自訂拒絕存取錯誤訊息
這個原則設定會指定使用者被拒絕存取檔案或資料夾之後，看到的訊息。您可以自訂拒絕存取訊息，使之包含其他文字和連結。您也可以讓使用者傳送電子郵件，要求存取之前被拒絕存取的檔案或資料夾。
如果您啟用這個原則設定，只要套用這個原則設定的檔案伺服器，就會傳送一封自訂的拒絕存取訊息給使用者。
如果您停用這個原則設定，則無論檔案伺服器的設定為何，使用者都會收到一則標準的拒絕存取訊息，而且裡面不會提供這個原則設定所控制的任何功能。
如果您未設定這個原則設定，使用者會看到標準的拒絕存取訊息，除非檔案伺服器被設定成顯示自訂的拒絕存取訊息。根據預設，使用者會看到標準的拒絕存取訊息。
支援的作業系統: 至少需要 Windows Server 2012、Windows 8 或 Windows RT
| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied |
| Value Name | Enabled |
| Value Type | REG_DWORD |
| Enabled Value | 1 |
| Disabled Value | 0 |
對遭到拒絕存取的使用者顯示下列訊息:
| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied |
| Value Name | ErrorMessage |
| Value Type | REG_MULTI_SZ |
| Default Value |
允許使用者請求協助| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied |
| Value Name | AllowEmailRequests |
| Value Type | REG_DWORD |
| Default Value | 0 |
| True Value | 1 |
| False Value | 0 |
將下列文字新增至電子郵件的結尾:
| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied |
| Value Name | EmailMessage |
| Value Type | REG_MULTI_SZ |
| Default Value |
電子郵件收件者:
資料夾擁有者| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied |
| Value Name | PutDataOwnerOnTo |
| Value Type | REG_DWORD |
| Default Value | 1 |
| True Value | 1 |
| False Value | 0 |
檔案伺服器管理員| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied |
| Value Name | PutAdminOnTo |
| Value Type | REG_DWORD |
| Default Value | 1 |
| True Value | 1 |
| False Value | 0 |
其他收件者:
| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied |
| Value Name | AdditonalEmailTo |
| Value Type | REG_SZ |
| Default Value |
電子郵件設定:
包含裝置宣告| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied |
| Value Name | IncludeDeviceClaims |
| Value Type | REG_DWORD |
| Default Value | 1 |
| True Value | 1 |
| False Value | 0 |
包含使用者宣告| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied |
| Value Name | IncludeUserClaims |
| Value Type | REG_DWORD |
| Default Value | 1 |
| True Value | 1 |
| False Value | 0 |
將電子郵件記錄到應用程式及服務事件記錄檔| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | SOFTWARE\Policies\Microsoft\Windows\ADR\AccessDenied |
| Value Name | GenerateLog |
| Value Type | REG_DWORD |
| Default Value | 1 |
| True Value | 1 |
| False Value | 0 |
srm-fci.admx
- Control Panel
- Regional and Language Options
- Handwriting personalization
- Allow users to enable online speech recognition services
- Block clean-up of unused language packs
- Force selected system UI language to overwrite the user UI language
- Restrict Language Pack and Language Feature Installation
- Restricts the UI language Windows uses for all logged users
- 使用者帳戶
- 個人化
- Allow Online Tips
- Settings Page Visibility
- Regional and Language Options
- Network
- BranchCache
- DirectAccess 用戶端經驗設定
- DNS Client
- Allow DNS suffix appending to unqualified multi-label name queries
- Allow NetBT queries for fully qualified domain names
- Configure DNS over HTTPS (DoH) name resolution
- Connection-specific DNS suffix
- DNS servers
- DNS suffix search list
- Dynamic update
- IDN mapping
- Prefer link local responses over DNS when received over a network with higher precedence
- Primary DNS suffix devolution level
- Primary DNS suffix devolution
- Primary DNS suffix
- Register DNS records with connection-specific DNS suffix
- Register PTR records
- Registration refresh interval
- Replace addresses in conflicts
- TTL value for A and PTR records
- Turn off IDN encoding
- Turn off multicast name resolution
- Turn off smart multi-homed name resolution
- Turn off smart protocol reordering
- Update security level
- Update top level domain zones
- Fonts
- LanMan 伺服器
- Lanman 工作站
- Microsoft 對等網路服務
- 對等名稱解析通訊協定
- 全域定域機組
- 站台-本機定域機組
- 連結-本機定域機組
- 停用對等群組的密碼強度驗證
- 關閉 Microsoft 對等網路服務
- 對等名稱解析通訊協定
- QoS 封包排程器
- SNMP
- SSL 組態設定
- TCPIP 設定值
- Windows Connect Now
- Windows 連線管理員
- WLAN 服務
- WLAN 媒體成本
- WLAN 設定
- WWAN 服務
- Cellular Data Access
- WWAN UI Settings
- WWAN 媒體成本
- 作用區驗證
- 無線顯示器
- 網路提供者
- 網路連線
- Windows 防火牆
- 標準設定檔
- Windows 防火牆:不允許例外
- Windows 防火牆:保護所有網路連線
- Windows 防火牆:允許 ICMP 例外
- Windows 防火牆:允許本機程式例外
- Windows 防火牆:允許本機連接埠例外
- Windows 防火牆:允許記錄
- Windows 防火牆:允許輸入的 UPnP 架構例外
- Windows 防火牆:允許輸入的檔案和印表機共用例外
- Windows 防火牆:允許輸入的遠端桌面例外
- Windows 防火牆:允許輸入的遠端系統管理例外
- Windows 防火牆:定義輸入的程式例外
- Windows 防火牆:定義輸入的連接埠例外
- Windows 防火牆:禁止單點傳送回應到多點傳送或廣播要求
- Windows 防火牆:禁止通知
- 網域設定檔
- Windows 防火牆:不允許例外
- Windows 防火牆:保護所有網路連線
- Windows 防火牆:允許 ICMP 例外
- Windows 防火牆:允許本機程式例外
- Windows 防火牆:允許本機連接埠例外
- Windows 防火牆:允許記錄
- Windows 防火牆:允許輸入的 UPnP 架構例外
- Windows 防火牆:允許輸入的檔案和印表機共用例外
- Windows 防火牆:允許輸入的遠端桌面例外
- Windows 防火牆:允許輸入的遠端系統管理例外
- Windows 防火牆:定義輸入的程式例外
- Windows 防火牆:定義輸入的連接埠例外
- Windows 防火牆:禁止單點傳送回應到多點傳送或廣播要求
- Windows 防火牆:禁止通知
- Windows 防火牆:允許經過驗證的 IPSec 繞道
- 標準設定檔
- 不顯示 [僅本機存取] 網路圖示
- 禁止在您的 DNS 網域網路上安裝、設定及使用網路橋接
- 禁止在您的 DNS 網域網路中使用網際網路連線防火牆
- 要求網域使用者在設定網路的位置時必須提升權限
- 透過內部網路路由傳送所有流量
- Windows 防火牆
- 網路連線狀態指示器
- 網路隔離
- 背景智慧型傳送服務 (BITS)
- 不允許 BITS 用戶端使用 Windows 分支快取
- 不允許此電腦做為 BITS 對等快取伺服器
- 不允許此電腦做為 BITS 對等快取用戶端
- 允許 BITS 對等快取
- 設定工作排程以限制用於 BITS 背景傳送的最大網路頻寬
- 設定維護排程以限制用於 BITS 背景傳送的最大網路頻寬
- 針對成本已評估網路上的 BITS 工作設定預設下載行為
- 限制 BITS 對等快取中檔案的留存時間
- 限制 BITS 對等快取的大小
- 限制 BITS 工作下載時間上限
- 限制 BITS 工作中可新增至檔案的最大範圍數目
- 限制 BITS 工作中所允許的最大檔案數目
- 限制 BITS 背景傳送的最大網路頻寬
- 限制對等快取的最大網路頻寬
- 限制此電腦的最大 BITS 工作數目
- 限制每個使用者的最大 BITS 工作數目
- 非使用中 BITS 工作的逾時
- 連結階層拓樸搜索
- 離線檔案
- 事件記錄層級
- 伺服器中斷連線時的動作
- 備忘提醒出現頻率
- 備忘提醒存留時間
- 備忘提醒的初始存留時間
- 允許或禁止使用離線檔案功能
- 加密離線檔案快取
- 啟用廣域網路快取
- 啟用檔案檢測
- 在付費網路中啟用檔案同步處理
- 在暫停之前同步處理離線檔案
- 子資料夾永遠可離線瀏覽
- 指定系統管理指派的離線檔案
- 檔案並未進入快取
- 登入時將所有離線檔案同步處理
- 登出前對所有離線檔案進行同步處理
- 登出時移除使用者離線檔案的本機複本
- 禁止使用者設定離線檔案
- 移除 [設定成可離線瀏覽] 命令
- 移除 [離線工作] 命令
- 移除這些檔案和資料夾的 [設定成可離線瀏覽]
- 設定低速連結模式
- 設定低速連結速度
- 設定背景同步處理
- 開啟以系統管理方式指派之離線檔案的經濟應用程式
- 關閉備忘提醒
- 防止使用離線檔案資料夾
- 限制離線檔案使用的磁碟空間
- 非預設的伺服器中斷連線時的動作
- 預設快取大小
- 設定 DFS 用戶端搜尋網域控制站的頻率
- Printers
- Activate Internet printing
- Add Printer wizard - Network scan page (Managed network)
- Add Printer wizard - Network scan page (Unmanaged network)
- Allow job name in event logs
- Always rasterize content to be printed using a software rasterizer
- Always render print jobs on the server
- Change Microsoft XPS Document Writer (MXDW) default output format to the legacy Microsoft XPS format (*.xps)
- Computer location
- Custom support URL in the Printers folder's left pane
- Disallow installation of printers using kernel-mode drivers
- Do not allow v4 printer drivers to show printer extensions
- Enable Device Control Printing Restrictions
- Execute print drivers in isolated processes
- Extend Point and Print connection to search Windows Update
- Isolate print drivers from applications
- List of Approved USB-connected print devices
- Only use Package Point and print
- Override print driver execution compatibility setting reported by print driver
- Package Point and print - Approved servers
- Point and Print Restrictions
- Pre-populate printer search location text
- Printer browsing
- 允許公佈印表機
- 允許列印多工緩衝處理器接受用戶端連線
- 允許剪除已公佈的印表機
- 剪除無法自動重新公佈的印表機
- 檢查公佈狀態
- 目錄剪除優先順序
- 目錄剪除重試
- 目錄剪除間隔
- 自動在 Active Directory 上公佈新的印表機
- 記錄目錄剪除重試事件
- Start Menu and Taskbar
- Notifications
- Disable context menus in the Start Menu
- Do not keep history of recently opened documents
- Force Start to be either full screen size or menu size
- Pin Apps to Start when installed
- Remove "Recently added" list from Start Menu
- Remove All Programs list from the Start menu
- Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands
- Remove frequent programs list from the Start Menu
- Show or hide "Most used" list from Start menu
- Start Layout
- System
- App-V
- CEIP
- Client Coexistence
- Integration
- PackageManagement
- PowerManagement
- Publishing
- Reporting
- Scripting
- Streaming
- Allow First Time Application Launches if on a High Cost Windows 8 Metered Connection
- Certificate Filter For Client SSL
- Enable Support for BranchCache
- Location Provider
- Package Installation Root
- Package Source Root
- Reestablishment Interval
- Reestablishment Retries
- Require Publish As Admin
- Specify what to load in background (aka AutoLoad)
- Verify certificate revocation list
- Virtualization
- Enable App-V Client
- Device Health Attestation Service
- Display
- Filesystem
- NTFS
- Do not allow compression on all NTFS volumes
- Do not allow encryption on all NTFS volumes
- Enable / disable TXF deprecated features
- Enable NTFS non-paged pool usage
- Enable NTFS pagefile encryption
- NTFS default tier
- NTFS parallel flush threshold
- NTFS parallel flush worker threads
- Short name creation options
- Disable delete notifications on all volumes
- Enable Win32 long paths
- Selectively allow the evaluation of a symbolic link
- NTFS
- Internet Communication Management
- Internet Communication settings
- 如果 URL 連線正在參照 Microsoft.com 時，關閉網際網路連線精靈
- 如果 URL 連線正在參照 Microsoft.com 時，關閉註冊
- 關閉 HTTP 上的列印
- 關閉 Windows Messenger 客戶經驗改進計畫
- 關閉 Windows Update 裝置驅動程式搜尋
- 關閉 Windows 客戶經驗改進計畫
- 關閉 Windows 網路連線狀態指示器使用中測試
- 關閉 Windows 錯誤報告
- 關閉 [訂購沖印] 圖片工作
- 關閉事件檢視器 "Events.asp" 連結
- 關閉個人化手寫資料共用
- 關閉對所有 Windows Update 功能的存取
- 關閉市集的存取權
- 關閉手寫辨識錯誤報告
- 關閉搜尋小幫手內容檔更新
- 關閉檔案及資料夾的 [發佈到網站] 工作
- 關閉網際網路檔案關聯服務
- 關閉網頁發佈和線上訂購精靈的網際網路下載
- 關閉自動根憑證更新
- 關閉說明及支援中心 Microsoft 知識庫搜尋
- 關閉說明及支援中心的「您知道嗎?」內容
- 關閉透過 HTTP 下載印表機驅動程式
- 限制網際網路通訊
- Internet Communication settings
- iSCSI
- iSCSI 安全性
- iSCSI 目標搜索
- 一般 iSCSI
- KDC
- Kerberos
- Allow retrieving the cloud kerberos ticket during the logon
- Kerberos 用戶端支援宣告、複合驗證以及 Kerberos 保護
- 一律先傳送複合驗證
- 使用樹系搜尋順序
- 停用 KDC Proxy 伺服器 SSL 憑證的撤銷檢查
- 定義主機名稱與 Kerberos 領域對應
- 定義可在內部操控的 Kerberos V5 領域設定
- 對遠端程序呼叫要求嚴格的目標 SPN 比對
- 指定 Kerberos 用戶端的 KDC Proxy 伺服器
- 支援使用憑證進行裝置驗證
- 支援複合驗證
- 無法使用 Kerberos 保護時，驗證要求會失敗
- 要求嚴格的 KDC 驗證
- 設定 Kerberos SSPI 內容權杖緩衝區大小上限
- Kernel DMA Protection
- Locale Services
- Net Logon
- DC Locator DNS Records
- Do not process incoming mailslot messages used for domain controller location based on NetBIOS domain names
- Do not use NetBIOS-based discovery for domain controller location when DNS-based discovery fails
- Force Rediscovery Interval
- Return domain controller address type
- Set Priority in the DC Locator DNS SRV records
- Set TTL in the DC Locator DNS Records
- Set Weight in the DC Locator DNS SRV records
- Specify address lookup behavior for DC locator ping
- Specify DC Locator DNS records not registered by the DCs
- Specify dynamic registration of the DC Locator DNS Records
- Specify Refresh Interval of the DC Locator DNS records
- Specify sites covered by the application directory partition DC Locator DNS SRV records
- Specify sites covered by the DC Locator DNS SRV records
- Specify sites covered by the GC Locator DNS SRV Records
- Try Next Closest Site
- Use automated site coverage by the DC Locator DNS SRV Records
- Use DNS name resolution when a single-label domain name is used, by appending different registered DNS suffixes, if the AllowSingleLabelDnsDomain setting is not enabled.
