Group Policy Settings Reference

Version 1.3 Windows Server 2003 Service Pack 1

This spreadsheet lists the policy settings for computer and user configurations included in the Administrative Template (.adm) files delivered with

Windows Server 2003 Service Pack 1. The policy settings included cover Windows Server 2003, Windows XP Professional,

and Windows 2000. These .adm files are used to expose policy settings when you edit Group Policy objects

(GPOs) in the Group Policy Object Editor (also known as GPEdit).

The Security Settings worksheet includes information about Account Policies (Password Policy, Account Lockout Policy, and Kerberos Policy), Local Policies (Audit Policy, User Rights Assignment, and Security Options), Event Log, Restricted Groups, System Services, Registry, and File System policy settings. Note: This does not include security settings that exist outside of the Security Settings extension (scecli.dll), such as Wireless Network extension, Public Key Policies, or Software Restrction Policies.

Each .adm file is represented by a single worksheet within this spreadsheet. In addition, a worksheet containing all policy settings, called All, is provided for ease

of reference. By using the ADM Parser utility (admx.msi, available from the Microsoft Web site), you can import

custom .adm files into the spreadsheet to reflect your specific environment. For more information, see the ADM Parser utility Help.

You can use the filtering capabilities included in this spreadsheet to view a specific subset of data based on one or a combination of

values available in one or more of the columns. In addition, you can select Custom in the drop-down list of any of the column

headings to add additional filtering criteria within that column. To view a specific subset of data, click the drop-down arrow in the

column heading cells that contain the value, or combination of values, on which you want to filter, and then click the desired value in the

drop-down list. For example, to view a subset of policy settings that are available through the Inetres.adm template and viewed under the

Computer Configuration node, in the All worksheet, click .adm File, click Inetres.adm, and then, in Computer/User Node, click MACHINE.

Legal Notice

The information contained in this document represents the current view of Microsoft Corp. on the issues discussed as of the date of publication.

Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot

guarantee the accuracy of any information presented after the date of publication.

The information contained in this document relates to pre-release software product, which may be substantially modified before its first commercial release.

Accordingly, the information may not accurately describe or reflect the software product when first commercially released.

This document is provided for informational purposes only, and Microsoft makes no warranties, express or implied, with respect to this document or the information contained in it.

This is a preliminary document and may be changed substantially prior to final commercial release of the software described herein.

This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, AS TO THE INFORMATION IN THIS DOCUMENT.

Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in

or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording or otherwise), or for

any purpose, without the express written permission of Microsoft Corp.

Microsoft may have patents, patent applications, trademarks, copyrights or other intellectual property rights covering subject matter in this document.

Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these

patents, trademarks, copyrights or other intellectual property

Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and events depicted herein are fictitious, and

no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred

Microsoft, the Windows logo, Windows, Windows Media, Active Directory and Windows NT are either registered trademarks or trademarks of Microsoft Corp. in the United States and/or other countries.

The names of actual companies and products mentioned herein may be the trademarks of their respective owners.