Updated with review changes

This commit is contained in:
Meghana Athavale 2021-09-28 16:58:16 +05:30
parent e2c9d4daca
commit 9fed7e965f
4 changed files with 51 additions and 60 deletions

View File

@ -205,6 +205,7 @@ manager: dansimp
> [!div class = "checklist"] > [!div class = "checklist"]
> * Device > * Device
> * User
<hr/> <hr/>

View File

@ -268,11 +268,7 @@ ADMX Info:
<!--Description--> <!--Description-->
This policy setting ignores the customized run list. This policy setting ignores the customized run list.
You can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows Vista, Windows XP Professional, and Windows 2000 Professional. These programs are added to the standard run list of programs and services that the system starts. These programs are added to the standard run list of programs and services that the system starts.
If you enable this policy setting, the system ignores the run list for Windows Vista, Windows XP Professional, and Windows 2000 Professional.
If you disable or do not configure this policy setting, Windows Vista adds any customized run list configured to its run list.
This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration. This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.
@ -345,11 +341,7 @@ ADMX Info:
<!--Description--> <!--Description-->
This policy setting ignores the customized run list. This policy setting ignores the customized run list.
You can create a customized list of additional programs and documents that the system starts automatically when it runs on Windows Vista, Windows XP Professional, and Windows 2000 Professional. These programs are added to the standard run list of programs and services that the system starts. These programs are added to the standard run list of programs and services that the system starts.
If you enable this policy setting, the system ignores the run list for Windows Vista, Windows XP Professional, and Windows 2000 Professional.
If you disable or do not configure this policy setting, Windows Vista adds any customized run list configured to its run list.
This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration. This policy setting appears in the Computer Configuration and User Configuration folders. If both policy settings are configured, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.
@ -714,7 +706,7 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on. This policy setting hides the welcome screen that is displayed on Windows each time the user logs on.
If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied. If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied.
@ -722,7 +714,7 @@ Users can still display the welcome screen by selecting it on the Start menu or
If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer. If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer.
This setting applies only to Windows 2000 Professional. It does not affect the "Configure Your Server on a Windows 2000 Server" screen on Windows 2000 Server. This setting applies only to Windows. It does not affect the "Configure Your Server on a Windows Server" screen on Windows Server.
> [!NOTE] > [!NOTE]
> This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration. > This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.
@ -795,13 +787,13 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on. This policy setting hides the welcome screen that is displayed on Windows each time the user logs on.
If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied. If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied.
Users can still display the welcome screen by selecting it on the Start menu or by typing "Welcome" in the Run dialog box. Users can still display the welcome screen by selecting it on the Start menu or by typing "Welcome" in the Run dialog box.
If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer. This setting applies only to Windows 2000 Professional. It does not affect the "Configure Your Server on a Windows 2000 Server" screen on Windows 2000 Server. If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer. This setting applies only to Windows. It does not affect the "Configure Your Server on a Windows Server" screen on Windows Server.
> [!NOTE] > [!NOTE]
> This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration. > This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.