- Use DNS name resolution with a single-label domain name instead of NetBIOS name resolution to locate the DC
- Use lowercase DNS host names when registering domain controller SRV records
- Allow cryptography algorithms compatible with Windows NT 4.0
- Contact PDC on logon failure
- Set scavenge interval
- Specify expected dial-up delay on logon
- Specify log file debug output level
- Specify maximum log file size
- Specify negative DC Discovery cache setting
- Specify positive periodic DC Cache refresh for non-background callers
- Specify site name
- Use final DC discovery retry setting for background callers
- Use initial DC discovery retry setting for background callers
- Use maximum DC discovery retry interval setting for background callers
- Use positive periodic DC cache refresh for background callers
- Use urgent mode when pinging domain controllers
- DC Locator DNS Records
- OS Policies
- PIN 複雜度
- Security Account Manager
- Service Control Manager Settings
- Security Settings
- Storage Health
- Storage Sense
- Troubleshooting and Diagnostics
- Microsoft 支援服務診斷工具
- MSI 損毀檔案修復
- Windows 待命/繼續效能診斷
- Windows 效能 PerfTrack
- Windows 系統回應效能診斷
- Windows 記憶體遺漏診斷
- Windows 資源耗損偵測與解析
- Windows 開機效能診斷
- Windows 關機效能診斷
- 執行指令的診斷
- 容錯堆積
- 應用程式相容性診斷
- 排程維護
- 損毀檔案修復
- 磁碟診斷
- 診斷: 設定狀況保留
- 診斷: 設定狀況執行層級
- Windows 時間服務
- Windows 檔案保護
- 伺服器管理員
- 使用者設定檔
- 不要以暫存設定檔登入使用者
- 不要檢查漫遊設定檔資料夾的使用者擁有權
- 保留 Windows Installer 和群組原則軟體安裝資料
- 停用低速網路連線偵測功能
- 偵測到低速網路連線時提示使用者
- 刪除漫遊設定檔的快取複本
- 只在主要電腦下載漫遊設定檔
- 只能使用本機使用者設定檔
- 在系統重新啟動時，刪除超過所指定天數的使用者設定檔
- 如果使用者有漫遊使用者設定檔或遠端主目錄，設定網路的最大等待時間
- 將 Administrators 安全性群組加入漫遊使用者設定檔
- 建立對話方塊的逾時值
- 應用程式 (非傳統型應用程式) 的共用使用者名稱、帳戶圖片和網域資訊的使用者管理
- 控制低速網路連線對使用者設定檔的等候時間
- 為登入此電腦的所有使用者設定漫遊設定檔路徑
- 等待遠端使用者設定檔
- 解除載入及更新使用者設定檔的最多重試次數
- 設定使用者主資料夾
- 設定在使用者已登入的狀態下，於背景上傳漫遊使用者設定檔登錄檔案的排程
- 請勿在使用者登出時強制卸載使用者登錄
- 關閉廣告識別碼
- 防止漫遊設定檔變更傳播到伺服器
- 分散式 COM
- 應用程式相容性設定
- 可信賴平台模組服務
- 增強的存放區存取
- 復原
- 抽取式存放裝置存取權
- 拒絕存取時的協助
- 指令碼
- 檔案分類基礎結構
- 登入
- Block user from showing account details on sign-in
- Show clear logon background
- Turn on security key sign-in
- 不要列舉加入網域電腦上的連線使用者
- 不要處理只執行一次清單
- 不要處理舊版執行清單
- 不要顯示網路選取 UI
- 允許使用者選取從連線待命繼續執行時需要輸入密碼
- 列舉加入網域電腦上的本機使用者
- 指定登入的預設網域
- 指派預設認證提供者
- 排除認證提供者
- 永遠使用傳統登入
- 永遠使用自訂登入背景
- 永遠在電腦啟動及登入時等待網路啟動
- 當使用者登入時執行這些程式
- 登入時不要顯示 [開始使用] 的歡迎畫面
- 開啟方便的 PIN 登入
- 關閉 Windows 啟動音效
- 關閉圖片密碼登入
- 關閉鎖定畫面上的應用程式通知
- 隱藏快速切換使用者的進入點
- 顯示首次登入動畫
- 磁碟 NV 快取
- 磁碟配額
- 稽核建立處理程序
- 系統還原
- 緩和選項
- 群組原則
- 記錄和追蹤
- 設定 Ini 檔案喜好設定記錄與追蹤
- 設定印表機喜好設定記錄與追蹤
- 設定地區選項喜好設定記錄與追蹤
- 設定應用程式喜好設定記錄與追蹤
- 設定捷徑喜好設定記錄與追蹤
- 設定排定的工作喜好設定記錄與追蹤
- 設定服務喜好設定記錄與追蹤
- 設定本機使用者和群組喜好設定記錄與追蹤
- 設定檔案喜好設定記錄與追蹤
- 設定環境喜好設定記錄與追蹤
- 設定登錄喜好設定記錄與追蹤
- 設定磁碟機對應喜好設定記錄與追蹤
- 設定網路選項喜好設定記錄與追蹤
- 設定網際網路設定喜好設定記錄與追蹤
- 設定裝置喜好設定記錄與追蹤
- 設定資料來源喜好設定記錄與追蹤
- 設定資料夾喜好設定記錄與追蹤
- 設定資料夾選項喜好設定記錄與追蹤
- 設定開始功能表喜好設定記錄與追蹤
- 設定電源選項喜好設定記錄與追蹤
- Configure web-to-app linking with app URI handlers
- Continue experiences on this device
- Phone-PC linking on this device
- 不讓使用者啟動電腦原則更新
- 允許交互樹系使用者原則和漫遊使用者設定檔
- 啟用伺服器的群組原則快取
- 啟用原則重新整理期間的 AD/DFS 網域控制站同步
- 將直接存取連線設定成快速網路連線
- 指定原則處理等待工作地點連線的時間
- 指定啟動原則處理等待時間
- 永遠使用本機 ADM 檔案於群組原則物件編輯器
- 決定互動式使用者是否可以產生原則結果組資料
- 設定 EFS 修復原則處理
- 設定 Ini 檔案喜好設定延伸原則處理
- 設定 Internet Explorer 維護原則處理
- 設定 IP 安全性原則處理
- 設定使用者群組原則回送處理模式
- 設定印表機喜好設定延伸原則處理
- 設定地區選項喜好設定延伸原則處理
- 設定安全性原則處理
- 設定應用程式喜好設定延伸原則處理
- 設定指令碼原則處理
- 設定捷徑喜好設定延伸原則處理
- 設定排定的工作喜好設定延伸原則處理
- 設定有線原則處理
- 設定服務喜好設定延伸原則處理
- 設定本機使用者和群組喜好設定延伸原則處理
- 設定檔案喜好設定延伸原則處理
- 設定無線原則處理
- 設定環境喜好設定延伸原則處理
- 設定登入指令碼延遲
- 設定登錄原則處理
- 設定登錄喜好設定延伸原則處理
- 設定磁碟機對應喜好設定延伸原則處理
- 設定磁碟配額原則處理
- 設定網域控制站群組原則更新的間隔
- 設定網路選項喜好設定延伸原則處理
- 設定網際網路設定喜好設定延伸原則處理
- 設定群組原則低速連結偵測
- 設定群組原則快取
- 設定裝置喜好設定延伸原則處理
- 設定資料來源喜好設定延伸原則處理
- 設定資料夾喜好設定延伸原則處理
- 設定資料夾選項喜好設定延伸原則處理
- 設定資料夾重新導向原則處理
- 設定軟體安裝原則處理
- 設定開始功能表喜好設定延伸原則處理
- 設定電源選項喜好設定延伸原則處理
- 設定電腦的群組原則更新間隔
- 變更群組原則處理，在偵測到低速網路連線時非同步執行。
- 透過遠端桌面服務登入時，允許非同步使用者群組原則處理
- 關閉原則結果組記錄
- 關閉本機群組原則物件處理
- 關閉群組原則用戶端服務 AOAC 最佳化
- 關閉群組原則背景更新
- 記錄和追蹤
- 裝置安裝
- 裝置安裝限制
- Allow installation of devices that match any of these device instance IDs
- Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria
- Prevent installation of devices that match any of these device instance IDs
- 允許使用符合這些裝置安裝類別的驅動程式安裝裝置
- 允許安裝符合這些裝置識別碼的裝置
- 允許系統管理員覆寫裝置安裝限制原則
- 在原則設定防止安裝時顯示自訂訊息
- 在原則設定防止裝置安裝時顯示自訂訊息標題
- 為使原則變更生效而必須強制重新開機的時間 (秒)
- 防止使用符合這些裝置安裝類別的驅動程式安裝裝置
- 防止安裝抽取式裝置
- 防止安裝未由其他原則設定描述的裝置
- 防止安裝符合下列任何裝置識別碼的裝置
- 允許遠端存取隨插即用介面
- 在裝置安裝期間關閉 [找到新硬體] 提示氣球
- 在通常會提示建立系統還原點的裝置活動期間，防止建立系統還原點
- 在驅動程式排名與選取程序中，將所有經過數位簽署的驅動程式設為相等的優先權
- 指定裝置驅動程式來源位置的搜尋順序
- 指定裝置驅動程式更新的搜尋伺服器
- 當裝置上已安裝標準驅動程式時，不要傳送 Windows 錯誤報告
- 當裝置驅動程式在安裝期間要求其他軟體時，防止 Windows 傳送錯誤報告
- 設定裝置安裝逾時
- 防止從網際網路擷取裝置中繼資料
- 裝置安裝限制
- 裝置防護
- 認證委派
- 資料夾重新導向
- 遠端協助
- 遠端程序呼叫
- 開機初期啟動的反惡意程式碼
- 關機
- 關機選項
- 電源管理
- Energy Saver Settings
- Power Throttling Settings
- 按鈕設定
- 睡眠設定
- Allow network connectivity during connected-standby (on battery)
- Allow network connectivity during connected-standby (plugged in)
- 允許應用程式防止自動睡眠 (一般電源)
- 允許應用程式防止自動睡眠 (使用電池)
- 允許開啟網路檔案時自動睡眠 (一般電源)
- 允許開啟網路檔案時自動睡眠 (使用電池)
- 喚醒電腦時必須使用密碼 (一般電源)
- 喚醒電腦時必須使用密碼 (使用電池)
- 指定系統休眠逾時 (一般電源)
- 指定系統休眠逾時 (使用電池)
- 指定系統睡眠逾時 (一般電源)
- 指定系統睡眠逾時 (使用電池)
- 指定自動睡眠逾時 (一般電源)
- 指定自動睡眠逾時 (使用電池)
- 睡眠時允許待命狀態 (S1-S3) (一般電源)
- 睡眠時允許待命狀態 (S1-S3) (使用電池)
- 開啟應用程式以防止睡眠轉換 (一般電源)
- 開啟應用程式防止睡眠轉換的能力 (使用電池)
- 關閉交互式睡眠 (一般電源)
- 關閉交互式睡眠 (使用電池)
- 硬碟設定
- 視訊與顯示設定
- 通知設定值
- 指定自訂使用中電源計劃
- 選取使用中電源計劃
- 驅動程式安裝
- 下載遺失的 COM 元件
- 不要將移到已加密資料夾中的檔案自動加密
- 允許散佈式連結追蹤用戶端使用網域資源
- 啟動關機事件追蹤器系統狀態資料功能
- 啟用持續的時間戳記
- 在發生 Windows 系統關機後不要關閉系統電源。
- 將可能不安全的 HTML 說明功能限制於指定的資料夾
- 指定 Windows Service Pack 安裝檔案位置
- 指定 Windows 安裝檔案的位置
- 指定選用之元件安裝和元件修復的相關設定
- 登入時不要顯示 [管理您的伺服器] 頁面
- 移除開機 / 關機 / 登入 / 登出狀態訊息
- 關閉 HTML Help 可執行檔的資料執行防止
- 限制這些程式從說明中啟動
- 顯示關機事件追蹤器
- 顯示非常詳細的狀態訊息
- App-V
- Windows Components
- ActiveX Installer 服務
- App Package Deployment
- Allow all trusted apps to install
- Allow deployment operations in special profiles
- Allows development of Windows Store apps and installing them from an integrated development environment (IDE)
- Archive infrequently used apps
- Disable installing Windows apps on non-system volumes
- Not allow sideloaded apps to auto-update in the background
- Not allow sideloaded apps to auto-update in the background on a metered network
- Prevent non-admin users from installing packaged Windows apps
- Prevent users' app data from being stored on non-system volumes
- App Privacy
- Let Windows apps access account information
- Let Windows apps access an eye tracker device
- Let Windows apps access call history
- Let Windows apps access contacts
- Let Windows apps access diagnostic information about other apps
- Let Windows apps access email
- Let Windows apps access location
- Let Windows apps access messaging
- Let Windows apps access motion
- Let Windows apps access notifications
- Let Windows apps access Tasks
- Let Windows apps access the calendar
- Let Windows apps access the camera
- Let Windows apps access the microphone
- Let Windows apps access trusted devices
- Let Windows apps access user movements while running in the background
- Let Windows apps activate with voice
- Let Windows apps activate with voice while the system is locked
- Let Windows apps communicate with unpaired devices
- Let Windows apps control radios
- Let Windows apps make phone calls
- Let Windows apps run in the background
- Let Windows apps take screenshots of various windows or displays
- Let Windows apps turn off the screenshot border
- Backup
- BitLocker 磁碟機加密
- 作業系統磁碟機
- Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN.
- BitLocker 修復結束後重設平台驗證資料
- 不允許標準使用者變更 PIN 或密碼
- 使用增強的開機設定資料驗證設定檔
- 允許使用安全開機來進行完整性驗證
- 允許啟動時網路解除鎖定
- 允許用於啟動的增強 PIN
- 啟動時需要其他驗證 (Windows Server 2008 與 Windows Vista)
- 啟動時需要其他驗證
- 啟用需要平板電腦開機前鍵盤輸入使用 BitLocker 驗證
- 強制作業系統磁碟機的磁碟機加密類型
- 設定 BIOS 韌體設定的 TPM 平台驗證設定檔
- 設定 TPM 平台驗證設定檔 (Windows Vista、Windows Server 2008、Windows 7、Windows Server 2008 R2)
- 設定作業系統磁碟機使用硬體式加密
- 設定作業系統磁碟機的密碼使用方式
- 設定原生 UEFI 韌體設定的 TPM 平台驗證設定檔
- 設定用於啟動的最小 PIN 長度
- 設定開機前修復訊息及 URL
- 選擇如何修復受 BitLocker 保護的作業系統磁碟機
- 固定式資料磁碟機
- 抽取式資料磁碟機
- Disable new DMA devices when this computer is locked
- 將 BitLocker 修復資訊儲存在 Active Directory 網域服務 (Windows Server 2008 和 Windows Vista)
- 為組織提供唯一識別碼
- 選擇使用者如何修復受 BitLocker 保護的磁碟機 (Windows Server 2008 與 Windows Vista)
- 選擇修復密碼的預設資料夾
- 選擇磁碟機加密方法和加密強度 (Windows 8、Windows Server 2012、Windows 8.1、Windows Server 2012 R2、Windows 10 [版本 1507])
- 選擇磁碟機加密方法和加密強度 (Windows 10 [版本 1511] 與更新的版本)
- 選擇磁碟機加密方法和加密強度 (Windows Vista、Windows Server 2008、Windows 7、Windows Server 2008 R2)
- 重新啟動時防止記憶體覆寫
- 驗證智慧卡憑證使用規則相符性
- 作業系統磁碟機
- Camera
- Chat
- Connect
- Data Collection and Preview Builds
- Allow commercial data pipeline
- Allow Desktop Analytics Processing
- Allow device name to be sent in Windows diagnostic data
- Allow Diagnostic Data
- Allow Update Compliance Processing
- Allow WUfB Cloud Processing
- Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service
- Configure collection of browsing data for Desktop Analytics
- Configure Connected User Experiences and Telemetry
- Configure diagnostic data opt-in change notifications
- Configure diagnostic data opt-in settings user interface
- Configure diagnostic data upload endpoint for Desktop Analytics
- Configure the Commercial ID
- Disable deleting diagnostic data
- Disable diagnostic data viewer
- Disable OneSettings Downloads
- Enable OneSettings Auditing
- Limit Diagnostic Log Collection
- Limit Dump Collection
- Limit optional diagnostic data for Desktop Analytics
- 不顯示意見反應通知
- 切換測試人員組建的使用者控制項
- Delivery Optimization
- Absolute Max Cache Size (in GB)
