to attempt to logon without being an authorized user. You must define both Caption and Text of the dialog box to make Windows to show it on the screen. Option affects the whole PC. Applicable to Windows 95/98/ME/NT/2000/XP.
    •

    System

    The following restrictions are available in this group:

  • Restricting access to the event logs - The Windows NT event log contains records documenting application, security and system events taking place on the machine. These logs can contain sensitive data, and by default, the Guest account has access to view them. This tweak allows you to restrict access to administrators and system accounts. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Stopping the knowndlls vulnerability - In Windows NT the core operating system DLLs are kept in virtual memory and shared between the programs running on the system. This has exposed a vulnerability that could allow a user to gain administrative privileges on the computer the user is interactively logged onto. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Clear the page file at system shutdown - Windows normally does not clear or recreate the page file. On a heavy used system this can be both a security threat and performance drop. Enabling this setting will cause Windows to clear the page file whenever the system is shutdown. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Disable the automatic restarting of the shell - By default if the Windows user interface or one of its components fails, the interface is restarted automatically, this can be changed so that you must restart the interface by logging off and logging on again manually. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Disable shutdown from authentication dialog box - When this setting is enabled a [Shutdown] button is not displayed in authentication dialog box when the system first starts. This does not allow you to shutdown a system without logging in. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT.
  • Disable multiple user sessions and fast user switching - By default, Windows XP gives you an ability to switch between users without logging off that keeps all active users on your PC with all started processes and programs. On a heavy used system this can be both a security threat and performance drop. This option disables multiple user sessions and fast user switching on your PC. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Enable advanced file system and sharing security - This setting is used to enable the ability to control advanced NTFS permissions on local and shared files. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Require users to press ctrl+alt+delete before logon - This setting controls whether users are required to press Ctrl + Alt + Delete as a security precaution before logging into the system. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Use active authentication for unlock and screen saver - This setting controls whether a full login should be performed when a workstation is unlocked or a password is used with the screen saver. Normally Windows will not check some settings such as whether the account has been locked out. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Secure desktop restriction - This restriction is used to stop interactive users from snooping on other user sessions by exploiting a Windows vulnerability. This feature is enabled by default but may interfere with some software applications. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Disable windows installer - This restriction allows you to prevent users from adding and removing software applications with Windows Installer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
    •

    Network

    The following restrictions are available in this group:

  • Disable file and printer sharing - When file and printer sharing is installed it allows users to make services available to other users on a network, this functionality can be disabled by changing this setting. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Securing network access to cd-rom drives - This setting determines whether data in the CD-ROM drive is accessible to other users. This value entry satisfies, in part, the C2 security requirement that you must be able to secure removable media. Because the CD-ROM drive is a volume, by default, it is shared as an administrative share on the network. If the option is on, the CD-ROM drive is allocated to the user as part of the interactive logon process and, therefore, only the current user can access it. This prevents administrators and remote users (and even the same user at a different workstation) from accessing the drive while the current user is logged on to the computer. The drive is shared again when the current user logs off the computer. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • SSecuring network access to floppy drives - This setting determines whether data in the floppy disk drive is accessible to other users. This value entry satisfies, in part, the C2 security requirement that you must be able to secure removable media. Because the floppy disk drive is a volume, by default it is shared as an administrative share on the network. If the option is on, the floppy disk drive is allocated to the user as part of the interactive logon process and, therefore, only the current user can access it. This prevents administrators and remote users (and even the same user at a different workstation) from accessing the drive while the current user is logged on. The drive is shared again when the current user logs off. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Securing network access to dasds - This setting determines whether data in the direct access storage device (DASD) is accessible to other users. This value entry satisfies, in part, the C2 security requirement that you must be able to secure removable media. Because the DASD is a volume, by default it is shared as an administrative share on the network. If the option is on, the DASD is allocated to the user as part of the interactive logon process and, therefore, only the current user can access it. This prevents administrators and remote users (and even the same user at a different workstation) from accessing the DASD while the current user is logged on. The DASD is shared again when the current user logs off. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hiding servers from the browser list - If you have a secure server or workstation you wish to hide from the general browser list, add this registry setting. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Disabled password caching - Normally Windows caches a copy of the users password on the local system to allow for additional automation, this leads to a possible security threat on some systems. Disabling caching means the users passwords are not cached locally. This setting also removes the second Windows password screen and also remove the possibility of networks passwords to get out of sync. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable caching of domain password - Enabling this setting disables the caching of the domain passwords, and therefore passwords are required to be re-entered to access any additional domain resources. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Require alphanumeric windows password - Windows by default will accept anything as a password, including nothing. This setting controls whether Windows will require a alphanumeric password, i.e. a password made from a combination of alpha (A, B, C...) and numeric (1, 2 ,3 ...) characters. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide share passwords with asterisks - This setting controls whether the password typed when accessing a file share is shown in clear text or as asterisks. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable automatic hidden shares - When networking has been installed on a Windows NT machine, it will automatically create hidden shares to the local disk drives. The shares are normally accessed via \server\c$ and \server\d$ depending on the drive letter. It is possible to disable the sharing at run-time, but this tweak will stop the automatic sharing altogether. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Disable the ability to remotely shutdown the computer browser service - It is possible for a malicious user to shut down a computer browser, or all computer browsers, on the same subnet. If all of the computers on the same subnet are shut down, they can then declare their own computer the new master browser. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Restricting information available to anonymous logon users - Windows NT has a feature where anonymous logon users can list domain user names and enumerate share names. Customers who want enhanced security have requested the ability to optionally restrict this functionality. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Don't display last user name - Enabling this key will blank the username box on the logon screen. Preventing people that are logging on from knowing the last user on the system. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to very old versions of Windows NT.
  • Disable web printing - This restriction enables and disables server support for Internet printing. Internet printing lets you display printers on Web pages so they can be viewed, managed, and used across the Internet or an intranet. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
    •

