comi-audit-secu/vendor/lists/finding_list_intune.csv at eb4ca133d182d1f8e9f63c204a7a8e40ca246473

0 Fork 0

Files

T

PierreCsn 11f3cb0c8b fix(package): commit pinned HardeningKitty assets

2026-10-28 16:13:38 +01:00

510 KiB

Raw Blame History

1	Id	Category	Name	Method	MethodArgument	RegistryPath	RegistryItem	RegistryPathIntune	RegistryPathDCP	RegistryItemIntune	ClassName	Namespace	Property	DefaultValue	DefaultValueIntune
2	1621	.NET Framework: TLS Settings	Use Strong Crypto (v2.0.50727)	Registry		HKLM:\SOFTWARE\Microsoft\.NETFramework\v2.0.50727	SchUseStrongCrypto
3	1619	.NET Framework: TLS Settings	Use Strong Crypto (v2.0.50727, 32bit)	Registry		HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727	SchUseStrongCrypto
4	1617	.NET Framework: TLS Settings	Use Strong Crypto (v4.0.30319)	Registry		HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319	SchUseStrongCrypto
5	1615	.NET Framework: TLS Settings	Use Strong Crypto (v4.0.30319, 32bit)	Registry		HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319	SchUseStrongCrypto
6	1620	.NET Framework: TLS Settings	Use System Default TLS Versions (v2.0.50727)	Registry		HKLM:\SOFTWARE\Microsoft\.NETFramework\v2.0.50727	SystemDefaultTlsVersions
7	1618	.NET Framework: TLS Settings	Use System Default TLS Versions (v2.0.50727, 32bit)	Registry		HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727	SystemDefaultTlsVersions
8	1616	.NET Framework: TLS Settings	Use System Default TLS Versions (v4.0.30319)	Registry		HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319	SystemDefaultTlsVersions
9	1614	.NET Framework: TLS Settings	Use System Default TLS Versions (v4.0.30319, 32bit)	Registry		HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319	SystemDefaultTlsVersions
10	2	Account Policies	Account lockout duration	accountpolicy										30
11	3	Account Policies	Account lockout threshold	accountpolicy										Never
12	1695	Account Policies	Allow Administrator account lockout	secedit	System Access\AllowAdministratorLockout									1
13	338	Account Policies	Length of password history maintained	accountpolicy				HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceLock	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceLock	DevicePasswordHistory				None
14	339	Account Policies	Maximum password age	accountpolicy				HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceLock	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceLock	DevicePasswordExpiration				42
15	340	Account Policies	Minimum password age	accountpolicy										0
16	341	Account Policies	Minimum password length	accountpolicy				HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceLock	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceLock	MinDevicePasswordLength				0
17	342	Account Policies	Password must meet complexity requirements	secedit	System Access\PasswordComplexity									0
18	343	Account Policies	Relax minimum password length limits	Registry		HKLM:\System\CurrentControlSet\Control\SAM	RelaxMinimumPasswordLengthLimits	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceLock	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceLock	RelaxMinimumPasswordLengthLimits				0	0
19	4	Account Policies	Reset account lockout counter	accountpolicy										30
20	344	Account Policies	Store passwords using reversible encryption	secedit	System Access\ClearTextPassword									0
21	1937	Administrative Templates: Center for Internet Security (CIS)	Additional Benchmark Settings: Disable HTTP proxy features: Disable WPAD	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp	DisableWpad
22	1938	Administrative Templates: Center for Internet Security (CIS)	Additional Benchmark Settings: Disable HTTP proxy features: Disable proxy authentication	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings	DisableProxyAuthenticationSchemes
23	530	Administrative Templates: Control Panel	Allow Online Tips	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer	AllowOnlineTips	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Settings	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Settings	AllowOnlineTips				1
24	735	Administrative Templates: Control Panel	Enable screen saver	Registry		HKCU:\Software\Policies\Microsoft\Windows\Control Panel\Desktop	ScreenSaveActive	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ControlPanelDisplay	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ControlPanelDisplay	CPL_Personalization_EnableScreenSaver
25	801	Administrative Templates: Control Panel	Force specific screen saver: Screen saver executable name	Registry		HKCU:\Software\Policies\Microsoft\Windows\Control Panel\Desktop	SCRNSAVE.EXE	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ControlPanelDisplay	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ControlPanelDisplay	CPL_Personalization_SetScreenSaver
26	736	Administrative Templates: Control Panel	Password protect the screen saver	Registry		HKCU:\Software\Policies\Microsoft\Windows\Control Panel\Desktop	ScreenSaverIsSecure	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ControlPanelDisplay	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ControlPanelDisplay	CPL_Personalization_ScreenSaverIsSecure
27	98	Administrative Templates: Control Panel	Personalization: Prevent enabling lock screen camera	Registry		HKLM:\Software\Policies\Microsoft\Windows\Personalization	NoLockScreenCamera	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceLock	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceLock	PreventLockScreenCamera				0
28	528	Administrative Templates: Control Panel	Personalization: Prevent enabling lock screen slide show	Registry		HKLM:\Software\Policies\Microsoft\Windows\Personalization	NoLockScreenSlideshow	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceLock	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceLock	PreventLockScreenSlideShow				0
29	529	Administrative Templates: Control Panel	Regional and Language Options: Allow users to enable online speech recognition services	Registry		HKLM:\SOFTWARE\Policies\Microsoft\InputPersonalization	AllowInputPersonalization	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Privacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Privacy	AllowInputPersonalization				1
30	1551	Administrative Templates: Control Panel	Regional and Language Options: Handwriting personalization: Turn off automatic learning (RestrictImplicitInkCollection)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\InputPersonalization	RestrictImplicitInkCollection
31	1552	Administrative Templates: Control Panel	Regional and Language Options: Handwriting personalization: Turn off automatic learning (RestrictImplicitTextCollection)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\InputPersonalization	RestrictImplicitTextCollection
32	737	Administrative Templates: Control Panel	Screen saver timeout	Registry		HKCU:\Software\Policies\Microsoft\Windows\Control Panel\Desktop	ScreenSaveTimeOut	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ControlPanelDisplay	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ControlPanelDisplay	CPL_Personalization_ScreenSaverTimeOut
33	532	Administrative Templates: LAPS	Do not allow password expiration time longer than required by policy	Registry		HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd	PasswordExpirationProtectionEnabled							0
34	785	Administrative Templates: LAPS	Do not allow password expiration time longer than required by policy (Member)	Registry		HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd	PasswordExpirationProtectionEnabled							0
35	533	Administrative Templates: LAPS	Enable local admin password management	Registry		HKLM:\Software\Policies\Microsoft Services\AdmPwd	AdmPwdEnabled							0
36	786	Administrative Templates: LAPS	Enable local admin password management (Member)	Registry		HKLM:\Software\Policies\Microsoft Services\AdmPwd	AdmPwdEnabled							0
37	531	Administrative Templates: LAPS	LAPS AdmPwd GPO Extension / CSE	Registry		HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{D76B9641-3288-4f75-942D-087DE603E3EA}	DllName
38	784	Administrative Templates: LAPS	LAPS AdmPwd GPO Extension / CSE (Member)	Registry		HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{D76B9641-3288-4f75-942D-087DE603E3EA}	DllName
39	536	Administrative Templates: LAPS	Password Settings: Password Age (Days)	Registry		HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd	PasswordAgeDays							30
40	789	Administrative Templates: LAPS	Password Settings: Password Age (Days) (Member)	Registry		HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd	PasswordAgeDays							30
41	534	Administrative Templates: LAPS	Password Settings: Password Complexity	Registry		HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd	PasswordComplexity							4
42	787	Administrative Templates: LAPS	Password Settings: Password Complexity (Member)	Registry		HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd	PasswordComplexity							4
43	535	Administrative Templates: LAPS	Password Settings: Password Length	Registry		HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd	PasswordLength							14
44	788	Administrative Templates: LAPS	Password Settings: Password Length (Member)	Registry		HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd	PasswordLength							14
45	1666	Administrative Templates: Network	DNS Client: Configure DNS over HTTPS (DoH) name resolution	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\DNSClient	DoHPolicy
46	1697	Administrative Templates: Network	DNS Client: Configure NetBIOS settings	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\DNSClient	EnableNetbios
47	1887	Administrative Templates: Network	DNS Client: Configure multicast DNS (mDNS) protocol	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\DNSClient	EnableMDNS							0
48	1888	Administrative Templates: Network	DNS Client: Turn off default IPv6 DNS Servers	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\DNSClient	DisableIPv6DefaultDnsServers							0
49	99	Administrative Templates: Network	DNS Client: Turn off multicast name resolution (LLMNR)	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\DNSClient	EnableMulticast	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DNSClient	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DNSClient	Turn_Off_Multicast				1
50	568	Administrative Templates: Network	Disable IPv6	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters	DisabledComponents							0
51	553	Administrative Templates: Network	Fonts: Enable Font Providers	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	EnableFontProviders	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	AllowFontProviders				1
52	1829	Administrative Templates: Network	Lanman Server: Audit client does not support encryption	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanServer	AuditClientDoesNotSupportEncryption							0
53	1830	Administrative Templates: Network	Lanman Server: Audit client does not support signing	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanServer	AuditClientDoesNotSupportSigning							0
54	1831	Administrative Templates: Network	Lanman Server: Audit insecure guest logon	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanServer	AuditInsecureGuestLogon							0
55	1832	Administrative Templates: Network	Lanman Server: Enable authentication rate limiter	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanServer	EnableAuthRateLimiter							1
56	1833	Administrative Templates: Network	Lanman Server: Enable remote mailslots	Registry		HKLM:\Software\Policies\Microsoft\Windows\Bowser	EnableMailslots							1
57	1834	Administrative Templates: Network	Lanman Server: Mandate the maximum version of SMB	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanServer	MaxSmb2Dialect
58	1835	Administrative Templates: Network	Lanman Server: Mandate the minimum version of SMB	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanServer	MinSmb2Dialect
59	1836	Administrative Templates: Network	Lanman Server: Set authentication rate limiter delay (milliseconds)	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanServer	InvalidAuthenticationDelayTimeInMs
60	1837	Administrative Templates: Network	Lanman Workstation: Audit insecure guest logon	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanWorkstation	AuditInsecureGuestLogon							0
61	1838	Administrative Templates: Network	Lanman Workstation: Audit server does not support encryption	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanWorkstation	AuditServerDoesNotSupportEncryption							0
62	1839	Administrative Templates: Network	Lanman Workstation: Audit server does not support signing	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanWorkstation	AuditServerDoesNotSupportSigning							0
63	100	Administrative Templates: Network	Lanman Workstation: Enable insecure guest logons	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanWorkstation	AllowInsecureGuestAuth	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LanmanWorkstation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LanmanWorkstation	EnableInsecureGuestLogons				1
64	1840	Administrative Templates: Network	Lanman Workstation: Enable remote mailslots	Registry		HKLM:\Software\Policies\Microsoft\Windows\NetworkProvider	EnableMailslots							1
65	1841	Administrative Templates: Network	Lanman Workstation: Mandate the maximum version of SMB	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanWorkstation	MaxSmb2Dialect
66	1842	Administrative Templates: Network	Lanman Workstation: Mandate the minimum version of SMB	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanWorkstation	MinSmb2Dialect
67	1843	Administrative Templates: Network	Lanman Workstation: Require Encryption	Registry		HKLM:\Software\Policies\Microsoft\Windows\LanmanWorkstation	RequireEncryption							0
68	556	Administrative Templates: Network	Link-Layer Topology Discovery: Turn on Mapper I/O (LLTDIO) driver (AllowLLTDIOOnPublicNet)	Registry		HKLM:\Software\Policies\Microsoft\Windows\LLTD	AllowLLTDIOOnPublicNet	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_LinkLayerTopologyDiscovery	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_LinkLayerTopologyDiscovery	LLTD_EnableLLTDIO				0
69	555	Administrative Templates: Network	Link-Layer Topology Discovery: Turn on Mapper I/O (LLTDIO) driver (AllowLLTDIOOndomain)	Registry		HKLM:\Software\Policies\Microsoft\Windows\LLTD	AllowLLTDIOOndomain	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_LinkLayerTopologyDiscovery	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_LinkLayerTopologyDiscovery	LLTD_EnableLLTDIO				0
70	557	Administrative Templates: Network	Link-Layer Topology Discovery: Turn on Mapper I/O (LLTDIO) driver (EnableLLTDIO)	Registry		HKLM:\Software\Policies\Microsoft\Windows\LLTD	EnableLLTDIO	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_LinkLayerTopologyDiscovery	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_LinkLayerTopologyDiscovery	LLTD_EnableLLTDIO				0
71	558	Administrative Templates: Network	Link-Layer Topology Discovery: Turn on Mapper I/O (LLTDIO) driver (ProhibitLLTDIOOnPrivateNet)	Registry		HKLM:\Software\Policies\Microsoft\Windows\LLTD	ProhibitLLTDIOOnPrivateNet	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_LinkLayerTopologyDiscovery	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_LinkLayerTopologyDiscovery	LLTD_EnableLLTDIO				0
72	563	Administrative Templates: Network	Network Connections: Prohibit installation and configuration of Network Bridge on your DNS domain network	Registry		HKLM:\Software\Policies\Microsoft\Windows\Network Connections	NC_AllowNetBridge_NLA	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Connectivity	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Connectivity	ProhibitInstallationAndConfigurationOfNetworkBridge				0
73	564	Administrative Templates: Network	Network Connections: Prohibit use of Internet Connection Sharing on your DNS domain network	Registry		HKLM:\Software\Policies\Microsoft\Windows\Network Connections	NC_ShowSharedAccessUI	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Wifi	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Wifi	AllowInternetSharing				1
74	565	Administrative Templates: Network	Network Connections: Require domain users to elevate when setting a network's location	Registry		HKLM:\Software\Policies\Microsoft\Windows\Network Connections	NC_StdDomainUserSetLocation	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_NetworkConnections	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_NetworkConnections	NC_StdDomainUserSetLocation				0
75	566	Administrative Templates: Network	Network Provider: Hardened UNC Paths (NETLOGON)	Registry		HKLM:\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths	\\*\NETLOGON	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Connectivity	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Connectivity	HardenedUNCPaths
76	567	Administrative Templates: Network	Network Provider: Hardened UNC Paths (SYSVOL)	Registry		HKLM:\Software\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths	\\*\SYSVOL	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Connectivity	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Connectivity	HardenedUNCPaths
77	1328	Administrative Templates: Network	SSL Configuration Settings: ECC Curve Order	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002	EccCurves
78	1602	Administrative Templates: Network	SSL Configuration Settings: SSL Cipher Suite Order	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002	Functions	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_CipherSuiteOrder	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_CipherSuiteOrder	SSLCipherSuiteOrder
79	1907	Administrative Templates: Network	SSL Configuration Settings: SSL Cipher Suite Order (NULL bulk encryption)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002	Functions	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_CipherSuiteOrder	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_CipherSuiteOrder	SSLCipherSuiteOrder
80	1906	Administrative Templates: Network	SSL Configuration Settings: SSL Cipher Suite Order (RSA key transport)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002	Functions	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_CipherSuiteOrder	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_CipherSuiteOrder	SSLCipherSuiteOrder
81	101	Administrative Templates: Network	Turn off Microsoft Peer-to-Peer Networking Services	Registry		HKLM:\Software\policies\Microsoft\Peernet	Disabled							0
82	559	Administrative Templates: Network	Turn on Responder (RSPNDR) driver (AllowRspndrOnDomain)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\LLTD	AllowRspndrOnDomain	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_LinkLayerTopologyDiscovery	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_LinkLayerTopologyDiscovery	LLTD_EnableRspndr				0
83	560	Administrative Templates: Network	Turn on Responder (RSPNDR) driver (AllowRspndrOnPublicNet)	Registry		HKLM:\Software\Policies\Microsoft\Windows\LLTD	AllowRspndrOnPublicNet	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_LinkLayerTopologyDiscovery	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_LinkLayerTopologyDiscovery	LLTD_EnableRspndr				0
84	561	Administrative Templates: Network	Turn on Responder (RSPNDR) driver (EnableRspndr)	Registry		HKLM:\Software\Policies\Microsoft\Windows\LLTD	EnableRspndr	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_LinkLayerTopologyDiscovery	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_LinkLayerTopologyDiscovery	LLTD_EnableRspndr				0
85	562	Administrative Templates: Network	Turn on Responder (RSPNDR) driver (ProhibitRspndrOnPrivateNet)	Registry		HKLM:\Software\Policies\Microsoft\Windows\LLTD	ProhibitRspndrOnPrivateNet	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_LinkLayerTopologyDiscovery	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_LinkLayerTopologyDiscovery	LLTD_EnableRspndr				0
86	102	Administrative Templates: Network	WLAN Service: WLAN Settings: Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services	Registry		HKLM:\Software\Microsoft\wcmsvc\wifinetworkmanager\config	AutoConnectAllowedOEM	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Wifi	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Wifi	AllowAutoConnectToWiFiSenseHotspots				1
87	572	Administrative Templates: Network	Windows Connect Now: Configuration of wireless settings using Windows Connect Now (DisableFlashConfigRegistrar)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars	DisableFlashConfigRegistrar							1
88	571	Administrative Templates: Network	Windows Connect Now: Configuration of wireless settings using Windows Connect Now (DisableInBand802DOT11Registrar)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars	DisableInBand802DOT11Registrar							1
89	570	Administrative Templates: Network	Windows Connect Now: Configuration of wireless settings using Windows Connect Now (DisableUPnPRegistrar)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars	DisableUPnPRegistrar							1
90	573	Administrative Templates: Network	Windows Connect Now: Configuration of wireless settings using Windows Connect Now (DisableWPDRegistrar)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars	DisableWPDRegistrar							1
91	569	Administrative Templates: Network	Windows Connect Now: Configuration of wireless settings using Windows Connect Now (EnableRegistrars)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WCN\Registrars	EnableRegistrars	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_WindowsConnectNow	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_WindowsConnectNow	WCN_EnableRegistrar				1
92	574	Administrative Templates: Network	Windows Connect Now: Prohibit access of the Windows Connect Now wizards	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WCN\UI	DisableWcnUi	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_WindowsConnectNow	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_WindowsConnectNow	WCN_DisableWcnUi_1				0
93	575	Administrative Templates: Network	Windows Connection Manager: Minimize the number of simultaneous connections to the Internet or a Windows Domain	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy	fMinimizeConnections							1
94	576	Administrative Templates: Network	Windows Connection Manager: Prohibit connection to non-domain networks when connected to domain authenticated network	Registry		HKLM:\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy	fBlockNonDomain	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsConnectionManager	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsConnectionManager	ProhitConnectionToNonDomainNetworksWhenConnectedToDomainAuthenticatedNetwork				0
95	1751	Administrative Templates: PowerShellCore	Turn on PowerShell Module Logging	Registry		HKLM:\Software\Policies\Microsoft\PowerShellCore\ModuleLogging	EnableModuleLogging							0
96	1759	Administrative Templates: PowerShellCore	Turn on PowerShell Module Logging	Registry		HKCU:\Software\Policies\Microsoft\PowerShellCore\ModuleLogging	EnableModuleLogging							0
97	1764	Administrative Templates: PowerShellCore	Turn on PowerShell Module Logging (PowerShell Policy)	Registry		HKLM:\Software\Policies\Microsoft\PowerShellCore\ModuleLogging	UseWindowsPowerShellPolicySetting							0
98	1765	Administrative Templates: PowerShellCore	Turn on PowerShell Module Logging (PowerShell Policy)	Registry		HKCU:\Software\Policies\Microsoft\PowerShellCore\ModuleLogging	UseWindowsPowerShellPolicySetting							0
99	1752	Administrative Templates: PowerShellCore	Turn on PowerShell Module Logging - Module Names	Registry		HKLM:\Software\Policies\Microsoft\PowerShellCore\ModuleLogging\ModuleNames	*
100	1760	Administrative Templates: PowerShellCore	Turn on PowerShell Module Logging - Module Names	Registry		HKCU:\Software\Policies\Microsoft\PowerShellCore\ModuleLogging\ModuleNames	*
101	1748	Administrative Templates: PowerShellCore	Turn on PowerShell Script Block Logging	Registry		HKLM:\Software\Policies\Microsoft\PowerShellCore\ScriptBlockLogging	EnableScriptBlockLogging							0
102	1756	Administrative Templates: PowerShellCore	Turn on PowerShell Script Block Logging	Registry		HKCU:\Software\Policies\Microsoft\PowerShellCore\ScriptBlockLogging	EnableScriptBlockLogging							0
103	1749	Administrative Templates: PowerShellCore	Turn on PowerShell Script Block Logging (Invocation)	Registry		HKLM:\Software\Policies\Microsoft\PowerShellCore\ScriptBlockLogging	EnableScriptBlockInvocationLogging							0
104	1757	Administrative Templates: PowerShellCore	Turn on PowerShell Script Block Logging (Invocation)	Registry		HKCU:\Software\Policies\Microsoft\PowerShellCore\ScriptBlockLogging	EnableScriptBlockInvocationLogging							0
105	1750	Administrative Templates: PowerShellCore	Turn on PowerShell Script Block Logging (PowerShell Policy)	Registry		HKLM:\Software\Policies\Microsoft\PowerShellCore\ScriptBlockLogging	UseWindowsPowerShellPolicySetting							0
106	1758	Administrative Templates: PowerShellCore	Turn on PowerShell Script Block Logging (PowerShell Policy)	Registry		HKCU:\Software\Policies\Microsoft\PowerShellCore\ScriptBlockLogging	UseWindowsPowerShellPolicySetting							0
107	1753	Administrative Templates: PowerShellCore	Turn on PowerShell Transcription	Registry		HKLM:\Software\Policies\Microsoft\PowerShellCore\Transcription	EnableTranscripting							0
108	1761	Administrative Templates: PowerShellCore	Turn on PowerShell Transcription	Registry		HKCU:\Software\Policies\Microsoft\PowerShellCore\Transcription	EnableTranscripting							0
109	1754	Administrative Templates: PowerShellCore	Turn on PowerShell Transcription (Invocation)	Registry		HKLM:\Software\Policies\Microsoft\PowerShellCore\Transcription	EnableInvocationHeader							0
110	1762	Administrative Templates: PowerShellCore	Turn on PowerShell Transcription (Invocation)	Registry		HKCU:\Software\Policies\Microsoft\PowerShellCore\Transcription	EnableInvocationHeader							0
111	1755	Administrative Templates: PowerShellCore	Turn on PowerShell Transcription (PowerShell Policy)	Registry		HKLM:\Software\Policies\Microsoft\PowerShellCore\Transcription	UseWindowsPowerShellPolicySetting							0
112	1763	Administrative Templates: PowerShellCore	Turn on PowerShell Transcription (PowerShell Policy)	Registry		HKCU:\Software\Policies\Microsoft\PowerShellCore\Transcription	UseWindowsPowerShellPolicySetting							0
113	1667	Administrative Templates: Printers	Allow Print Spooler to accept client connections	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers	RegisterSpoolerRemoteRpcEndPoint	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_Printing2	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_Printing2	RegisterSpoolerRemoteRpcEndPoint				1
114	1700	Administrative Templates: Printers	Configure RPC connection settings (RpcAuthentication)	Registry	RpcConnectionAuthentication_Enum	HKLM:\Software\Policies\Microsoft\Windows NT\Printers\RPC	RpcAuthentication	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	ConfigureRpcConnectionPolicy
115	1699	Administrative Templates: Printers	Configure RPC connection settings (RpcUseNamedPipeProtocol)	Registry	RpcConnectionProtocol_Enum	HKLM:\Software\Policies\Microsoft\Windows NT\Printers\RPC	RpcUseNamedPipeProtocol	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	ConfigureRpcConnectionPolicy
116	1702	Administrative Templates: Printers	Configure RPC listener settings (ForceKerberosForRpc)	Registry	RpcAuthenticationProtocol_Enum	HKLM:\Software\Policies\Microsoft\Windows NT\Printers\RPC	ForceKerberosForRpc	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	ConfigureRpcListenerPolicy
117	1701	Administrative Templates: Printers	Configure RPC listener settings (RpcProtocols)	Registry	RpcListenerProtocols_Enum	HKLM:\Software\Policies\Microsoft\Windows NT\Printers\RPC	RpcProtocols	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	ConfigureRpcListenerPolicy
118	1703	Administrative Templates: Printers	Configure RPC over TCP port	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers\RPC	RpcTcpPort	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	ConfigureRpcTcpPort
