<html dir="ltr" xmlns:v="urn:schemas-microsoft-com:vml" gpmc_reportInitialized="false">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>Default Domain Policy</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:block; height:24px; margin:0px,0px,-1px,0px; padding-top:4px; position:relative; table-layout:fixed; width:100%; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:10px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:10px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:45px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:45px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; width:100%; }

                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:55px; margin-right:0px; position:relative; width:100%; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; width:100%; }

                DIV .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; width:10%; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#000000; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

                    v\:* {behavior:url(#default#VML);}

</style>
<!-- Script 1 -->

<script language="vbscript">
<!--
'================================================================================
' String "strShowHide(0/1)"
' 0 = Hide all mode.
' 1 = Show all mode.
strShowHide = 1

'Localized strings
strShow = "show"
strHide = "hide"
strShowAll = "show all"
strHideAll = "hide all"
strShown = "shown"
strHidden = "hidden"
strExpandoNumPixelsFromEdge = "10px"


Function IsSectionHeader(obj)
    IsSectionHeader = (obj.className = "he0_expanded") Or (obj.className = "he1_expanded") Or (obj.className = "he1") Or (obj.className = "he2") Or (obj.className = "he3") Or (obj.className = "he4") Or (obj.className = "he4h") Or (obj.className = "he5") Or (obj.className = "he5h")
End Function


Function IsSectionExpandedByDefault(objHeader)
    IsSectionExpandedByDefault = (Right(objHeader.className, Len("_expanded")) = "_expanded")
End Function


' strState must be show | hide | toggle
Sub SetSectionState(objHeader, strState)
    ' Get the container object for the section.  It's the first one after the header obj.

    i = objHeader.sourceIndex
    Set all = objHeader.parentElement.document.all
    While (all(i).className <> "container")
        i = i + 1
    Wend

    Set objContainer = all(i)

    If strState = "toggle" Then
        If objContainer.style.display = "none" Then
            SetSectionState objHeader, "show"
        Else
            SetSectionState objHeader, "hide"
        End If

    Else
        Set objExpando = objHeader.children.item(1)

        If strState = "show" Then
            objContainer.style.display = "block"
            objExpando.innerText = strHide

        ElseIf strState = "hide" Then
            objContainer.style.display = "none"
            objExpando.innerText = strShow
        End If
    End If
End Sub


Sub ShowSection(objHeader)
    SetSectionState objHeader, "show"
End Sub


Sub HideSection(objHeader)
    SetSectionState objHeader, "hide"
End Sub


Sub ToggleSection(objHeader)
    SetSectionState objHeader, "toggle"
End Sub


'================================================================================
' When user clicks anywhere in the document body, determine if user is clicking 
' on a header element.
'================================================================================
Function document_onclick()
    Set strsrc    = window.event.srcElement

    While (strsrc.className = "sectionTitle" Or strsrc.className = "expando" Or strsrc.className = "vmlimage")
        Set strsrc = strsrc.parentElement
    Wend

    ' Only handle clicks on headers.
    If Not IsSectionHeader(strsrc) Then Exit Function

    ToggleSection strsrc
    
    window.event.returnValue = False
End Function

'================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
Function objshowhide_onClick()
    Set objBody = document.body.all
    Select Case strShowHide
        Case 0
            strShowHide = 1
            objshowhide.innerText = strShowAll
            For Each obji In objBody
                If IsSectionHeader(obji) Then
                    HideSection obji
                End If
            Next
        Case 1
            strShowHide = 0
            objshowhide.innerText = strHideAll
            For Each obji In objBody
                If IsSectionHeader(obji) Then
                    ShowSection obji
                End If
            Next
    End Select
End Function

'================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================
Function window_onload()
    ' Only initialize once.  The UI may reinsert a report into the webbrowser control,
    ' firing onLoad multiple times.
    If UCase(document.documentElement.getAttribute("gpmc_reportInitialized")) <> "TRUE" Then

        ' Initialize sections to default expanded/collapsed state.
        Set objBody = document.body.all