    Remote access

    The following restrictions are available in this group:

  • Disabling save password option in dial-up networking - When you dial a phonebook entry in Dial-Up Networking (DUN), you can use the 'Save Password' option so that your DUN password is cached and you will not need to enter it on successive dial attempts. This key disables that option. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Disable the "log on using dial-up connection" check box - During logon Windows allows users to optionally connect to a Windows domain using dial-up networking, this tweak can be used to disable that option. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows NT.
  • Disable dial-in access - It's possible for users to setup a modem on a Windows machine, and by using Dial-up Networking allow callers to connect to the internal network. Especially in a corporate environment this can cause a major security risk. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT.
    •

    Control panel

    The following restrictions are available in this group:
     

  • Hide accessibility options in control panel - Hides Accessibility Options control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide add/remove programs in control panel - Hides Add/Remove Programs control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide display in control panel - Hides Display control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide add hardware in control panel - Hides Add Hardware control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide internet options in control panel - Hides Internet Options control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide regional/language options in control panel - Hides Regional/Language Options control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide game controllers in control panel - Hides Game Controllers control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide mouse and keyboard in control panel - Hides Mouse and Keyboard control panel applets. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide sounds/audio devices in control panel - Hides Sounds/Audio Devices control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide user accounts in control panel - Hides User Accounts control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide power options in control panel - Hides Power Options control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide system in control panel - Hides System control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide phone/modem options in control panel - Hides Phone/Modem Options control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide date/time in control panel - Hides Date/Time control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide network connections in control panel - Hides Network Connections control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000.
  • Hide odbc administration in control panel - Hides ODBC Administration control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide scanners/cameras in control panel - Hides Scanners/Cameras control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000.
  • Hide faxes in control panel - Hides Faxes control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000.
  • Hide console in control panel - Hides Console control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide infrared port/wireless link in control panel - Hides Infrared Port/Wireless Link control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide licensing in control panel - Hides Licensing control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide mail in control panel - Hides Mail control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide netware client in control panel - Hides Netware Client control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide pc card in control panel - Hides PC Card control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide ports in control panel - Hides Ports control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide server manager in control panel - Hides Server Manager control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide speech properties in control panel - Hides Speech Properties control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide tweakui in control panel - Hides TweakUI control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide wsp client in control panel - Hides WSP Client control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide quicktime in control panel - Hides QuickTime control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide norton live update in control panel - Hides Norton Live Update control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide compaq insight agents in control panel - Hides Compaq Insight Agents control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide passwords in control panel - Hides Passwords control panel applet Applicable to Windows 95/98/ME/
    •

    User restrictions

    Screen lock

    The following restrictions are available in this group:

  • Screen-lock password - If enabled, the password will be applied to all PC users, so all your users will use this password to get through the built-in screen-lock every time desktop is locked with the built-in screen-lock. If you want to use different passwords for different PC users, set up individual passwords for each user listed in the tree (see the folders "Screen Lock" for each user shown in the tree). Screen Lock is an application you can use to lock your desktop while you are away (see the icon "1st Screen Lock" on the desktop of your PC). Option affects the whole PC. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Screen-lock background image - You can select an image here, which will be used as a background in the built-in screen-lock. You can change the picture as many times as you want. To disable the background picture (make the screen-lock on the black screen), uncheck the checkbox. The image will be applied to all PC users, so all your users will see the same background picture in the built-in screen-lock. If you want to use different images for different PC users, set up individual images for each user listed in the tree (see the folders "Screen Lock" for each user shown in the tree). Option affects the whole PC. Applicable to Windows 95/98/ME/NT/2000/XP.
    •

    Ms-dos

    The following restrictions are available in this group:

  • Disable the ms-dos command prompt - This setting allows you to disable the use of the MS-DOS command prompt in Windows. After setting this restriction up all applications, which use the command prompt will be disabled. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Disable single mode ms-dos applications - This setting allows you to disable the use of real mode DOS applications from within the Windows shell. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
    •

    Control panel

    The following subgroups are available in this group:

  • Add or remove programs - Add or Remove Programs Restrictions.
  • Display - Display Properties Restrictions.
  • Network - Network Properties Restrictions.
  • Network Connections - Network Connection Restrictions.
  • Passwords - Password Properties Restrictions.
  • Printers - Printer Properties Restrictions.
  • System - System Properties Restrictions.
  • Internet Options � Internet Options Restrictions.
  • Applets - Control Panel Applet Restrictions.
    •

    Add or remove programs.

