USER Administrative Templates\Desktop Prevent adding,
dragging, dropping and closing the Taskbar's toolbars
At least Microsoft Windows 2000
Prevents users from manipulating desktop toolbars. If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag toolbars on to or off of docked toolbars. Note: If users have added or removed toolbars, this setting prevents them from restoring the default configuration. Tip: To view the toolbars that can be added to the desktop, right-click a docked toolbar (such as the taskbar beside the Start button), and point to Toolbars. Also, see the Prohibit adjusting desktop toolbars setting.
USER Administrative Templates\Desktop Prohibit adjusting
desktop toolbars At least Microsoft Windows 2000 Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars. This setting does not prevent users from adding or removing toolbars on the desktop. Note: If users have adjusted their toolbars, this setting prevents them from restoring the default configuration. Also, see the Prevent adding, dragging, dropping and closing the Taskbar's toolbars setting.
USER Administrative Templates\Desktop Wallpaper
USER Administrative
Templates\Desktop\Active Desktop Enable Active Desktop At least Microsoft Windows 2000 Enables Active Desktop and prevents users from disabling it. This setting prevents users from trying to enable or disable Active Desktop while a policy controls it. If you disable this setting or do not configure it, Active Desktop is disabled by default, but users can enable it. Note: If both the Enable Active Desktop setting and the Disable Active Desktop setting are enabled, the Disable Active Desktop setting is ignored. If the Turn on Classic Shell setting ( in User Configuration\Administrative Templates\Windows Components\Windows Explorer) is enabled, Active Desktop is disabled, and both of these policies are ignored.
USER Administrative
Templates\Desktop\Active Desktop Disable Active Desktop At least Microsoft Windows 2000 Disables Active Desktop and prevents users from enabling it. This setting prevents users from trying to enable or disable Active Desktop while a policy controls it. If you disable this setting or do not configure it, Active Desktop is disabled by default, but users can enable it. Note: If both the Enable Active Desktop setting and the Disable Active Desktop setting are enabled, the Disable Active Desktop setting is ignored. If the Turn on Classic Shell setting (in User Configuration\Administrative Templates\Windows Components\Windows Explorer) is enabled, Active Desktop is disabled, and both these policies are ignored.
USER Administrative
Templates\Desktop\Active Desktop
Prohibit changes At least Microsoft Windows 2000
Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration. This is a comprehensive setting that
Active Directory Training Seminar: Group Policy Administrator Reference
Node
Policy Path
Full Policy Name
Supported on
Help/Explain Text
locks down the configuration you establish by using other policies in this folder. This setting removes the Web tab from Display in Control Panel. As a result, users cannot enable or disable Active Desktop. If Active Desktop is already enabled, users cannot add, remove, or edit Web content or disable, lock, or synchronize Active Desktop components. USER Administrative
Templates\Desktop\Active Desktop
Add/Delete items At least Microsoft Windows 2000
Adds and deletes specified Web content items. You can use the Add box in this setting to add particular Web-based items or shortcuts to users' desktops. Users can close or delete the items (if settings allow), but the items are added again each time the setting is refreshed. You can also use this setting to delete particular Web-based items from users' desktops. Users can add the item again (if settings allow), but the item is deleted each time the setting is refreshed. Note: Removing an item from the Add list for this setting is not the same as deleting it. Items that are removed from the Add list are not removed from the desktop. They are simply not added again. Note: For this setting to take affect, you must log off and log on to the system.
USER Administrative
Templates\Desktop\Active Desktop
Prohibit adding items At least Microsoft Windows 2000
Prevents users from adding Web content to their Active Desktop. This setting removes the New button from Web tab in Display in Control Panel. As a result, users cannot add Web pages or pictures from the Internet or an intranet to the desktop. This setting does not remove existing Web content from their Active Desktop, or prevent users from removing existing Web content. Also, see the Disable all items setting. USER Administrative
Templates\Desktop\Active Desktop
Prohibit closing items At least Microsoft Windows 2000
Prevents users from removing Web content from their Active Desktop. In Active Desktop, you can add items to the desktop but close them so they are not displayed. If you enable this setting, items added to the desktop cannot be closed; they always appear on the desktop. This setting removes the check boxes from items on the Web tab in Display in Control Panel. Note: This setting does not prevent users from deleting items from their Active Desktop.
USER Administrative
Templates\Desktop\Active Desktop Prohibit deleting items At least Microsoft Windows 2000 Prevents users from deleting Web content from their Active Desktop. This setting removes the Delete button from the Web tab in Display in Control Panel. As a result, users can temporarily remove, but not delete, Web content from their Active Desktop. This setting does not prevent users from adding Web content to their Active Desktop. Also, see the Prohibit closing items and Disable all items settings.
USER Administrative
Templates\Desktop\Active Desktop
Prohibit editing items At least Microsoft Windows 2000
Prevents users from changing the properties of Web content items on their Active Desktop. This setting disables the Properties button on the
Active Directory Training Seminar: Group Policy Administrator Reference
Node
Policy Path
Full Policy Name
Supported on
Help/Explain Text
Web tab in Display in Control Panel. Also, it removes the Properties item from the menu for each item on the Active Desktop. As a result, users cannot change the properties of an item, such as its synchronization schedule, password, or display characteristics.
USER Administrative
Templates\Desktop\Active Desktop Disable all items At least Microsoft Windows 2000 Removes Active Desktop content and prevents users from adding Active Desktop content. This setting removes all Active Desktop items from the desktop. It also removes the Web tab from Display in Control Panel. As a result, users cannot add Web pages or pictures from the Internet or an intranet to the desktop. Note: This setting does not disable Active Desktop. Users can still use image formats, such as JPEG and GIF, for their desktop wallpaper.
USER Administrative
Templates\Desktop\Active Desktop Allow only bitmapped wallpaper At least Microsoft Windows 2000 Permits only bitmap images for wallpaper. This setting limits the desktop background (wallpaper) to bitmap (.bmp) files. If users select files with other image formats, such as JPEG, GIF, PNG, or HTML, through the Browse button on the Desktop tab, the wallpaper does not load. Files that are autoconverted to a .bmp format, such as JPEG, GIF, and PNG, can be set as Wallpaper by right-clicking the image and selecting Set as Wallpaper. Also, see the Active Desktop Wallpaper and the Prevent changing wallpaper (in User Configuration\Administrative
Templates\Control Panel\Display) settings. USER Administrative Templates\Desktop\Active Desktop Active Desktop Wallpaper At least Microsoft Windows 2000
Specifies the desktop background (wallpaper) displayed on all users' desktops. This setting lets you specify the wallpaper on users' desktops and prevents users from changing the image or its presentation. The wallpaper you specify can be stored in a bitmap (*.bmp), JPEG (*.jpg), or HTML (*.htm, *.html) file. To use this setting, type the fully qualified path and name of the file that stores the wallpaper image. You can type a local path, such as C:\Windows\web\wallpaper\home.jpg or a UNC path, such as \\Server\Share\Corp.jpg. If the specified file is not available when the user logs on, no wallpaper is displayed. Users cannot specify alternative wallpaper. You can also use this setting to specify that the wallpaper image be centered, tiled, or stretched. Users cannot change this specification. If you disable this setting or do not configure it, no wallpaper is displayed. However, users can select the wallpaper of their choice. Also, see the Allow only bitmapped wallpaper in the same location, and the Prevent changing wallpaper setting in User
Configuration\Administrative Templates\Control Panel. Note: You need to enable the Active Desktop to use this setting. Note: This setting does not apply to Terminal Server sessions.
Active Directory Training Seminar: Group Policy Administrator Reference