119	1844	Administrative Templates: Printers	Configure RPC packet level privacy setting for incoming connections	Registry		HKLM:\System\CurrentControlSet\Control\Print	RpcAuthnLevelPrivacyEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	ConfigureRpcAuthnLevelPrivacyEnabled
120	1698	Administrative Templates: Printers	Configure Redirection Guard	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers	RedirectionGuardPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	ConfigureRedirectionGuardPolicy
121	1930	Administrative Templates: Printers	Configure Windows Ready Print driver ranking	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers\DriverRanking	UseWindowsReadyPrintDriverRankingGroupPolicy
122	1889	Administrative Templates: Printers	Configure Windows protected print	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers\WPP	WindowsProtectedPrintGroupPolicyState	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	ConfigureWindowsProtectedPrint				0
123	1704	Administrative Templates: Printers	Limits print driver installation to Administrators	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint	RestrictDriverInstallationToAdministrators	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	RestrictDriverInstallationToAdministrators
124	1705	Administrative Templates: Printers	Manage processing of Queue-specific files	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers	CopyFilesPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	ConfigureCopyFilesPolicy
125	1650	Administrative Templates: Printers	Only use Package Point and Print (CVE-2021-36958)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint	PackagePointAndPrintOnly
126	1651	Administrative Templates: Printers	Package Point and Print - Approved servers (CVE-2021-36958)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint	PackagePointAndPrintServerList
127	1645	Administrative Templates: Printers	Point and Print Restrictions: Only administrators can install printer drivers on a print server (CVE-2021-34527)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint	RestrictDriverInstallationToAdministrators
128	1668	Administrative Templates: Printers	Point and Print Restrictions: When installing drivers for a new connection	Registry	PointAndPrint_NoWarningNoElevationOnInstall_Enum	HKLM:\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint	NoWarningNoElevationOnInstall	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	PointAndPrintRestrictions				0
129	1643	Administrative Templates: Printers	Point and Print Restrictions: When installing drivers for a new connection (CVE-2021-34527)	Registry	PointAndPrint_NoWarningNoElevationOnInstall_Enum	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint	NoWarningNoElevationOnInstall	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	PointAndPrintRestrictions				0
130	1669	Administrative Templates: Printers	Point and Print Restrictions: When updating drivers for an existing connection	Registry	PointAndPrint_NoWarningNoElevationOnUpdate_Enum	HKLM:\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint	UpdatePromptSettings	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	PointAndPrintRestrictions				0
131	1644	Administrative Templates: Printers	Point and Print Restrictions: When updating drivers for an existing connection (CVE-2021-34527)	Registry	PointAndPrint_NoWarningNoElevationOnUpdate_Enum	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint	UpdatePromptSettings	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Printers	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Printers	PointAndPrintRestrictions				0
132	1931	Administrative Templates: Printers	Require IPPS for IPP printers	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers\IPP	RequireIpps
133	1932	Administrative Templates: Printers	Set TLS/SSL security policy for IPP printers: Disallow invalid certificate authority	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers\IPP	SecurityFlagsBlockUnknownCA
134	1934	Administrative Templates: Printers	Set TLS/SSL security policy for IPP printers: Disallow invalid certificate common name	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers\IPP	SecurityFlagsBlockCertCNInvalid
135	1935	Administrative Templates: Printers	Set TLS/SSL security policy for IPP printers: Disallow invalid certificate date	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers\IPP	SecurityFlagsBlockCertDateInvalid
136	1933	Administrative Templates: Printers	Set TLS/SSL security policy for IPP printers: Disallow non-server certificates	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers\IPP	SecurityFlagsBlockCertWrongUsage
137	298	Administrative Templates: Start Menu and Taskbar	Notifications: Turn off notifications network usage	Registry		HKCU:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion	NoCloudApplicationNotification							0
138	577	Administrative Templates: Start Menu and Taskbar	Notifications: Turn off notifications network usage	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications	NoCloudApplicationNotification	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Notifications	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Notifications	DisallowCloudNotification				0
139	299	Administrative Templates: Start Menu and Taskbar	Notifications: Turn off toast notifications on the lock screen	Registry		HKCU:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications	NoToastApplicationNotificationOnLockScreen	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\ADMX_WPN	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\ADMX_WPN	NoLockScreenToastNotification				0
140	1805	Administrative Templates: Start Menu and Taskbar	Remove Personalized Website Recommendations from the Recommended section in the Start Menu	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer	HideRecommendedPersonalizedSites	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Start	HideRecommendedPersonalizedSites				0
141	578	Administrative Templates: System	Audit Process Creation: Include command line in process creation events	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit	ProcessCreationIncludeCmdLine_Enabled							0
142	1845	Administrative Templates: System	Configure the behavior of the sudo command	Registry		HKLM:\Software\Policies\Microsoft\Windows\Sudo	Enabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Sudo	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Sudo	EnableSudo
143	103	Administrative Templates: System	Credentials Delegation: Allow delegation default credentials	Registry		HKLM:\Software\Policies\Microsoft\Windows\CredentialsDelegation	AllowDefaultCredentials	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_CredSsp	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_CredSsp	AllowDefaultCredentials				1
144	104	Administrative Templates: System	Credentials Delegation: Encryption Oracle Remediation	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters	AllowEncryptionOracle	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_CredSsp	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_CredSsp	AllowEncryptionOracle				0
145	819	Administrative Templates: System	Credentials Delegation: Remote host allows delegation of non-exportable credentials	Registry		HKLM:\Software\Policies\Microsoft\Windows\CredentialsDelegation	AllowProtectedCreds	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\CredentialsDelegation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\CredentialsDelegation	RemoteHostAllowsDelegationOfNonExportableCredentials				0
146	114	Administrative Templates: System	Device Guard: Available Security Properties: DMA protection	CimInstance							Win32_DeviceGuard	root\Microsoft\Windows\DeviceGuard	AvailableSecurityProperties	3
147	113	Administrative Templates: System	Device Guard: Available Security Properties: Secure Boot	CimInstance							Win32_DeviceGuard	root\Microsoft\Windows\DeviceGuard	AvailableSecurityProperties	2
148	793	Administrative Templates: System	Device Guard: Credential Guard Configuration (DC)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard	LsaCfgFlags	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceGuard	LsaCfgFlags
149	792	Administrative Templates: System	Device Guard: Credential Guard Configuration (Member)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard	LsaCfgFlags	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceGuard	LsaCfgFlags
150	582	Administrative Templates: System	Device Guard: Credential Guard Configuration (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard	LsaCfgFlags	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceGuard	LsaCfgFlags
151	1706	Administrative Templates: System	Device Guard: Kernel-mode Hardware-enforced Stack Protection (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard	ConfigureKernelShadowStacksLaunch
152	119	Administrative Templates: System	Device Guard: Require UEFI Memory Attributes Table (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard	HVCIMATRequired
153	120	Administrative Templates: System	Device Guard: Secure Launch Configuration (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard	ConfigureSystemGuardLaunch	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceGuard	ConfigureSystemGuardLaunch				0
154	115	Administrative Templates: System	Device Guard: Security Services Configured: Credential Guard	CimInstance							Win32_DeviceGuard	root\Microsoft\Windows\DeviceGuard	SecurityServicesConfigured	Not available
155	116	Administrative Templates: System	Device Guard: Security Services Configured: HVCI	CimInstance							Win32_DeviceGuard	root\Microsoft\Windows\DeviceGuard	SecurityServicesConfigured	Not available
156	117	Administrative Templates: System	Device Guard: Security Services Running: Credential Guard	CimInstance							Win32_DeviceGuard	root\Microsoft\Windows\DeviceGuard	SecurityServicesRunning	Not available
157	118	Administrative Templates: System	Device Guard: Security Services Running: HVCI	CimInstance							Win32_DeviceGuard	root\Microsoft\Windows\DeviceGuard	SecurityServicesRunning	Not available
158	580	Administrative Templates: System	Device Guard: Select Platform Security Level (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard	RequirePlatformSecurityFeatures	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceGuard	RequirePlatformSecurityFeatures
159	1307	Administrative Templates: System	Device Guard: Support for Virtualization Based Security (Microsoft-Hyper-V-Hypervisor)	WindowsOptionalFeature	Microsoft-Hyper-V-Hypervisor									Disabled
160	579	Administrative Templates: System	Device Guard: Turn On Virtualization Based Security (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard	EnableVirtualizationBasedSecurity	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceGuard	EnableVirtualizationBasedSecurity
161	581	Administrative Templates: System	Device Guard: Virtualization Based Protection of Code Integrity (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard	HypervisorEnforcedCodeIntegrity	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\VirtualizationBasedTechnology	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\VirtualizationBasedTechnology	HypervisorEnforcedCodeIntegrity
162	112	Administrative Templates: System	Device Guard: Virtualization Based Security Status	CimInstance							Win32_DeviceGuard	root\Microsoft\Windows\DeviceGuard	VirtualizationBasedSecurityStatus	Not available
163	121	Administrative Templates: System	Device Guard: Windows Defender Application Control deployed (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard	DeployConfigCIPolicy							0
164	107	Administrative Templates: System	Device Installation: Device Installation Restrictions: Prevent installation of devices that match ID PCI\CC_0C0010 (Firewire)	RegistryList		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs	PCI\CC_0C0010	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceInstallation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceInstallation	PreventInstallationOfMatchingDeviceIDs				0
165	108	Administrative Templates: System	Device Installation: Device Installation Restrictions: Prevent installation of devices that match ID PCI\CC_0C0A (Thunderbolt)	RegistryList		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs	PCI\CC_0C0A	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceInstallation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceInstallation	PreventInstallationOfMatchingDeviceIDs				0
166	105	Administrative Templates: System	Device Installation: Device Installation Restrictions: Prevent installation of devices that match an ID	Registry		HKLM:\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions	DenyDeviceIDs	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceInstallation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceInstallation	PreventInstallationOfMatchingDeviceIDs				0
167	106	Administrative Templates: System	Device Installation: Device Installation Restrictions: Prevent installation of devices that match an ID (Retroactive)	Registry		HKLM:\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions	DenyDeviceIDsRetroactive	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceInstallation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceInstallation	PreventInstallationOfMatchingDeviceIDs				0
168	586	Administrative Templates: System	Device Installation: Device Installation Restrictions: Prevent installation of devices using drivers that match 6bdd1fc1-810f-11d0-bec7-08002be2092f (SBP-2 drive)	RegistryList		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses	6bdd1fc1-810f-11d0-bec7-08002be2092f	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceInstallation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceInstallation	PreventInstallationOfMatchingDeviceSetupClasses				0
169	584	Administrative Templates: System	Device Installation: Device Installation Restrictions: Prevent installation of devices using drivers that match 7ebefbc0-3200-11d2-b4c2-00a0C9697d07 (SBP-2 drive)	RegistryList		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses	7ebefbc0-3200-11d2-b4c2-00a0C9697d07	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceInstallation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceInstallation	PreventInstallationOfMatchingDeviceSetupClasses				0
170	109	Administrative Templates: System	Device Installation: Device Installation Restrictions: Prevent installation of devices using drivers that match an device setup class	Registry		HKLM:\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions	DenyDeviceClasses	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceInstallation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceInstallation	PreventInstallationOfMatchingDeviceSetupClasses				0
171	110	Administrative Templates: System	Device Installation: Device Installation Restrictions: Prevent installation of devices using drivers that match an device setup class (Retroactive)	Registry		HKLM:\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions	DenyDeviceClassesRetroactive	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceInstallation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceInstallation	PreventInstallationOfMatchingDeviceSetupClasses				0
172	585	Administrative Templates: System	Device Installation: Device Installation Restrictions: Prevent installation of devices using drivers that match c06ff265-ae09-48f0-812c-16753d7cba83 (SBP-2 drive)	RegistryList		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses	c06ff265-ae09-48f0-812c-16753d7cba83	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceInstallation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceInstallation	PreventInstallationOfMatchingDeviceSetupClasses				0
173	111	Administrative Templates: System	Device Installation: Device Installation Restrictions: Prevent installation of devices using drivers that match d48179be-ec20-11d1-b6b8-00c04fa372a7 (SBP-2 drive)	RegistryList		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceClasses	d48179be-ec20-11d1-b6b8-00c04fa372a7	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeviceInstallation	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceInstallation	PreventInstallationOfMatchingDeviceSetupClasses				0
174	1684	Administrative Templates: System	Device Installation: Prevent automatic download of applications associated with device metadata	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Device Metadata	PreventDeviceMetadataFromNetwork
175	122	Administrative Templates: System	Early Launch Antimalware: Boot-Start Driver Initialization Policy	Registry		HKLM:\System\CurrentControlSet\Policies\EarlyLaunch	DriverLoadPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	BootStartDriverInitialization				0
176	1936	Administrative Templates: System	Filesystem: Enable / disable CLFS logfile authentication	Registry		HKLM:\SYSTEM\CurrentControlSet\Policies	ClfsAuthenticationChecking
177	1802	Administrative Templates: System	Group Policy: Configure security policy processing: Do not apply during periodic background processing	Registry	CSE_NOBACKGROUND11	HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}	NoBackgroundPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_GroupPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_GroupPolicy	CSE_Security				1
178	1688	Administrative Templates: System	Group Policy: Configure security policy processing: Process even if the Group Policy objects have not changed	Registry	CSE_NOCHANGES11	HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}	NoGPOListChanges	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_GroupPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_GroupPolicy	CSE_Security				1
179	587	Administrative Templates: System	Group Policy: Continue experiences on this device	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	EnableCdp	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_GroupPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_GroupPolicy	EnableCDP				1
180	124	Administrative Templates: System	Group Policy: Do not apply during periodic background processing	Registry	CSE_NOBACKGROUND10	HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}	NoGPOListChanges	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_GroupPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_GroupPolicy	CSE_Registry				0
181	123	Administrative Templates: System	Group Policy: Process even if the Group Policy objects have not changed	Registry	CSE_NOCHANGES10	HKLM:\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}	NoBackgroundPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_GroupPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_GroupPolicy	CSE_Registry				1
182	588	Administrative Templates: System	Group Policy: Turn off background refresh of Group Policy	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	DisableBkGndGroupPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_GroupPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_GroupPolicy	DisableBackgroundPolicy				0
183	300	Administrative Templates: System	Internet Communication Management: Internet Communication Settings: Turn off Help Experience Improvement Program	Registry		HKCU:\Software\Policies\Microsoft\Assistance\Client\1.0	NoImplicitFeedback	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\ADMX_HelpAndSupport	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\ADMX_HelpAndSupport	HPImplicitFeedback				0
184	592	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Internet Connection Wizard	ExitOnMSICW	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ICM	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ICM	NC_ExitOnISP				0
185	129	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off Internet download for Web publishing and online ordering wizards	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer	NoWebServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Connectivity	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Connectivity	DisableInternetDownloadForWebPublishingAndOnlineOrderingWizards				0
186	594	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off Registration if URL connection is referring to Microsoft.com	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Registration Wizard Control	NoRegistration	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ICM	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ICM	NC_NoRegistration				0
187	595	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off Search Companion content file updates	Registry		HKLM:\SOFTWARE\Policies\Microsoft\SearchCompanion	DisableContentFileUpdates	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ICM	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ICM	SearchCompanion_DisableFileUpdates				0
188	130	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off Windows Customer Experience Improvement Program	Registry		HKLM:\Software\Policies\Microsoft\SQMClient\Windows	CEIPEnable	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ICM	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ICM	CEIPEnable				1
189	127	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off Windows Error Reporting 1	Registry		HKLM:\Software\Policies\Microsoft\PCHealth\ErrorReporting	DoReport	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ErrorReporting	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ErrorReporting	DisableWindowsErrorReporting				1
190	128	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off Windows Error Reporting 2	Registry		HKLM:\Software\Policies\Microsoft\Windows\Windows Error Reporting	Disabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ErrorReporting	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ErrorReporting	DisableWindowsErrorReporting				0
191	589	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off access to the Store	Registry		HKLM:\Software\Policies\Microsoft\Windows\Explorer	NoUseStoreOpenWith	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ICM	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ICM	ShellNoUseStoreOpenWith_1				0
192	126	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off downloading of print drivers over HTTP	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers	DisableWebPnPDownload	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Connectivity	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Connectivity	DisableDownloadingOfPrintDriversOverHTTP				0
193	590	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off handwriting personalization data sharing	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\TabletPC	PreventHandwritingDataSharing							0
194	591	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off handwriting recognition error reporting	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\HandwritingErrorReports	PreventHandwritingErrorReports							0
195	593	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off printing over HTTP	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers	DisableHTTPPrinting	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Connectivity	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Connectivity	DisablePrintingOverHTTP				0
196	596	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off the 'Order Prints' picture task	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer	NoOnlinePrintsWizard	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ICM	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ICM	ShellRemoveOrderPrints_1				0
197	597	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off the 'Publish to Web' task for files and folders	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer	NoPublishingWizard	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ICM	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ICM	ShellRemovePublishToWeb_1				0
198	125	Administrative Templates: System	Internet Communication Management: Internet Communication settings: Turn off the Windows Messenger Customer Experience Improvement Program	Registry		HKLM:\Software\Policies\Microsoft\Messenger\Client	CEIP	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_ICM	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_ICM	WinMSG_NoInstrumentation_1				0
199	1846	Administrative Templates: System	KDC: Configure hash algorithms for certificate logon	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\KDC\Parameters	PKINITHashAlgorithmConfigurationEnabled
200	1847	Administrative Templates: System	KDC: Configure hash algorithms for certificate logon (SHA-1)	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\KDC\Parameters	PKINITSHA1
201	1848	Administrative Templates: System	KDC: Configure hash algorithms for certificate logon (SHA-256)	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\KDC\Parameters	PKINITSHA256
202	1849	Administrative Templates: System	KDC: Configure hash algorithms for certificate logon (SHA-384)	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\KDC\Parameters	PKINITSHA384
203	1850	Administrative Templates: System	KDC: Configure hash algorithms for certificate logon (SHA-512)	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\KDC\Parameters	PKINITSHA512
204	1851	Administrative Templates: System	Kerberos: Configure hash algorithms for certificate logon	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters	PKINITHashAlgorithmConfigurationEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Kerberos	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Kerberos	PKInitHashAlgorithmConfiguration
205	1852	Administrative Templates: System	Kerberos: Configure hash algorithms for certificate logon (SHA-1)	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters	PKINITSHA1	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Kerberos	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Kerberos	PKInitHashAlgorithmSHA1
206	1853	Administrative Templates: System	Kerberos: Configure hash algorithms for certificate logon (SHA-256)	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters	PKINITSHA256	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Kerberos	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Kerberos	PKInitHashAlgorithmSHA256
207	1854	Administrative Templates: System	Kerberos: Configure hash algorithms for certificate logon (SHA-384)	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters	PKINITSHA384	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Kerberos	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Kerberos	PKInitHashAlgorithmSHA384
208	1855	Administrative Templates: System	Kerberos: Configure hash algorithms for certificate logon (SHA-512)	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters	PKINITSHA512	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Kerberos	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Kerberos	PKInitHashAlgorithmSHA512
209	598	Administrative Templates: System	Kerberos: Support device authentication using certificate (DevicePKInitBehavior)	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters	DevicePKInitBehavior	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_Kerberos	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_Kerberos	DevicePKInitEnabled				1
210	599	Administrative Templates: System	Kerberos: Support device authentication using certificate (DevicePKInitEnabled)	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\kerberos\parameters	DevicePKInitEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_Kerberos	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_Kerberos	DevicePKInitEnabled				1
211	131	Administrative Templates: System	Kernel DMA Protection: Enumeration policy for external devices incompatible with Kernel DMA Protection	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection	DeviceEnumerationPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DmaGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DmaGuard	DeviceEnumerationPolicy				2
212	1785	Administrative Templates: System	LAPS: Configure password backup directory	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS	BackupDirectory	HKLM:\SOFTWARE\Microsoft\Policies\LAPS		BackupDirectory