    The following restrictions are available in this group:

  • Disable add/remove programs - This option disables Add/Remove Programs. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Disable change and remove programs - This option disables Change and Remove Programs Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Disable add programs - This option disables Add Programs. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option Applicable to Windows 2000/XP.
  • Disable windows components wizard - This option disables Windows Components Wizard. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option Applicable to Windows 2000/XP.
  • Hide "add a program from cd-rom or disk" option - This option hides "Add a program from CD-ROM or disk" option. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option Applicable to Windows 2000/XP.
  • Hide "add programs from microsoft" option - This option hides "Add programs from Microsoft" option. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option Applicable to Windows 2000/XP.
  • Hide "add programs from your network" option - This option hides "Add programs from your network" option. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option Applicable to Windows 2000/XP.
  • Go directly to windows components wizard - Go directly to Windows Components Wizard. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option Applicable to Windows 2000/XP.
  • Disable support information - This option disables Disable Support Information. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option Applicable to Windows 2000/XP.
  • Hide set program access and defaults - This option is used to hide "Set Program Access and Defaults" on the Add or Remove Programs page. This feature was introduced with Windows XP SP1 and Windows 2000 SP3 to allow users to configure the default applications used on the PC. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option Applicable to Windows 2000/XP.
    •

    Display

    The following restrictions are available in this group:
     

  • Deny access to the display settings - This option disables the display settings control panel icon, and stops users from accessing any display settings. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide the display appearance page - This setting, once enabled, hides the display settings appearance page. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide the display background page - This option hides the background page, stopping users from changing any background display settings. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide the screen saver settings page - This option hides the screen saver page from the display settings control, which stops users having access to change screen saver settings. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide the display settings page - This option hides the Settings page from the display properties control. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the "windows and buttons" style control - Disables the "Windows and buttons" style control in the tab Appearance of the Display Properties dialog. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Disable the "color scheme" control - Disables the "Color scheme" control in the tab Appearance of the Display Properties dialog. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Disable the "font size" control - Disables the "Font size" control in the tab Appearance of the Display Properties dialog. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Hide the themes settings page - This option hides the Themes tab which prevents the user from selecting an alternate theme. Themes normally include a background plus sounds, icons and other elements. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Hide the keyboard navigation settings - This restriction disables the "Hide keyboard navigation indicators until I use the ALT key" option in the Display Control Panel (see Appearance->Effects). Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Restrict changes to animation settings - This restriction prevents users from selecting the option to animate the movement of windows and menus. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
    •

    Network

    The following restrictions are available in this group:

  • Disable network control panel - Enabling this option disables access to the Network Control Panel icon. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Hide the file and printer sharing controls - Enabling this options hides the file and printer sharing controls, stopping users from disabling or creating new file or printer shares. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Hide network identification page - The Network Identification page include options to set the Computer Name, Workgroup and Description, enabling this option disables access to the Network ID page. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Hide network access control page - The Access Control Page, defines whether the computer support User-Level access or Share-Level access, enabling this option removes access to the Access Control Page. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
    •

    Network connections

    The following restrictions are available in this group:

  • Restrict add and remove network components - Restricts add and remove network components. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict changes to advanced settings - Restricts changes to Advanced Settings. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict changes to advanced tcpip configuration - Restricts changes to advanced TCPIP configuration. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict changes to protocol and service bindings - Restricts changes to protocol and service bindings. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict deletion of public ras connections - Restricts deletion of public RAS connections. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict deletion of ras connections - Restricts deletion of RAS connections. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict changes to the dial-up preferences - Restricts changes to the Dial-up Preferences. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Enable windows 2000 network connections for administrators - Enables Windows 2000 network connections for administrators. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict access to component properties of a lan connection - Restricts access to component properties of a LAN connection. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict connecting and disconnecting a lan connection - Restricts connecting and disconnecting a LAN connection. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict access to properties of a lan connection - Restricts access to properties of a LAN connection. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Disable the network connection wizard - Disables the Network Connection wizard. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict access to properties of public ras connections - Restricts access to properties of public RAS connections. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict access to properties of a ras connection - Restricts access to properties of a RAS connection. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict connecting and disconnecting a ras connection - Restricts connecting and disconnecting a RAS connection. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict access to private ras connection properties - Restricts access to private RAS connection properties. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict renaming of public ras connections - Restricts renaming of public RAS connections. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict renaming of connections - Restricts renaming of connections. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict renaming of lan connections - Restricts renaming of LAN connections. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Restrict renaming of private ras connections - Restricts renaming of private RAS connections. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
  • Disable status statistics for an active connection - Disables status statistics for an active connection. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000.
    •

    Passwords

    The following restrictions are available in this group:

  • Restrict access to the passwords control panel - This options disables access to the Passwords icon on the control panel, therefore stopping users from changing security related settings. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Hide the user profiles page - The user profile page controls whether all users share or have separate user profiles, access to this page can be disabled by enabling this setting. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Hide the change passwords page - When this setting is enabled, users are no longer able to access the Change Passwords page. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Hide the remote administration page - Enabling this function stops users from being able to change the remote administration settings for the computer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.

