Group Policy Team Blog

Good to see the ADM out, but it has incorrect names and missing policies:

Name in template:

Disable WinFX Runtime Components Setup

Name in UI (template should be renamed to reflect this):

Enable .Net Framework setup

Name in template:

Loose or un-compiled XAML files

Name in UI (template should be renamed to reflect this):

Loose XAML

Namein template:

Web Browser Applications

Name in UI (template should be renamed to reflect this):

XAML browser applications

Name in template:

XPS files

Name in UI (template should be renamed to reflect this):

XPS documents

In addition to the policy name itself, each description needs to be updated accordingly as well.

Missing policies:

- Allow previously unused ActiveX controls to run without prompt

- Allow scripting of Internet Explorer Web browser control

- Allow websites to oen windows without address or status bars

- Include local directory path when uploading files to a server

- Launching application and unsafe files

- Use Phishing filter

- Allow websites to prompt for information using the scripted windows

Per my last post, it was in regard to the IE7 ADM template. The configuration node where they are applicable is:

Computer/User Configuration>Administrative Templates>Windows Components>Internet Explorer>Internet Explorer Control Panel>Security Page> any zone