Allow only system backup
This policy setting allows you to manage whether backups of only system volumes is allowed or both OS and data volumes can be backed up.
If you enable this policy setting, machine administrator/backup operator can backup only volumes hosting OS components and no data only volumes can be backed up.If you disable or do not configure this policy setting, backups can include ...
Set timer resolution
Determines the smallest unit of time that the Packet Scheduler uses when scheduling packets for transmission. The Packet Scheduler cannot schedule packets for transmission more frequently than permitted by the value of this entry.
If you enable this setting, you can override the default timer resolution established for the system, usually units of 10 microseconds.
If you di ...
Prevent subscribing to or deleting a feed or a Web Slice
This policy setting prevents the user from subscribing to or deleting a feed or a Web Slice.
If you enable this policy setting, the menu command to subscribe to a feed and the menu command to delete a feed are disabled, and access to Web Slices is turned off. A developer cannot add a feed or Web Slice or delete a feed or Web Slice by usi ...
DCOM Configuration Extension
This policy setting permits or prohibits the use of this snap-in.
If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console.
If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run ...
Guaranteed service type
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets.
This setting applies only to packets that do not conform to the flow specification.
If you enable this setting, you can change the de ...
Audit logon events
The prescribed GPOs from Microsoft include settings that configure the audit categories present in previous versions of Windows. If you use the script and the GPOs included with this security guidance, these settings will not apply to computers running Windows Vista.
The GPOs intended for use in enterprise environments have been designed to work with Windows XP based computers. ...
Audit Policy: Object Access: Filtering Platform Packet Drop
This subcategory reports when packets are dropped by Windows Filtering Platform (WFP). These events can be very high in volume. Events for this subcategory include:
? 5152: The Windows Filtering Platform blocked a packet.
? 5153: A more restrictive Windows Filtering Platform filter has blocked a packet.
Refer to the Microsoft Knowledge ...
Do not allow passwords to be saved
Controls whether a user can save passwords using Remote Desktop Connection.
If you enable this setting the credential saving checkbox in Remote Desktop Connection will be disabled and users will no longer be able to save passwords. When a user opens an RDP file using Remote Desktop Connection and saves his settings, any password that previously existed in the ...
Turn off Touch Panning
Turn off Panning
Turns off touch panning, which allows users pan inside windows by touch. On a compatible PC with a touch digitizer, by default users are able to scroll or pan inside a scrolling area by dragging up or down directly on the scrolling content.
If you enable this setting, the user will not be able to pan windows by touch.
If you disable this set ...