213	1806	Administrative Templates: System	LAPS: Do not allow password expiration time longer than required by policy	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS	PasswordExpirationProtectionEnabled	HKLM:\SOFTWARE\Microsoft\Policies\LAPS		PasswordExpirationProtectionEnabled
214	1786	Administrative Templates: System	LAPS: Enable password backup for DSRM accounts	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS	ADBackupDSRMPassword
215	1787	Administrative Templates: System	LAPS: Enable password encryption	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS	ADPasswordEncryptionEnabled	HKLM:\SOFTWARE\Microsoft\Policies\LAPS		ADPasswordEncryptionEnabled
216	1809	Administrative Templates: System	LAPS: Password Settings: Password Age (Days)	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS	PasswordAgeDays	HKLM:\SOFTWARE\Microsoft\Policies\LAPS		PasswordAgeDays
217	1807	Administrative Templates: System	LAPS: Password Settings: Password Complexity	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS	PasswordComplexity	HKLM:\SOFTWARE\Microsoft\Policies\LAPS		PasswordComplexity
218	1808	Administrative Templates: System	LAPS: Password Settings: Password Length	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS	PasswordLength	HKLM:\SOFTWARE\Microsoft\Policies\LAPS		PasswordLength
219	1811	Administrative Templates: System	LAPS: Post-authentication actions: Actions	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS	PostAuthenticationActions	HKLM:\SOFTWARE\Microsoft\Policies\LAPS		PostAuthenticationActions
220	1810	Administrative Templates: System	LAPS: Post-authentication actions: Grace period (hours)	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS	PostAuthenticationResetDelay	HKLM:\SOFTWARE\Microsoft\Policies\LAPS		PostAuthenticationResetDelay
221	1707	Administrative Templates: System	Local Security Authority: Allow Custom SSPs and APs to be loaded into LSASS	Registry		HKLM:\Software\Policies\Microsoft\Windows\System	AllowCustomSSPsAPs	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalSecurityAuthority	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalSecurityAuthority	AllowCustomSSPsAPs
222	1708	Administrative Templates: System	Local Security Authority: Configures LSASS to run as a protected process	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	RunAsPPL	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalSecurityAuthority	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalSecurityAuthority	ConfigureLsaProtectedProcess
223	600	Administrative Templates: System	Locale Services: Disallow copying of user input methods to the system account for sign-in	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Control Panel\International	BlockUserInputMethodsForSignIn	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_Globalization	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_Globalization	BlockUserInputMethodsForSignIn				0
224	1777	Administrative Templates: System	Logon: Always use classic logon	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System	LogonType
225	601	Administrative Templates: System	Logon: Block user from showing account details on sign-in	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	BlockUserFromShowingAccountDetailsOnSignin	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_Logon	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_Logon	BlockUserFromShowingAccountDetailsOnSignin				0
226	134	Administrative Templates: System	Logon: Do not display network selection UI	Registry		HKLM:\Software\Policies\Microsoft\Windows\System	DontDisplayNetworkSelectionUI	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsLogon	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsLogon	DontDisplayNetworkSelectionUI				0
227	603	Administrative Templates: System	Logon: Do not enumerate connected users on domain-joined computers	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	DontEnumerateConnectedUsers	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_Logon	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_Logon	DontEnumerateConnectedUsers				0
228	604	Administrative Templates: System	Logon: Enumerate local users on domain-joined computers	Registry		HKLM:\Software\Policies\Microsoft\Windows\System	EnumerateLocalUsers	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsLogon	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsLogon	EnumerateLocalUsersOnDomainJoinedComputers				0
229	794	Administrative Templates: System	Logon: Enumerate local users on domain-joined computers (Member)	Registry		HKLM:\Software\Policies\Microsoft\Windows\System	EnumerateLocalUsers	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsLogon	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsLogon	EnumerateLocalUsersOnDomainJoinedComputers				0
230	133	Administrative Templates: System	Logon: Turn off app notifications on the lock screen	Registry		HKLM:\Software\Policies\Microsoft\Windows\System	DisableLockScreenAppNotifications	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsLogon	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsLogon	DisableLockScreenAppNotifications				0
231	605	Administrative Templates: System	Logon: Turn off picture password sign-in	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	BlockDomainPicturePassword	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\CredentialProviders	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\CredentialProviders	BlockPicturePassword				0
232	132	Administrative Templates: System	Logon: Turn on convenience PIN sign-in	Registry		HKLM:\Software\Policies\Microsoft\Windows\System	AllowDomainPINLogon	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\CredentialProviders	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\CredentialProviders	AllowPINLogon				1
233	135	Administrative Templates: System	Mitigation Options: Untrusted Font Blocking	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions	MitigationOptions_FontBocking							0
234	1890	Administrative Templates: System	Net Logon: DC Locator DNS Records: Block NetBIOS-based discovery for domain controller location	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Netlogon\Parameters	BlockNetbiosDiscovery							1
235	136	Administrative Templates: System	OS Policies: Allow Clipboard synchronization across devices	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	AllowCrossDeviceClipboard	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Privacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Privacy	AllowCrossDeviceClipboard				1
236	606	Administrative Templates: System	OS Policies: Allow upload of User Activities	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	UploadUserActivities	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Privacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Privacy	UploadUserActivities				1
237	1329	Administrative Templates: System	PIN Complexity: Minimum PIN length	Registry		HKLM:\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity	MinimumPINLength
238	141	Administrative Templates: System	Remote Assistance: Configure Offer Remote Assistance	Registry		HKLM:\Software\policies\Microsoft\Windows NT\Terminal Services	fAllowUnsolicited	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteAssistance	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteAssistance	UnsolicitedRemoteAssistance				1
239	142	Administrative Templates: System	Remote Assistance: Configure Solicited Remote Assistance	Registry		HKLM:\Software\policies\Microsoft\Windows NT\Terminal Services	fAllowToGetHelp	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteAssistance	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteAssistance	SolicitedRemoteAssistance				1
240	821	Administrative Templates: System	Remote Assistance: Maximum ticket time (units)	Registry		HKLM:\Software\policies\Microsoft\Windows NT\Terminal Services	MaxTicketExpiryUnits
241	820	Administrative Templates: System	Remote Assistance: Maximum ticket time (value)	Registry		HKLM:\Software\policies\Microsoft\Windows NT\Terminal Services	MaxTicketExpiry
242	822	Administrative Templates: System	Remote Assistance: Method for sending email invitations	Registry		HKLM:\Software\policies\Microsoft\Windows NT\Terminal Services	fUseMailto
243	823	Administrative Templates: System	Remote Assistance: Permit remote control of this computer	Registry		HKLM:\Software\policies\Microsoft\Windows NT\Terminal Services	fAllowFullControl
244	143	Administrative Templates: System	Remote Procedure Call: Enable RPC Endpoint Mapper Client Authentication	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Rpc	EnableAuthEpResolution	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteProcedureCall	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteProcedureCall	RPCEndpointMapperClientAuthentication				0
245	795	Administrative Templates: System	Remote Procedure Call: Enable RPC Endpoint Mapper Client Authentication (Member)	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Rpc	EnableAuthEpResolution	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteProcedureCall	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteProcedureCall	RPCEndpointMapperClientAuthentication				0
246	144	Administrative Templates: System	Remote Procedure Call: Restrict Unauthenticated RPC clients	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Rpc	RestrictRemoteClients	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteProcedureCall	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteProcedureCall	RestrictUnauthenticatedRPCClients				0
247	796	Administrative Templates: System	Remote Procedure Call: Restrict Unauthenticated RPC clients (Member)	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Rpc	RestrictRemoteClients	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteProcedureCall	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteProcedureCall	RestrictUnauthenticatedRPCClients				0
248	1891	Administrative Templates: System	Security Account Manager: Configure SAM change password RPC methods policy	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\SAM	SamrChangeUserPasswordApiPolicy							1
249	1908	Administrative Templates: System	Security Account Manager: Configure SAM change password RPC methods policy (DC)	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\SAM	SamrChangeUserPasswordApiPolicy							1
250	1909	Administrative Templates: System	Security Account Manager: Configure SAM change password RPC methods policy (Member)	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\SAM	SamrChangeUserPasswordApiPolicy							1
251	1685	Administrative Templates: System	Security Account Manager: Configure validation of ROCA-vulnerable WHfB keys during authentication	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\SAM	SamNGCKeyROCAValidation
252	1686	Administrative Templates: System	Security Account Manager: Configure validation of ROCA-vulnerable WHfB keys during authentication (DC only)	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\SAM	SamNGCKeyROCAValidation
253	145	Administrative Templates: System	Security Settings: Enable svchost.exe mitigation options	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SCMConfig	EnableSvchostMitigationPolicy							0
254	607	Administrative Templates: System	Sleep Settings: Allow network connectivity during connected-standby (on battery)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9	DCSettingIndex	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_Power	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_Power	DCConnectivityInStandby_2				1
255	608	Administrative Templates: System	Sleep Settings: Allow network connectivity during connected-standby (plugged in)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Power\PowerSettings\f15576e8-98b7-4186-b944-eafa664402d9	ACSettingIndex	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_Power	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_Power	ACConnectivityInStandby_2				1
256	140	Administrative Templates: System	Sleep Settings: Allow standby states (S1-S3) when sleeping (on battery)	Registry		HKLM:\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab	DCSettingIndex	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Power	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Power	AllowStandbyStatesWhenSleepingOnBattery				1
257	139	Administrative Templates: System	Sleep Settings: Allow standby states (S1-S3) when sleeping (plugged in)	Registry		HKLM:\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab	ACSettingIndex	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Power	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Power	AllowStandbyWhenSleepingPluggedIn				1
258	138	Administrative Templates: System	Sleep Settings: Require a password when a computer wakes (on battery)	Registry		HKLM:\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51	DCSettingIndex	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Power	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Power	RequirePasswordWhenComputerWakesOnBattery				0
259	137	Administrative Templates: System	Sleep Settings: Require a password when a computer wakes (plugged in)	Registry		HKLM:\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51	ACSettingIndex	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Power	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Power	RequirePasswordWhenComputerWakesPluggedIn				0
260	148	Administrative Templates: System	Time Providers: Enable Windows NTP Client	Registry		HKLM:\Software\Policies\Microsoft\W32time\TimeProviders\NtpClient	Enabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_W32Time	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_W32Time	W32TIME_POLICY_ENABLE_NTPCLIENT				0
261	149	Administrative Templates: System	Time Providers: Enable Windows NTP Server	Registry		HKLM:\Software\Policies\Microsoft\W32time\TimeProviders\NtpServer	Enabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_W32Time	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_W32Time	W32TIME_POLICY_ENABLE_NTPSERVER				0
262	797	Administrative Templates: System	Time Providers: Enable Windows NTP Server (Member)	Registry		HKLM:\Software\Policies\Microsoft\W32time\TimeProviders\NtpServer	Enabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_W32Time	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_W32Time	W32TIME_POLICY_ENABLE_NTPSERVER				0
263	609	Administrative Templates: System	Troubleshooting and Diagnostics: Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy	DisableQueryRemoteServer	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSDT	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSDT	MsdtSupportProvider				1
264	1548	Administrative Templates: System	Trusted Platform Module Services: Ignore the default list of blocked TPM commands	Registry		HKLM:\SOFTWARE\Policies\Microsoft\TPM\BlockedCommands	IgnoreDefaultList
265	1549	Administrative Templates: System	Trusted Platform Module Services: Standard User Lockout Duration	Registry		HKLM:\SOFTWARE\Policies\Microsoft\TPM	StandardUserAuthorizationFailureDuration
266	1550	Administrative Templates: System	Trusted Platform Module Services: Standard User Total Lockout Threshold	Registry		HKLM:\SOFTWARE\Policies\Microsoft\TPM	StandardUserAuthorizationFailureTotalThreshold
267	147	Administrative Templates: System	User Profiles: Turn off the advertising ID	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo	DisabledByGroupPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Privacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Privacy	DisableAdvertisingID				0
268	146	Administrative Templates: System	Windows Performance PerfTrack: Enable/Disable PerfTrack	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}	ScenarioExecutionEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_WDI	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_WDI	WdiDpsScenarioExecutionPolicy				1
269	150	Administrative Templates: Windows Components	App Package Deployment: Allow a Windows app to share application data between users	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\AppModel\StateManager	AllowSharedLocalAppData	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ApplicationManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ApplicationManagement	AllowSharedUserAppData				1
270	1895	Administrative Templates: Windows Components	App Package Deployment: Not allow per-user unsigned packages to install by default (requires explicitly allow per install)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Appx	DisablePerUserUnsignedPackagesByDefault							0
271	610	Administrative Templates: Windows Components	App Package Deployment: Prevent non-admin users from installing packaged Windows apps	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Appx	BlockNonAdminUserInstall							0
272	151	Administrative Templates: Windows Components	App Privacy: Let Windows apps activate with voice while the system is locked	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy	LetAppsActivateWithVoiceAboveLock	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Privacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Privacy	LetAppsActivateWithVoiceAboveLock				0
273	1892	Administrative Templates: Windows Components	App and Device Inventory: Turn off API Sampling	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppCompat	DisableAPISamping	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\AppDeviceInventory	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\AppDeviceInventory	TurnOffAPISamping				0
274	1893	Administrative Templates: Windows Components	App and Device Inventory: Turn off Application Footprint	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppCompat	DisableApplicationFootprint	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\AppDeviceInventory	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\AppDeviceInventory	TurnOffApplicationFootprint				0
275	1894	Administrative Templates: Windows Components	App and Device Inventory: Turn off Install Tracing	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppCompat	DisableInstallTracing	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\AppDeviceInventory	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\AppDeviceInventory	TurnOffInstallTracing				0
276	722	Administrative Templates: Windows Components	App and browser protection: Prevent users from modifying settings	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection	DisallowExploitProtectionOverride	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsDefenderSecurityCenter	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsDefenderSecurityCenter	DisallowExploitProtectionOverride
277	611	Administrative Templates: Windows Components	App runtime: Allow Microsoft accounts to be optional	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System	MSAOptional	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\AppRuntime	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\AppRuntime	AllowMicrosoftAccountsToBeOptional				0
278	152	Administrative Templates: Windows Components	App runtime: Block launching Universal Windows apps with Windows Runtime API access from hosted content	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	BlockHostedAppAccessWinRT							0
279	153	Administrative Templates: Windows Components	Application Compatibility: Turn off Application Telemetry	Registry		HKLM:\Software\Policies\Microsoft\Windows\AppCompat	AITEnable							1
280	962	Administrative Templates: Windows Components	Application Compatibility: Turn off Inventory Collector	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppCompat	DisableInventory							0
281	738	Administrative Templates: Windows Components	Attachment Manager: Do not preserve zone information in file attachments	Registry		HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments	SaveZoneInformation	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\AttachmentManager	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\AttachmentManager	DoNotPreserveZoneInformation
282	739	Administrative Templates: Windows Components	Attachment Manager: Notify antivirus programs when opening attachments	Registry		HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments	ScanWithAntiVirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\AttachmentManager	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\AttachmentManager	NotifyAntivirusPrograms
283	155	Administrative Templates: Windows Components	AutoPlay Policies: Disallow Autoplay for non-volume devices	Registry		HKLM:\Software\Policies\Microsoft\Windows\Explorer	NoAutoplayfornonVolume	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Autoplay	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Autoplay	DisallowAutoplayForNonVolumeDevices				0
284	156	Administrative Templates: Windows Components	AutoPlay Policies: Set the default behavior for AutoRun	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer	NoAutorun	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Autoplay	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Autoplay	SetDefaultAutoRunBehavior				0
285	154	Administrative Templates: Windows Components	AutoPlay Policies: Turn off Autoplay	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer	NoDriveTypeAutoRun	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Autoplay	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Autoplay	TurnOffAutoPlay				0
286	157	Administrative Templates: Windows Components	Biometrics: Allow the use of biometrics	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Biometrics	Enabled							1
287	612	Administrative Templates: Windows Components	Biometrics: Facial Features: Configure enhanced anti-spoofing	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures	EnhancedAntiSpoofing
288	1318	Administrative Templates: Windows Components	BitLocker Drive Encryption: Choose drive encryption method and cipher strength (for fixed data drives)	Registry		HKLM:\Software\Policies\Microsoft\FVE	EncryptionMethodWithXtsFdv	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	EncryptionMethodByDriveType				6
289	1317	Administrative Templates: Windows Components	BitLocker Drive Encryption: Choose drive encryption method and cipher strength (for operating system drives)	Registry		HKLM:\Software\Policies\Microsoft\FVE	EncryptionMethodWithXtsOs	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	EncryptionMethodByDriveType				6
290	1319	Administrative Templates: Windows Components	BitLocker Drive Encryption: Choose drive encryption method and cipher strength (for removable data drives)	Registry		HKLM:\Software\Policies\Microsoft\FVE	EncryptionMethodWithXtsRdv	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	EncryptionMethodByDriveType				3
291	159	Administrative Templates: Windows Components	BitLocker Drive Encryption: Disable new DMA devices when this computer is locked	Registry		HKLM:\Software\Policies\Microsoft\FVE	DisableExternalDMAUnderLock							0
292	1538	Administrative Templates: Windows Components	BitLocker Drive Encryption: Drive encryption method (for operating system drives)	BitLockerVolume	EncryptionMethod									None
293	613	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Allow access to BitLocker-protected fixed data drives from earlier versions of Windows	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVDiscoveryVolumeType
294	614	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVRecovery	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	FixedDrivesRecoveryOptions				0
295	615	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVManageDRA	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	FixedDrivesRecoveryOptions				1
296	620	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVActiveDirectoryInfoToStore	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	FixedDrivesRecoveryOptions
297	621	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVRequireActiveDirectoryBackup	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	FixedDrivesRecoveryOptions
298	618	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVHideRecoveryPage	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	FixedDrivesRecoveryOptions
299	617	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Recovery Key	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVRecoveryKey	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	FixedDrivesRecoveryOptions
300	616	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Recovery Password	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVRecoveryPassword	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	FixedDrivesRecoveryOptions
301	619	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVActiveDirectoryBackup	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	FixedDrivesRecoveryOptions
302	622	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Configure use of hardware-based encryption for fixed data drives	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVHardwareEncryption
303	625	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Configure use of hardware-based encryption for fixed data drives: Restrict crypto algorithms or cipher suites	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVAllowedHardwareEncryptionAlgorithms
304	624	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Configure use of hardware-based encryption for fixed data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVRestrictHardwareEncryptionAlgorithms							0
305	623	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Configure use of hardware-based encryption for fixed data drives: Use BitLocker software-based encryption when hardware encryption is not available	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVAllowSoftwareEncryptionFailover							1
306	626	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Configure use of passwords for fixed data drives	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVPassphrase							0
307	627	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Configure use of smart cards on fixed data drives	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVAllowUserCert
308	628	Administrative Templates: Windows Components	BitLocker Drive Encryption: Fixed Data Drives: Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives	Registry		HKLM:\SOFTWARE\Policies\Microsoft\FVE	FDVEnforceUserCert							0
309	160	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Allow Secure Boot for integrity validation	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSAllowSecureBootForIntegrity							0
310	162	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Allow enhanced PINs for startup	Registry		HKLM:\Software\Policies\Microsoft\FVE	UseEnhancedPin	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	EnhancedPIN_Name				0
311	629	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Choose how BitLocker-protected operating system drives can be recovered	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSRecovery	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRecoveryOptions				0
312	630	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Choose how BitLocker-protected operating system drives can be recovered: Allow data recovery agent	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSManageDRA	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRecoveryOptions				1
313	635	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSActiveDirectoryInfoToStore	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRecoveryOptions				0
314	636	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Choose how BitLocker-protected operating system drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for operating system drives	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSRequireActiveDirectoryBackup	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRecoveryOptions				0
315	633	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Choose how BitLocker-protected operating system drives can be recovered: Omit recovery options from the BitLocker setup wizard	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSHideRecoveryPage	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRecoveryOptions				0