        For Each obji in objBody
            If IsSectionHeader(obji) Then
                If IsSectionExpandedByDefault(obji) Then
                    ShowSection obji
                Else
                    HideSection obji
                End If
            End If
        Next

        objshowhide.innerText = strShowAll
        
        document.documentElement.setAttribute "gpmc_reportInitialized", "true"
    End If
End Function

                


'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
Function document_onPropertyChange()
    If window.event.propertyName = "dir" Then
        Call fDetDir(UCase(document.dir))
    End If
End Function
Function fDetDir(strDir)
    strDir = UCase(strDir)
    Select Case strDir
        Case "LTR"
            Set colRules = document.styleSheets(0).rules
            For i = 0 To colRules.length -1
                Set nug = colRules.item(i)
                strClass = nug.selectorText 
                If nug.style.textAlign = "right" Then
                    nug.style.textAlign = "left"
                End If
                Select Case strClass
                    Case "DIV .expando"
                        nug.style.Left = ""
                        nug.style.right = strExpandoNumPixelsFromEdge
                    Case "#objshowhide"
                        nug.style.textAlign = "right"
                End Select
            Next
        Case "RTL"
            Set colRules = document.styleSheets(0).rules
            For i = 0 To colRules.length -1
                Set nug = colRules.item(i)
                strClass = nug.selectorText 
                If nug.style.textAlign = "left" Then
                    nug.style.textAlign = "right"
                End If
                Select Case strClass
                    Case "DIV .expando"
                        nug.style.Left = strExpandoNumPixelsFromEdge
                        nug.style.right = ""
                    Case "#objshowhide"
                        nug.style.textAlign = "left"
                End Select
            Next
    End Select
End Function

'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI). 
'================================================================================
Function window_onbeforeprint()
    For Each obji In document.all
        If obji.className = "expando" Then
            If obji.innerText = strHide Then obji.innerText = strShown
            If obji.innerText = strShow Then obji.innerText = strHidden
        End If
    Next
End Function 

'================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
Function window_onafterprint()
    For Each obji In document.all
        If obji.className = "expando" Then
            If obji.innerText = strShown Then obji.innerText = strHide
            If obji.innerText = strHidden Then obji.innerText = strShow
        End If
    Next
End Function

'================================================================================
' Adding keypress support for accessibility
'================================================================================
Function document_onKeyPress()
    If window.event.keyCode = "32" Or window.event.keyCode = "13" Or window.event.keyCode = "10" Then 'space bar (32) or carriage return (13) or line feed (10)
        If window.event.srcElement.className = "expando" Then Call document_onclick() : window.event.returnValue = false
        If window.event.srcElement.className = "sectionTitle" Then Call document_onclick() : window.event.returnValue = false
        If window.event.srcElement.id = "objshowhide" Then Call objshowhide_onClick() : window.event.returnValue = false
    End If
End Function
                
-->
</script>
                
<!-- Script 2 -->

<script language="javascript">
<!--
function getExplainWindowTitle()
{
        return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles()
{
        return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel()
{
        return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel()
{
        return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton()
{
        return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton()
{
        return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable()
{
        return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel()
{
        return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable()
{
        return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");
    
    if (strSettingDescription == "")
    {
                strSettingDescription = getNoExplainTextAvailable();
    }
    
    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported == "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html>\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
    var expWin = window.open("", "expWin", strDiagArgs);
    expWin.document.write("");
    expWin.document.close();
    expWin.document.write(strHtml);
    expWin.document.close();
    expWin.focus();
    