View File

@ -584,7 +584,7 @@ This feature ensures the device checks in real time with the Microsoft Active Pr
Enabled The Block at First Sight setting is turned on. Enabled The Block at First Sight setting is turned on.
Disabled The Block at First Sight setting is turned off. Disabled The Block at First Sight setting is turned off.
This feature requires these Group Policy settings to be set as follows: This feature requires these Policy settings to be set as follows:
- MAPS -> The “Join Microsoft MAPS” must be enabled or the “Block at First Sight” feature will not function. - MAPS -> The “Join Microsoft MAPS” must be enabled or the “Block at First Sight” feature will not function.
- MAPS -> The “Send file samples when further analysis is required” should be set to 1 (Send safe samples) or 3 (Send all samples). Setting to 0 (Always Prompt) will lower the protection state of the device. Setting to 2 (Never send) means the “Block at First Sight” feature will not function. - MAPS -> The “Send file samples when further analysis is required” should be set to 1 (Send safe samples) or 3 (Send all samples). Setting to 0 (Always Prompt) will lower the protection state of the device. Setting to 2 (Never send) means the “Block at First Sight” feature will not function.
@ -655,11 +655,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting controls whether or not complex list settings configured by a local administrator are merged with Group Policy settings. This setting applies to lists such as threats and Exclusions. This policy setting controls whether or not complex list settings configured by a local administrator are merged with Policy settings. This setting applies to lists such as threats and Exclusions.
If you enable or do not configure this setting, unique items defined in Group Policy and in preference settings configured by the local administrator will be merged into the resulting effective policy. In the case of conflicts, Group policy Settings will override preference settings. If you enable or do not configure this setting, unique items defined in Policy and in preference settings configured by the local administrator will be merged into the resulting effective policy. In the case of conflicts, Policy Settings will override preference settings.
If you disable this setting, only items defined by Group Policy will be used in the resulting effective policy. Group Policy settings will override preference settings configured by the local administrator. If you disable this setting, only items defined by Policy will be used in the resulting effective policy. Policy settings will override preference settings configured by the local administrator.
<!--/Description--> <!--/Description-->
@ -1915,11 +1915,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration of the number of days items should be kept in the Quarantine folder before being removed. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration of the number of days items should be kept in the Quarantine folder before being removed. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -2545,11 +2545,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration of behavior monitoring. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration of behavior monitoring. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -2615,11 +2615,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration of scanning for all downloaded files and attachments. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration of scanning for all downloaded files and attachments. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -2685,11 +2685,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration of monitoring for file and program activity on your computer. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration of monitoring for file and program activity on your computer. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -2755,11 +2755,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration to turn on real-time protection. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration to turn on real-time protection. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -2825,11 +2825,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration of monitoring for incoming and outgoing file activity. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration of monitoring for incoming and outgoing file activity. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -2895,11 +2895,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration of the time to run a scheduled full scan to complete remediation. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration of the time to run a scheduled full scan to complete remediation. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -4497,11 +4497,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration of maximum percentage of CPU utilization during scan. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration of maximum percentage of CPU utilization during scan. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -4567,11 +4567,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration of the scan type to use during a scheduled scan. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration of the scan type to use during a scheduled scan. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -4637,11 +4637,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration of scheduled scan day. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration of scheduled scan day. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -4707,11 +4707,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration of scheduled quick scan time. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration of scheduled quick scan time. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -4777,11 +4777,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration of scheduled scan time. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration of scheduled scan time. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->
@ -6565,11 +6565,11 @@ ADMX Info:
<!--/Scope--> <!--/Scope-->
<!--Description--> <!--Description-->
This policy setting configures a local override for the configuration to join Microsoft MAPS. This setting can only be set by Group Policy. This policy setting configures a local override for the configuration to join Microsoft MAPS. This setting can only be set by Policy.
If you enable this setting, the local preference setting will take priority over Group Policy. If you enable this setting, the local preference setting will take priority over Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. If you disable or do not configure this setting, Policy will take priority over the local preference setting.
<!--/Description--> <!--/Description-->

View File

@ -678,7 +678,7 @@ This policy setting restricts the use of Windows Installer.
If you enable this policy setting, you can prevent users from installing software on their systems or permit users to install only those programs offered by a system administrator. You can use the options in the Disable Windows Installer box to establish an installation setting. If you enable this policy setting, you can prevent users from installing software on their systems or permit users to install only those programs offered by a system administrator. You can use the options in the Disable Windows Installer box to establish an installation setting.
- The "Never" option indicates Windows Installer is fully enabled. Users can install and upgrade software. This is the default behavior for Windows Installer on Windows 2000 Professional, Windows XP Professional and Windows Vista when the policy is not configured. - The "Never" option indicates Windows Installer is fully enabled. Users can install and upgrade software.
- The "For non-managed applications only" option permits users to install only those programs that a system administrator assigns (offers on the desktop) or publishes (adds them to Add or Remove Programs). This is the default behavior of Windows Installer on Windows Server 2003 family when the policy is not configured. - The "For non-managed applications only" option permits users to install only those programs that a system administrator assigns (offers on the desktop) or publishes (adds them to Add or Remove Programs). This is the default behavior of Windows Installer on Windows Server 2003 family when the policy is not configured.
@ -1871,8 +1871,6 @@ This policy setting is designed for enterprises to prevent unauthorized or malic
If you disable this policy setting, Windows Installer stores transform files in the Application Data directory in the user's profile. If you disable this policy setting, Windows Installer stores transform files in the Application Data directory in the user's profile.
If you do not configure this policy setting on Windows 2000 Professional, Windows XP Professional and Windows Vista, when a user reinstalls, removes, or repairs an installation, the transform file is available, even if the user is on a different computer or is not connected to the network.
<!--/Description--> <!--/Description-->