316	632	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Choose how BitLocker-protected operating system drives can be recovered: Recovery Key	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSRecoveryKey	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRecoveryOptions				1
317	631	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Choose how BitLocker-protected operating system drives can be recovered: Recovery Password	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSRecoveryPassword	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRecoveryOptions
318	634	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSActiveDirectoryBackup	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRecoveryOptions				0
319	1330	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Configure minimum PIN length for startup	Registry		HKLM:\Software\Policies\Microsoft\FVE	MinimumPIN	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesMinimumPINLength
320	163	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Configure use of hardware-based encryption for operating system drives	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSHardwareEncryption							0
321	638	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Configure use of hardware-based encryption for operating system drives: Restrict crypto algorithms or cipher suites	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSAllowedHardwareEncryptionAlgorithms
322	637	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Configure use of hardware-based encryption for operating system drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSRestrictHardwareEncryptionAlgorithms							0
323	639	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Configure use of passwords for operating system drives	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSPassphrase
324	161	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup	Registry		HKLM:\Software\Policies\Microsoft\FVE	UseAdvancedStartup	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRequireStartupAuthentication				0
325	165	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup: Allow BitLocker without a compatible TPM	Registry		HKLM:\Software\Policies\Microsoft\FVE	EnableBDEWithNoTPM	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRequireStartupAuthentication				1
326	166	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup: Configure TPM startup	Registry		HKLM:\Software\Policies\Microsoft\FVE	UseTPM	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRequireStartupAuthentication				0
327	167	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup: Configure TPM startup PIN	Registry		HKLM:\Software\Policies\Microsoft\FVE	UseTPMPIN	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRequireStartupAuthentication				0
328	168	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup: Configure TPM startup key	Registry		HKLM:\Software\Policies\Microsoft\FVE	UseTPMKey	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRequireStartupAuthentication				0
329	169	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup: Configure TPM startup key and PIN	Registry		HKLM:\Software\Policies\Microsoft\FVE	UseTPMKeyPIN	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	SystemDrivesRequireStartupAuthentication				0
330	164	Administrative Templates: Windows Components	BitLocker Drive Encryption: Operating System Drives: Use BitLocker software-based encryption when hardware encryption is not available	Registry		HKLM:\Software\Policies\Microsoft\FVE	OSAllowSoftwareEncryptionFailover							0
331	640	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Allow access to BitLocker-protected removable data drives from earlier versions of Windows	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVDiscoveryVolumeType
332	641	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Choose how BitLocker-protected removable drives can be recovered	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVRecovery							0
333	642	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVManageDRA
334	648	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Choose how BitLocker-protected removable drives can be recovered: Choose how BitLocker-protected removable drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for removable data drives	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVRequireActiveDirectoryBackup
335	647	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVActiveDirectoryInfoToStore
336	645	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Choose how BitLocker-protected removable drives can be recovered: Omit recovery options from the BitLocker setup wizard	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVHideRecoveryPage
337	644	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Choose how BitLocker-protected removable drives can be recovered: Recovery Key	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVRecoveryKey
338	643	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Choose how BitLocker-protected removable drives can be recovered: Recovery Password	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVRecoveryPassword
339	646	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVActiveDirectoryBackup
340	649	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Configure use of hardware-based encryption for removable data drives	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVHardwareEncryption
341	652	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Configure use of hardware-based encryption for removable data drives: Restrict crypto algorithms or cipher suites	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVAllowedHardwareEncryptionAlgorithms
342	651	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Configure use of hardware-based encryption for removable data drives: Restrict encryption algorithms and cipher suites allowed for hardware-based encryption	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVRestrictHardwareEncryptionAlgorithms
343	650	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Configure use of hardware-based encryption for removable data drives: Use BitLocker software-based encryption when hardware encryption is not available	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVAllowSoftwareEncryptionFailover
344	653	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Configure use of passwords for removable data drives	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVPassphrase
345	654	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Configure use of smart cards on removable data drives	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVAllowUserCert
346	655	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Configure use of smart cards on removable data drives: Require use of smart cards on removable data drives	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVEnforceUserCert
347	656	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Deny write access to removable drives not protected by BitLocker	Registry		HKLM:\System\CurrentControlSet\Policies\Microsoft\FVE	RDVDenyWriteAccess	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	RDVDenyWriteAccess_Name
348	657	Administrative Templates: Windows Components	BitLocker Drive Encryption: Removable Data Drives: Do not allow write access to devices configured in another organization	Registry		HKLM:\Software\Policies\Microsoft\FVE	RDVDenyCrossOrg	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\BitLocker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\BitLocker	RemovableDrivesRequireEncryption
349	158	Administrative Templates: Windows Components	BitLocker Drive Encryption: Volume status	BitLockerVolume	VolumeStatus									FullyDecrypted
350	658	Administrative Templates: Windows Components	Camera: Allow Use of Camera	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Camera	AllowCamera	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Camera	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Camera	AllowCamera				1
351	740	Administrative Templates: Windows Components	Cloud Content: Configure Windows spotlight on lock screen	Registry		HKCU:\Software\Policies\Microsoft\Windows\CloudContent	ConfigureWindowsSpotlight	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\Experience	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\Experience	ConfigureWindowsSpotlightOnLockScreen
352	170	Administrative Templates: Windows Components	Cloud Content: Do not show Windows tips	Registry		HKLM:\Software\Policies\Microsoft\Windows\CloudContent	DisableSoftLanding							0
353	302	Administrative Templates: Windows Components	Cloud Content: Do not suggest third-party content in Windows spotlight	Registry		HKCU:\Software\Policies\Microsoft\Windows\CloudContent	DisableThirdPartySuggestions	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\Experience	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\Experience	AllowThirdPartySuggestionsInWindowsSpotlight				0
354	301	Administrative Templates: Windows Components	Cloud Content: Do not use diagnostic data for tailored experiences	Registry		HKCU:\Software\Policies\Microsoft\Windows\CloudContent	DisableTailoredExperiencesWithDiagnosticData	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\Experience	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\Experience	AllowTailoredExperiencesWithDiagnosticData				0
355	171	Administrative Templates: Windows Components	Cloud Content: Turn off Microsoft consumer experiences	Registry		HKLM:\Software\Policies\Microsoft\Windows\CloudContent	DisableWindowsConsumerFeatures	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Experience	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Experience	AllowWindowsConsumerFeatures				0
356	1663	Administrative Templates: Windows Components	Cloud Content: Turn off Spotlight collection on Desktop	Registry		HKCU:\Software\Policies\Microsoft\Windows\CloudContent	DisableSpotlightCollectionOnDesktop	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\Experience	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\Experience	AllowSpotlightCollection
357	741	Administrative Templates: Windows Components	Cloud Content: Turn off all Windows spotlight features	Registry		HKCU:\Software\Policies\Microsoft\Windows\CloudContent	DisableWindowsSpotlightFeatures	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\Experience	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\Experience	AllowWindowsSpotlight				0
358	1670	Administrative Templates: Windows Components	Cloud Content: Turn off cloud consumer account state content	Registry		HKLM:\Software\Policies\Microsoft\Windows\CloudContent	DisableConsumerAccountStateContent	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Experience	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Experience	DisableConsumerAccountStateContent
359	1313	Administrative Templates: Windows Components	Cloud Content: Turn off cloud optimized content	Registry		HKLM:\Software\Policies\Microsoft\Windows\CloudContent	DisableCloudOptimizedContent	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Experience	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Experience	DisableCloudOptimizedContent				0
360	659	Administrative Templates: Windows Components	Connect: Require pin for pairing	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Connect	RequirePinForPairing	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WirelessDisplay	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WirelessDisplay	RequirePinForPairing				0
361	172	Administrative Templates: Windows Components	Credential User Interface: Do not display the password reveal button	Registry		HKLM:\Software\Policies\Microsoft\Windows\CredUI	DisablePasswordReveal	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\CredentialsUI	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\CredentialsUI	DisablePasswordReveal				0
362	174	Administrative Templates: Windows Components	Credential User Interface: Enumerate administrator accounts on elevation	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI	EnumerateAdministrators	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\CredentialsUI	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\CredentialsUI	EnumerateAdministrators				1
363	660	Administrative Templates: Windows Components	Credential User Interface: Prevent the use of security questions for local accounts	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	NoLocalPasswordResetQuestions							0
364	173	Administrative Templates: Windows Components	Credential User Interface: Require trusted path for credential entry	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI	EnableSecureCredentialPrompting							0
365	175	Administrative Templates: Windows Components	Data Collection and Preview Builds: Allow Diagnostic Data	Registry		HKLM:\Software\Policies\Microsoft\Windows\DataCollection	AllowTelemetry	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	AllowTelemetry				2
366	176	Administrative Templates: Windows Components	Data Collection and Preview Builds: Allow device name to be sent in Windows diagnostic data	Registry		HKLM:\Software\Policies\Microsoft\Windows\DataCollection	AllowDeviceNameInTelemetry							1
367	661	Administrative Templates: Windows Components	Data Collection and Preview Builds: Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service	Registry		HKLM:\Software\Policies\Microsoft\Windows\DataCollection	DisableEnterpriseAuthProxy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	DisableEnterpriseAuthProxy				0
368	1671	Administrative Templates: Windows Components	Data Collection and Preview Builds: Disable OneSettings Downloads	Registry		HKLM:\Software\Policies\Microsoft\Windows\DataCollection	DisableOneSettingsDownloads	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	DisableOneSettingsDownloads
369	662	Administrative Templates: Windows Components	Data Collection and Preview Builds: Do not show feedback notifications	Registry		HKLM:\Software\Policies\Microsoft\Windows\DataCollection	DoNotShowFeedbackNotifications	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Experience	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Experience	DoNotShowFeedbackNotifications				0
370	1672	Administrative Templates: Windows Components	Data Collection and Preview Builds: Enable OneSettings Auditing	Registry		HKLM:\Software\Policies\Microsoft\Windows\DataCollection	EnableOneSettingsAuditing	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	EnableOneSettingsAuditing
371	1673	Administrative Templates: Windows Components	Data Collection and Preview Builds: Limit Diagnostic Log Collection	Registry		HKLM:\Software\Policies\Microsoft\Windows\DataCollection	LimitDiagnosticLogCollection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	LimitDiagnosticLogCollection
372	1674	Administrative Templates: Windows Components	Data Collection and Preview Builds: Limit Dump Collection	Registry		HKLM:\Software\Policies\Microsoft\Windows\DataCollection	LimitDumpCollection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	LimitDumpCollection
373	964	Administrative Templates: Windows Components	Data Collection and Preview Builds: Limit Enhanced diagnostic data to the minimum required by Windows Analytics	Registry		HKLM:\Software\Policies\Microsoft\Windows\DataCollection	LimitEnhancedDiagnosticDataWindowsAnalytics	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	LimitEnhancedDiagnosticDataWindowsAnalytics
374	663	Administrative Templates: Windows Components	Data Collection and Preview Builds: Toggle user control over Insider builds	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds	AllowBuildPreview	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	AllowBuildPreview				1
375	177	Administrative Templates: Windows Components	Delivery Optimization: Download Mode	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization	DODownloadMode	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DeliveryOptimization	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DeliveryOptimization	DODownloadMode				1
376	1766	Administrative Templates: Windows Components	Desktop App Installer: Enable App Installer	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppInstaller	EnableAppInstaller	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DesktopAppInstaller	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DesktopAppInstaller	EnableAppInstaller
377	1767	Administrative Templates: Windows Components	Desktop App Installer: Enable App Installer Experimental Features	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppInstaller	EnableExperimentalFeatures	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DesktopAppInstaller	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DesktopAppInstaller	EnableExperimentalFeatures
378	1768	Administrative Templates: Windows Components	Desktop App Installer: Enable App Installer Hash Override	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppInstaller	EnableHashOverride	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DesktopAppInstaller	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DesktopAppInstaller	EnableHashOverride
379	1896	Administrative Templates: Windows Components	Desktop App Installer: Enable App Installer Local Archive Malware Scan Override	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppInstaller	EnableLocalArchiveMalwareScanOverride	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DesktopAppInstaller	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DesktopAppInstaller	EnableLocalArchiveMalwareScanOverride
380	1897	Administrative Templates: Windows Components	Desktop App Installer: Enable App Installer Microsoft Store Source Certificate Validation Bypass	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppInstaller	EnableBypassCertificatePinningForMicrosoftStore	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DesktopAppInstaller	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DesktopAppInstaller	EnableBypassCertificatePinningForMicrosoftStore
381	1769	Administrative Templates: Windows Components	Desktop App Installer: Enable App Installer ms-appinstaller protocol	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppInstaller	EnableMSAppInstallerProtocol	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DesktopAppInstaller	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DesktopAppInstaller	EnableMSAppInstallerProtocol
382	1898	Administrative Templates: Windows Components	Desktop App Installer: Enable Windows Package Manager command line interfaces	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppInstaller	EnableWindowsPackageManagerCommandLineInterfaces	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\DesktopAppInstaller	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\DesktopAppInstaller	EnableWindowsPackageManagerCommandLineInterfaces				1
383	1626	Administrative Templates: Windows Components	EMET: Default Action and Mitigation Settings (AntiDetours)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\EMET\SysSettings	AntiDetours
384	1627	Administrative Templates: Windows Components	EMET: Default Action and Mitigation Settings (BannedFunctions)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\EMET\SysSettings	BannedFunctions
385	1628	Administrative Templates: Windows Components	EMET: Default Action and Mitigation Settings (DeepHooks)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\EMET\SysSettings	DeepHooks
386	1629	Administrative Templates: Windows Components	EMET: Default Action and Mitigation Settings (ExploitAction)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\EMET\SysSettings	ExploitAction
387	1630	Administrative Templates: Windows Components	EMET: Default Protections for Internet Explorer	Registry		HKLM:\SOFTWARE\Policies\Microsoft\EMET\Defaults	IE
388	1631	Administrative Templates: Windows Components	EMET: Default Protections for Popular Software (Popular Software)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\EMET\Defaults	*
389	1632	Administrative Templates: Windows Components	EMET: Default Protections for Popular Software (Recommended Software)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\EMET\Defaults	*
390	1633	Administrative Templates: Windows Components	EMET: System ASLR	Registry		HKLM:\SOFTWARE\Policies\Microsoft\EMET\SysSettings	ASLR
391	1634	Administrative Templates: Windows Components	EMET: System DEP	Registry		HKLM:\SOFTWARE\Policies\Microsoft\EMET\SysSettings	DEP
392	1635	Administrative Templates: Windows Components	EMET: System SEHOP	Registry		HKLM:\SOFTWARE\Policies\Microsoft\EMET\SysSettings	SEHOP
393	664	Administrative Templates: Windows Components	Event Log Service: Application: Control Event Log behavior when the log file reaches its maximum size	Registry		HKLM:\Software\Policies\Microsoft\Windows\EventLog\Application	Retention	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\EventLogService	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\EventLogService	ControlEventLogBehavior				0
394	178	Administrative Templates: Windows Components	Event Log Service: Application: Specify the maximum log file size (KB)	Registry	Channel_LogMaxSize	HKLM:\Software\Policies\Microsoft\Windows\EventLog\Application	MaxSize	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\EventLogService	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\EventLogService	SpecifyMaximumFileSizeApplicationLog				4096
395	1738	Administrative Templates: Windows Components	Event Log Service: Microsoft-Windows-PowerShell/Operational: Specify the maximum log file size (KB)	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-PowerShell/Operational	MaxSize							15728640
396	1747	Administrative Templates: Windows Components	Event Log Service: PowerShellCore/Operational: Specify the maximum log file size (KB)	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\PowerShellCore/Operational	MaxSize							15728640
397	665	Administrative Templates: Windows Components	Event Log Service: Security: Control Event Log behavior when the log file reaches its maximum size	Registry		HKLM:\Software\Policies\Microsoft\Windows\EventLog\Security	Retention	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_EventLog	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_EventLog	Channel_Log_Retention_2				0
398	179	Administrative Templates: Windows Components	Event Log Service: Security: Specify the maximum log file size (KB)	Registry	Channel_LogMaxSize	HKLM:\Software\Policies\Microsoft\Windows\EventLog\Security	MaxSize	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\EventLogService	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\EventLogService	SpecifyMaximumFileSizeSecurityLog				4096
399	666	Administrative Templates: Windows Components	Event Log Service: Setup: Control Event Log behavior when the log file reaches its maximum size	Registry		HKLM:\Software\Policies\Microsoft\Windows\EventLog\Setup	Retention	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_EventLog	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_EventLog	Channel_Log_Retention_3				0
400	668	Administrative Templates: Windows Components	Event Log Service: Setup: Specify the maximum log file size (KB)	Registry	Channel_LogMaxSize	HKLM:\Software\Policies\Microsoft\Windows\EventLog\Setup	MaxSize	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_EventLog	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_EventLog	Channel_LogMaxSize_3				4096
401	667	Administrative Templates: Windows Components	Event Log Service: System: Control Event Log behavior when the log file reaches its maximum size	Registry		HKLM:\Software\Policies\Microsoft\Windows\EventLog\System	Retention	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_EventLog	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_EventLog	Channel_Log_Retention_4				0
402	180	Administrative Templates: Windows Components	Event Log Service: System: Specify the maximum log file size (KB)	Registry	Channel_LogMaxSize	HKLM:\Software\Policies\Microsoft\Windows\EventLog\System	MaxSize	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\EventLogService	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\EventLogService	SpecifyMaximumFileSizeSystemLog				4096
403	181	Administrative Templates: Windows Components	File Explorer: Allow the use of remote paths in file shortcut icons	Registry		HKLM:\Software\Policies\Microsoft\Windows\Explorer	EnableShellShortcutIconRemotePath	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_WindowsExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_WindowsExplorer	EnableShellShortcutIconRemotePath				0
404	263	Administrative Templates: Windows Components	File Explorer: Configure Windows Defender SmartScreen	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	EnableSmartScreen	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SmartScreen	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SmartScreen	EnableSmartScreenInShell				1
405	264	Administrative Templates: Windows Components	File Explorer: Configure Windows Defender SmartScreen to warn and prevent bypass	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	ShellSmartScreenLevel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	PreventSmartScreenPromptOverride				Warn
406	1856	Administrative Templates: Windows Components	File Explorer: Do not apply the Mark of the Web tag to files copied from insecure sources	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer	DisableMotWOnInsecurePathCopy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_WindowsExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_WindowsExplorer	DisableMotWOnInsecurePathCopy				0
407	1535	Administrative Templates: Windows Components	File Explorer: Explorer Frame Pane: Turn off Preview Pane	Registry		HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer	NoReadingPane
408	1536	Administrative Templates: Windows Components	File Explorer: Explorer Frame Pane: Turn on or off details pane	Registry		HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer	NoPreviewPane
409	669	Administrative Templates: Windows Components	File Explorer: Turn off Data Execution Prevention for Explorer	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer	NoDataExecutionPrevention	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\FileExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\FileExplorer	TurnOffDataExecutionPreventionForExplorer				0
410	1774	Administrative Templates: Windows Components	File Explorer: Turn off account-based insights, recent, favorite, and recommended files in File Explorer	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer	DisableGraphRecentItems	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\FileExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\FileExplorer	DisableGraphRecentItems
411	670	Administrative Templates: Windows Components	File Explorer: Turn off heap termination on corruption	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer	NoHeapTerminationOnCorruption	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\FileExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\FileExplorer	TurnOffHeapTerminationOnCorruption				0
412	671	Administrative Templates: Windows Components	File Explorer: Turn off shell protocol protected mode	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer	PreXPSP2ShellProtocolBehavior	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_WindowsExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_WindowsExplorer	PreXPSP2ShellProtocolBehavior				0
413	182	Administrative Templates: Windows Components	HomeGroup: Prevent the computer from joining a homegroup	Registry		HKLM:\Software\Policies\Microsoft\Windows\HomeGroup	DisableHomeGroup	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_Sharing	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_Sharing	DisableHomeGroup				0