- Allow uploads while the device is on battery while under set Battery level (percentage)
- Cache Server Hostname
- Cache Server Hostname Source
- Delay Background download Cache Server fallback (in seconds)
- Delay background download from http (in secs)
- Delay Foreground download Cache Server fallback (in seconds)
- Delay Foreground download from http (in secs)
- Download Mode
- Enable Peer Caching while the device connects via VPN
- Group ID
- Max Cache Age (in seconds)
- Max Cache Size (percentage)
- Maximum Background Download Bandwidth (in KB/s)
- Maximum Background Download Bandwidth (percentage)
- Maximum Foreground Download Bandwidth (in KB/s)
- Maximum Foreground Download Bandwidth (percentage)
- Minimum Background QoS (in KB/s)
- Minimum disk size allowed to use Peer Caching (in GB)
- Minimum Peer Caching Content File Size (in MB)
- Minimum RAM capacity (inclusive) required to enable use of Peer Caching (in GB)
- Modify Cache Drive
- Monthly Upload Data Cap (in GB)
- Select a method to restrict Peer Selection
- Select the source of Group IDs
- Set Business Hours to Limit Background Download Bandwidth
- Set Business Hours to Limit Foreground Download Bandwidth
- File Explorer
- 舊版
- 不顯示「已安裝新應用程式」通知
- 使用功能區最小化啟動 [檔案總管]
- 使用者/電腦的所有預設媒體櫃定義檔所在的位置。
- 停用在沒有中介層的情況下直接繫結到 IPropertySetStorage。
- 允許在檔案捷徑圖示中使用遠端路徑
- 在使用者磚功能表中顯示鎖定
- 在電源選項功能表中顯示休眠
- 在電源選項功能表中顯示睡眠
- 損毀時關閉終止堆集
- 第一次在電腦上載入時，不要重新初始化既存的漫遊使用者設定檔
- 設定 Windows SmartScreen 篩選工具
- 設定支援網頁連結
- 設定預設關聯設定檔
- 重新導向前，確認新舊資料夾重新導向的目標指向相同的共用
- 關閉 [檔案總管] 中的數字排序
- 關閉檔案總管的資料執行防止
- 關閉殼層通訊協定受保護模式
- Find My Device
- Handwriting
- HomeGroup
- Human Presence
- Internet Explorer
- Accelerators
- Application Compatibility
- Browser menus
- Compatibility View
- Corporate Settings
- Delete Browsing History
- Allow deleting browsing history on exit
- Disable "Configuring History"
- Prevent access to Delete Browsing History
- Prevent deleting ActiveX Filtering, Tracking Protection, and Do Not Track data
- Prevent deleting cookies
- Prevent deleting download history
- Prevent deleting favorites site data
- Prevent deleting form data
- Prevent deleting InPrivate Filtering data
- Prevent deleting passwords
- Prevent deleting temporary Internet files
- Prevent deleting websites that the user has visited
- Prevent the deletion of temporary Internet files and cookies
- Internet Control Panel
- Advanced Page
- Allow active content from CDs to run on user machines
- Allow Install On Demand (except Internet Explorer)
- Allow Install On Demand (Internet Explorer)
- Allow Internet Explorer to use the HTTP2 network protocol
- Allow Internet Explorer to use the SPDY/3 network protocol
- Allow software to run or install even if the signature is invalid
- Allow third-party browser extensions
- Always send Do Not Track header
- Automatically check for Internet Explorer updates
- Check for server certificate revocation
- Check for signatures on downloaded programs
- Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled
- Do not allow resetting Internet Explorer settings
- Do not save encrypted pages to disk
- Empty Temporary Internet Files folder when browser is closed
- Play animations in web pages
- Play sounds in web pages
- Play videos in web pages
- Turn off ClearType
- Turn off encryption support
- Turn off loading websites and content in the background to optimize performance
- Turn off Profile Assistant
- Turn off sending UTF-8 query strings for URLs
- Turn off the flip ahead with page prediction feature
- Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows
- Turn on Caret Browsing support
- Turn on Enhanced Protected Mode
- Use HTTP 1.1 through proxy connections
- Use HTTP 1.1
- Content Page
- General Page
- Browsing History
- Allow websites to store application caches on client computers
- Allow websites to store indexed databases on client computers
- Set application caches expiration time limit for individual domains
- Set application cache storage limits for individual domains
- Set default storage limits for websites
- Set indexed database storage limits for individual domains
- Set maximum application cache individual resource size
- Set maximum application cache resource list size
- Set maximum application caches storage limit for all domains
- Set maximum indexed database storage limit for all domains
- Start Internet Explorer with tabs from last browsing session
- Browsing History
- Security Page
- Internet Zone
- Access data sources across domains
- Allow active content over restricted protocols to access my computer
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Intranet Zone
- Access data sources across domains
- Allow active content over restricted protocols to access my computer
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Local Machine Zone
- Access data sources across domains
- Allow active content over restricted protocols to access my computer
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Locked-Down Internet Zone
- Access data sources across domains
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Locked-Down Intranet Zone
- Access data sources across domains
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Locked-Down Local Machine Zone
- Access data sources across domains
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Locked-Down Restricted Sites Zone
- Access data sources across domains
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Locked-Down Trusted Sites Zone
- Access data sources across domains
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Restricted Sites Zone
- Access data sources across domains
- Allow active content over restricted protocols to access my computer
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Trusted Sites Zone
- Access data sources across domains
- Allow active content over restricted protocols to access my computer
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Internet Zone Template
- Intranet Sites: Include all local (intranet) sites not listed in other zones
- Intranet Sites: Include all network paths (UNCs)
- Intranet Sites: Include all sites that bypass the proxy server
- Intranet Zone Template
- Local Machine Zone Template
- Locked-Down Internet Zone Template
- Locked-Down Intranet Zone Template
- Locked-Down Local Machine Zone Template
- Locked-Down Restricted Sites Zone Template
- Locked-Down Trusted Sites Zone Template
- Restricted Sites Zone Template
- Site to Zone Assignment List
- Trusted Sites Zone Template
- Turn on automatic detection of intranet
- Turn on certificate address mismatch warning
- Turn on Notification bar notification for intranet content
- Internet Zone
- Disable the Advanced page
- Disable the Connections page
- Disable the Content page
- Disable the General page
- Disable the Privacy page
- Disable the Programs page
- Disable the Security page
- Prevent ignoring certificate errors
- Send internationalized domain names
- Use UTF-8 for mailto links
- Advanced Page
- Internet Settings
- Advanced settings
- Browsing
- Multimedia
- Searching
- AutoComplete
- Component Updates
- Help Menu > About Internet Explorer
- Periodic check for updates to Internet Explorer and Internet Tools
- Open Internet Explorer tiles on the desktop
- Set how links are opened in Internet Explorer
- Advanced settings
- Privacy
- Establish InPrivate Filtering threshold
- Establish Tracking Protection threshold
- Prevent the computer from loading toolbars and Browser Helper Objects when InPrivate Browsing starts
- Turn off collection of InPrivate Filtering data
- Turn off InPrivate Browsing
- Turn off InPrivate Filtering
- Turn off Tracking Protection
- Security Features
- Add-on Management
- Add-on List
- All Processes
- Deny all add-ons unless specifically allowed in the Add-on List
- Process List
- Remove "Run this time" button for outdated ActiveX controls in Internet Explorer
- Turn off blocking of outdated ActiveX controls for Internet Explorer
- Turn off blocking of outdated ActiveX controls for Internet Explorer on specific domains
- Turn on ActiveX control logging in Internet Explorer
- AJAX
- Binary Behavior Security Restriction
- Consistent Mime Handling
- Local Machine Zone Lockdown Security
- Mime Sniffing Safety Feature
- MK Protocol Security Restriction
- Network Protocol Lockdown
- Notification bar
- Object Caching Protection
- Protection From Zone Elevation
- Restrict ActiveX Install
- Restrict File Download
- Scripted Window Security Restrictions
- Allow fallback to SSL 3.0 (Internet Explorer)
- Do not display the reveal password button
- Turn off Data Execution Prevention
- Turn off Data URI support
- Add-on Management
- Toolbars
- Add a specific list of search providers to the user's list of search providers
- Allow "Save Target As" in Internet Explorer mode
- Allow Internet Explorer 8 shutdown behavior
- Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar
- Automatically activate newly installed add-ons
- Configure which channel of Microsoft Edge to use for opening redirected sites
- Customize user agent string
- Disable Automatic Install of Internet Explorer components
- Disable changing Automatic Configuration settings
- Disable changing connection settings
- Disable changing secondary home page settings
- Disable Import/Export Settings wizard
- Disable Internet Explorer 11 as a standalone browser
- Disable Periodic Check for Internet Explorer software updates
- Disable showing the splash screen