    //cancels navigation for IE.
    if(navigator.userAgent.indexOf("MSIE") > 0)
    {
        window.event.returnValue = false;
    }
    
    return false;
}
-->
</script>
                
</head>

<body>

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

                </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" cellpadding="0" cellspacing="0">
<tr><td colspan="2" class="gponame">Default Domain Policy</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 8/30/2006 2:12:31 PM</td>
    <td><div id="objshowhide" tabindex="0"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Domain</td><td>netid.washington.edu</td></tr>
<tr><td scope="row">Owner</td><td>NETID\Domain Admins</td></tr>
<tr><td scope="row">Created</td><td>6/13/2006 11:11:18 PM</td></tr>
<tr><td scope="row">Modified</td><td>8/11/2006 10:53:42 AM</td></tr>
<tr><td scope="row">User Revisions</td><td>3 (AD), 3 (sysvol)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>103 (AD), 103 (sysvol)</td></tr>
<tr><td scope="row">Unique ID</td><td>{31B2F340-016D-11D2-945F-00C04FB984F9}</td></tr>
<tr><td scope="row">GPO Status</td><td>Enabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0"><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
<tr><td>netid</td><td>No</td><td>Enabled</td><td>netid.washington.edu</td></tr>
</table>
<br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Name</th></tr><tr><td>NT AUTHORITY\Authenticated Users</td></tr></table>
</div>
</div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">WMI Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row"><b>WMI Filter Name</b></td><td>None</td></tr>
<tr><td scope="row"><b>Description</b></td><td>Not applicable</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>NETID\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>NETID\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>NT AUTHORITY\Authenticated Users</td><td>Read (from Security Filtering)</td><td>No</td></tr>
<tr><td>NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Security Settings</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Account Policies/Password Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Enforce password history</td><td>0 passwords remembered</td></tr>
<tr><td>Maximum password age</td><td>0 days</td></tr>
<tr><td>Minimum password age</td><td>0 days</td></tr>
<tr><td>Minimum password length</td><td>1 characters</td></tr>
<tr><td>Password must meet complexity requirements</td><td>Disabled</td></tr>
<tr><td>Store passwords using reversible encryption</td><td>Disabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Account Policies/Kerberos Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Enforce user logon restrictions</td><td>Enabled</td></tr>
<tr><td>Maximum lifetime for service ticket</td><td>600 minutes</td></tr>
<tr><td>Maximum lifetime for user ticket</td><td>10 hours</td></tr>
<tr><td>Maximum lifetime for user ticket renewal</td><td>7 days</td></tr>
<tr><td>Maximum tolerance for computer clock synchronization</td><td>5 minutes</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Local Policies/Audit Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Audit account logon events</td><td>Success, Failure</td></tr>
<tr><td>Audit account management</td><td>Success, Failure</td></tr>
<tr><td>Audit logon events</td><td>Success, Failure</td></tr>
<tr><td>Audit object access</td><td>Success, Failure</td></tr>
<tr><td>Audit policy change</td><td>Success, Failure</td></tr>
<tr><td>Audit privilege use</td><td>Failure</td></tr>
<tr><td>Audit system events</td><td>Success, Failure</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Local Policies/Security Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Accounts</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Accounts: Guest account status</td><td>Disabled</td></tr>
<tr><td>Accounts: Limit local account use of blank passwords to console logon only</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Domain Member</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Domain member: Digitally encrypt secure channel data (when possible)</td><td>Enabled</td></tr>
<tr><td>Domain member: Digitally sign secure channel data (when possible)</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Microsoft Network Client</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Microsoft network client: Digitally sign communications (if server agrees)</td><td>Enabled</td></tr>
<tr><td>Microsoft network client: Send unencrypted password to third-party SMB servers</td><td>Disabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Microsoft Network Server</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Microsoft network server: Digitally sign communications (if client agrees)</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Network Access</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Network access: Allow anonymous SID/Name translation</td><td>Disabled</td></tr>
<tr><td>Network access: Do not allow anonymous enumeration of SAM accounts</td><td>Enabled</td></tr>
<tr><td>Network access: Do not allow anonymous enumeration of SAM accounts and shares</td><td>Enabled</td></tr>