414	1913	Administrative Templates: Windows Components	Internet Explorer: Disable Internet Explorer 11 Launch Via COM Automation	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main	DisableInternetExplorerLaunchViaCOM
415	1770	Administrative Templates: Windows Components	Internet Explorer: Disable Internet Explorer 11 as a standalone browser	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main	NotifyDisableIEOptions
416	835	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Advanced Page: Allow software to run or install even if the signature is invalid	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Download	RunInvalidSignatures	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Advanced_InvalidSignatureBlock
417	836	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Advanced Page: Check for server certificate revocation	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings	CertificateRevocation	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Advanced_CertificateRevocation
418	837	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Advanced Page: Check for signatures on downloaded programs	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Download	CheckExeSignatures	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Advanced_DownloadSignatures
419	838	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Advanced Page: Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main	DisableEPMCompat	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Advanced_DisableEPMCompat
420	839	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Advanced Page: Turn off encryption support	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings	SecureProtocols	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Advanced_SetWinInetProtocols
421	840	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Advanced Page: Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main	Isolation64Bit	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Advanced_EnableEnhancedProtectedMode64Bit
422	841	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Advanced Page: Turn on Enhanced Protected Mode	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main	Isolation	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Advanced_EnableEnhancedProtectedMode
423	834	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Prevent ignoring certificate errors	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings	PreventIgnoreCertErrors	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	NoCertError
424	844	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Access data sources across domains	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1406	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAccessDataSourcesAcrossDomains_1
425	854	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Allow VBScript to run in Internet Explorer	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	140C	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAllowVBScript_1
426	845	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Allow cut, copy or paste operations from the clipboard via script	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1407	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAllowPasteViaScript_1
427	846	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Allow drag and drop or copy and paste files	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1802	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyDropOrPasteFiles_1
428	847	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Allow loading of XAML files	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	2402	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_XAML_1
429	848	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Allow only approved domains to use ActiveX controls without prompt	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	120b	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyOnlyAllowApprovedDomainsToUseActiveXWithoutPrompt_Both_Internet
430	849	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Allow only approved domains to use the TDC ActiveX control	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	120c	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAllowTDCControl_Both_Internet
431	851	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Allow script-initiated windows without size or position constraints	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	2102	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyWindowsRestrictionsURLaction_1
432	850	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Allow scripting of Internet Explorer WebBrowser controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1206	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_WebBrowserControl_1
433	852	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Allow scriptlets	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1209	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_AllowScriptlets_1
434	853	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Allow updates to status bar via script	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	2103	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_ScriptStatusBar_1
435	855	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Automatic prompting for file downloads	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	2200	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyNotificationBarDownloadURLaction_1
436	856	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Don't run antimalware programs against ActiveX controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	270C	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAntiMalwareCheckingOfActiveXControls_1
437	857	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Download signed ActiveX controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1001	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyDownloadSignedActiveX_1
438	858	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Download unsigned ActiveX controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1004	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyDownloadUnsignedActiveX_1
439	859	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Enable dragging of content from different domains across windows	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	2709	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyDragDropAcrossDomainsAcrossWindows_Both_Internet
440	860	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Enable dragging of content from different domains within a window	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	2708	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyDragDropAcrossDomainsWithinWindow_Both_Internet
441	861	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Include local path when user is uploading files to a server	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	160A	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_LocalPathForUpload_1
442	862	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Initialize and script ActiveX controls not marked as safe	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1201	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyScriptActiveXNotMarkedSafe_1
443	863	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Java permissions	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1C00	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyJavaPermissions_1
444	864	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Launching applications and files in an IFRAME	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1804	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyLaunchAppsAndFilesInIFRAME_1
445	865	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Logon options	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1A00	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyLogon_1
446	866	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Navigate windows and frames across different domains	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1607	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyNavigateSubframesAcrossDomains_1
447	867	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Run .NET Framework-reliant components not signed with Authenticode	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	2004	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyUnsignedFrameworkComponentsURLaction_1
448	868	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Run .NET Framework-reliant components signed with Authenticode	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	2001	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicySignedFrameworkComponentsURLaction_1
449	869	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Show security warning for potentially unsafe files	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1806	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_UnsafeFiles_1
450	870	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Turn on Cross-Site Scripting Filter	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1409	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyTurnOnXSSFilter_Both_Internet
451	871	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Turn on Protected Mode	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	2500	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_TurnOnProtectedMode_1
452	872	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Turn on SmartScreen Filter scan	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	2301	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_Phishing_1
453	873	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Use Pop-up Blocker	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1809	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyBlockPopupWindows_1
454	874	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Userdata persistence	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	1606	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyUserdataPersistence_1
455	875	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Internet Zone: Web sites in less privileged Web content zones can navigate into this zone	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3	2101	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyZoneElevationURLaction_1
456	842	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Intranet Sites: Include all network paths (UNCs)	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap	UNCAsIntranet	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_UNCAsIntranet
457	876	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Intranet Zone: Don't run antimalware programs against ActiveX controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1	270C	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAntiMalwareCheckingOfActiveXControls_3
458	877	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Intranet Zone: Initialize and script ActiveX controls not marked as safe	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1	1201	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyScriptActiveXNotMarkedSafe_3
459	878	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Intranet Zone: Java permissions	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1	1C00	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyJavaPermissions_3
460	879	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Local Machine Zone: Don't run antimalware programs against ActiveX controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0	270C	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAntiMalwareCheckingOfActiveXControls_9
461	880	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Local Machine Zone: Java permissions	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0	1C00	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyJavaPermissions_9
462	881	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Locked-Down Internet Zone: Turn on SmartScreen Filter scan	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3	2301	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_Phishing_2
463	882	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Locked-Down Intranet Zone: Java permissions	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1	1C00	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyJavaPermissions_2
464	883	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Locked-Down Local Machine Zone: Java permissions	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0	1C00	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyJavaPermissions_10
465	884	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Locked-Down Restricted Sites Zone: Java permissions	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4	1C00	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyJavaPermissions_8
466	885	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Locked-Down Restricted Sites Zone: Turn on SmartScreen Filter scan	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4	2301	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_Phishing_7
467	886	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Locked-Down Trusted Sites Zone: Java permissions	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2	1C00	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyJavaPermissions_6
468	887	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Access data sources across domains	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1406	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAccessDataSourcesAcrossDomains_7
469	894	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow META REFRESH	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1608	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAllowMETAREFRESH_7
470	901	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow VBScript to run in Internet Explorer	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	140C	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAllowVBScript_7
471	888	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow active scripting	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1400	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyActiveScripting_7
472	889	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow binary and script behaviors	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2000	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyBinaryBehaviors_7
473	890	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow cut, copy or paste operations from the clipboard via script	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1407	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAllowPasteViaScript_7
474	891	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow drag and drop or copy and paste files	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1802	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyDropOrPasteFiles_7
475	892	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow file downloads	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1803	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyFileDownload_7
476	893	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow loading of XAML files	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2402	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_XAML_7
477	895	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow only approved domains to use ActiveX controls without prompt	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	120b	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyOnlyAllowApprovedDomainsToUseActiveXWithoutPrompt_Both_Restricted
478	896	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow only approved domains to use the TDC ActiveX control	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	120c	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAllowTDCControl_Both_Restricted
479	898	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow script-initiated windows without size or position constraints	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2102	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyWindowsRestrictionsURLaction_7
480	897	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow scripting of Internet Explorer WebBrowser controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1206	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_WebBrowserControl_7
481	899	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow scriptlets	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1209	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_AllowScriptlets_7
482	900	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Allow updates to status bar via script	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2103	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_ScriptStatusBar_7
483	902	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Automatic prompting for file downloads	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2200	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyNotificationBarDownloadURLaction_7
484	903	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Don't run antimalware programs against ActiveX controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	270C	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAntiMalwareCheckingOfActiveXControls_7
485	904	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Download signed ActiveX controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1001	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyDownloadSignedActiveX_7
486	905	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Download unsigned ActiveX controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1004	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyDownloadUnsignedActiveX_7
487	906	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Enable dragging of content from different domains across windows	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2709	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyDragDropAcrossDomainsAcrossWindows_Both_Restricted
488	907	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Enable dragging of content from different domains within a window	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2708	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyDragDropAcrossDomainsWithinWindow_Both_Restricted
489	908	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Include local path when user is uploading files to a server	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	160A	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_LocalPathForUpload_7
490	909	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Initialize and script ActiveX controls not marked as safe	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1201	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyScriptActiveXNotMarkedSafe_7
491	910	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Java permissions	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1C00	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyJavaPermissions_7
492	911	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Launching applications and files in an IFRAME	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1804	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyLaunchAppsAndFilesInIFRAME_7
493	912	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Logon options	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1A00	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyLogon_7
494	913	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Navigate windows and frames across different domains	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1607	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyNavigateSubframesAcrossDomains_7
495	914	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Run .NET Framework-reliant components not signed with Authenticode	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2004	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyUnsignedFrameworkComponentsURLaction_7
496	915	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Run .NET Framework-reliant components signed with Authenticode	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2001	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicySignedFrameworkComponentsURLaction_7
497	916	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Run ActiveX controls and plugins	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1200	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyRunActiveXControls_7
498	917	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Script ActiveX controls marked safe for scripting	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1405	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyScriptActiveXMarkedSafe_7
499	918	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Scripting of Java applets	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1402	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyScriptingOfJavaApplets_7
500	919	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Show security warning for potentially unsafe files	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1806	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_UnsafeFiles_7
501	920	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Turn on Cross-Site Scripting Filter	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1409	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyTurnOnXSSFilter_Both_Restricted
502	921	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Turn on Protected Mode	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2500	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_TurnOnProtectedMode_7
503	922	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Turn on SmartScreen Filter scan	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2301	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_Policy_Phishing_7
504	923	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Use Pop-up Blocker	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1809	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyBlockPopupWindows_7
505	924	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Userdata persistence	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	1606	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyUserdataPersistence_7
506	925	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Restricted Sites Zone: Web sites in less privileged Web content zones can navigate into this zone	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4	2101	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyZoneElevationURLaction_7
507	926	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Trusted Sites Zone: Don't run antimalware programs against ActiveX controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2	270C	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyAntiMalwareCheckingOfActiveXControls_5
508	927	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Trusted Sites Zone: Initialize and script ActiveX controls not marked as safe	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2	1201	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyScriptActiveXNotMarkedSafe_5
509	928	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Trusted Sites Zone: Java permissions	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2	1C00	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyJavaPermissions_5
510	843	Administrative Templates: Windows Components	Internet Explorer: Internet Control Panel: Security Page: Turn on certificate address mismatch warning	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings	WarnOnBadCertRecving	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IZ_PolicyWarnCertMismatch
511	824	Administrative Templates: Windows Components	Internet Explorer: Prevent bypassing SmartScreen Filter warnings	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\PhishingFilter	PreventOverride	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	DisableSafetyFilterOverride
512	825	Administrative Templates: Windows Components	Internet Explorer: Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\PhishingFilter	PreventOverrideAppRepUnknown	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	DisableSafetyFilterOverrideForAppRepUnknown
513	826	Administrative Templates: Windows Components	Internet Explorer: Prevent managing SmartScreen Filter	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\PhishingFilter	EnabledV9	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Disable_Managing_Safety_Filter_IE9
514	827	Administrative Templates: Windows Components	Internet Explorer: Prevent per-user installation of ActiveX controls	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX	BlockNonAdminActiveXInstall	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	DisablePerUserActiveXInstall
515	930	Administrative Templates: Windows Components	Internet Explorer: Security Features: Add-on Management: Remove 'Run this time' button for outdated ActiveX controls in Internet Explorer	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\Ext	RunThisTimeEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	VerMgmtDisableRunThisTime
516	931	Administrative Templates: Windows Components	Internet Explorer: Security Features: Add-on Management: Turn off blocking of outdated ActiveX controls for Internet Explorer	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\Ext	VersionCheckEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	VerMgmtDisable
517	929	Administrative Templates: Windows Components	Internet Explorer: Security Features: Allow fallback to SSL 3.0 (Internet Explorer)	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings	EnableSSL3Fallback	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Advanced_EnableSSL3Fallback
518	934	Administrative Templates: Windows Components	Internet Explorer: Security Features: Consistent Mime Handling: Internet Explorer Processes (Reserved)	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING	(Reserved)	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_5
519	933	Administrative Templates: Windows Components	Internet Explorer: Security Features: Consistent Mime Handling: Internet Explorer Processes explorer.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING	explorer.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_5
520	932	Administrative Templates: Windows Components	Internet Explorer: Security Features: Consistent Mime Handling: Internet Explorer Processes iexplore.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING	iexplore.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_5
521	940	Administrative Templates: Windows Components	Internet Explorer: Security Features: MK Protocol Security Restriction: Internet Explorer Processes (Reserved)	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL	(Reserved)	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_3
522	939	Administrative Templates: Windows Components	Internet Explorer: Security Features: MK Protocol Security Restriction: Internet Explorer Processes explorer.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL	explorer.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_3
523	938	Administrative Templates: Windows Components	Internet Explorer: Security Features: MK Protocol Security Restriction: Internet Explorer Processes iexplore.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL	iexplore.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_3
524	937	Administrative Templates: Windows Components	Internet Explorer: Security Features: Mime Sniffing Safety Feature: Internet Explorer Processes (Reserved)	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING	(Reserved)	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_6
525	936	Administrative Templates: Windows Components	Internet Explorer: Security Features: Mime Sniffing Safety Feature: Internet Explorer Processes explore.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING	explorer.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_6