    • Printers

    The following restrictions are available in this group:

  • Disable the addition of printers - Any user can add a new printer their system, this option once enabled disables the addition of new printers to the computer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the deletion of printers - Printers can be deleted simply by anyuser pressing the delete key, enabling this setting stops users from being able to delete printers. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide the general and details printer pages - This option hides the printer details and general printer information pages. Once enabled this option stops users from changing specific printer settings. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Disable printers control panel icon - This option disables access to the Printers icon in control panel, therefore stopping users from changing Printer settings. For Windows 2000/XP, see the tree node Special Icons. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
    •

    System

    The following restrictions are available in this group:

  • Hide the hardware profiles page - The settings when enabled hides the Hardware Profiles page from the System icon on the Control Panel. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Hide the device manager page - This setting controls whether the Device Manager, under Control Panel->System is visible. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Hide the file system button - This option hides the File System button from the System icon on the Control Panel. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Hide the virtual memory button - This option hides the Virtual Memory button from the System icon on the Control Panel. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
    •

    Internet options

    The following restrictions are available in this group:

  • Disable accessibility button - Disables Accessibility button in Internet Options of Control Panel. See General tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing cache settings - Disable the ability to change settings of Temporary Internet Files in Internet Options. See General tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable buttons in internet cache settings - Disables Delete Files and Settings buttons in Temporary Internet Files of Internet Options. See General tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing colors in color settings - Disables the ability to change Colors in Color Settings of Internet Options. See Colors button of General tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing links in color settings - Disables the ability to change Links in Color Settings of Internet Options. See Colors button of General tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing fonts - Disables the ability to change Fonts in Internet Options. See General tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing languages - Disables the ability to change Languages in Internet Options. See General tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing history settings - Disables the ability to change History settings of Internet Options. See General tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing home page - Disables the ability to change Home Page in Internet Settings. See General tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide general tab - Hides General tab of Internet Options. See General tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable adding sites on security tab - Disables the ability to add sites on Security Tab. See Security tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing security settings - Disables the ability to change Security Settings settings in Internet Options. See Security tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide security tab - Hides Security tab of Internet Options. See Security tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing options of certificates - Disables Certificates and Publishers buttons of Certificates group of Internet Options. See Content tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable certificates button - Disables Certificates button of Certificates group of Internet Options. See Content tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable publishers button - Disables Publishers button of Certificates group of Internet Options. See Content tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing settings of trusted sites - Disables changing settings of Trusted Sites. It also disables Certificates button of Certificates group of Internet Options. See Content tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing content advisor settings - Disables the ability to change Content Advisor settings in Internet Options. See Content tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide content tab - Hides Content tab of Internet Options. See Content tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing automatic configuration - Disables the ability to change Automatic Configuration in LAN Settings of Internet Options. See Connections Tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing proxy settings - Disables the ability to change Proxy Settings in Internet Options. See Connections Tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing connections - Disables the ability to change Connections in Internet Options. See Connections tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the connection wizard - Disables the Connection Wizard. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the internet connection wizard - Disables the Internet Connection Wizard. See Connections tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide connections tab - Hides Connections Tab of Internet Options. See Connections tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing messaging programs - Disables the ability to change Messaging Programs in Internet Programs of Internet Options. See Programs tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing calendar and contact list - Disables the ability to change Calendar and Contact List items of Internet Programs group of Internet Options. See Programs tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing ie default browser - Disables the ability to change the option "Internet Explorer should check to see whether it is the default browser" of Internet Options. See Programs tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable resetwebsettings button - Disables ResetWebSettings button in Programs of Internet Options. See Programs tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide programs tab - Hides Programs tab in Internet Options. See Programs tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing advanced properties - Disables the ability to change Advanced properties in Internet Options. See Advanced tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide advanced tab - Hides Advanced tab of Internet Options. See Advanced tab of Internet Options. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changing ieakcontext - Disables the ability to change IEAKContext. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changes to wallet settings - Disables changes to Wallet settings. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove privacy tabb - Removes Privacy tab. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the reset web setting button - Disables the Reset web Setting button. Option affects selected user, see the status bar. Applicable to Windows 95/98/ME/NT/2000/XP.
    •

    Applets

    The following restrictions are available in this group:
     

  • Hide accessibility options in control panel - Hides Accessibility Options control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide add/remove programs in control panel - Hides Add/Remove Programs control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide display in control panel - Hides Display control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide add hardware in control panel - Hides Add Hardware control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide internet options in control panel - Hides Internet Options control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide regional/language options in control panel - Hides Regional/Language Options control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide game controllers in control panel - Hides Game Controllers control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide mouse and keyboard in control panel - Hides Mouse and Keyboard control panel applets. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide sounds/audio devices in control panel - Hides Sounds/Audio Devices control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide user accounts in control panel - Hides User Accounts control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide power options in control panel - Hides Power Options control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide system in control panel - Hides System control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide phone/modem options in control panel - Hides Phone/Modem Options control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide date/time in control panel - Hides Date/Time control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide network connections in control panel - Hides Network Connections control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000.
  • Hide odbc administration in control panel - Hides ODBC Administration control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide scanners/cameras in control panel - Hides Scanners/Cameras control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000.
  • Hide faxes in control panel - Hides Faxes control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000.
  • Hide console in control panel - Hides Console control panel applet. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide infrared port/wireless link in control panel - Hides Infrared Port/Wireless Link control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide licensing in control panel - Hides Licensing control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide mail in control panel - Hides Mail control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide netware client in control panel - Hides Netware Client control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide pc card in control panel - Hides PC Card control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide ports in control panel - Hides Ports control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide server manager in control panel - Hides Server Manager control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide speech properties in control panel - Hides Speech Properties control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide tweakui in control panel - Hides TweakUI control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide wsp client in control panel - Hides WSP Client control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide quicktime in control panel - Hides QuickTime control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide norton live update in control panel - Hides Norton Live Update control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Hide compaq insight agents in control panel - Hides Compaq Insight Agents control panel applet Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.