<tr><td>Network access: Let Everyone permissions apply to anonymous users</td><td>Disabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Network Security</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Network security: Do not store LAN Manager hash value on next password change</td><td>Enabled</td></tr>
<tr><td>Network security: LAN Manager authentication level</td><td>Send NTLMv2 response only\refuse LM &amp; NTLM</td></tr>
</table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Event Log</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Maximum application log size</td><td>16384 kilobytes</td></tr>
<tr><td>Maximum security log size</td><td>50240 kilobytes</td></tr>
<tr><td>Maximum system log size</td><td>16384 kilobytes</td></tr>
<tr><td>Prevent local guests group from accessing application log</td><td>Enabled</td></tr>
<tr><td>Prevent local guests group from accessing security log</td><td>Enabled</td></tr>
<tr><td>Prevent local guests group from accessing system log</td><td>Enabled</td></tr>
<tr><td>Retention method for application log</td><td>As needed</td></tr>
<tr><td>Retention method for security log</td><td>As needed</td></tr>
<tr><td>Retention method for system log</td><td>As needed</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Public Key Policies/Autoenrollment Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Enroll certificates automatically</td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable3" cellpadding="0" cellspacing="0">
<tr><td scope="row">Renew expired certificates, update pending certificates, and remove revoked certificates</td><td>Disabled</td></tr>
<tr><td scope="row">Update certificates that use certificate templates</td><td>Disabled</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Public Key Policies/Encrypting File System</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Properties</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="subtable" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Allow users to encrypt files using Encrypting File System (EFS)</td><td>Enabled</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Certificates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0"><tr><th scope="col">Issued To</th><th scope="col">Issued By</th><th scope="col">Expiration Date</th><th scope="col">Intended Purposes</th></tr>
<tr><td>administrator</td><td>administrator</td><td>6/12/2009 11:15:54 PM</td><td>File Recovery</td></tr>
</table>
<br/>For additional information about individual settings, launch Group Policy Object Editor.</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Public Key Policies/Trusted Root Certification Authorities</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Properties</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="subtable" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Allow users to select new root certification authorities (CAs) to trust</td><td>Enabled</td></tr>
<tr><td>Client computers can trust the following certificate stores</td><td>Third-Party Root Certification Authorities and Enterprise Root Certification Authorities</td></tr>
<tr><td>To perform certificate-based authentication of users and computers, CAs must meet the following criteria</td><td>Registered in Active Directory only</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Certificates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0"><tr><th scope="col">Issued To</th><th scope="col">Issued By</th><th scope="col">Expiration Date</th><th scope="col">Intended Purposes</th></tr>
<tr><td>UW Services CA</td><td>UW Services CA</td><td>9/3/2030 11:25:09 AM</td><td>&lt;All&gt;</td></tr>
</table>
<br/>For additional information about individual settings, launch Group Policy Object Editor.</div></div></div></div></div><div class="filler"></div>
<div class="he1_expanded"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">System/Group Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow Cross-Forest User Policy and Roaming User Profiles" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Group Policy" gpmc_settingDescription="Allows User based policy processing, Roaming User Profiles and User Object logon scripts for cross forest interactive logons.&lt;br/&gt;&lt;br/&gt;This setting affects all user accounts interactively logging on to a computer in a different forest when a Cross Forest or 2-Way Forest trust exists.&lt;br/&gt;&lt;br/&gt;When this setting is Not Configured:&lt;br/&gt;- No user based policy settings are applied from the user's forest&lt;br/&gt;- User will not receive their roaming profiles, they will receive a local profile on the computer from the local forest. A warning message will be shown to the user, and an Event Log message (1529) will be posted.&lt;br/&gt;- Loopback Group Policy processing will be applied, using the Group Policy Objects scoped to the machine.&lt;br/&gt;- An Event Log message (1109) will be posted stating that Loopback was invoked in replace mode.&lt;br/&gt;&lt;br/&gt;When this setting is Enabled, the behavior is exactly the same as with Windows 2000 Server Family, User policy is applied and a roaming user profile is allowed from the trusted  forest.