- Disable software update shell notifications on program launch
- Do not allow users to enable or disable add-ons
- Enable extended hot keys in Internet Explorer mode
- Enforce full-screen mode
- Install new versions of Internet Explorer automatically
- Keep all intranet sites in Internet Explorer
- Let users turn on and use Enterprise Mode from the Tools menu
- Limit Site Discovery output by Domain
- Limit Site Discovery output by Zone
- Make proxy settings per-machine (rather than per-user)
- Pop-up allow list
- Prevent "Fix settings" functionality
- Prevent access to Internet Explorer Help
- Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet
- Prevent bypassing SmartScreen Filter warnings
- Prevent changing pop-up filter level
- Prevent changing proxy settings
- Prevent changing the default search provider
- Prevent configuration of how windows open
- Prevent configuration of new tab creation
- Prevent Internet Explorer Search box from appearing
- Prevent managing pop-up exception list
- Prevent managing SmartScreen Filter
- Prevent managing the phishing filter
- Prevent participation in the Customer Experience Improvement Program
- Prevent per-user installation of ActiveX controls
- Prevent running First Run wizard
- Replace JScript by loading JScript9Legacy in place of JScript via MSHTML/WebOC.
- Restrict search providers to a specific list
- Security Zones: Do not allow users to add/delete sites
- Security Zones: Do not allow users to change policies
- Security Zones: Use only machine settings
- Send all sites not included in the Enterprise Mode Site List to Microsoft Edge.
- Set tab process growth
- Show message when opening sites in Microsoft Edge using Enterprise Mode
- Specify default behavior for a new tab
- Specify use of ActiveX Installer Service for installation of ActiveX controls
- Turn off ability to pin sites in Internet Explorer on the desktop
- Turn off ActiveX Opt-In prompt
- Turn off add-on performance notifications
- Turn off Automatic Crash Recovery
- Turn off browser geolocation
- Turn off configuration of pop-up windows in tabbed browsing
- Turn off Crash Detection
- Turn off Favorites bar
- Turn off Managing SmartScreen Filter for Internet Explorer 8
- Turn off page-zooming functionality
- Turn off pop-up management
- Turn off Quick Tabs functionality
- Turn off Reopen Last Browsing Session
- Turn off suggestions for all user-installed providers
- Turn off tabbed browsing
- Turn off the auto-complete feature for web addresses
- Turn off the quick pick menu
- Turn off the Security Settings Check feature
- Turn on ActiveX Filtering
- Turn on compatibility logging
- Turn on menu bar by default
- Turn on Site Discovery WMI output
- Turn on Site Discovery XML output
- Turn on Suggested Sites
- Use the Enterprise Mode IE website list
- Internet Information Services
- Maps
- MDM
- Messaging
- Microsoft account
- Microsoft Defender Antivirus
- Client Interface
- Device Control
- Exclusions
- MAPS
- Microsoft Defender Exploit Guard
- Attack Surface Reduction
- Controlled Folder Access
- Network Protection
- MpEngine
- Network Inspection System
- Quarantine
- Real-time Protection
- Configure local setting override for monitoring file and program activity on your computer
- Configure local setting override for monitoring for incoming and outgoing file activity
- Configure local setting override for scanning all downloaded files and attachments
- Configure local setting override for turn on behavior monitoring
- Configure local setting override to turn on real-time protection
- Configure monitoring for incoming and outgoing file and program activity
- Define the maximum size of downloaded files and attachments to be scanned
- Monitor file and program activity on your computer
- Scan all downloaded files and attachments
- Turn off real-time protection
- Turn on behavior monitoring
- Turn on process scanning whenever real-time protection is enabled
- Turn on raw volume write notifications
- Turn on script scanning
- Remediation
- Reporting
- Configure time out for detections in critically failed state
- Configure time out for detections in non-critical failed state
- Configure time out for detections in recently remediated state
- Configure time out for detections requiring additional action
- Configure Watson events
- Configure Windows software trace preprocessor components
- Configure WPP tracing level
- Turn off enhanced notifications
- Scan
- Allow users to pause scan
- Check for the latest virus and spyware security intelligence before running a scheduled scan
- Configure local setting override for maximum percentage of CPU utilization
- Configure local setting override for scheduled quick scan time
- Configure local setting override for scheduled scan time
- Configure local setting override for schedule scan day
- Configure local setting override for the scan type to use for a scheduled scan
- Configure low CPU priority for scheduled scans
- Create a system restore point
- Define the number of days after which a catch-up scan is forced
- Run full scan on mapped network drives
- Scan archive files
- Scan network files
- Scan packed executables
- Scan removable drives
- Specify the day of the week to run a scheduled scan
- Specify the interval to run quick scans per day
- Specify the maximum depth to scan archive files
- Specify the maximum percentage of CPU utilization during a scan
- Specify the maximum size of archive files to be scanned
- Specify the scan type to use for a scheduled scan
- Specify the time for a daily quick scan
- Specify the time of day to run a scheduled scan
- Start the scheduled scan only when computer is on but not in use
- Turn on catch-up full scan
- Turn on catch-up quick scan
- Turn on e-mail scanning
- Turn on heuristics
- Turn on removal of items from scan history folder
- Turn on reparse point scanning
- Security Intelligence Updates
- Allow notifications to disable security intelligence based reports to Microsoft MAPS
- Allow real-time security intelligence updates based on reports to Microsoft MAPS
- Allow security intelligence updates from Microsoft Update
- Allow security intelligence updates when running on battery power
- Allows Microsoft Defender Antivirus to update and communicate over a metered connection.
- Check for the latest virus and spyware security intelligence on startup
- Define the number of days after which a catch-up security intelligence update is required
- Define the number of days before spyware security intelligence is considered out of date
- Define the number of days before virus security intelligence is considered out of date
- Define the order of sources for downloading security intelligence updates
- Initiate security intelligence update on startup
- Specify the day of the week to check for security intelligence updates
- Specify the interval to check for security intelligence updates
- Specify the time to check for security intelligence updates
- Turn on scan after security intelligence update
- Threats
- Allow antimalware service to remain running always
- Allow antimalware service to startup with normal priority
- Configure detection for potentially unwanted applications
- Configure local administrator merge behavior for lists
- Configure scheduled task times randomization window
- Define addresses to bypass proxy server
- Define proxy auto-config (.pac) for connecting to the network
- Define proxy server for connecting to the network
- Define the directory path to copy support log files
- Randomize scheduled task times
- Turn off Microsoft Defender Antivirus
- Turn off routine remediation
- Microsoft Defender Application Guard
- Allow auditing events in Microsoft Defender Application Guard
- Allow camera and microphone access in Microsoft Defender Application Guard
- Allow data persistence for Microsoft Defender Application Guard
- Allow files to download and save to the host operating system from Microsoft Defender Application Guard
- Allow hardware-accelerated rendering for Microsoft Defender Application Guard
- Allow Microsoft Defender Application Guard to use Root Certificate Authorities from the user's device
- Configure Microsoft Defender Application Guard clipboard settings
- Configure Microsoft Defender Application Guard print settings
- Prevent enterprise websites from loading non-enterprise content in Microsoft Edge and Internet Explorer
- Turn on Microsoft Defender Application Guard in Managed Mode
- Microsoft Defender Exploit Guard
- Exploit Protection
- Microsoft Edge
- Allow Address bar drop-down list suggestions
- Allow Adobe Flash
- Allow clearing browsing data on exit
- Allow configuration updates for the Books Library
- Allow extended telemetry for the Books tab
- Allow Extensions
- Allow FullScreen Mode
- Allow Microsoft Compatibility List
- Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed
- Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
- Allow printing
- Allow Saving History
- Allow search engine customization
- Allow Sideloading of extension
- Always show the Books Library in Microsoft Edge
- Configure additional search engines
- Configure Favorites Bar
- Configure Home Button
- Configure kiosk mode
- Configure kiosk reset after idle timeout
- Configure Open Microsoft Edge With
- Configure the Adobe Flash Click-to-Run setting
- Disable lockdown of Start pages
- For PDF files that have both landscape and portrait pages, print each in its own orientation.