    • Explorer

    The following restrictions are available in this group:
     

  • Hide drives in my computer - This setting controls which drives are visible in 'My Computer', it is possible to hide all drives or just selected ones. This setting controls which drives are visible in 'My Computer', it is possible to hide all drives or just selected ones. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Prevent access to the contents of selected drives - This restriction prevents users from using My Computer or Explorer to access the content of selected drives. Also, they cannot use Run, Map Network Drive, or the Dir command to view the directories on these drives. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows ME/2000/XP.
  • Allow running only certain applications - Windows gives an ability to restrict the applications that can be run by users on a workstation. Define the applications that are allowed to be run in the list below. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disallow running specific applications - This setting allows you to specify applications and filenames that users are restricted from running. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows ME/2000/XP.
  • Disable the ctrl+alt+del, alt+tab and ctrl+esc keys - This option allows you to stop users from being able to end tasks or switch between them using the Ctrl+Alt+Del, Alt+Tab and Ctrl+Esc key combinations. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Hide all items on the desktop - Enabling this options hides all the items and programs on the Windows desktop. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Force windows to use the classic desktop - This tweak disables the various enhanced features of the Windows shell which are included in newer releases of Windows and Internet Explorer. It will remove features including Active Desktop, Web view, thumbnail views and the quick launch toolbar. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide the control panel - This setting allows you to hide the Control Panel options from the Start Menu and deny access to it. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Force the control panel display style - This setting specifies the visual style of the Control Panel. Allowing you to either force the use of the new XP style, classic style or allow the user to select the preferred style. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Remove common program groups from start menu - Disables the display of common groups when the user selects Programs from the Start menu. It also hides Open All Users and Explore All Users items in Start Menu context menu. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove the favorites folder from the start menu - Removes the Favorites folder from the Start menu of the computer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove the find/search command from the start menu - When enabled, this setting removes the 'Find/Search' command from the Start Menu. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove the recent documents folder from the start menu - This key will remove the Recent Documents folder from the Start Menu. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove the run command from the start menu - Removes the user's ability to start applications or processes from the Start menu by removing the option completely. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove the help option from the start menu - This tweak hides the Help option on the Start Menu. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove my documents from documents on the start menu - This tweak hides 'My Documents' which is shown under the Documents folder on the Start Menu. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove my pictures from documents on the start menu - This tweak hides 'My Pictures' which is shown under the Documents folder on the Start Menu. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove my music from the start menu - This restriction removes My Music from the Documents folder on the Start Menu. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove my network places from the start menu - This restriction hides the My Network Places button on the Windows XP simple Start menu. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Remove set program access and defaults from start menu - This option is used to remove the "Set Program Access and Defaults" icon from the Start Menu. This feature was introduced with Windows XP SP1 and Windows 2000 SP3 to allow users to configure the default applications used on the PC. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Hide network and dial-up connections on start menu - This tweak allows you to hide the Network and Dial-up Connections option on the Start Menu and in Control Panel. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows ME/NT/2000/XP.
  • Remove the active desktop from settings on the start menu - Enabling this option, removes the Active Desktop option from Settings on the Start Menu, therefore stopping users from playing with desktop styles. Removing the all subitems of the Settings menu causes the Settings menu to be removed completely. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT.
  • Remove folders from settings on the start menu - Removes folders such as Control Panel, Printers and Faxes, and Network Connections from the Settings menu. These folders will disappear from My Computer as well. If you use Windows XP, it is applicable to classic menu only. Removing the all subitems of the Settings menu causes the Settings menu to be removed completely. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove taskbar and start menu from settings on the start menu - Enabling this option, removes the Taskbar and Start Menu option from Settings on the Start Menu, and stops users from changing the taskbar properties. Removing the all subitems of the Settings menu causes the Settings menu to be removed completely. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove the windows update from settings on the start menu - Enabling this option, removes the Windows Update option from Settings on the Start Menu, therefore stopping users from unwanted updating your Windows. Removing the all subitems of the Settings menu causes the Settings menu to be removed completely. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove folder options from settings on the start menu - Enabling this option, removes the Folder Options option from Settings on the Start Menu, therefore stopping users from changing folder options. Removing the all subitems of the Settings menu causes the Settings menu to be removed completely. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable disable drag-and-drop and context menu on start menu - Removes context menu from Start Menu. While this restriction is turned on, a user can not open Start Menu context menu using right mouse button for an item of the menu. This restriction also prevents users from modifying the Start menu by dragging and dropping items. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Don't add recent files to documents on the start menu - Normally when you open or access a document or file it is added to the list of recent documents on the Start Menu. This tweak will stop files from being added to the list. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Force logoff on the start menu - This setting forces the Logoff button to appear on the Start menu and prevents users from removing or hiding it. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows ME/2000/XP.
  • Force the use of the classic start menu - This restriction forces users to use the classic Windows start menu, instead of the new format introduced with Windows XP. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Don't save settings at exit - Normally when Windows exits it saves the desktop configuration, including icon location, appearance etc. This setting disables these changes from being saved, this is useful in both a secure environment and when you don't want people to change the appearance of your desktop once you have it setup the way you like it. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/NT.
  • Disable view context menu - Removes context menus from Desktop and Windows Explorer. While this restriction is turned on, a user can not open context menus for any items of Desktop and Windows Explorer using right mouse button or any other way. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable tray context menu - Removes context menu from Task Bar and System Tray Bar. While this restriction is turned on, a user can not open Task Bar and System Tray Bar context menu using right mouse button or any other way. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove the file menu from explorer - This option removes the File option from Explorer's toolbar. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Clear recent documents when windows exits - This tweak will clear the list of recent documents on the Start Menu when Windows exits. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable windows hotkeys - This tweak disables the use of Windows hotkeys. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Enforce shell extension security - This restriction can be used to limit the system to only run files that have an approved shell extension. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove the distributed file system tab - This restriction removes the Distributed File System (DFS) tab from Windows explorer. This prevents users from viewing or changing the properties of local DFS shares. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Remove the hardware tab - This restriction removes the hardware tab from applicable items in the Control Panel and from the local drive properties. This prevents users from changing the hardware device properties. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Remove properties from my computer - This restriction remove the properties option from My Computer and hides the "System Properties" screen. It also disables access to the System Properties. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Remove the ability to modify file types - This setting allows you to remove the ability to change, add or delete file types using explorer the Folder Options interface. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Restrict the start menu log off optionn - This restriction removes the ability for a user to enable the "Log Off..." option on the Start Menu. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows ME/2000/XP.
  • Remove tray items from taskbar - This setting removes and restricts access to the tray icons normally found next to the clock on the taskbar. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Remove the toolbars on the taskbar - This restriction is used to remove all the toolbars, including Quick Launch, from the taskbar. It also restricts the ability to re-enable them. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows ME/2000/XP.
  • Hide the task bar and system tray - This option allows you to hide the Task Bar and System Tray so that users will be unable to use system tray and switch between tasks using the Task Bar. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME.
  • Lock the taskbar - This restriction is used to force the locking of the taskbar and restrict users from making any changes to its position. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Hide the taskbar clock - This setting allows you to remove the clock from the system tray on the taskbar. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Disable the ability to change the location of my documents - Disables the ability to change the location of My Documents. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows ME/2000/XP.
  • Disable the ability to change the location of my pictures - Disables the ability to change the location of My Pictures. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows ME/2000/XP.
  • Disable the ability to change the location of my music - Disables the ability to change the location of My Music. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows ME/2000/XP.
  • Disable the ability to change the location of favorites - Disables the ability to change the location of Favorites. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows ME/2000/XP.
    •