&lt;br/&gt;&lt;br/&gt;When this setting is Disabled, the behavior is the same as Not Configured." gpmc_supported="At least Microsoft Windows Server 2003">Allow Cross-Forest User Policy and Roaming User Profiles</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Group Policy refresh interval for computers" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Group Policy" gpmc_settingDescription="Specifies how often Group Policy for computers is updated while the computer is in use (in the background). This setting specifies a background update rate only for Group Policies in the Computer Configuration folder.&lt;br/&gt;&lt;br/&gt;In addition to background updates, Group Policy for the computer is always updated when the system starts.&lt;br/&gt;&lt;br/&gt;By default, computer Group Policy is updated in the background every 90 minutes, with a random offset of 0 to 30 minutes.&lt;br/&gt;&lt;br/&gt;You can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the computer tries to update Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations.&lt;br/&gt;&lt;br/&gt;If you disable this setting, Group Policy is updated every 90 minutes (the default). To specify that Group Policy should never be updated while the computer is in use, select the &amp;quot;Turn off background refresh of Group Policy&amp;quot; policy.&lt;br/&gt;&lt;br/&gt;The Group Policy refresh interval for computers policy also lets you specify how much the actual update interval varies. To prevent clients with the same update interval from requesting updates simultaneously, the system varies the update interval for each client by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example, if you type 30 minutes, the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that client requests overlap. However, updates might be delayed significantly.&lt;br/&gt;&lt;br/&gt;This setting establishes the update rate for computer Group Policy. To set an update rate for user policies, use the &amp;quot;Group Policy refresh interval for users&amp;quot; setting (located in User Configuration\Administrative Templates\System\Group Policy).&lt;br/&gt;&lt;br/&gt;This setting is only used when the &amp;quot;Turn off background refresh of Group Policy&amp;quot; setting is not enabled.&lt;br/&gt;&lt;br/&gt;Note: Consider notifying users that their policy is updated periodically so that they recognize the signs of a policy update. When Group Policy is updated, the Windows desktop is refreshed; it flickers briefly and closes open menus. Also, restrictions imposed by Group Policies, such as those that limit the programs users can run, might interfere with tasks in progress." gpmc_supported="At least Microsoft Windows 2000">Group Policy refresh interval for computers</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2">This setting allows you to customize how often Group Policy is applied</td></tr><tr><td colspan="2">to computers. The range is 0 to 64800 minutes (45 days).</td></tr><tr><td>Minutes:</td><td>15</td></tr>
<tr><td colspan="2"> </td></tr><tr><td colspan="2">This is a random time added to the refresh interval to prevent</td></tr><tr><td colspan="2">all clients from requesting Group Policy at the same time.</td></tr><tr><td colspan="2">The range is 0 to 1440 minutes (24 hours)</td></tr><tr><td>Minutes:</td><td>5</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Group Policy refresh interval for domain controllers" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Group Policy" gpmc_settingDescription="Specifies how often Group Policy is updated on domain controllers while they are running (in the background). The updates specified by this setting occur in addition to updates performed when the system starts.&lt;br/&gt;&lt;br/&gt;By default, Group Policy on the domain controllers is updated every five minutes.&lt;br/&gt;&lt;br/&gt;You can specify an update rate from 0 to 64,800 minutes (45 days). If you select 0 minutes, the domain controller tries to update Group Policy every 7 seconds. However, because updates might interfere with users' work and increase network traffic, very short update intervals are not appropriate for most installations.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the domain controller updates Group Policy every 5 minutes (the default). To specify that Group Policies for users should never be updated while the computer is in use, select the &amp;quot;Turn off background refresh of Group Policy&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This setting also lets you specify how much the actual update interval varies. To prevent domain controllers with the same update interval from requesting updates simultaneously, the system varies the update interval for each controller by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example, if you type 30 minutes, the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that update requests overlap. However, updates might be delayed significantly.&lt;br/&gt;&lt;br/&gt;Note: This setting is used only when you are establishing policy for a domain, site, organizational unit (OU), or customized group. If you are establishing policy for a local computer only, the system ignores this setting." gpmc_supported="At least Microsoft Windows 2000">Group Policy refresh interval for domain controllers</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2">This setting allows you to customize how often Group Policy is applied</td></tr><tr><td colspan="2">to domain controllers. The range is 0 to 64800 minutes (45 days).</td></tr><tr><td>Minutes:</td><td>5</td></tr>