- Keep favorites in sync between Internet Explorer and Microsoft Edge
- Open a new tab with an empty tab
- Prevent access to the about:flags page in Microsoft Edge
- Prevent certificate error overrides
- Prevent changes to Favorites on Microsoft Edge
- Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start
- Prevent the First Run webpage from opening on Microsoft Edge
- Prevent turning off required extensions
- Provision Favorites
- Set default search engine
- Set Home Button URL
- Set New Tab page URL
- Show message when opening sites in Internet Explorer
- Suppress the display of Edge Deprecation Notification
- Unlock Home Button
- 不允許 WebRTC 共用 LocalHost IP 位址
- 不允許「SmartScreen 篩選工具」警告覆寫
- 不允許針對未驗證之檔案的「SmartScreen 篩選工具」警告覆寫
- 允許員工傳送「不要追蹤」標頭
- 將所有內部網路網站傳送到 Internet Explorer 11
- 設定 Cookie
- 設定企業模式網站清單
- 設定公司首頁
- 設定我的最愛
- 關閉 InPrivate 瀏覽
- 關閉 SmartScreen 篩選工具
- 關閉密碼管理員
- 關閉快顯封鎖程式
- 關閉網址列搜尋建議
- 關閉自動填寫
- 關閉開發人員工具
- Microsoft Passport for Work
- Allow enumeration of emulated smart card for all users
- Configure device unlock factors
- Configure dynamic lock factors
- Turn off smart card emulation
- Use certificate for on-premises authentication
- Use cloud trust for on-premises authentication
- Use PIN Recovery
- Use Windows Hello for Business certificates as smart card certificates
- 使用 Microsoft Passport for Work
- 使用生物識別技術
- 使用硬體安全性裝置
- Microsoft Secondary Authentication Factor
- Microsoft User Experience Virtualization
- Applications
- Access 2013 backup only
- Access 2016 backup only
- Calculator
- Common 2013 backup only
- Common 2016 backup only
- Excel 2013 backup only
- Excel 2016 backup only
- InfoPath 2013 backup only
- Internet Explorer 8
- Internet Explorer 9
- Internet Explorer 10
- Internet Explorer 11
- Internet Explorer Common Settings
- Lync 2013 backup only
- Lync 2016 backup only
- Microsoft Access 2010
- Microsoft Access 2013
- Microsoft Access 2016
- Microsoft Excel 2010
- Microsoft Excel 2013
- Microsoft Excel 2016
- Microsoft InfoPath 2010
- Microsoft InfoPath 2013
- Microsoft Lync 2010
- Microsoft Lync 2013
- Microsoft Lync 2016
- Microsoft Office 365 Access 2013
- Microsoft Office 365 Access 2016
- Microsoft Office 365 Common 2013
- Microsoft Office 365 Common 2016
- Microsoft Office 365 Excel 2013
- Microsoft Office 365 Excel 2016
- Microsoft Office 365 InfoPath 2013
- Microsoft Office 365 Lync 2013
- Microsoft Office 365 Lync 2016
- Microsoft Office 365 OneNote 2013
- Microsoft Office 365 OneNote 2016
- Microsoft Office 365 Outlook 2013
- Microsoft Office 365 Outlook 2016
- Microsoft Office 365 PowerPoint 2013
- Microsoft Office 365 PowerPoint 2016
- Microsoft Office 365 Project 2013
- Microsoft Office 365 Project 2016
- Microsoft Office 365 Publisher 2013
- Microsoft Office 365 Publisher 2016
- Microsoft Office 365 Visio 2013
- Microsoft Office 365 Visio 2016
- Microsoft Office 365 Word 2013
- Microsoft Office 365 Word 2016
- Microsoft Office 2010 Common Settings
- Microsoft Office 2013 Common Settings
- Microsoft Office 2013 Upload Center
- Microsoft Office 2016 Common Settings
- Microsoft Office 2016 Upload Center
- Microsoft OneDrive for Business 2013
- Microsoft OneDrive for Business 2016
- Microsoft OneNote 2010
- Microsoft OneNote 2013
- Microsoft OneNote 2016
- Microsoft Outlook 2010
- Microsoft Outlook 2013
- Microsoft Outlook 2016
- Microsoft PowerPoint 2010
- Microsoft PowerPoint 2013
- Microsoft PowerPoint 2016
- Microsoft Project 2010
- Microsoft Project 2013
- Microsoft Project 2016
- Microsoft Publisher 2010
- Microsoft Publisher 2013
- Microsoft Publisher 2016
- Microsoft Visio 2010
- Microsoft Visio 2013
- Microsoft Visio 2016
- Microsoft Word 2010
- Microsoft Word 2013
- Microsoft Word 2016
- Notepad
- OneNote 2013 backup only
- OneNote 2016 backup only
- Outlook 2013 backup only
- Outlook 2016 backup only
- PowerPoint 2013 backup only
- PowerPoint 2016 backup only
- Project 2013 backup only
- Project 2016 backup only
- Publisher 2013 backup only
- Publisher 2016 backup only
- Visio 2013 backup only
- Visio 2016 backup only
- Word 2013 backup only
- Word 2016 backup only
- WordPad
- Windows Apps
- Configure Sync Method
- Contact IT Link Text
- Contact IT URL
- Do not synchronize Windows Apps
- Enable UEV
- First Use Notification
- Ping the settings storage location before sync
- Settings package size warning threshold
- Settings storage path
- Settings template catalog path
- Synchronization timeout
- Synchronize Windows settings
- Sync settings over metered connections even when roaming
- Sync settings over metered connections
- Sync Unlisted Windows Apps
- Tray Icon
- Use User Experience Virtualization (UE-V)
- VDI Configuration
- Applications
- NetMeeting
- News and interests
- OneDrive
- OOBE
- Push To Install
- Remote Desktop Services
- RD Licensing
- Remote Desktop Connection Client
- RemoteFX USB Device Redirection
- Allow .rdp files from unknown publishers
- Allow .rdp files from valid publishers and user's default .rdp settings
- Configure server authentication for client
- Do not allow hardware accelerated decoding
- Do not allow passwords to be saved
- Prompt for credentials on the client computer
- Specify SHA1 thumbprints of certificates representing trusted .rdp publishers
- Turn Off UDP On Client
- Remote Desktop Session Host
- Connections
- Allow users to connect remotely by using Remote Desktop Services
- Automatic reconnection
- Configure keep-alive connection interval
- Deny logoff of an administrator logged in to the console session
- Limit number of connections
- Restrict Remote Desktop Services users to a single Remote Desktop Services session
- Select network detection on the server
- Select RDP transport protocols
- Set rules for remote control of Remote Desktop Services user sessions
- Suspend user sign-in to complete app registration
- 允許從遠端啟動未列出的程式
- 關閉公平共用 CPU 排程
- Device and Resource Redirection
- Allow audio and video playback redirection
- Allow audio recording redirection
- Allow time zone redirection
- Allow UI Automation redirection
- Do not allow Clipboard redirection
- Do not allow COM port redirection
- Do not allow drive redirection
- Do not allow location redirection
- Do not allow LPT port redirection
- Do not allow smart card device redirection
- Do not allow supported Plug and Play device redirection
- Do not allow video capture redirection
- Limit audio playback quality
- Licensing
- Printer Redirection
- Profiles
- RD Connection Broker
- Remote Session Environment
- RemoteFX for Windows Server 2008 R2
- Always show desktop on connection
- Configure compression for RemoteFX data
- Configure H.264/AVC hardware encoding for Remote Desktop Connections
- Configure image quality for RemoteFX Adaptive Graphics
- Configure RemoteFX Adaptive Graphics
- Enable RemoteFX encoding for RemoteFX clients designed for Windows Server 2008 R2 SP1
- Enforce Removal of Remote Desktop Wallpaper
- Limit maximum color depth
- Limit maximum display resolution
- Limit number of monitors
- Prioritize H.264/AVC 444 graphics mode for Remote Desktop Connections
- Remove "Disconnect" option from Shut Down dialog
- Remove Windows Security item from Start menu
- Start a program on connection
- Use advanced RemoteFX graphics for RemoteApp
- Use hardware graphics adapters for all Remote Desktop Services sessions
- Use WDDM graphics display driver for Remote Desktop Connections
- 不允許字型平滑處理
- 允許遠端桌面工作階段的桌面轉譯緩衝處理
- Security
- Always prompt for password upon connection
- Do not allow local administrators to customize permissions
- Require secure RPC communication
- Require use of specific security layer for remote (RDP) connections
- Require user authentication for remote connections by using Network Level Authentication
- Server authentication certificate template
- Set client connection encryption level
- Session Time Limits
- Temporary folders
- 應用程式相容性
- Connections
- RSS Feeds
- Speech
- Tablet PC
- Tablet PC 畫筆訓練
- 敏銳筆觸學習
- 游標
- 畫筆 UX 行為
- 硬體按鈕
- 觸控輸入
- 輸入面板
- 附屬應用程式
- Tenant Restrictions
- Widgets
- Windows Defender SmartScreen
- Windows Game Recording and Broadcasting
- Windows Ink Workspace
- Windows Installer
- 允許使用者修補已升級的產品
- 允許使用者控制安裝
- 將轉換檔案的複本儲存在工作站的安全位置
- 強制升級元件規則
- 指定 Windows Installer 記錄在其交易記錄中的事件類型
- 控制基準檔案快取的大小上限
- 永遠以較高的特殊權限安裝
- 當權限提高時，允許使用者使用媒體來源
- 當權限提高時，允許使用者瀏覽來源
- 禁止 Flyweight 修補
- 禁止使用者安裝
- 禁止使用重新啟動管理員
- 禁止復原
- 禁止移除更新
- 禁止非系統管理員套用廠商簽署的更新
- 移除新來源的 [瀏覽] 對話方塊
- 透過封裝設定關閉記錄
- 關閉 Windows Installer
- 關閉系統還原檢查點建立功能
- 防止使用者使用 Windows Installer 來安裝更新或升級
- 防止內嵌的 UI
- 防止出現 Windows Installer 指令碼的 Internet Explorer 安全性提示
- Windows Media Digital Rights Management
- Windows Media Player
- Windows Messenger
- Windows PowerShell
- Windows Sandbox
- Windows Security
- Account protection
- App and browser protection
- Device performance and health
- Device security
- Enterprise Customization
- Family options
- Firewall and network protection
- Notifications
- Systray
- Virus and threat protection
- Windows Update
- Legacy Policies
- Allow Automatic Updates immediate installation
- Allow non-administrators to receive update notifications
- Configure auto-restart reminder notifications for updates
- Configure auto-restart required notification for updates
- Configure auto-restart warning notifications schedule for updates
- Delay Restart for scheduled installations
- Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box
- Do not allow update deferral policies to cause scans against Windows Update
- Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box
- Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates
- No auto-restart with logged on users for scheduled automatic updates installations
- Re-prompt for restart with scheduled installations
- Reschedule Automatic Updates scheduled installations
- Specify deadline before auto-restart for update installation
- Specify Engaged restart transition and notification schedule for updates
- Turn off auto-restart notifications for update installations
- Turn on recommended updates via Automatic Updates
- Turn on Software Notifications
- Manage end user experience
- Allow updates to be downloaded automatically over metered connections
- Always automatically restart at the scheduled time
- Configure Automatic Updates
- Display options for update notifications
- Remove access to "Pause updates" feature
- Remove access to use all Windows Update features
- Specify active hours range for auto-restarts
- Specify deadlines for automatic updates and restarts
- Turn off auto-restart for updates during active hours
- Update Power Policy for Cart Restarts
- Manage updates offered from Windows Server Update Service
- Allow signed updates from an intranet Microsoft update service location
- Automatic Updates detection frequency
- Do not connect to any Windows Update Internet locations
- Enable client-side targeting
- Specify intranet Microsoft update service location
- Specify source service for specific classes of Windows Updates
- Manage updates offered from Windows Update
- Legacy Policies
- Windows 可靠性分析
- Windows 客戶經驗改進計畫
- Windows 登入選項
- Windows 色彩系統
- Windows 行事曆
- Windows 行動中心
- Windows 遠端殼層
- Windows 遠端管理 (WinRM)
- Windows 錯誤報告
- Work Folders
- 事件檢視器
- 事件記錄
- 事件記錄服務
- 安全性
- 安裝
- 應用程式
- 系統
- 事件轉寄
- 可攜式作業系統
- 同步您的設定
- 定位和感應器
- 工作排程器
- 市集
- 應用程式執行階段
- 應用程式相容性
- 搜尋
- OCR
- Allow Cloud Search
- Allow Cortana above lock screen
- Allow Cortana Page in OOBE on an AAD account
- 不允許 Web 搜尋
- 不允許將抽取式磁碟機上的位置新增到媒體櫃
- 不要在 [搜尋] 中搜尋網路或顯示網路搜尋結果
- 以電池電力執行時防止編製索引以節省電池電力
- 使用計量付費連線時，不要在 [搜尋] 中搜尋網路或顯示網路搜尋結果