    Active desktop

    The following restrictions are available in this group:
     

  • Disable active desktop - This tweak will disable the use of the Active Desktop feature. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Don't allow to change wallpaper - This option allows you to stop users from being able to change wallpaper. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable using web components - This option disables using any web components such as HTML pages as wallpaper. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the ability to add web components - Disables the ability to add web components. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the ability to delete web components - Disables the ability to delete web components. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the ability to edit web components - Disables the ability to edit web components. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP. Disable Closing DragDrop Bands - Disables closing dragdrop bands. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable moving dragdrop bands - Disables moving dragdrop bands. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Force the use of active desktop - The user is normally given the option of disabling Active Desktop through the display properties. This tweak removes the ability to disable Active Desktop. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.

    • Internet

    The following restrictions are available in this group:

  • Disable file download in internet explorer - This setting allows you to restrict the ability to download files using Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Empty temporary internet files on exit - This setting controls whether Internet Explorer should delete all of the temporary Internet files stored during the session when the browser is closed. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide the internet explorer icon from the desktop - This option hides the Internet Explorer icon from the Windows desktop. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable tools - internet options in internet explorer - Disables the Tools - Internet Options menu item in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable form autocomplete - Disables the function of autocompleting of forms in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable password autocomplete - Disables the function of autocompleting of passwords in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable closing internet explorer - Disables the option of closing Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable rightclick context menu - Disables the right-click context menu in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable save as - Disables the ability to do Save As operation in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable favorites - Disables the Favorites in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable file - new command - Disables the File - New command in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable file - open command - Disables the File - Open command in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable find files command - Disables the Find Files command in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable selecting download directory - Disables the option of selecting a download directory in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable full screen view option - Disables the Full Screen view option in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable open in new window option - Disables Open in New Window option. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable view - source menu item - disables the view - Source menu item in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable navigation buttons - Disables the navigation buttons in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove print and print preview from the file menu - Removes Print and Print Preview from the File menu. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide mail button on toolbar - Hides Mail button on ToolBar in Internet Explorer. Also, disables Tools->Mail and News. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove the option to change or hide toolbars - By default users are able to select which toolbars are displayed either be right clicking the toolbar itself, or by changing the options from the View menu. This tweak locks the toolbars, removing the ability to change which are displayed. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the ability to change toolbar selection - Disables the ability to change toolbar selection. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the ability to customize toolbars - By right clicking on a toolbar you are usually given the option to Customize, which allows you to change which functions are available from the toolbar. This tweak allows you to disable that function. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable tool bar - Disables Tool Bar in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable address bar - Disables the address bar in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable links bar - Disables Links Bar in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable entire help menu - Disables the entire Help menu in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove fornetscapeusers menu item - Removes ForNetscapeUsers menu item of Help menu in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove sendfeedback menu item - Removes SendFeedback menu item of Help menu in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove tipoftheday menu item - Removes TipOfTheDay menu item of Help menu in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove tour menu item - Removes Tour menu item of Help menu in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000.
  • Disable search customization - Disables Customize button in Search panel of Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable users channels - Disables users channels in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable web pages complete saving - Disables the ability to save web pages completely in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable adding subscriptions - Disables the ability to add subscriptions in Internet Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove ie instrumentation features - This tweak disables the Internet Explorer instrumentation functions. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable expanding internet explorer new menu - Usually when you click on the New menu in Internet Explorer it is expanded to include options like New Window, Message, Post and Internet Call. Using this tweak will stop the menu expanding and therefore only display the "New Window" option. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable caching of secure web pages - This setting controls whether web pages encrypted using Secure Sockets Layer (SSL) should be stored on the hard disk in the temporary Internet cache. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable changes to browsers bars - Disables changes to browsers bars. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Always prompt user when downloading files - Always prompts user when downloading files. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable msn instant messenger - This restriction is used to disable the ability to run the Microsoft MSN Instant Messenger client. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
