Changing these Group Policy settings do not have any adverse effects on the way Windows 7
operates.
How ever any changes to the Group Policy should be done with the utmost care,
changing the wrong GPO may cause you to become locked out of the computer.
These listings are unsorted from the 'All Settings' list, you will see
multiple instances of the same Group Policy, when I turn off one instance I turn off all
instances of the GPO, thus causing less confusion.
Some of the settings correspond with services that have been disabled also.
Some MCSE's will point out that if a service is disabled then disabling the GPO
is redundant. How ever if the service is disabled and the GPO is not then
someone can enable and start the service with out your knowledge, thus opening a
security hole that you thought was closed. This way if a say a virus has the
ability to turn on the Firewall service and open a port with the GPO for the
Firewall disabled the virus will not be able to connect to the internet.
Something to think about.
Machine Settings
Setting
State
Disable remote Desktop Sharing
Enabled
Disable Windows Error Reporting
Enabled
Display Shutdown Event Tracker
Disabled
Do not send a Windows error report when a generic driver is installed on a
device
Enabled
Offer Remote Assistance
Disabled
Prevent use of Offline Files folder
Enabled
Remove Boot / Shutdown / Logon / Logoff status messages
Enabled
Remove 'Make Available Offline'
Enabled
Report unplanned shutdown events
Disabled
RPC Endpoint Mapper Client Authentication
Disabled
RPC Troubleshooting State Information
Disabled
Set the Remote Desktop licensing mode
Disabled
Store BitLocker recovery information in Active Directory Domain Services
(Windows Server 2008 and Windows Vista)
Disabled
Synchronize all offline files before logging off
Disabled
Synchronize all offline files when logging on
Disabled
Synchronize offline files before suspend
Disabled
Turn off Autoplay
Enabled
Turn off Autoplay for non-volume devices
Enabled
Would you take my
survey on Windows 7?
Receive a free gift when you complete it!
User Settings
Setting
State
Add "Run in Separate Memory Space" check box to Run dialog box
Enabled
Add Logoff to the Start Menu
Enabled
Add the Run command to the Start Menu
Enabled
Configure HTTP Proxy
Enabled
Disk Defragmenter
Enabled
Disk Management
Enabled
Do not allow Windows Messenger to be run
Enabled
Do not automatically start Windows Messenger initially
Enabled
Do not collect InPrivate Filtering data
Enabled
Do not display the Welcome Center at user logon
Enabled
Do not save encrypted pages to disk
Enabled
FAX Service
Disabled
Force classic Start Menu
Enabled
Indexing Service
Disabled
No Computers Near Me in Network Locations
Enabled
Prevent CD and DVD Media Information Retrieval
Enabled
Remote Access
Disabled
Remote Desktop Services Configuration
Disabled
Remote Desktops
Disabled
Remote Installation Services
Disabled
Remove Balloon Tips on Start Menu items
Enabled
Remove the "Undock PC" button from the Start Menu
Enabled
Remove the Action Center icon
Enabled
I will repeat my warning from above -
Any changes to the GPO should be done with the utmost care, changing the
wrong GPO may cause you to become locked out of the computer, cause it to be
unstable, or even Blue Screen on start up. Use with the utmost care!
This site contains a lot of information. As
with any publication not all information is available due to space, time, or
subject constraints.
If you have a question that you did not find the answer
on this web site you a can
ask your question here and we will endeavor to get you the most up to date
answer possible!