- 停用索引子降速功能
- 允許 Cortana
- 允許使用變音符號
- 允許加密檔案索引
- 允許搜尋和 Cortana 使用定位
- 啟用為未快取之 Exchange 資料夾編製索引的功能
- 啟用為線上委派信箱編製索引的功能
- 啟用線上郵件索引編製的速度調節功能
- 控制各種附件的預覽功能
- 新增主要內部網路搜尋位置
- 新增次要內部網路搜尋位置
- 磁碟空間不足時停止編製索引
- 索引子資料位置
- 編製內容和屬性的索引時，永遠使用自動語言偵測
- 設定 Desktop Search 結果中的大型或小型圖示檢視
- 設定 [搜尋] 中可以分享的資訊
- 設定 [搜尋] 的安全搜尋設定
- 防止使用不在清單中的 iFilter 與通訊協定處理程式
- 防止在控制台中顯示 Windows Search 的進階索引選項
- 防止對 Microsoft Office Outlook 編製索引
- 防止對公用資料夾編製索引
- 防止對離線檔案快取中的檔案編製索引
- 防止對電子郵件的附件編製索引
- 防止從控制台新增 UNC 位置到索引
- 防止新增使用者指定的位置到 [所有位置] 功能表
- 防止為特定檔案類型編製索引
- 防止為特定路徑編製索引
- 防止用戶端從遠端查詢索引
- 防止自訂控制台中的已索引位置
- 預覽窗格位置
- 預設的已排除路徑
- 預設的已索引路徑
- 數位購物服務區
- 文字輸入
- 新增功能到 Windows 8.1
- 智慧卡
- 桌面小工具
- 桌面視窗管理員
- 視窗框架色彩設定
- 不允許呼叫 Flip3D
- 不允許視窗動畫
- 使用純色做為開始背景
- 檔案歷程記錄
- 生物識別技術
- 簡報設定
- 維護排程器
- 線上協助
- 自動播放原則
- 裝置和驅動程式相容性
- 裝置註冊
- 認證使用者介面
- 資訊安全中心
- 軟體保護平台
- 邊緣 UI
- 錄音機
- 關機選項
- 雲端內容
- Control Panel
- Printers
- Browse a common web site to find printers
- Browse the network to find printers
- Default Active Directory path when searching for printers
- Enable Device Control Printing Restrictions
- List of Approved USB-connected print devices
- Only use Package Point and print
- Package Point and print - Approved servers
- Point and Print Restrictions
- Prevent addition of printers
- Prevent deletion of printers
- Turn off Windows default printer management
- Regional and Language Options
- Handwriting personalization
- Hide Regional and Language Options administrative options
- Hide the geographic location option
- Hide the select language group options
- Hide user locale selection and customization options
- Restrict Language Pack and Language Feature Installation
- Restrict selection of Windows menus and dialogs language
- Restricts the UI languages Windows should use for the selected user
- Turn off autocorrect misspelled words
- Turn off highlight misspelled words
- Turn off insert a space after selecting a text prediction
- Turn off offer text predictions as I type
- [顯示]
- 個人化
- 新增或移除程式
- 程式集
- Settings Page Visibility
- 只顯示指定的控制台項目
- 禁止存取 [控制台] 和電腦設定
- 開啟 [控制台] 時永遠開啟 [所有控制台項目]
- 隱藏指定的控制台項目
- Printers
- Desktop
- Active Directory
- 桌面
- 不要將最近開啟的文件共用新增到 [網路位置] 中
- 從 [文件] 圖示內容功能表移除 [內容]
- 從 [資源回收筒] 內容功能表中移除 [內容]
- 從 [電腦] 圖示內容功能表移除 [內容]
- 禁止使用者手動重新導向設定檔資料夾
- 禁止調整桌面工具列
- 移除桌面上的 [我的文件] 圖示
- 移除桌面上的 [資源回收筒] 圖示
- 移除桌面上的 [電腦] 圖示
- 移除桌面清除精靈
- 結束時不儲存設定
- 關閉 Aero 搖動視窗最小化滑鼠手勢
- 防止新增、拖曳、置放及關閉工作列的工具列
- 隱藏並停用桌面上的所有項目
- 隱藏桌面上的 Internet Explorer 圖示
- 隱藏桌面上的 [網路位置] 圖示
- Network
- Windows Connect Now
- 網路連線
- 可以刪除使用者開放遠端存取連線
- 可以啟用或停用區域網路連線
- 可以變更所有使用者遠端存取連線的內容
- 可以重新命名區域網路連線
- 可以重新命名所有使用者遠端存取連線
- 在只有有限的連線或無連線能力時關閉通知
- 所有的使用者都可以重新命名區域連線或遠端存取連線
- 禁止使用 TCP/IP 進階設定
- 禁止刪除遠端存取連線
- 禁止啟用或停用區域網路連線的元件
- 禁止存取 [進階] 功能表中的 [進階設定]
- 禁止存取 [進階] 功能表中的遠端存取喜好設定
- 禁止存取區域網路連線的屬性
- 禁止存取區域連線的元件屬性
- 禁止存取新增連線精靈
- 禁止存取遠端存取連線的元件屬性
- 禁止建立及中斷遠端存取連線
- 禁止新增及移除區域網路或遠端存取連線的元件
- 禁止檢視使用中連線的狀態
- 禁止變更私人遠端存取連線的屬性
- 禁止重新命名私人遠端存取連線
- 系統管理員可以進行 Windows 2000 網路連線設定
- 離線檔案
- Start Menu and Taskbar
- Notifications
- Add "Run in Separate Memory Space" check box to Run dialog box
- Add Logoff to the Start Menu
- Add Search Internet link to Start Menu
- Add the Run command to the Start Menu
- Change Start Menu power button
- Clear history of recently opened documents on exit
- Clear the recent programs list for new users
- Clear tile notifications during log on
- Disable context menus in the Start Menu
- Do not display any custom toolbars in the taskbar
- Do not keep history of recently opened documents
- Do not search communications
- Do not search for files
- Do not search Internet
- Do not search programs and Control Panel items
- Do not use the search-based method when resolving shell shortcuts
- Do not use the tracking-based method when resolving shell shortcuts
- Force classic Start Menu
- Force Start to be either full screen size or menu size
- Go to the desktop instead of Start when signing in
- Gray unavailable Windows Installer programs Start Menu shortcuts
- Hide the notification area
- List desktop apps first in the Apps view
- Lock the Taskbar
- Pin Apps to Start when installed
- Prevent changes to Taskbar and Start Menu Settings
- Prevent grouping of taskbar items
- Prevent users from customizing their Start Screen
- Prevent users from uninstalling applications from Start
- Remove "Recently added" list from Start Menu
- Remove access to the context menus for the taskbar
- Remove All Programs list from the Start menu
- Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands
- Remove Balloon Tips on Start Menu items
- Remove Clock from the system notification area
- Remove common program groups from Start Menu
- Remove Default Programs link from the Start menu.
- Remove Documents icon from Start Menu
- Remove Downloads link from Start Menu
- Remove Favorites menu from Start Menu
- Remove frequent programs list from the Start Menu
- Remove Games link from Start Menu
- Remove Help menu from Start Menu
- Remove Homegroup link from Start Menu
- Remove links and access to Windows Update
- Remove Logoff on the Start Menu
- Remove Music icon from Start Menu
- Remove Network Connections from Start Menu
- Remove Network icon from Start Menu
- Remove Pictures icon from Start Menu
- Remove pinned programs list from the Start Menu
- Remove programs on Settings menu
- Remove Recent Items menu from Start Menu
- Remove Recorded TV link from Start Menu
- Remove Run menu from Start Menu
- Remove Search Computer link
- Remove Search link from Start Menu
- Remove See More Results / Search Everywhere link
- Remove the "Undock PC" button from the Start Menu
- Remove the Meet Now icon
- Remove the People Bar from the taskbar
- Remove user's folders from the Start Menu
- Remove user folder link from Start Menu
- Remove user name from Start Menu
- Remove Videos link from Start Menu
- Search just apps from the Apps view
- Show "Run as different user" command on Start
- Show additional calendar
- Show or hide "Most used" list from Start menu
- Show QuickLaunch on Taskbar
- Show Start on the display the user is using when they press the Windows logo key
- Show the Apps view automatically when the user goes to Start
- Start Layout
- Turn off notification area cleanup
- Turn off user tracking
- 不允許在多部顯示器顯示工作列
- 不允許釘選市集應用程式到工作列
- 不允許釘選程式到工作列
- 不允許釘選項目在捷徑清單上
- 不顯示或追蹤來自遠端位置的捷徑清單項目
- 停用顯示球形文字說明作為快顯通知。
- 在工作列上顯示 Windows 市集應用程式
- 從工作列移除釘選的程式
- 移除安全性與維護圖示
- 移除網路功能圖示
- 移除通知與重要訊息中心
- 移除電池計量表
- 移除音量控制圖示
- 鎖定所有工作列設定
- 關閉功能通告提示氣球通知
- 關閉工作列縮圖
- 關閉所有球形文字說明通知
- 關閉自動將通知圖示升級到工作列
- 防止使用者將工作列移至另一個螢幕固定位置
- 防止使用者新增或移除工具列
- 防止使用者調整工作列大小
- 防止使用者重新排列工具列
- System
- Ctrl+Alt+Del 選項
- Display
- Internet Communication Management
- Locale Services
- 使用者設定檔
- 抽取式存放裝置存取權
- 指令碼
- 登入
- 緩和選項
- 群組原則
- 資料夾重新導向
- 電源管理
- 驅動程式安裝
- Century interpretation for Year 2000
- Windows Automatic Updates
- 下載遺失的 COM 元件
- 不要執行已指定的 Windows 應用程式
- 只執行指定的 Windows 應用程式
- 登入時不要顯示 [開始使用] 的歡迎畫面
- 自訂使用者介面
- 防止存取命令提示字元
- 防止存取登錄編輯工具
- 限制這些程式從說明中啟動
- Windows Components
- Calculator
- Data Collection and Preview Builds
- File Explorer
- 檔案總管框架窗格
- 舊版
- 通用開啟檔案對話方塊
- [網路位置] 中不顯示整個網路
- 不允許從功能區 [檢視] 索引標籤上的 [選項] 按鈕開啟 [資料夾選項]
- 不要將已刪除的檔案移到資源回收筒中
- 不要求替代的認證
- 使用功能區最小化啟動 [檔案總管]
- 使用者/電腦的所有預設媒體櫃定義檔所在的位置。
- 使用者登入時不要顯示 [歡迎中心]
- 停用在沒有中介層的情況下直接繫結到 IPropertySetStorage。
- 停用已知資料夾
- 刪除檔案時顯示確認對話方塊
- 只允許個別使用者的或被允許的殼層延伸
- 啟動傳統殼層
- 將媒體櫃或搜尋連接器釘選在 [再次搜尋] 連結和 [開始] 功能表上
- 將網際網路搜尋網站釘選在 [再次搜尋] 連結和 [開始] 功能表上
- 從 [檔案總管] 中移除 [檔案] 功能表
- 最近文件的最大數目
- 漫遊時不追蹤殼層捷徑
- 移除 CD 燒錄功能
- 移除 [DFS] 索引標籤
- 移除 [安全性] 索引標籤
- 移除 [檔案總管] 的 [搜尋] 按鈕
- 移除 [檔案總管] 的預設內容功能表
- 移除 [硬體] 索引標籤
- 移除 [連線網路磁碟機] 及 [中斷網路磁碟機]
- 移除使用者介面來變更功能表動畫設定
- 移除搜尋網際網路的 [再次搜尋] 連結
- 網路位置中不含在我附近的電腦
- 要求網路安裝的認證
- 資源回收筒容量最大值
- 關閉 Windows+X 快速鍵
- 關閉 [內容檢視] 模式中程式碼片段的顯示
- 關閉 [檔案總管] 中的數字排序
- 關閉一般控制項與視窗動畫
- 關閉依存於索引檔案資料的 Windows 媒體櫃功能
- 關閉在 [檔案總管] 搜尋方塊中顯示最近搜尋項目
- 關閉在隱藏的 thumbs.db 檔案中快取縮圖
- 關閉殼層通訊協定受保護模式
- 關閉網路資料夾上的縮圖顯示，僅顯示圖示
- 關閉縮圖快取處理
- 關閉縮圖顯示，僅顯示圖示。
- 防止使用者新增檔案至其 [使用者檔案] 資料夾的根目錄中。
- 防止從 [我的電腦] 存取磁碟機
- 隱藏 [我的電腦] 中這些指定的磁碟機
- 隱藏 [檔案總管] 內容功能表上的 [管理] 項目
- 顯示 [檔案總管] 中的功能表列
- IME
- Configure Japanese IME version
- Configure Korean IME version
- Configure Simplified Chinese IME version
- Configure Traditional Chinese IME version
- Do not include Non-Publishing Standard Glyph in the candidate list
- Restrict character code range of conversion
- Turn off custom dictionary
- Turn off history-based predictive input
- Turn off Internet search integration
- Turn off Open Extended Dictionary
- Turn off saving auto-tuning data to file
- Turn on cloud candidate for CHS
- Turn on cloud candidate
- Turn on lexicon update
- Turn on Live Sticker
- Turn on misconversion logging for misconversion report
- Internet Explorer
- Accelerators
- Administrator Approved Controls
- Application Compatibility
- Browser menus
- Disable Open in New Window menu option
- Disable Save this program to disk option
- File menu: Disable closing the browser and Explorer windows
- File menu: Disable New menu option
- File menu: Disable Open menu option
- File menu: Disable Save As... menu option
- File menu: Disable Save As Web Page Complete
- Help menu: Remove 'For Netscape Users' menu option
- Help menu: Remove 'Send Feedback' menu option
- Help menu: Remove 'Tip of the Day' menu option
- Help menu: Remove 'Tour' menu option
- Hide Favorites menu
- Tools menu: Disable Internet Options... menu option
- Turn off Print Menu
- Turn off Shortcut Menu
- Turn off the ability to launch report site problems using a menu option
- View menu: Disable Full Screen menu option
- View menu: Disable Source menu option
- Compatibility View
- Delete Browsing History
- Allow deleting browsing history on exit
- Disable "Configuring History"
- Prevent access to Delete Browsing History
- Prevent deleting ActiveX Filtering, Tracking Protection, and Do Not Track data
- Prevent deleting cookies
- Prevent deleting download history
- Prevent deleting favorites site data
- Prevent deleting form data
- Prevent deleting InPrivate Filtering data
- Prevent deleting passwords
- Prevent deleting temporary Internet files
- Prevent deleting websites that the user has visited
- Prevent the deletion of temporary Internet files and cookies
- Internet Control Panel
- Advanced Page
- Allow active content from CDs to run on user machines
- Allow Install On Demand (except Internet Explorer)
- Allow Install On Demand (Internet Explorer)
- Allow Internet Explorer to use the HTTP2 network protocol
- Allow Internet Explorer to use the SPDY/3 network protocol
- Allow software to run or install even if the signature is invalid
- Allow third-party browser extensions
- Always send Do Not Track header
- Automatically check for Internet Explorer updates
- Check for server certificate revocation
- Check for signatures on downloaded programs
- Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled
- Do not allow resetting Internet Explorer settings
- Do not save encrypted pages to disk
- Empty Temporary Internet Files folder when browser is closed
- Play animations in web pages
- Play sounds in web pages
- Play videos in web pages
- Turn off ClearType
- Turn off encryption support
- Turn off loading websites and content in the background to optimize performance
- Turn off Profile Assistant
- Turn off sending UTF-8 query strings for URLs
- Turn off the flip ahead with page prediction feature
- Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows
- Turn on Caret Browsing support
- Turn on Enhanced Protected Mode
- Use HTTP 1.1 through proxy connections
- Use HTTP 1.1
- Content Page
- General Page
- Browsing History
- Allow websites to store application caches on client computers