<tr><td colspan="2"> </td></tr><tr><td colspan="2">This is a random time added to the refresh interval to prevent</td></tr><tr><td colspan="2">all clients from requesting Group Policy at the same time.</td></tr><tr><td colspan="2">The range is 0 to 1440 minutes (24 hours)</td></tr><tr><td>Minutes:</td><td>0</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="IP Security policy processing" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Group Policy" gpmc_settingDescription="Determines when IP security policies are updated.&lt;br/&gt;&lt;br/&gt;This setting affects all policies that use the IP security component of Group Policy, such as policies in Computer Configuration\Windows Settings\Security Settings\IP Security Policies on Local Machine.&lt;br/&gt;&lt;br/&gt;It overrides customized settings that the program implementing the IP security policy set when it was installed.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you can use the check boxes provided to change the options. If you disable this setting or do not configure it, it has no effect on the system.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Allow processing across a slow network connection&amp;quot; option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Do not apply during periodic background processing&amp;quot; option prevents the system from updating affected policies in the background while the computer is in use. Background updates can disrupt the user, cause a program to stop or operate abnormally, and, in rare cases, damage data.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Process even if the Group Policy objects have not changed&amp;quot; option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it." gpmc_supported="At least Microsoft Windows 2000">IP Security policy processing</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Allow processing across a slow network connection</td><td>Enabled</td></tr>
<tr><td>Do not apply during periodic background processing</td><td>Disabled</td></tr>
<tr><td>Process even if the Group Policy objects have not changed</td><td>Enabled</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Registry policy processing" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Group Policy" gpmc_settingDescription="Determines when registry policies are updated.&lt;br/&gt;&lt;br/&gt;This setting affects all policies in the Administrative Templates folder and any other policies that store values in the registry.&lt;br/&gt;&lt;br/&gt;It overrides customized settings that the program implementing a registry policy set when it was installed.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you can use the check boxes provided to change the options. If you disable this setting or do not configure it, it has no effect on the system.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Do not apply during periodic background processing&amp;quot; option prevents the system from updating affected policies in the background while the computer is in use. Background updates can disrupt the user, cause a program to stop or operate abnormally, and, in rare cases, damage data.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Process even if the Group Policy objects have not changed&amp;quot; option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it." gpmc_supported="At least Microsoft Windows 2000">Registry policy processing</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Do not apply during periodic background processing</td><td>Disabled</td></tr>
<tr><td>Process even if the Group Policy objects have not changed</td><td>Enabled</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Security policy processing" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Group Policy" gpmc_settingDescription="Determines when security policies are updated.&lt;br/&gt;&lt;br/&gt;This setting affects all policies that use the security component of Group Policy, such as those in Windows Settings\Security Settings.&lt;br/&gt;&lt;br/&gt;It overrides customized settings that the program implementing the security policy set when it was installed.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you can use the check boxes provided to change the options. If you disable this setting or do not configure it, it has no effect on the system.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Do not apply during periodic background processing&amp;quot; option prevents the system from updating affected policies in the background while the computer is in use. Background updates can disrupt the user, cause a program to stop or operate abnormally, and in rare cases, damage data.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Process even if the Group Policy objects have not changed&amp;quot; option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they be updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it." gpmc_supported="At least Microsoft Windows 2000">Security policy processing</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Do not apply during periodic background processing</td><td>Disabled</td></tr>