526	935	Administrative Templates: Windows Components	Internet Explorer: Security Features: Mime Sniffing Safety Feature: Internet Explorer Processes iexplore.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING	iexplore.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_6
527	943	Administrative Templates: Windows Components	Internet Explorer: Security Features: Notification bar: Internet Explorer Processes (Reserved)	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND	(Reserved)	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_10
528	942	Administrative Templates: Windows Components	Internet Explorer: Security Features: Notification bar: Internet Explorer Processes explorer.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND	explorer.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_10
529	941	Administrative Templates: Windows Components	Internet Explorer: Security Features: Notification bar: Internet Explorer Processes iexplore.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND	iexplore.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_10
530	946	Administrative Templates: Windows Components	Internet Explorer: Security Features: Protection From Zone Elevation: Internet Explorer Processes (Reserved)	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION	(Reserved)	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_9
531	945	Administrative Templates: Windows Components	Internet Explorer: Security Features: Protection From Zone Elevation: Internet Explorer Processes explorer.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION	explorer.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_9
532	944	Administrative Templates: Windows Components	Internet Explorer: Security Features: Protection From Zone Elevation: Internet Explorer Processes iexplore.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION	iexplore.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_9
533	949	Administrative Templates: Windows Components	Internet Explorer: Security Features: Restrict ActiveX Install: Internet Explorer Processes (Reserved)	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL	(Reserved)	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_11
534	948	Administrative Templates: Windows Components	Internet Explorer: Security Features: Restrict ActiveX Install: Internet Explorer Processes explorer.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL	explorer.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_11
535	947	Administrative Templates: Windows Components	Internet Explorer: Security Features: Restrict ActiveX Install: Internet Explorer Processes iexplore.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL	iexplore.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_11
536	952	Administrative Templates: Windows Components	Internet Explorer: Security Features: Restrict File Download: Internet Explorer Processes (Reserved)	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD	(Reserved)	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_12
537	951	Administrative Templates: Windows Components	Internet Explorer: Security Features: Restrict File Download: Internet Explorer Processes explorer.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD	explorer.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_12
538	950	Administrative Templates: Windows Components	Internet Explorer: Security Features: Restrict File Download: Internet Explorer Processes iexplore.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD	iexplore.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_12
539	955	Administrative Templates: Windows Components	Internet Explorer: Security Features: Scripted Window Security Restrictions: Internet Explorer Processes (Reserved)	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS	(Reserved)	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_8
540	954	Administrative Templates: Windows Components	Internet Explorer: Security Features: Scripted Window Security Restrictions: Internet Explorer Processes explorer.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS	explorer.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_8
541	953	Administrative Templates: Windows Components	Internet Explorer: Security Features: Scripted Window Security Restrictions: Internet Explorer Processes iexplore.exe	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS	iexplore.exe	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	IESF_PolicyExplorerProcesses_8
542	828	Administrative Templates: Windows Components	Internet Explorer: Security Zones: Do not allow users to add/delete sites	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings	Security_zones_map_edit	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Security_zones_map_edit
543	829	Administrative Templates: Windows Components	Internet Explorer: Security Zones: Do not allow users to change policies	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings	Security_options_edit	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Security_options_edit
544	830	Administrative Templates: Windows Components	Internet Explorer: Security Zones: Use only machine settings	Registry		HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings	Security_HKLM_only	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Security_HKLM_only
545	831	Administrative Templates: Windows Components	Internet Explorer: Specify use of ActiveX Installer Service for installation of ActiveX controls	Registry		HKLM:\Software\Policies\Microsoft\Windows\AxInstaller	OnlyUseAXISForActiveXInstall	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	OnlyUseAXISForActiveXInstall
546	832	Administrative Templates: Windows Components	Internet Explorer: Turn off Crash Detection	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Restrictions	NoCrashDetection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	AddonManagement_RestrictCrashDetection
547	833	Administrative Templates: Windows Components	Internet Explorer: Turn off the Security Settings Check feature	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Security	DisableSecuritySettingsCheck	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	Disable_Security_Settings_Check
548	1694	Administrative Templates: Windows Components	Internet Explorer: Turn on the auto-complete feature for user names and passwords on forms (Ask)	Registry		HKCU:\Software\Policies\Microsoft\Internet Explorer\Main	FormSuggest PW Ask	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\InternetExplorer	AllowAutoComplete
549	1693	Administrative Templates: Windows Components	Internet Explorer: Turn on the auto-complete feature for user names and passwords on forms (Control Panel)	Registry		HKCU:\Software\Policies\Microsoft\Internet Explorer\Control Panel	FormSuggest Passwords	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\InternetExplorer	AllowAutoComplete
550	1692	Administrative Templates: Windows Components	Internet Explorer: Turn on the auto-complete feature for user names and passwords on forms (Main)	Registry		HKCU:\Software\Policies\Microsoft\Internet Explorer\Main	FormSuggest Passwords	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\InternetExplorer	AllowAutoComplete
551	1636	Administrative Templates: Windows Components	Location and Sensors: Turn off Windows Location Provider	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors	DisableWindowsLocationProvider							0
552	672	Administrative Templates: Windows Components	Location and Sensors: Turn off location	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors	DisableLocation	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	AllowLocation				0
553	673	Administrative Templates: Windows Components	Messaging: Allow Message Service Cloud Sync	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Messaging	AllowMessageSync	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Messaging	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Messaging	AllowMessageSync				1
554	214	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Automatic sample submission	MpPreference	SubmitSamplesConsent									1
555	213	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Cloud-delivered protection	MpPreference	MAPSReporting									2
556	212	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Configure detection for potentially unwanted applications	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender	PUAProtection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	PUAProtection				0
557	1788	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Configure local administrator merge behavior for lists	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender	DisableLocalAdminMerge	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	DisableLocalAdminMerge
558	1857	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Control whether exclusions are visible to local users	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender	HideExclusionsFromLocalUsers	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	HideExclusionsFromLocalUsers				0
559	1789	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Control whether or not exclusions are visible to Local Admins	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender	HideExclusionsFromLocalAdmins	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	HideExclusionsFromLocalAdmins
560	215	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Controlled folder access	MpPreference	EnableControlledFolderAccess									0
561	1737	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Enable Tamper Protection (Status)	MpComputerStatus	IsTamperProtected
562	1642	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Enable sandboxing for Microsoft Defender Antivirus	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Environment	MP_FORCE_USE_SANDBOX							0
563	1542	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Exclusions: Extension Exclusions	MpPreferenceExclusion	ExclusionExtension
564	1539	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Exclusions: Extension Exclusions (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions	Exclusions_Extensions	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	Exclusions_Extensions
565	1543	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Exclusions: Path Exclusions	MpPreferenceExclusion	ExclusionPath
566	1540	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Exclusions: Path Exclusions (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions	Exclusions_Paths	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	Exclusions_Paths
567	1544	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Exclusions: Process Exclusions	MpPreferenceExclusion	ExclusionProcess
568	1541	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Exclusions: Process Exclusions (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions	Exclusions_Processes	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	Exclusions_Processes
569	1525	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Exclusions: Turn off Auto Exclusions	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Exclusions	DisableAutoExclusions	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	DisableAutoExclusions
570	1858	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Features: Enable EDR in block mode	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Features	PassiveRemediation	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	PassiveRemediation				0
571	675	Administrative Templates: Windows Components	Microsoft Defender Antivirus: MAPS: Configure local setting override for reporting to Microsoft MAPS	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet	LocalSettingOverrideSpynetReporting	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	Spynet_LocalSettingOverrideSpynetReporting
572	957	Administrative Templates: Windows Components	Microsoft Defender Antivirus: MAPS: Configure the 'Block at First Sight' feature	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet	DisableBlockAtFirstSeen	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	DisableBlockAtFirstSeen
573	676	Administrative Templates: Windows Components	Microsoft Defender Antivirus: MAPS: Join Microsoft MAPS	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet	SpynetReporting	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	SpynetReporting				0
574	956	Administrative Templates: Windows Components	Microsoft Defender Antivirus: MAPS: Send file samples when further analysis is required	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet	SubmitSamplesConsent	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	SubmitSamplesConsent
575	245	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Adobe Reader from creating child processes	MpPreferenceAsr	7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c									0
576	244	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Adobe Reader from creating child processes (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
577	227	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block JavaScript or VBScript from launching downloaded executable content	MpPreferenceAsr	d3e037e1-3eb8-44c8-a917-57927947596d									0
578	226	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block JavaScript or VBScript from launching downloaded executable content (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	d3e037e1-3eb8-44c8-a917-57927947596d	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
579	223	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Office applications from creating executable content	MpPreferenceAsr	3b576869-a4ec-4529-8536-b80a7769e899									0
580	222	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Office applications from creating executable content (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	3b576869-a4ec-4529-8536-b80a7769e899	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
581	225	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Office applications from injecting code into other processes	MpPreferenceAsr	75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84									0
582	224	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Office applications from injecting code into other processes (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
583	243	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Office communication application from creating child processes	MpPreferenceAsr	26190899-1602-49e8-8b27-eb1d0a1ce869									0
584	242	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Office communication application from creating child processes (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	26190899-1602-49e8-8b27-eb1d0a1ce869	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
585	1823	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Webshell creation for Servers	MpPreferenceAsr	a8f5898e-1dc8-49a9-9878-85004b8a61e6									0
586	1821	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Webshell creation for Servers (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	a8f5898e-1dc8-49a9-9878-85004b8a61e6	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
587	231	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Win32 API calls from Office macros	MpPreferenceAsr	92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b									0
588	230	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block Win32 API calls from Office macros (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	92e97fa1-2edf-4476-bdd6-9dd0b4dddc7b	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
589	1641	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block abuse of exploited vulnerable signed drivers	MpPreferenceAsr	56a863a9-875e-4185-98a7-b882c64b5ce5									0
590	1640	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block abuse of exploited vulnerable signed drivers (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	56a863a9-875e-4185-98a7-b882c64b5ce5	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
591	221	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block all Office applications from creating child processes	MpPreferenceAsr	d4f940ab-401b-4efc-aadc-ad5f3c50688a									0
592	220	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block all Office applications from creating child processes (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	d4f940ab-401b-4efc-aadc-ad5f3c50688a	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
593	237	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block credential stealing from the Windows local security authority subsystem (lsass.exe)	MpPreferenceAsr	9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2									0
594	236	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block credential stealing from the Windows local security authority subsystem (lsass.exe) (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
595	219	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block executable content from email client and webmail	MpPreferenceAsr	be9ba2d9-53ea-4cdc-84e5-9b1eeee46550									0
596	218	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block executable content from email client and webmail (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	be9ba2d9-53ea-4cdc-84e5-9b1eeee46550	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
597	233	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block executable files from running unless they meet a prevalence, age, or trusted list criterion	MpPreferenceAsr	01443614-cd74-433a-b99e-2ecdc07bfc25									0
598	232	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block executable files from running unless they meet a prevalence, age, or trusted list criterion (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	01443614-cd74-433a-b99e-2ecdc07bfc25	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
599	229	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block execution of potentially obfuscated scripts	MpPreferenceAsr	5beb7efe-fd9a-4556-801d-275e5ffc04cc									0
600	228	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block execution of potentially obfuscated scripts (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	5beb7efe-fd9a-4556-801d-275e5ffc04cc	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
601	247	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block persistence through WMI event subscription	MpPreferenceAsr	e6db77e5-3df2-4cf1-b95a-636979351e5b									0
602	246	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block persistence through WMI event subscription (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	e6db77e5-3df2-4cf1-b95a-636979351e5b	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
603	239	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block process creations originating from PSExec and WMI commands	MpPreferenceAsr	d1e49aac-8f56-4280-b9ba-993a6d77406c									0
604	238	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block process creations originating from PSExec and WMI commands (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	d1e49aac-8f56-4280-b9ba-993a6d77406c	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
605	1817	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block rebooting machine in Safe Mode	MpPreferenceAsr	33ddedf1-c6e0-47cb-833e-de6133960387									0
606	1815	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block rebooting machine in Safe Mode (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	33ddedf1-c6e0-47cb-833e-de6133960387	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
607	241	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block untrusted and unsigned processes that run from USB	MpPreferenceAsr	b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4									0
608	240	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block untrusted and unsigned processes that run from USB (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
609	1820	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block use of copied or impersonated system tools	MpPreferenceAsr	c0033c00-d16d-4114-a5a0-dc9b3a7d2ceb									0
610	1818	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Block use of copied or impersonated system tools (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	c0033c00-d16d-4114-a5a0-dc9b3a7d2ceb	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
611	1546	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Exclude files and paths from Attack Surface Reduction Rules	MpPreferenceExclusion	AttackSurfaceReductionOnlyExclusions
612	1545	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Exclude files and paths from Attack Surface Reduction Rules (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR	ExploitGuard_ASR_ASROnlyExclusions	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	ExploitGuard_ASR_ASROnlyExclusions				0
613	235	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Use advanced protection against ransomware	MpPreferenceAsr	c1db55ab-c21a-4637-bb3f-a12568109d35									0
614	234	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: ASR: Use advanced protection against ransomware (Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\rules	c1db55ab-c21a-4637-bb3f-a12568109d35	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
615	217	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: Attack Surface Reduction rules	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR	ExploitGuard_ASR_Rules	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AttackSurfaceReductionRules				0
616	677	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: Network Protection: Prevent users and apps from accessing dangerous websites	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection	EnableNetworkProtection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	EnableNetworkProtection
617	1866	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Microsoft Defender Exploit Guard: Network Protection: This settings controls whether Network Protection is allowed to be configured into block or audit mode on Windows Server	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection	AllowNetworkProtectionOnWinServer							0
618	1791	Administrative Templates: Windows Components	Microsoft Defender Antivirus: MpEngine: Configure extended cloud check	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\MpEngine	MpBafsExtendedTimeout	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	MpEngine_MpBafsExtendedTimeout				0
619	678	Administrative Templates: Windows Components	Microsoft Defender Antivirus: MpEngine: Enable file hash computation feature	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine	EnableFileHashComputation	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	EnableFileHashComputation
620	958	Administrative Templates: Windows Components	Microsoft Defender Antivirus: MpEngine: Select cloud protection level	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\MpEngine	MpCloudBlockLevel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	MpEngine_MpCloudBlockLevel				0
621	1859	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Network Inspection System: Convert warn verdict to block	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\NIS	EnableConvertWarnToBlock	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	EnableConvertWarnToBlock				0
622	216	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Real time monitoring	MpPreference	DisableRealtimeMonitoring									False
623	1793	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Real-time Protection: Configure monitoring for incoming and outgoing file and program activity	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Real-Time Protection	RealtimeScanDirection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	RealtimeProtection_RealtimeScanDirection
624	1860	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Real-time Protection: Configure real-time protection and Security Intelligence Updates during OOBE	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Real-Time Protection	OobeEnableRtpAndSigUpdate	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	OobeEnableRtpAndSigUpdate				1
625	1794	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Real-time Protection: Monitor file and program activity on your computer	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Real-Time Protection	DisableOnAccessProtection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	RealtimeProtection_DisableOnAccessProtection				0
626	959	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Real-time Protection: Scan all downloaded files and attachments	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Real-Time Protection	DisableIOAVProtection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	RealtimeProtection_DisableIOAVProtection				0
627	960	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Real-time Protection: Turn off real-time protection	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Real-Time Protection	DisableRealtimeMonitoring	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AllowRealtimeMonitoring				0
628	679	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Real-time Protection: Turn on behavior monitoring (Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	DisableBehaviorMonitoring	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AllowBehaviorMonitoring				0
629	1796	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Real-time Protection: Turn on process scanning whenever real-time protection is enabled	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Real-Time Protection	DisableScanOnRealtimeEnable	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	RealtimeProtection_DisableScanOnRealtimeEnable				0
630	1653	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Real-time Protection: Turn on script scanning	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Real-Time Protection	DisableScriptScanning	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	AllowScriptScanning				0
631	1899	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Remediation: Behavioral Network Blocks: Brute-Force Protection: Configure Brute-Force Protection aggressiveness	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Brute Force Protection	BruteForceProtectionAggressiveness	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	BruteForceProtectionAggressiveness				0	0
632	1900	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Remediation: Behavioral Network Blocks: Brute-Force Protection: Configure Remote Encryption Protection Mode	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Brute Force Protection	BruteForceProtectionConfiguredState	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	BruteForceProtectionConfiguredState					0
633	1901	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Remediation: Behavioral Network Blocks: Remote Encryption Protection: Configure how aggressively Remote Encryption Protection blocks threats	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Remote Encryption Protection	RemoteEncryptionProtectionAggressiveness	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	RemoteEncryptionProtectionAggressiveness				0	0
634	680	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Reporting: Configure Watson events	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting	DisableGenericRePorts	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	Reporting_DisablegenericrePorts				0
635	1861	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Reporting: Configure whether to report Dynamic Signature dropped events	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Reporting	EnableDynamicSignatureDroppedEventReporting
636	1862	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Scan: Scan excluded files and directories during quick scans	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Scan	QuickScanIncludeExclusions	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	QuickScanIncludeExclusions				0
637	1795	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Scan: Scan packed executables	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Scan	DisablePackedExeScanning	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	Scan_DisablePackedExeScanning