- Allow websites to store indexed databases on client computers
- Set application caches expiration time limit for individual domains
- Set application cache storage limits for individual domains
- Set default storage limits for websites
- Set indexed database storage limits for individual domains
- Set maximum application cache individual resource size
- Set maximum application cache resource list size
- Set maximum application caches storage limit for all domains
- Set maximum indexed database storage limit for all domains
- Start Internet Explorer with tabs from last browsing session
- Browsing History
- Security Page
- Internet Zone
- Access data sources across domains
- Allow active content over restricted protocols to access my computer
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Intranet Zone
- Access data sources across domains
- Allow active content over restricted protocols to access my computer
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Local Machine Zone
- Access data sources across domains
- Allow active content over restricted protocols to access my computer
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Locked-Down Internet Zone
- Access data sources across domains
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Locked-Down Intranet Zone
- Access data sources across domains
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Locked-Down Local Machine Zone
- Access data sources across domains
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Locked-Down Restricted Sites Zone
- Access data sources across domains
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Locked-Down Trusted Sites Zone
- Access data sources across domains
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Restricted Sites Zone
- Access data sources across domains
- Allow active content over restricted protocols to access my computer
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Trusted Sites Zone
- Access data sources across domains
- Allow active content over restricted protocols to access my computer
- Allow active scripting
- Allow binary and script behaviors
- Allow cut, copy or paste operations from the clipboard via script
- Allow drag and drop or copy and paste files
- Allow file downloads
- Allow font downloads
- Allow installation of desktop items
- Allow loading of XAML Browser Applications
- Allow loading of XAML files
- Allow loading of XPS files
- Allow META REFRESH
- Allow only approved domains to use ActiveX controls without prompt
- Allow only approved domains to use the TDC ActiveX control
- Allow script-initiated windows without size or position constraints
- Allow scripting of Internet Explorer WebBrowser controls
- Allow scriptlets
- Allow updates to status bar via script
- Allow VBScript to run in Internet Explorer
- Allow video and animation on a webpage that uses an older media player
- Allow websites to open windows without status bar or Address bar
- Allow websites to prompt for information by using scripted windows
- Automatic prompting for ActiveX controls
- Automatic prompting for file downloads
- Display mixed content
- Don't run antimalware programs against ActiveX controls
- Do not prompt for client certificate selection when no certificates or only one certificate exists.
- Download signed ActiveX controls
- Download unsigned ActiveX controls
- Enable dragging of content from different domains across windows
- Enable dragging of content from different domains within a window
- Enable MIME Sniffing
- Include local path when user is uploading files to a server
- Initialize and script ActiveX controls not marked as safe
- Java permissions
- Launching applications and files in an IFRAME
- Logon options
- Render legacy filters
- Run .NET Framework-reliant components not signed with Authenticode
- Run .NET Framework-reliant components signed with Authenticode
- Run ActiveX controls and plugins
- Script ActiveX controls marked safe for scripting
- Scripting of Java applets
- Show security warning for potentially unsafe files
- Software channel permissions
- Submit non-encrypted form data
- Turn off .NET Framework Setup
- Turn off first-run prompt
- Turn on Cross-Site Scripting Filter
- Turn on Protected Mode
- Turn on SmartScreen Filter scan
- Use Pop-up Blocker
- Userdata persistence
- Web sites in less privileged Web content zones can navigate into this zone
- 允許在 [檔案總管] 的 OpenSearch 查詢結果中預覽和自訂縮圖
- 在 [檔案總管] 中允許 OpenSearch 查詢
- Internet Zone Template
- Intranet Sites: Include all local (intranet) sites not listed in other zones
- Intranet Sites: Include all network paths (UNCs)
- Intranet Sites: Include all sites that bypass the proxy server
- Intranet Zone Template
- Local Machine Zone Template
- Locked-Down Internet Zone Template
- Locked-Down Intranet Zone Template
- Locked-Down Local Machine Zone Template
- Locked-Down Restricted Sites Zone Template
- Locked-Down Trusted Sites Zone Template
- Restricted Sites Zone Template
- Site to Zone Assignment List
- Trusted Sites Zone Template
- Turn on automatic detection of intranet
- Turn on certificate address mismatch warning
- Turn on Notification bar notification for intranet content
- Internet Zone
- Disable the Advanced page
- Disable the Connections page
- Disable the Content page
- Disable the General page
- Disable the Privacy page
- Disable the Programs page
- Disable the Security page
- Prevent ignoring certificate errors
- Send internationalized domain names
- Use UTF-8 for mailto links
- Advanced Page
- Internet Settings
- Advanced settings
- Browsing
- Go to an intranet site for a one-word entry in the Address bar
- Hide the button (next to the New Tab button) that opens Microsoft Edge
- Turn off configuring underline links
- Turn off details in messages about Internet connection problems
- Turn off page transitions
- Turn off phone number detection
- Turn off smooth scrolling
- Turn on script debugging
- Turn on the display of script errors
- Internet Connection Wizard Settings
- Multimedia
- Printing
- Searching
- Signup Settings
- Browsing
- AutoComplete
- Display settings
- General Colors
- Link Colors
- Prevent choosing default text size
- URL Encoding
- Open Internet Explorer tiles on the desktop
- Set how links are opened in Internet Explorer
- Advanced settings
- Offline Pages
- Disable adding channels
- Disable adding schedules for offline pages
- Disable all scheduled offline pages
- Disable channel user interface completely
- Disable downloading of site subscription content
- Disable editing and creating of schedule groups
- Disable editing schedules for offline pages
- Disable offline page hit logging
- Disable removing channels
- Disable removing schedules for offline pages
- Subscription Limits
- Persistence Behavior
- Privacy
- Establish InPrivate Filtering threshold
- Establish Tracking Protection threshold
- Prevent the computer from loading toolbars and Browser Helper Objects when InPrivate Browsing starts
- Turn off collection of InPrivate Filtering data
- Turn off InPrivate Browsing
- Turn off InPrivate Filtering
- Turn off Tracking Protection
- Security Features
- Add-on Management
- Add-on List
- All Processes
- Deny all add-ons unless specifically allowed in the Add-on List
- Process List
- Remove "Run this time" button for outdated ActiveX controls in Internet Explorer
- Turn off automatic download of the ActiveX VersionList
- Turn off blocking of outdated ActiveX controls for Internet Explorer
- Turn off blocking of outdated ActiveX controls for Internet Explorer on specific domains
- Turn on ActiveX control logging in Internet Explorer
- AJAX
- Binary Behavior Security Restriction
- Consistent Mime Handling
- Local Machine Zone Lockdown Security
- Mime Sniffing Safety Feature
- MK Protocol Security Restriction
- Network Protocol Lockdown
- Notification bar
- Object Caching Protection
- Protection From Zone Elevation
- Restrict ActiveX Install
- Restrict File Download
- Scripted Window Security Restrictions
- Do not display the reveal password button
- Turn off Data URI support
- Add-on Management
- Toolbars
- Configure Toolbar Buttons
- Customize command labels
- Disable customizing browser toolbar buttons
- Disable customizing browser toolbars
- Display tabs on a separate row
- Hide the Command bar
- Hide the status bar
- Lock all toolbars
- Lock location of Stop and Refresh buttons
- Turn off Developer Tools
- Turn off toolbar upgrade tool
- Use large icons for command buttons
- Add a specific list of search providers to the user's list of search providers
- Allow "Save Target As" in Internet Explorer mode
- Allow Internet Explorer 8 shutdown behavior
- Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar
- Automatically activate newly installed add-ons
- Configure Media Explorer Bar
- Configure Outlook Express
- Configure which channel of Microsoft Edge to use for opening redirected sites
- Customize user agent string
- Disable AutoComplete for forms
- Disable caching of Auto-Proxy scripts
- Disable changing accessibility settings
- Disable changing Advanced page settings
- Disable changing Automatic Configuration settings
- Disable changing Calendar and Contact settings
- Disable changing certificate settings
- Disable changing color settings
- Disable changing connection settings
- Disable changing default browser check
- Disable changing font settings
- Disable changing home page settings
- Disable changing language settings
- Disable changing link color settings
- Disable changing Messaging settings
- Disable changing Profile Assistant settings
- Disable changing ratings settings
- Disable changing secondary home page settings
- Disable changing Temporary Internet files settings
- Disable external branding of Internet Explorer
- Disable Import/Export Settings wizard
- Disable Internet Connection wizard
- Disable Internet Explorer 11 as a standalone browser
- Disable the Reset Web Settings feature
- Display error message on proxy script download failure
- Do not allow users to enable or disable add-ons
- Enable extended hot keys in Internet Explorer mode
- Enforce full-screen mode
- Identity Manager: Prevent users from using Identities
- Keep all intranet sites in Internet Explorer
- Let users turn on and use Enterprise Mode from the Tools menu
- Limit Site Discovery output by Domain
- Limit Site Discovery output by Zone
- Notify users if Internet Explorer is not the default web browser
- Pop-up allow list
- Prevent "Fix settings" functionality
- Prevent access to Internet Explorer Help
- Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet
- Prevent bypassing SmartScreen Filter warnings
- Prevent changing pop-up filter level
- Prevent changing proxy settings
- Prevent changing the default search provider
- Prevent configuration of how windows open
- Prevent configuration of new tab creation
- Prevent Internet Explorer Search box from appearing
- Prevent managing pop-up exception list
- Prevent managing SmartScreen Filter
- Prevent managing the phishing filter
- Prevent participation in the Customer Experience Improvement Program
- Prevent per-user installation of ActiveX controls
- Prevent running First Run wizard
- Replace JScript by loading JScript9Legacy in place of JScript via MSHTML/WebOC.
- Restrict search providers to a specific list
- Search: Disable Find Files via F3 within the browser
- Search: Disable Search Customization
- Send all sites not included in the Enterprise Mode Site List to Microsoft Edge.