    •

    Outlook express

  • Block executable attachments in outlook express - Outlook Express normally allows you to view and save all e-mail attachments. This tweak blocks executable files that potentially contain harmful viruses. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option.
  • Disable account changes in outlook express - This setting disables the ability for users to create or modify any mail, news or directory accounts in Outlook Express. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option.
  • Remove windows messenger from outlook express- This tweak is used to remove MSN Instant Messenger functionality and integration from Outlook Express. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option.

    • Network

    The following restrictions are available in this group:

  • Hide the network neighborhood icon from the desktop - The Network Neighborhood/My Network Places icon is shown on the Windows desktop whenever Windows networking is installed, by enabling this setting the icon will be hidden. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove entire network from network neighborhood - Entire Network is an option under Network Neighborhood that allows users to see all the Workgroup and Domains on the network. Entire Network can be disabled, so users are confined to their own Workgroup or Domain. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide workgroup content from network neighborhood - Enabling this option, hides all Workgroup content from being displayed in Network Neighborhood. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove the map and disconnect network drive options - Prevents users from making additional network connections by removing the Map Network Drive and Disconnect Network Drive buttons from the toolbar in Explorer and also removing the menu items from the Context menu of My Computer and the Tools menu of Explorer. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide computers near me in network places - This setting allows you to show or hide the computers listed Near Me in My Network Places. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Disable recent shares in network places - This restriction stops remote shared folders from being added to Network Places whenever you open a document in the shared folder. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
    •

    System

    The following restrictions are available in this group:

  • Disable registry editing tools - This setting disables user's ability to run Regedit.exe or Regedt32.exe to modify the registry. Be careful with this setting and make sure you don't lock yourself of the registry. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the autorun feature on certain drives - Determines whether the Autorun feature is enabled on each drive connected to the system. When Autorun is enabled, media is started automatically when it is inserted in the drive. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable the windows animation function - Although the Windows animation function, can look good it can slow down your PC if you have a slower graphics card. This option allows you to disable the Windows animation function. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000.
  • Disable smooth scrolling function - This setting allows you to disable the Windows smooth scrolling function, which on a low-powered system can cause performance degradation. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000.
  • Disable the shut down command - This option allows you to stop users from being able to shutdown the computer, by disabling the shut down command. It also removes the Shut Down button from the Windows NT Security dialog box. To enable Windows Security dialog box on Windows XP, turn off Fast User Switching in Control Panel->User Accounts. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Remove log off item from the start menu - This option removes Log Off <Username> item from the Start Menu. It also removes the Log Off button from the Windows NT Security dialog box. To enable Windows Security dialog box on Windows XP, turn off Fast User Switching in Control Panel->User Accounts. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Disable task manager - Enables or disables the user's ability to start Task Manager to view processes, applications running, and make changes to the priority or state of the individual processes. It also removes the Task Manager button from the Windows NT Security dialog box. To enable Windows Security dialog box on Windows XP, turn off Fast User Switching in Control Panel->User Accounts. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Disable the lock workstation button - Add this setting to the registry to stop unauthorized users from locking machines from the Windows NT Security dialog box. To enable Windows Security dialog box on Windows XP, turn off Fast User Switching in Control Panel->User Accounts. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Disable the change password button - This setting disables the 'Change Password' button on the Windows NT Security dialog box. Enabling this setting stops casual users from being able to change the password. To enable Windows Security dialog box on Windows XP, turn off Fast User Switching in Control Panel->User Accounts. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows NT/2000/XP.
  • Change alternate installation credential settings - These settings control whether users are prompted to enter alternate logon credentials when installing software as a non administrative user. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Screen saver password protection policy - This restriction determines whether the screen saver is password protected and prevents users from changing the password-protection setting. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 2000/XP.
  • Prompt for password on resume - This setting allows you to configure the computer to always lock and require a password after resuming from hibernate or suspend mode. Option affects the whole PC. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
  • Disable cd burning - This restriction is used to disable the use of the inbuilt CD recording functions of Windows. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows XP.
    •