638	681	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Scan: Scan removable drives	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Scan	DisableRemovableDriveScanning	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	Scan_DisableRemovableDriveScanning				1
639	1526	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Scan: Specify the day of the week to run a scheduled scan	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Scan	ScheduleDay	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	Scan_ScheduleDay
640	1902	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Scan: Trigger a quick scan after X days without any scans	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Scan	DaysUntilAggressiveCatchupQuickScan	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	DaysUntilAggressiveCatchupQuickScan					30
641	682	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Scan: Turn on e-mail scanning	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Scan	DisableEmailScanning	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	Scan_DisableEmailScanning				1
642	1527	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Security Intelligence Updates: Define the number of days before spyware security intelligence is considered out of date	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Signature Updates	ASSignatureDue
643	1528	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Security Intelligence Updates: Define the number of days before virus security intelligence is considered out of date	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Signature Updates	AVSignatureDue
644	1529	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Security Intelligence Updates: Specify the day of the week to check for security intelligence updates	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Signature Updates	ScheduleDay
645	1863	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Select the channel for Microsoft Defender daily security intelligence updates	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender	SignaturesRing
646	1864	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Select the channel for Microsoft Defender monthly engine updates	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender	EngineRing
647	1865	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Select the channel for Microsoft Defender monthly platform updates	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender	PlatformRing
648	1530	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Threats: Specify threat alert levels at which default action should not be taken when detected	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender\Threats	Threats_ThreatSeverityDefaultAction	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	Threats_ThreatSeverityDefaultAction
649	1533	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Threats: Specify threat alert levels at which default action should not be taken when detected: High (4)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatSeverityDefaultAction	4	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	Threats_ThreatSeverityDefaultAction
650	1531	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Threats: Specify threat alert levels at which default action should not be taken when detected: Low (1)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatSeverityDefaultAction	1	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	Threats_ThreatSeverityDefaultAction
651	1532	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Threats: Specify threat alert levels at which default action should not be taken when detected: Medium (2)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatSeverityDefaultAction	2	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	Threats_ThreatSeverityDefaultAction
652	1534	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Threats: Specify threat alert levels at which default action should not be taken when detected: Severe (5)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatSeverityDefaultAction	5	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Defender	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender	Threats_ThreatSeverityDefaultAction
653	211	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Turn off Microsoft Defender Antivirus	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender	DisableAntiSpyware							0
654	1790	Administrative Templates: Windows Components	Microsoft Defender Antivirus: Turn off routine remediation	Registry		HKLM:\Software\Policies\Microsoft\Windows Defender	DisableRoutinelyTakingAction	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MicrosoftDefenderAntivirus	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MicrosoftDefenderAntivirus	DisableRoutinelyTakingAction
655	691	Administrative Templates: Windows Components	Microsoft Edge: Allow Address bar drop-down list suggestions	Registry		HKLM:\SOFTWARE\Policies\Microsoft\MicrosoftEdge\ServiceUI	ShowOneBox	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	AllowAddressBarDropdown				1
656	692	Administrative Templates: Windows Components	Microsoft Edge: Allow Adobe Flash	Registry		HKLM:\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Addons	FlashPlayerEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	AllowFlash				1
657	1275	Administrative Templates: Windows Components	Microsoft Edge: Allow Basic authentication for HTTP	Registry		HKLM:\Software\Policies\Microsoft\Edge	BasicAuthOverHttpEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edgev88.0.705.23~Policy~microsoft_edge~HTTPAuthentication	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edgev88.0.705.23~Policy~microsoft_edge~HTTPAuthentication	BasicAuthOverHttpEnabled
658	693	Administrative Templates: Windows Components	Microsoft Edge: Allow InPrivate Browsing	Registry		HKLM:\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main	AllowInPrivate	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	AllowInPrivate				1
659	694	Administrative Templates: Windows Components	Microsoft Edge: Allow Sideloading of extension	Registry		HKLM:\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Extensions	AllowSideloadingOfExtensions	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	AllowSideloadingOfExtensions				1
660	802	Administrative Templates: Windows Components	Microsoft Edge: Allow certificates signed using SHA-1 when issued by local trust anchors (deprecated)	Registry		HKLM:\Software\Policies\Microsoft\Edge	EnableSha1ForLocalAnchors							0
661	1911	Administrative Templates: Windows Components	Microsoft Edge: Allow software WebGL fallback using SwiftShader	Registry		HKLM:\Software\Policies\Microsoft\Edge	EnableUnsafeSwiftShader
662	1646	Administrative Templates: Windows Components	Microsoft Edge: Allow unconfigured sites to be reloaded in Internet Explorer mode	Registry		HKLM:\Software\Policies\Microsoft\Edge	InternetExplorerIntegrationReloadInIEModeAllowed	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edgev92~Policy~microsoft_edge	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edgev92~Policy~microsoft_edge	InternetExplorerIntegrationReloadInIEModeAllowed
663	809	Administrative Templates: Windows Components	Microsoft Edge: Allow user-level native messaging hosts (installed without admin permissions)	Registry		HKLM:\Software\Policies\Microsoft\Edge	NativeMessagingUserLevelHosts	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edge~Policy~microsoft_edge~NativeMessaging	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edge~Policy~microsoft_edge~NativeMessaging	NativeMessagingUserLevelHosts				1
664	803	Administrative Templates: Windows Components	Microsoft Edge: Allow users to proceed from the HTTPS warning page	Registry		HKLM:\Software\Policies\Microsoft\Edge	SSLErrorOverrideAllowed	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edge~Policy~microsoft_edge	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edge~Policy~microsoft_edge	SSLErrorOverrideAllowed				1
665	1662	Administrative Templates: Windows Components	Microsoft Edge: Allow using the deprecated U2F Security Key API (deprecated)	Registry		HKLM:\Software\Policies\Microsoft\Edge	U2fSecurityKeyApiEnabled
666	1784	Administrative Templates: Windows Components	Microsoft Edge: Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode	Registry		HKLM:\Software\Policies\Microsoft\Edge	InternetExplorerIntegrationZoneIdentifierMhtFileAllowed	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edgev117~Policy~microsoft_edge	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edgev117~Policy~microsoft_edge	InternetExplorerIntegrationZoneIdentifierMhtFileAllowed
667	1659	Administrative Templates: Windows Components	Microsoft Edge: Configure Edge Website Typo Protection	Registry		HKLM:\Software\Policies\Microsoft\Edge	TyposquattingCheckerEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edgev96~Policy~microsoft_edge~TyposquattingChecker	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edgev96~Policy~microsoft_edge~TyposquattingChecker	TyposquattingCheckerEnabled
668	811	Administrative Templates: Windows Components	Microsoft Edge: Configure Microsoft Defender SmartScreen	Registry		HKLM:\Software\Policies\Microsoft\Edge	SmartScreenEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edge~Policy~microsoft_edge~SmartScreen	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edge~Policy~microsoft_edge~SmartScreen	SmartScreenEnabled				0
669	812	Administrative Templates: Windows Components	Microsoft Edge: Configure Microsoft Defender SmartScreen to block potentially unwanted apps	Registry		HKLM:\Software\Policies\Microsoft\Edge	SmartScreenPuaEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edgev80diff~Policy~microsoft_edge~SmartScreen	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edgev80diff~Policy~microsoft_edge~SmartScreen	SmartScreenPuaEnabled				0
670	696	Administrative Templates: Windows Components	Microsoft Edge: Configure Password Manager	Registry		HKLM:\Software\Policies\Microsoft\MicrosoftEdge\Main	FormSuggest Passwords	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	AllowPasswordManager
671	697	Administrative Templates: Windows Components	Microsoft Edge: Configure Pop-up Blocker	Registry		HKLM:\Software\Policies\Microsoft\MicrosoftEdge\Main	AllowPopups	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	AllowPopups
672	720	Administrative Templates: Windows Components	Microsoft Edge: Configure Windows Defender SmartScreen	Registry		HKLM:\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter	EnabledV9	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	AllowSmartScreen
673	1925	Administrative Templates: Windows Components	Microsoft Edge: Configure browser process code integrity guard setting	Registry		HKLM:\Software\Policies\Microsoft\Edge	BrowserCodeIntegritySetting
674	695	Administrative Templates: Windows Components	Microsoft Edge: Configure cookies	Registry		HKLM:\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main	Cookies	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	AllowCookies				2
675	698	Administrative Templates: Windows Components	Microsoft Edge: Configure search suggestions in Address bar	Registry		HKLM:\Software\Policies\Microsoft\MicrosoftEdge\SearchScopes	ShowSearchSuggestionsGlobal	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	AllowSearchSuggestionsinAddressBar
676	699	Administrative Templates: Windows Components	Microsoft Edge: Configure the Adobe Flash Click-to-Run setting	Registry		HKLM:\Software\Policies\Microsoft\MicrosoftEdge\Security	FlashClickToRunMode	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	AllowFlashClickToRun
677	807	Administrative Templates: Windows Components	Microsoft Edge: Control which extensions cannot be installed	Registry		HKLM:\Software\Policies\Microsoft\Edge\ExtensionInstallBlocklist	1	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edge~Policy~microsoft_edge~Extensions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edge~Policy~microsoft_edge~Extensions	ExtensionInstallBlocklist				0
678	806	Administrative Templates: Windows Components	Microsoft Edge: Default Adobe Flash setting (obsolete)	Registry		HKLM:\Software\Policies\Microsoft\Edge	DefaultPluginsSetting							0
679	1824	Administrative Templates: Windows Components	Microsoft Edge: Dynamic Code Settings	Registry		HKLM:\Software\Policies\Microsoft\Edge	DynamicCodeSettings	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edgev128~Policy~microsoft_edge	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edgev128~Policy~microsoft_edge	DynamicCodeSettings
680	1654	Administrative Templates: Windows Components	Microsoft Edge: Enable 3DES cipher suites in TLS	Registry		HKLM:\Software\Policies\Microsoft\Edge	TripleDESEnabled
681	1825	Administrative Templates: Windows Components	Microsoft Edge: Enable Application Bound Encryption	Registry		HKLM:\Software\Policies\Microsoft\Edge	ApplicationBoundEncryptionEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edgev128.1~Policy~microsoft_edge	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edgev128.1~Policy~microsoft_edge	ApplicationBoundEncryptionEnabled
682	1926	Administrative Templates: Windows Components	Microsoft Edge: Enable Process Isolation	Registry		HKLM:\Software\Policies\Microsoft\Edge	ProcessIsolationEnabled
683	1655	Administrative Templates: Windows Components	Microsoft Edge: Enable browser legacy extension point blocking	Registry		HKLM:\Software\Policies\Microsoft\Edge	BrowserLegacyExtensionPointsBlockingEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edgev95~Policy~microsoft_edge	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edgev95~Policy~microsoft_edge	BrowserLegacyExtensionPointsBlockingEnabled
684	1927	Administrative Templates: Windows Components	Microsoft Edge: Enable renderer in app container	Registry		HKLM:\Software\Policies\Microsoft\Edge	RendererAppContainerEnabled
685	810	Administrative Templates: Windows Components	Microsoft Edge: Enable saving passwords to the password manager	Registry		HKLM:\Software\Policies\Microsoft\Edge	PasswordManagerEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	AllowPasswordManager				1
686	804	Administrative Templates: Windows Components	Microsoft Edge: Enable site isolation for every site	Registry		HKLM:\Software\Policies\Microsoft\Edge	SitePerProcess	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edge~Policy~microsoft_edge	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edge~Policy~microsoft_edge	SitePerProcess				0
687	1928	Administrative Templates: Windows Components	Microsoft Edge: Enable the network service sandbox	Registry		HKLM:\Software\Policies\Microsoft\Edge	NetworkServiceSandboxEnabled
688	1661	Administrative Templates: Windows Components	Microsoft Edge: Enhance images enabled	Registry		HKLM:\Software\Policies\Microsoft\Edge	EdgeEnhanceImagesEnabled
689	1929	Administrative Templates: Windows Components	Microsoft Edge: Enhance the security state in Microsoft Edge	Registry		HKLM:\Software\Policies\Microsoft\Edge	EnhanceSecurityMode
690	1716	Administrative Templates: Windows Components	Microsoft Edge: Force WebSQL to be enabled	Registry		HKLM:\Software\Policies\Microsoft\Edge	WebSQLAccess
691	805	Administrative Templates: Windows Components	Microsoft Edge: Minimum TLS version enabled	Registry		HKLM:\Software\Policies\Microsoft\Edge	SSLVersionMin							0
692	700	Administrative Templates: Windows Components	Microsoft Edge: Prevent access to the about:flags page in Microsoft Edge	Registry		HKLM:\Software\Policies\Microsoft\MicrosoftEdge\Main	PreventAccessToAboutFlagsInMicrosoftEdge	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	PreventAccessToAboutFlagsInMicrosoftEdge
693	701	Administrative Templates: Windows Components	Microsoft Edge: Prevent bypassing Microsoft Defender SmartScreen prompts for files	Registry		HKLM:\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter	PreventOverrideAppRepUnknown	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	PreventSmartScreenPromptOverrideForFiles
694	721	Administrative Templates: Windows Components	Microsoft Edge: Prevent bypassing Microsoft Defender SmartScreen prompts for sites	Registry		HKLM:\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter	PreventOverride	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	PreventSmartScreenPromptOverride
695	1690	Administrative Templates: Windows Components	Microsoft Edge: Prevent bypassing Microsoft Defender SmartScreen prompts for sites	Registry		HKLM:\Software\Policies\Microsoft\Edge	PreventSmartScreenPromptOverride	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edge~Policy~microsoft_edge~SmartScreen	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edge~Policy~microsoft_edge~SmartScreen	PreventSmartScreenPromptOverride
696	814	Administrative Templates: Windows Components	Microsoft Edge: Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads	Registry		HKLM:\Software\Policies\Microsoft\Edge	PreventSmartScreenPromptOverrideForFiles	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edge~Policy~microsoft_edge~SmartScreen	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edge~Policy~microsoft_edge~SmartScreen	PreventSmartScreenPromptOverrideForFiles				0
697	702	Administrative Templates: Windows Components	Microsoft Edge: Prevent certificate error overrides	Registry		HKLM:\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings	PreventCertErrorOverrides	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	PreventCertErrorOverrides
698	703	Administrative Templates: Windows Components	Microsoft Edge: Prevent using Localhost IP address for WebRTC	Registry		HKLM:\Software\Policies\Microsoft\MicrosoftEdge\Main	HideLocalHostIP	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	HideLocalHostIPAddress
699	1658	Administrative Templates: Windows Components	Microsoft Edge: Show the Reload in Internet Explorer mode button in the toolbar	Registry		HKLM:\Software\Policies\Microsoft\Edge	InternetExplorerModeToolbarButtonEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edgev96~Policy~microsoft_edge	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edgev96~Policy~microsoft_edge	InternetExplorerModeToolbarButtonEnabled
700	1648	Administrative Templates: Windows Components	Microsoft Edge: Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context	Registry		HKLM:\Software\Policies\Microsoft\Edge	SharedArrayBufferUnrestrictedAccessAllowed	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edgev111~Policy~microsoft_edge	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edgev111~Policy~microsoft_edge	SharedArrayBufferUnrestrictedAccessAllowed
701	1656	Administrative Templates: Windows Components	Microsoft Edge: Specifies whether the display-capture permissions-policy is checked or skipped	Registry		HKLM:\Software\Policies\Microsoft\Edge	DisplayCapturePermissionsPolicyEnabled
702	1647	Administrative Templates: Windows Components	Microsoft Edge: Specifies whether to allow insecure websites to make requests to more-private network endpoints	Registry		HKLM:\Software\Policies\Microsoft\Edge	InsecurePrivateNetworkRequestsAllowed	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edgev92~Policy~microsoft_edge~PrivateNetworkRequestSettings	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edgev92~Policy~microsoft_edge~PrivateNetworkRequestSettings	InsecurePrivateNetworkRequestsAllowed
703	808	Administrative Templates: Windows Components	Microsoft Edge: Supported authentication schemes	Registry		HKLM:\Software\Policies\Microsoft\Edge	AuthSchemes	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\microsoft_edge~Policy~microsoft_edge~HTTPAuthentication	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\microsoft_edge~Policy~microsoft_edge~HTTPAuthentication	AuthSchemes				0
704	674	Administrative Templates: Windows Components	Microsoft account: Block all consumer Microsoft account user authentication	Registry		HKLM:\SOFTWARE\Policies\Microsoft\MicrosoftAccount	DisableUserAuth	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSAPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSAPolicy	MicrosoftAccount_DisableUserAuth
705	742	Administrative Templates: Windows Components	Network Sharing: Prevent users from sharing files within their profile	Registry		HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer	NoInplaceSharing	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\ADMX_Sharing	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\ADMX_Sharing	NoInplaceSharing				0
706	1649	Administrative Templates: Windows Components	News and interests: Enable news and interests on the taskbar	Registry		HKLM:\Software\Policies\Microsoft\Windows\Windows Feeds	EnableFeeds	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Feeds	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Feeds	EnableFeeds
707	183	Administrative Templates: Windows Components	OneDrive: Prevent the usage of OneDrive for file storage	Registry		HKLM:\Software\Policies\Microsoft\Windows\OneDrive	DisableFileSyncNGSC	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\System	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\System	DisableOneDriveFileSync				0
708	1637	Administrative Templates: Windows Components	OneDrive: Prevent the usage of OneDrive for file storage on Windows 8.1	Registry		HKLM:\Software\Policies\Microsoft\Windows\OneDrive	DisableFileSync							0
709	704	Administrative Templates: Windows Components	Push To Install: Turn off Push To Install service	Registry		HKLM:\SOFTWARE\Policies\Microsoft\PushToInstall	DisablePushToInstall	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_PushToInstall	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_PushToInstall	DisablePushToInstall
710	713	Administrative Templates: Windows Components	RSS Feeds: Prevent downloading of enclosures	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Feeds	DisableEnclosureDownload	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\InternetExplorer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\InternetExplorer	DisableEnclosureDownloading				0
711	1904	Administrative Templates: Windows Components	RSS Feeds: Turn on Basic feed authentication over HTTP	Registry		HKLM:\Software\Policies\Microsoft\Internet Explorer\Feeds	AllowBasicAuthInClear							0
712	1775	Administrative Templates: Windows Components	Remote Desktop Connection Client: Disable Cloud Clipboard integration for server-to-client data transfer	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\Client	DisableCloudClipboardIntegration
713	184	Administrative Templates: Windows Components	Remote Desktop Connection Client: Do not allow passwords to be saved	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	DisablePasswordSaving	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteDesktopServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteDesktopServices	DoNotAllowPasswordSaving				0
714	185	Administrative Templates: Windows Components	Remote Desktop Session Host: Allow users to connect remotely by using Remote Desktop Services	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	fDenyTSConnections	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteDesktopServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteDesktopServices	AllowUsersToConnectRemotely				0
715	798	Administrative Templates: Windows Components	Remote Desktop Session Host: Connections: Restrict Remote Desktop Services users to a single Remote Desktop Services session	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	fSingleSessionPerUser							1
716	1675	Administrative Templates: Windows Components	Remote Desktop Session Host: Device and Resource Redirection: Allow UI Automation redirection	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	EnableUiaRedirection
717	705	Administrative Templates: Windows Components	Remote Desktop Session Host: Device and Resource Redirection: Do not allow COM port redirection	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	fDisableCcm							0
718	706	Administrative Templates: Windows Components	Remote Desktop Session Host: Device and Resource Redirection: Do not allow LPT port redirection	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	fDisableLPT							0
719	1776	Administrative Templates: Windows Components	Remote Desktop Session Host: Device and Resource Redirection: Do not allow WebAuthn redirection	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	fDisableWebAuthn	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteDesktopServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteDesktopServices	DoNotAllowWebAuthnRedirection
720	186	Administrative Templates: Windows Components	Remote Desktop Session Host: Device and Resource Redirection: Do not allow drive redirection	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	fDisableCdm	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteDesktopServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteDesktopServices	DoNotAllowDriveRedirection				0
721	1676	Administrative Templates: Windows Components	Remote Desktop Session Host: Device and Resource Redirection: Do not allow location redirection	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	fDisableLocationRedir
722	707	Administrative Templates: Windows Components	Remote Desktop Session Host: Device and Resource Redirection: Do not allow supported Plug and Play device redirection	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	fDisablePNPRedir							0
723	1903	Administrative Templates: Windows Components	Remote Desktop Session Host: Device and Resource Redirection: Restrict clipboard transfer from server to client	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	SCClipLevel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteDesktopServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteDesktopServices	LimitServerToClientClipboardRedirection
724	187	Administrative Templates: Windows Components	Remote Desktop Session Host: Security: Always prompt for password upon connection	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	fPromptForPassword	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteDesktopServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteDesktopServices	PromptForPasswordUponConnection				0
725	188	Administrative Templates: Windows Components	Remote Desktop Session Host: Security: Require secure RPC communication	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	fEncryptRPCTraffic	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteDesktopServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteDesktopServices	RequireSecureRPCCommunication				0
726	708	Administrative Templates: Windows Components	Remote Desktop Session Host: Security: Require use of specific security layer for remote (RDP) connections	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	SecurityLayer							0
727	709	Administrative Templates: Windows Components	Remote Desktop Session Host: Security: Require user authentication for remote connections by using Network Level Authentication	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	UserAuthentication							0
728	189	Administrative Templates: Windows Components	Remote Desktop Session Host: Security: Set client connection encryption level	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	MinEncryptionLevel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteDesktopServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteDesktopServices	ClientConnectionEncryptionLevel				0
729	1553	Administrative Templates: Windows Components	Remote Desktop Session Host: Session Time Limits: End session when time limits are reached	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	fResetBroken
730	710	Administrative Templates: Windows Components	Remote Desktop Session Host: Session Time Limits: Set time limit for active but idle Remote Desktop Services sessions	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	MaxIdleTime							0
