Although current versions of Firefox have this set to disabled by default, use of this option can be harmful. This would allow the browser to access the Windows shell. This could allow access to the
underlying system. This check verifies that the default setting has not been changed.
This policy setting configures a local override for the configuration to turn on real-time protection. This setting can only be set by Group Policy.
If you enable this setting, the local preference setting will take priority over Group Policy.
If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.
Fix:
(1) GPO: Computer Configuration ...
This policy setting allows you to disable revocation check for the SSL certificate of the KDC proxy server being connected to.
If you enable this policy setting, revocation check for the SSL certificate of the KDC proxy server is ignored by the Kerberos client. This policy setting should only be used in troubleshooting KDC proxy connections. When revocation check is ignored, the server represente ...
Specifies whether users can perform a Microsoft Knowledge Base search from the Help and Support Center.
The Knowledge Base is an online source of technical support information and self-help tools for Microsoft products and is searched as part of all Help and Support Center searches with the default search options.
If you enable this setting, it will remove the Knowledge Base section from the Hel ...
Specifies whether Sound Recorder can run.
Sound Recorder is a feature of Microsoft Windows Vista that can be used to record sound from an audio input device where the recorded sound is encoded and saved as an audio file.
If you enable this policy setting, Sound Recorder will not run.
If you disable or do not configure this policy setting, Sound Recorder can be run.
Fix:
(1) GPO: Computer Conf ...
This policy setting denies write access to removable disks.
If you enable this policy setting, write access will be denied to this removable storage class.
If you disable or do not configure this policy setting, write access will be allowed to this removable storage class.
NOTE: To require that users write data to BitLocker-protected storage enable the policy setting Deny write access to drives ...