    Special icons

    By default Windows has no a possibility to hide special icons such as My Computer, Recycle Bin, My Documents, etc. from the desktop and from the file system. Using the following options you can hide a lot of special icons:

  • Hide My Computer Icon - Hides My Computer Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide My Documents Icon - Hides My Documents Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide Recycle Bin Icon - Hides Recycle Bin Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide my network places icon - Hides My Network Places Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide administrative tools icon - Hides Administrative Tools Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide network connections icon - Hides Network Connections Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide control panel icon - Hides Control Panel Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide briefcase icon - Hides Briefcase Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide fonts icon - Hides Fonts Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide history icon - Hides History Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide inbox icon - Hides Inbox Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide microsoft network icon - Hides Microsoft Network Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide network computers icon - Hides Network Computers Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide printers and faxes icon - Hides Printers and Faxes Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide programs folder icon - Hides Programs Folder Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide scanners and cameras icon - Hides Scanners and Cameras Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide scheduled tasks icon - Hides Scheduled Tasks Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide start menu folder icon - Hides Start Menu Folder Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide temporary internet files icon - Hides Temporary Internet Files Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Hide web folders icon - Hides Web Folders Icon Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
    •

    Customizing folders

    By default Windows has no a possibility to customize Shell Folders. For example, you can not assign the same desktop for any first two users and different desktop for third user. Only separate shell folders can be assigned for each user. It is impossible to make a common shell folder such as Desktop for two or more users if you use standard Windows tools.

    1st Security Agent enables you to realize it. You can customize not only Desktop, but also Favorites, Recent Documents, My Documents, Start Menu, Programs, Startup, Network Neighborhood and other Windows Shell Folders.

    The following restrictions are available in this group:
     

  • Custom desktop - These are the shortcuts that appear on the desktop. This option customizes desktop icons. Enter a path for the directory containing complete files or LNK files that define the desktop shortcuts. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
     
  • Custom favorites - These are the shortcuts that appear in the Favorites group on the Start menu and in the Favorites of Internet Explorer. This option customizes the contents of the Favorites directory. Enter a path for the directory containing complete files or LNK files that define the Favorites directory items. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Custom recent documents - These are the shortcuts that appear in the Documents group on the Start menu. This option customizes the contents of the Recent directory. Enter a path for the directory containing complete files or LNK files that define the Recent directory items. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Custom my documents - These are the shortcuts that appear in the My Documents folder. This option customizes the contents of the My Documents directory. Enter a path for the directory containing complete files or LNK files that define the My Documents directory items. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Custom start menu - These are the shortcuts and other options that appear on the Start menu, as defined by using the Taskbar Properties dialog box. This option customizes what is listed on the Start menu. Enter a path for the directory containing complete files or LNK files that define the Start menu items. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Custom programs - These are the shortcuts that appear in the Programs group on the Start menu. This option customizes the contents of the Programs directory. Enter a path for the directory containing complete files or LNK files that define the Programs directory items. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Custom startup - These are the programs or batch files that appear in the Startup group on the Start menu. This option customizes the contents of the Startup directory. Enter a path for the directory containing complete files or LNK files that define the Startup directory items. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.
  • Custom network neighborhood - These are the shortcuts to resources that appear in Network Neighborhood, including shortcuts to shared printers and files and to Dial-Up Networking connections. Customizes the contents of Network Neighborhood. Enter a path for the directory containing complete files or LNK files that define the Network Neighborhood items. Option affects selected user, see the status bar. Reboot your PC to activate or deactivate this option. Applicable to Windows 95/98/ME/NT/2000/XP.

    • 1st Security Agent online help Go to 1st Security Agent online Help

    1st Security Agent [More] [Download] [Buy]

    Password and security tools - free downloads Restrict access to Control Panel, disable Start Menu items, hide drives, disable DOS, boot keys, Registry editing, taskbar, task manager, and network access, hide desktop icons, apply password protection to Windows, and disable running applications. Secure Internet Explorer, disable individual menu items and individual tabs in the Internet Options dialog, as well as specific settings from each, and more ...

    ================================================================

    1st Security Agent

    Mail Bomber

    Security Administrator

    PC Lockup

    Access Lock

    Access Administrator Pro

    1st Screen Lock

    1st Security Agent

    Mail Bomber

    Security Administrator for Windows

    PC Lockup

    Access Lock

    Access Administrator

    1st Screen Lock

     

    http//www.softheap.com