<tr><td>Process even if the Group Policy objects have not changed</td><td>Enabled</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/User Profiles</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add the Administrators security group to roaming user profiles" gpmc_settingPath="Computer Configuration/Administrative Templates/System/User Profiles" gpmc_settingDescription="This setting adds the Administrator security group to the roaming user profile share.&lt;br/&gt;&lt;br/&gt;Once an administrator has configured a users' roaming profile, the profile will be created at the user's next login. The profile is created at the location that is specified by the administrator.&lt;br/&gt;&lt;br/&gt;For the Windows 2000 Professional and Windows XP Professional operating systems, the default file permissions for the newly generated profile are full control, or read and write access for the user, and no file access for the administrators group.&lt;br/&gt;&lt;br/&gt;By configuring this setting, you can alter this behavior.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the administrator group is also given full control to the user's profile folder.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure it, only the user is given full control of their user profile, and the administrators group has no file system access to this folder.&lt;br/&gt;&lt;br/&gt;Note: If the setting is enabled after the profile is created, the setting has no effect.&lt;br/&gt;&lt;br/&gt;Note: The setting must be configured on the client computer, not the server, for it to have any effect, because the client computer sets the file share permissions for the roaming profile at creation time.&lt;br/&gt;&lt;br/&gt;Note: In the default case, administrators have no file access to the user's profile, but they may still take ownership of this folder to grant themselves file permissions.&lt;br/&gt;&lt;br/&gt;Note: The behavior when this setting is enabled is exactly the same behavior as in Windows NT 4.0." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Add the Administrators security group to roaming user profiles</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Windows Time Service</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Global Configuration Settings" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Windows Time Service" gpmc_settingDescription="Specifies a set of parameters for all time providers installed on your system. There are two sets of parameters: clock discipline parameters, which control how the Windows Time Service processes the time samples it receives from providers, and general parameters. The general parameters allow you to configure the following: whether the time service is discoverable through DsGetDcName, the verbosity of event logging, the reliability of the local CMOS clock, and the minimum and maximum suggested polling intervals for time providers." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Global Configuration Settings</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td colspan="2">Clock Discipline Parameters</td></tr><tr><td>FrequencyCorrectRate</td><td>4</td></tr>
<tr><td>HoldPeriod</td><td>5</td></tr>
<tr><td>LargePhaseOffset</td><td>1280000</td></tr>
<tr><td>MaxAllowedPhaseOffset</td><td>300</td></tr>
<tr><td>MaxNegPhaseCorrection</td><td>54000</td></tr>
<tr><td>MaxPosPhaseCorrection</td><td>54000</td></tr>
<tr><td>PhaseCorrectRate</td><td>1</td></tr>
<tr><td>PollAdjustFactor</td><td>5</td></tr>
<tr><td>SpikeWatchPeriod</td><td>90</td></tr>
<tr><td>UpdateInterval</td><td>30000</td></tr>
<tr><td colspan="2">General Parameters</td></tr><tr><td>AnnounceFlags</td><td>10</td></tr>
<tr><td>EventLogFlags</td><td>2</td></tr>
<tr><td>LocalClockDispersion</td><td>10</td></tr>
<tr><td>MaxPollInterval</td><td>15</td></tr>
<tr><td>MinPollInterval</td><td>10</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Windows Time Service/Time Providers</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable Windows NTP Client" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Windows Time Service/Time Providers" gpmc_settingDescription="Specifies whether the Windows NTP Client is enabled. Enabling the Windows NTP Client allows your computer to synchronize its computer clock with other NTP servers. You may want to disable this service if you decide to use a third-party time provider." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Enable Windows NTP Client</a></td><td>Enabled</td></tr>
</table>
</div></div></div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">System/Power Management</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prompt for password on resume from hibernate / suspend" gpmc_settingPath="User Configuration/Administrative Templates/System/Power Management" gpmc_settingDescription="This settings allows you to configure client computers to always lock when resuming from a hibernate or suspend.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the client computer is locked when it is resumed from a suspend or hibernate state.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users can decide if their computer is automatically locked or not after performing a resume operation." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Prompt for password on resume from hibernate / suspend</a></td><td>Enabled</td></tr>
</table>
</div></div></div></div>
</body></html>