- Set tab process growth
- Show message when opening sites in Microsoft Edge using Enterprise Mode
- Specify default behavior for a new tab
- Specify use of ActiveX Installer Service for installation of ActiveX controls
- Turn off ability to pin sites in Internet Explorer on the desktop
- Turn off ActiveX Opt-In prompt
- Turn off add-on performance notifications
- Turn off Automatic Crash Recovery
- Turn off browser geolocation
- Turn off configuration of pop-up windows in tabbed browsing
- Turn off Crash Detection
- Turn off Favorites bar
- Turn off Managing SmartScreen Filter for Internet Explorer 8
- Turn off page-zooming functionality
- Turn off pop-up management
- Turn off Quick Tabs functionality
- Turn off Reopen Last Browsing Session
- Turn off suggestions for all user-installed providers
- Turn off tabbed browsing
- Turn off Tab Grouping
- Turn off the auto-complete feature for web addresses
- Turn off the quick pick menu
- Turn off the Security Settings Check feature
- Turn on ActiveX Filtering
- Turn on compatibility logging
- Turn on menu bar by default
- Turn on Site Discovery WMI output
- Turn on Site Discovery XML output
- Turn on Suggested Sites
- Turn on the auto-complete feature for user names and passwords on forms
- Use Automatic Detection for dial-up connections
- Use the Enterprise Mode IE website list
- Microsoft Edge
- Allow Address bar drop-down list suggestions
- Allow Adobe Flash
- Allow clearing browsing data on exit
- Allow configuration updates for the Books Library
- Allow extended telemetry for the Books tab
- Allow Extensions
- Allow FullScreen Mode
- Allow Microsoft Compatibility List
- Allow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed
- Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
- Allow printing
- Allow Saving History
- Allow search engine customization
- Allow Sideloading of extension
- Always show the Books Library in Microsoft Edge
- Configure additional search engines
- Configure Favorites Bar
- Configure Home Button
- Configure kiosk mode
- Configure kiosk reset after idle timeout
- Configure Open Microsoft Edge With
- Configure the Adobe Flash Click-to-Run setting
- Disable lockdown of Start pages
- For PDF files that have both landscape and portrait pages, print each in its own orientation.
- Keep favorites in sync between Internet Explorer and Microsoft Edge
- Open a new tab with an empty tab
- Prevent access to the about:flags page in Microsoft Edge
- Prevent certificate error overrides
- Prevent changes to Favorites on Microsoft Edge
- Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start
- Prevent the First Run webpage from opening on Microsoft Edge
- Prevent turning off required extensions
- Provision Favorites
- Set default search engine
- Set Home Button URL
- Set New Tab page URL
- Show message when opening sites in Internet Explorer
- Suppress the display of Edge Deprecation Notification
- Unlock Home Button
- 不允許 WebRTC 共用 LocalHost IP 位址
- 不允許「SmartScreen 篩選工具」警告覆寫
- 不允許針對未驗證之檔案的「SmartScreen 篩選工具」警告覆寫
- 允許員工傳送「不要追蹤」標頭
- 將所有內部網路網站傳送到 Internet Explorer 11
- 設定 Cookie
- 設定企業模式網站清單
- 設定公司首頁
- 設定我的最愛
- 關閉 InPrivate 瀏覽
- 關閉 SmartScreen 篩選工具
- 關閉密碼管理員
- 關閉快顯封鎖程式
- 關閉網址列搜尋建議
- 關閉自動填寫
- 關閉開發人員工具
- Microsoft Management Console
- 限制的/許可的嵌入式管理單元
- 延伸嵌入式管理單元
- 群組原則
- 原則結果組嵌入式管理單元延伸
- 喜好設定嵌入式管理單元延伸
- 允許使用 Ini 檔案喜好設定延伸
- 允許使用 [喜好設定] 索引標籤
- 允許使用印表機喜好設定延伸
- 允許使用地區選項喜好設定延伸
- 允許使用應用程式喜好設定延伸
- 允許使用應用程式嵌入式管理單元
- 允許使用捷徑喜好設定延伸
- 允許使用排定的工作喜好設定延伸
- 允許使用控制台設定 (使用者)
- 允許使用控制台設定 (電腦)
- 允許使用服務喜好設定延伸
- 允許使用本機使用者和群組喜好設定延伸
- 允許使用檔案喜好設定延伸
- 允許使用環境喜好設定延伸
- 允許使用登錄喜好設定延伸
- 允許使用磁碟機對應喜好設定延伸
- 允許使用網路選項喜好設定延伸
- 允許使用網際網路設定喜好設定延伸
- 允許使用裝置喜好設定延伸
- 允許使用資料來源喜好設定延伸
- 允許使用資料夾喜好設定延伸
- 允許使用資料夾選項喜好設定延伸
- 允許使用開始功能表喜好設定延伸
- 允許使用電源選項喜好設定延伸
- 群組原則嵌入式管理單元延伸
- Active Directory 工具的群組原則索引標籤
- 原則結果組嵌入式管理單元
- 群組原則入門 GPO 編輯器
- 群組原則物件編輯器
- 群組原則管理
- 群組原則管理編輯器
- .Net Framework 組態
- Active Directory 使用者和電腦
- Active Directory 站台及服務
- Active Directory 網域及信任
- ActiveX 控制項
- ADSI 編輯
- DFS 管理
- Enterprise PKI
- FrontPage 伺服器延伸
- IP 安全性原則管理
- IP 安全性監視器
- NAP 用戶端設定
- QoS 許可控制
- SAN 存放管理員
- TPM 管理
- WMI 控制
- 事件檢視器 (Windows Vista)
- 事件檢視器
- 伺服器管理員
- 健康情況登錄授權單位 (HRA)
- 傳真服務
- 元件服務
- 具有進階安全性的 Windows 防火牆
- 分散式檔案系統
- 安全性範本
- 安全性設定及分析
- 容錯移轉叢集管理員
- 憑證
- 憑證授權單位
- 憑證範本
- 抽取式存放裝置管理
- 效能記錄及警示
- 服務
- 本機使用者和群組
- 檔案伺服器資源管理員
- 無線監視器
- 磁碟管理
- 磁碟重組工具
- 系統資訊
- 索引服務
- 網址連結
- 網路原則伺服器 (NPS)
- 網際網路資訊服務
- 網際網路驗證服務 (IAS)
- 線上回應
- 裝置管理員
- 路由及遠端存取
- 遠端桌面
- 遠端桌面服務設定
- 電腦管理
- 電話語音
- 限制使用者只能使用明確許可的嵌入式管理單元清單
- 限制使用者進入作者模式
- 限制的/許可的嵌入式管理單元
- Microsoft Passport for Work
- Microsoft User Experience Virtualization
- Applications
- Access 2013 backup only
- Access 2016 backup only
- Calculator
- Common 2013 backup only
- Common 2016 backup only
- Excel 2013 backup only
- Excel 2016 backup only
- InfoPath 2013 backup only
- Internet Explorer 8
- Internet Explorer 9
- Internet Explorer 10
- Internet Explorer 11
- Internet Explorer Common Settings
- Lync 2013 backup only
- Lync 2016 backup only
- Microsoft Access 2010
- Microsoft Access 2013
- Microsoft Access 2016
- Microsoft Excel 2010
- Microsoft Excel 2013
- Microsoft Excel 2016
- Microsoft InfoPath 2010
- Microsoft InfoPath 2013
- Microsoft Lync 2010
- Microsoft Lync 2013
- Microsoft Lync 2016
- Microsoft Office 365 Access 2013
- Microsoft Office 365 Access 2016
- Microsoft Office 365 Common 2013
- Microsoft Office 365 Common 2016
- Microsoft Office 365 Excel 2013
- Microsoft Office 365 Excel 2016
- Microsoft Office 365 InfoPath 2013
- Microsoft Office 365 Lync 2013
- Microsoft Office 365 Lync 2016
- Microsoft Office 365 OneNote 2013
- Microsoft Office 365 OneNote 2016
- Microsoft Office 365 Outlook 2013
- Microsoft Office 365 Outlook 2016
- Microsoft Office 365 PowerPoint 2013
- Microsoft Office 365 PowerPoint 2016
- Microsoft Office 365 Project 2013
- Microsoft Office 365 Project 2016
- Microsoft Office 365 Publisher 2013
- Microsoft Office 365 Publisher 2016
- Microsoft Office 365 Visio 2013
- Microsoft Office 365 Visio 2016
- Microsoft Office 365 Word 2013
- Microsoft Office 365 Word 2016
- Microsoft Office 2010 Common Settings
- Microsoft Office 2013 Common Settings
- Microsoft Office 2013 Upload Center
- Microsoft Office 2016 Common Settings
- Microsoft Office 2016 Upload Center
- Microsoft OneDrive for Business 2013
- Microsoft OneDrive for Business 2016
- Microsoft OneNote 2010
- Microsoft OneNote 2013
- Microsoft OneNote 2016
- Microsoft Outlook 2010
- Microsoft Outlook 2013
- Microsoft Outlook 2016
- Microsoft PowerPoint 2010
- Microsoft PowerPoint 2013
- Microsoft PowerPoint 2016
- Microsoft Project 2010
- Microsoft Project 2013
- Microsoft Project 2016
- Microsoft Publisher 2010
- Microsoft Publisher 2013
- Microsoft Publisher 2016
- Microsoft Visio 2010
- Microsoft Visio 2013
- Microsoft Visio 2016
- Microsoft Word 2010
- Microsoft Word 2013
- Microsoft Word 2016
- Notepad
- OneNote 2013 backup only
- OneNote 2016 backup only
- Outlook 2013 backup only
- Outlook 2016 backup only
- PowerPoint 2013 backup only
- PowerPoint 2016 backup only
- Project 2013 backup only
- Project 2016 backup only
- Publisher 2013 backup only
- Publisher 2016 backup only
- Visio 2013 backup only
- Visio 2016 backup only
- Word 2013 backup only
- Word 2016 backup only
- WordPad
- Windows Apps
- Configure Sync Method
- Do not synchronize Windows Apps
- Ping the settings storage location before sync
- Settings package size warning threshold
- Settings storage path
- Synchronization timeout
- Synchronize Windows settings
- Sync settings over metered connections even when roaming
- Sync settings over metered connections
- Use User Experience Virtualization (UE-V)
- VDI Configuration
- Applications
- Multitasking
- NetMeeting
- [選項] 畫面
- 應用程式共用
- 音訊及視訊
- 停用 NetMeeting 2.x 電子白板
- 停用目錄服務
- 停用聊天功能
- 停用電子白板
- 允許持續性自動接受呼叫
- 啟用自動設定
- 設定內部網路支援網頁
- 設定呼叫安全性選項
- 防止傳送檔案
- 防止接收檔案
- 防止新增目錄伺服器
- 防止檢視網站目錄
- 防止自動接受呼叫
- 防止變更進行呼叫的方式
- 限制傳送檔案的大小
- OOBE
- Remote Desktop Services
- RD Gateway
- RemoteApp and Desktop Connections
- Remote Desktop Connection Client
- Remote Desktop Session Host
- Connections
- Device and Resource Redirection
- Printer Redirection
- Remote Session Environment
- Session Time Limits
- RSS Feeds
- Tablet PC
- Tablet PC 畫筆訓練
- 敏銳筆觸學習
- 游標
- 畫筆 UX 行為
- 硬體按鈕
- 觸控輸入
- 輸入面板
- 附屬應用程式
- Windows Defender SmartScreen
- Microsoft Edge
- Windows Installer
- Windows Media Player
- Windows Messenger
- Windows PowerShell
- Windows Update
- Legacy Policies
- Manage updates offered from Windows Server Update Service
- Windows 登入選項
- Windows 色彩系統
- Windows 行事曆
- Windows 行動中心
- Windows 錯誤報告
- Work Folders
- 定位和感應器
- 工作排程器
- 市集
- 應用程式執行階段
- 應用程式相容性
- 搜尋
- 數位購物服務區
- 新增功能到 Windows 8.1
- 桌面小工具
- 桌面視窗管理員
- 視窗框架色彩設定
- 不允許呼叫 Flip3D
- 不允許視窗動畫
- 檔案撤銷
- 立即搜尋
- 簡報設定
- 網路共用
- 自動播放原則
- 認證使用者介面
- 邊緣 UI
- 錄音機
- 附件管理員
- 雲端內容
- Configure Windows spotlight on lock screen
- Do not suggest third-party content in Windows spotlight
- Do not use diagnostic data for tailored experiences
- Turn off all Windows spotlight features
- Turn off Spotlight collection on Desktop
- Turn off the Windows Welcome Experience
- Turn off Windows Spotlight on Action Center
- Turn off Windows Spotlight on Settings
- Enable auto-subscription