731	711	Administrative Templates: Windows Components	Remote Desktop Session Host: Session Time Limits: Set time limit for disconnected sessions	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	MaxDisconnectionTime							0
732	712	Administrative Templates: Windows Components	Remote Desktop Session Host: Temporary folders: Do not delete temp folders upon exit	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	DeleteTempDirsOnExit							1
733	799	Administrative Templates: Windows Components	Remote Desktop Session Host: Temporary folders: Do not use temporary folders per session	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services	PerSessionTempDir							1
734	190	Administrative Templates: Windows Components	Search: Allow Cloud Search	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search	AllowCloudSearch	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Search	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Search	AllowCloudSearch				1
735	191	Administrative Templates: Windows Components	Search: Allow Cortana	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search	AllowCortana	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Experience	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Experience	AllowCortana				1
736	192	Administrative Templates: Windows Components	Search: Allow Cortana above lock screen	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search	AllowCortanaAboveLock	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\AboveLock	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\AboveLock	AllowCortanaAboveLock				1
737	193	Administrative Templates: Windows Components	Search: Allow indexing of encrypted files	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search	AllowIndexingEncryptedStoresOrItems	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Search	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Search	AllowIndexingEncryptedStoresOrItems				1
738	194	Administrative Templates: Windows Components	Search: Allow search and Cortana to use location	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search	AllowSearchToUseLocation	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Search	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Search	AllowSearchToUseLocation				1
739	1771	Administrative Templates: Windows Components	Search: Allow search highlights	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search	EnableDynamicContentInWSB	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Search	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Search	AllowSearchHighlights
740	195	Administrative Templates: Windows Components	Search: Set what information is shared in Search	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search	ConnectedSearchPrivacy							1
741	714	Administrative Templates: Windows Components	Software Protection Platform: Turn off KMS Client Online AVS Validation	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform	NoGenTicket	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Licensing	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Licensing	DisallowKMSClientOnlineAVSValidation				0
742	715	Administrative Templates: Windows Components	Store: Disable all apps from Microsoft Store	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore	DisableStoreApps	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ApplicationManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ApplicationManagement	DisableStoreOriginatedApps
743	716	Administrative Templates: Windows Components	Store: Only display the private store within the Microsoft Store	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore	RequirePrivateStoreOnly	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ApplicationManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ApplicationManagement	RequirePrivateStoreOnly
744	717	Administrative Templates: Windows Components	Store: Turn off Automatic Download and Install of updates	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore	AutoDownload	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ApplicationManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ApplicationManagement	AllowAppStoreAutoUpdate
745	719	Administrative Templates: Windows Components	Store: Turn off the Store application	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore	RemoveWindowsStore
746	718	Administrative Templates: Windows Components	Store: Turn off the offer to update to the latest version of Windows	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore	DisableOSUpgrade	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_WindowsStore	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_WindowsStore	DisableOSUpgrade_1
747	1554	Administrative Templates: Windows Components	Text Input: Improve inking and typing recognition	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\TextInput	AllowLinguisticDataCollection
748	1677	Administrative Templates: Windows Components	Widgets: Allow widgets	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Dsh	AllowNewsAndInterests	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\NewsAndInterests	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\NewsAndInterests	AllowNewsAndInterests
749	203	Administrative Templates: Windows Components	WinRM Client: Allow Basic authentication	Registry		HKLM:\Software\Policies\Microsoft\Windows\WinRM\Client	AllowBasic	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteManagement	AllowBasicAuthentication_Client				0
750	204	Administrative Templates: Windows Components	WinRM Client: Allow unencrypted traffic	Registry		HKLM:\Software\Policies\Microsoft\Windows\WinRM\Client	AllowUnencryptedTraffic	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteManagement	AllowUnencryptedTraffic_Client				0
751	205	Administrative Templates: Windows Components	WinRM Client: Disallow Digest authentication	Registry		HKLM:\Software\Policies\Microsoft\Windows\WinRM\Client	AllowDigest	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteManagement	DisallowDigestAuthentication				0
752	207	Administrative Templates: Windows Components	WinRM Service: Allow Basic authentication	Registry		HKLM:\Software\Policies\Microsoft\Windows\WinRM\Service	AllowBasic	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteManagement	AllowBasicAuthentication_Service				0
753	206	Administrative Templates: Windows Components	WinRM Service: Allow remote server management through WinRM	Registry		HKLM:\Software\Policies\Microsoft\Windows\WinRM\Service	AllowAutoConfig	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteManagement	AllowRemoteServerManagement				0
754	208	Administrative Templates: Windows Components	WinRM Service: Allow unencrypted traffic	Registry		HKLM:\Software\Policies\Microsoft\Windows\WinRM\Service	AllowUnencryptedTraffic	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteManagement	AllowUnencryptedTraffic_Service				0
755	209	Administrative Templates: Windows Components	WinRM Service: Disallow WinRM from storing RunAs credentials	Registry		HKLM:\Software\Policies\Microsoft\Windows\WinRM\Service	DisableRunAs	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteManagement	DisallowStoringOfRunAsCredentials				0
756	1914	Administrative Templates: Windows Components	Windows AI: Allow Recall to be enabled	Registry		HKLM:\Software\Policies\Microsoft\Windows\WindowsAI	AllowRecallEnablement
757	1797	Administrative Templates: Windows Components	Windows AI: Turn off Saving Snapshots for Windows	Registry		HKLM:\Software\Policies\Microsoft\Windows\WindowsAI	DisableAIDataAnalysis							0
758	1798	Administrative Templates: Windows Components	Windows AI: Turn off Saving Snapshots for Windows (User)	Registry		HKCU:\Software\Policies\Microsoft\Windows\WindowsAI	DisableAIDataAnalysis							0
759	1803	Administrative Templates: Windows Components	Windows Copilot: Turn off Windows Copilot	Registry		HKCU:\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot	TurnOffWindowsCopilot	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\WindowsAI	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\WindowsAI	TurnOffWindowsCopilot				0
760	1812	Administrative Templates: Windows Components	Windows Defender SmartScreen: Automatic Data Collection	Registry		HKLM:\Software\Policies\Microsoft\Windows\WTDS\Components	CaptureThreatWindow	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WebThreatDefense	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WebThreatDefense	AutomaticDataCollection
761	1709	Administrative Templates: Windows Components	Windows Defender SmartScreen: Enhanced Phishing Protection	Registry		HKLM:\Software\Policies\Microsoft\Windows\WTDS\Components	NotifyMalicious	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WebThreatDefense	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WebThreatDefense	NotifyMalicious
762	1915	Administrative Templates: Windows Components	Windows Defender SmartScreen: Explorer: Configure Windows Defender SmartScreen	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	EnableSmartScreen	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SmartScreen	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SmartScreen	EnableSmartScreenInShell				1
763	1916	Administrative Templates: Windows Components	Windows Defender SmartScreen: Explorer: Configure Windows Defender SmartScreen to warn and prevent bypass	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\System	ShellSmartScreenLevel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Browser	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Browser	PreventSmartScreenPromptOverride				Warn
764	1772	Administrative Templates: Windows Components	Windows Defender SmartScreen: Notify Malicious	Registry		HKLM:\Software\Policies\Microsoft\Windows\WTDS\Components	NotifyMalicious	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WebThreatDefense	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WebThreatDefense	NotifyMalicious
765	1710	Administrative Templates: Windows Components	Windows Defender SmartScreen: Notify Password Reuse	Registry		HKLM:\Software\Policies\Microsoft\Windows\WTDS\Components	NotifyPasswordReuse	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WebThreatDefense	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WebThreatDefense	NotifyPasswordReuse
766	1711	Administrative Templates: Windows Components	Windows Defender SmartScreen: Notify Unsafe App	Registry		HKLM:\Software\Policies\Microsoft\Windows\WTDS\Components	NotifyUnsafeApp	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WebThreatDefense	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WebThreatDefense	NotifyUnsafeApp
767	1712	Administrative Templates: Windows Components	Windows Defender SmartScreen: Service Enabled	Registry		HKLM:\Software\Policies\Microsoft\Windows\WTDS\Components	ServiceEnabled	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WebThreatDefense	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WebThreatDefense	ServiceEnabled
768	1639	Administrative Templates: Windows Components	Windows Error Reporting: Automatically send memory dumps for OS-generated error reports	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting	AutoApproveOSDumps							1
769	1638	Administrative Templates: Windows Components	Windows Error Reporting: Consent: Configure Default consent	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent	DefaultConsent							0
770	196	Administrative Templates: Windows Components	Windows Error Reporting: Disable Windows Error Reporting	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting	Disabled							0
771	197	Administrative Templates: Windows Components	Windows Game Recording and Broadcasting: Enables or disables Windows Game Recording and Broadcasting	Registry		HKLM:\Software\Policies\Microsoft\Windows\GameDVR	AllowGameDVR	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ApplicationManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ApplicationManagement	AllowGameDVR				1
772	1773	Administrative Templates: Windows Components	Windows Hello for Business: Enable ESS with Supported Peripherals	Registry		HKLM:\SOFTWARE\Microsoft\Policies\PassportForWork\Biometrics	EnableESSwithSupportedPeripherals	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\PassportForWork	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\PassportForWork	EnableESSwithSupportedPeripherals
773	963	Administrative Templates: Windows Components	Windows Hello for Business: Use a hardware security device	Registry		HKLM:\SOFTWARE\Policies\Microsoft\PassportForWork	RequireSecurityDevice
774	198	Administrative Templates: Windows Components	Windows Ink Workspace: Allow Windows Ink Workspace	Registry		HKLM:\Software\Policies\Microsoft\WindowsInkWorkspace	AllowWindowsInkWorkspace	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsInkWorkspace	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsInkWorkspace	AllowWindowsInkWorkspace				1
775	734	Administrative Templates: Windows Components	Windows Ink Workspace: Allow suggested apps in Windows Ink Workspace	Registry		HKLM:\Software\Policies\Microsoft\WindowsInkWorkspace	AllowSuggestedAppsInWindowsInkWorkspace	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsInkWorkspace	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsInkWorkSpace	AllowSuggestedAppsInWindowsInkWorkspace				1
776	200	Administrative Templates: Windows Components	Windows Installer: Allow user control over installs	Registry		HKLM:\Software\Policies\Microsoft\Windows\Installer	EnableUserControl	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ApplicationManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ApplicationManagement	MSIAllowUserControlOverInstall				1
777	199	Administrative Templates: Windows Components	Windows Installer: Always install with elevated privileges	Registry		HKLM:\Software\Policies\Microsoft\Windows\Installer	AlwaysInstallElevated	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ApplicationManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ApplicationManagement	MSIAlwaysInstallWithElevatedPrivileges				0
778	303	Administrative Templates: Windows Components	Windows Installer: Always install with elevated privileges	Registry		HKCU:\Software\Policies\Microsoft\Windows\Installer	AlwaysInstallElevated	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\ApplicationManagement	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\ApplicationManagement	MSIAlwaysInstallWithElevatedPrivileges				0
779	1657	Administrative Templates: Windows Components	Windows Installer: Disable Co-Installer (USB AutoInstall)	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Installer	DisableCoInstallers
780	201	Administrative Templates: Windows Components	Windows Installer: Prevent Internet Explorer security prompt for Windows Installer scripts	Registry		HKLM:\Software\Policies\Microsoft\Windows\Installer	SafeForScripting	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSI	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSI	SafeForScripting				1
781	1713	Administrative Templates: Windows Components	Windows Logon Options: Configure the transmission of the user's password in the content of MPR notifications sent by winlogon	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System	EnableMPR	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsLogon	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsLogon	EnableMPRNotifications
782	202	Administrative Templates: Windows Components	Windows Logon Options: Sign-in and lock last interactive user automatically after a restart	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	DisableAutomaticRestartSignOn	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsLogon	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsLogon	AllowAutomaticRestartSignOn				0
783	744	Administrative Templates: Windows Components	Windows Media Player: Playback: Prevent Codec Download	Registry		HKCU:\Software\Policies\Microsoft\WindowsMediaPlayer	PreventCodecDownload	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\{SID}\ADMX_WindowsMediaPlayer	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\{SID}\ADMX_WindowsMediaPlayer	PolicyCodecUpdate
784	268	Administrative Templates: Windows Components	Windows PowerShell: Disable PowerShell version 2	WindowsOptionalFeature	MicrosoftWindowsPowerShellV2									Enabled
785	269	Administrative Templates: Windows Components	Windows PowerShell: Disable PowerShell version 2 (root)	WindowsOptionalFeature	MicrosoftWindowsPowerShellV2Root									Enabled
786	307	Administrative Templates: Windows Components	Windows PowerShell: PowerShell Language Mode	LanguageMode										FullLanguage
787	1739	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Module Logging	Registry		HKLM:\Software\Policies\Microsoft\Windows\PowerShell\ModuleLogging	EnableModuleLogging							0
788	1742	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Module Logging	Registry		HKCU:\Software\Policies\Microsoft\Windows\PowerShell\ModuleLogging	EnableModuleLogging							0
789	1740	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Module Logging - Module Names	Registry		HKLM:\Software\Policies\Microsoft\Windows\PowerShell\ModuleLogging\ModuleNames	*
790	1743	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Module Logging - Module Names	Registry		HKCU:\Software\Policies\Microsoft\Windows\PowerShell\ModuleLogging\ModuleNames	*
791	265	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Script Block Logging	Registry		HKLM:\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging	EnableScriptBlockLogging	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsPowerShell	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsPowerShell	TurnOnPowerShellScriptBlockLogging				0
792	304	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Script Block Logging	Registry		HKCU:\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging	EnableScriptBlockLogging							0
793	266	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Script Block Logging (Invocation)	Registry		HKLM:\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging	EnableScriptBlockInvocationLogging							0
794	305	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Script Block Logging (Invocation)	Registry		HKCU:\Software\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging	EnableScriptBlockInvocationLogging							0
795	267	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Transcription	Registry		HKLM:\Software\Policies\Microsoft\Windows\PowerShell\Transcription	EnableTranscripting	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_PowerShellExecutionPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_PowerShellExecutionPolicy	EnableTranscripting				0
796	306	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Transcription	Registry		HKCU:\Software\Policies\Microsoft\Windows\PowerShell\Transcription	EnableTranscripting	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_PowerShellExecutionPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_PowerShellExecutionPolicy	EnableTranscripting				0
797	1741	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Transcription (Invocation)	Registry		HKLM:\Software\Policies\Microsoft\Windows\PowerShell\Transcription	EnableInvocationHeader							0
798	1744	Administrative Templates: Windows Components	Windows PowerShell: Turn on PowerShell Transcription (Invocation)	Registry		HKCU:\Software\Policies\Microsoft\Windows\PowerShell\Transcription	EnableInvocationHeader							0
799	1556	Administrative Templates: Windows Components	Windows PowerShell: Turn on Script Execution	Registry		HKLM:\Software\Policies\Microsoft\Windows\PowerShell	EnableScripts
800	1555	Administrative Templates: Windows Components	Windows PowerShell: Turn on Script Execution (Execution Policy)	Registry		HKLM:\Software\Policies\Microsoft\Windows\PowerShell	ExecutionPolicy
801	210	Administrative Templates: Windows Components	Windows Remote Shell: Allow Remote Shell Access	Registry		HKLM:\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS	AllowRemoteShellAccess	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\RemoteShell	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\RemoteShell	AllowRemoteShellAccess				1
802	1678	Administrative Templates: Windows Components	Windows Sandbox: Allow clipboard sharing with Windows Sandbox	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Sandbox	AllowClipboardRedirection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsSandbox	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsSandbox	AllowClipboardRedirection
803	1905	Administrative Templates: Windows Components	Windows Sandbox: Allow mapping folders into Windows Sandbox	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Sandbox	AllowWriteToMappedFolders	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsSandbox	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsSandbox	AllowWriteToMappedFolders				1
804	1679	Administrative Templates: Windows Components	Windows Sandbox: Allow networking in Windows Sandbox	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\Sandbox	AllowNetworking	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\WindowsSandbox	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\WindowsSandbox	AllowNetworking
805	1557	Administrative Templates: Windows Components	Windows Update: Configure Automatic Updates: Configure automatic updating	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\Au	AUOptions
806	732	Administrative Templates: Windows Components	Windows Update: Legacy Policies: No auto-restart with logged on users for scheduled automatic updates installations	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\Au	NoAutoRebootWithLoggedOnUsers							0
807	730	Administrative Templates: Windows Components	Windows Update: Manage end user experience: Configure Automatic Updates	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\Au	NoAutoUpdate	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	AllowAutoUpdate				0
808	731	Administrative Templates: Windows Components	Windows Update: Manage end user experience: Configure Automatic Updates: Scheduled install day	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\Au	ScheduledInstallDay	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	ScheduledInstallDay
809	1813	Administrative Templates: Windows Components	Windows Update: Manage end user experience: Enable features introduced via servicing that are off by default	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate	AllowTemporaryEnterpriseFeatureControl	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	AllowTemporaryEnterpriseFeatureControl
810	733	Administrative Templates: Windows Components	Windows Update: Manage end user experience: Remove access to 'Pause updates' feature	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate	SetDisablePauseUXAccess	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	SetDisablePauseUXAccess
811	1814	Administrative Templates: Windows Components	Windows Update: Manage updates offered from Windows Update: Enable optional updates	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate	SetAllowOptionalContent	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	AllowOptionalContent
812	723	Administrative Templates: Windows Components	Windows Update: Manage updates offered from Windows Update: Manage preview builds (ManagePreviewBuilds)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate	ManagePreviewBuilds	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	ManagePreviewBuilds
813	724	Administrative Templates: Windows Components	Windows Update: Manage updates offered from Windows Update: Manage preview builds (ManagePreviewBuildsPolicyValue)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate	ManagePreviewBuildsPolicyValue	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	ManagePreviewBuilds
814	726	Administrative Templates: Windows Components	Windows Update: Manage updates offered from Windows Update: Select when Preview Builds and Feature Updates are received (BranchReadinessLevel)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate	BranchReadinessLevel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	BranchReadinessLevel
815	725	Administrative Templates: Windows Components	Windows Update: Manage updates offered from Windows Update: Select when Preview Builds and Feature Updates are received (DeferFeatureUpdates)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate	DeferFeatureUpdates	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	DeferFeatureUpdatesPeriodInDays
816	727	Administrative Templates: Windows Components	Windows Update: Manage updates offered from Windows Update: Select when Preview Builds and Feature Updates are received (DeferFeatureUpdatesPeriodInDays)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate	DeferFeatureUpdatesPeriodInDays	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	DeferFeatureUpdatesPeriodInDays
817	728	Administrative Templates: Windows Components	Windows Update: Manage updates offered from Windows Update: Select when Quality Updates are received (DeferQualityUpdates)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate	DeferQualityUpdates	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	PauseQualityUpdates
818	729	Administrative Templates: Windows Components	Windows Update: Manage updates offered from Windows Update: Select when Quality Updates are received (DeferQualityUpdatesPeriodInDays)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate	DeferQualityUpdatesPeriodInDays	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\Update	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Update	DeferQualityUpdatesPeriodInDays
819	78	Advanced Audit Policy Configuration	Account Lockout	auditpol	{0CCE9217-69AE-11D9-BED3-505054503030}									Success
820	524	Advanced Audit Policy Configuration	Application Group Management	auditpol	{0CCE9239-69AE-11D9-BED3-505054503030}									No Auditing
821	89	Advanced Audit Policy Configuration	Audit Policy Change	auditpol	{0CCE922F-69AE-11D9-BED3-505054503030}									Success
822	90	Advanced Audit Policy Configuration	Authentication Policy Change	auditpol	{0CCE9230-69AE-11D9-BED3-505054503030}									Success
823	526	Advanced Audit Policy Configuration	Authorization Policy Change	auditpol	{0CCE9231-69AE-11D9-BED3-505054503030}									No Auditing
824	779	Advanced Audit Policy Configuration	Computer Account Management	auditpol	{0CCE9236-69AE-11D9-BED3-505054503030}									Success
825	72	Advanced Audit Policy Configuration	Credential Validation	auditpol	{0CCE923F-69AE-11D9-BED3-505054503030}									No Auditing
826	75	Advanced Audit Policy Configuration	DPAPI Activity	auditpol	{0CCE922D-69AE-11D9-BED3-505054503030}									No Auditing
827	83	Advanced Audit Policy Configuration	Detailed File Share	auditpol	{0CCE9244-69AE-11D9-BED3-505054503030}									No Auditing
828	782	Advanced Audit Policy Configuration	Directory Service Access	auditpol	{0CCE923B-69AE-11D9-BED3-505054503030}									Success
829	783	Advanced Audit Policy Configuration	Directory Service Changes	auditpol	{0CCE923C-69AE-11D9-BED3-505054503030}
830	780	Advanced Audit Policy Configuration	Distribution Group Management	auditpol	{0CCE9238-69AE-11D9-BED3-505054503030}
831	84	Advanced Audit Policy Configuration	File Share	auditpol	{0CCE9224-69AE-11D9-BED3-505054503030}									No Auditing
832	79	Advanced Audit Policy Configuration	Group Membership	auditpol	{0cce9249-69ae-11d9-bed3-505054503030}									No Auditing
833	527	Advanced Audit Policy Configuration	IPsec Driver	auditpol	{0CCE9213-69AE-11D9-BED3-505054503030}									No Auditing
834	777	Advanced Audit Policy Configuration	Kerberos Authentication Service	auditpol	{0CCE9242-69AE-11D9-BED3-505054503030}									Success
835	778	Advanced Audit Policy Configuration	Kerberos Service Ticket Operations	auditpol	{0CCE9240-69AE-11D9-BED3-505054503030}									Success
836	85	Advanced Audit Policy Configuration	Kernel Object	auditpol	{0CCE921F-69AE-11D9-BED3-505054503030}									No Auditing
837	525	Advanced Audit Policy Configuration	Logoff	auditpol	{0CCE9216-69AE-11D9-BED3-505054503030}									Success
838	80	Advanced Audit Policy Configuration	Logon	auditpol	{0CCE9215-69AE-11D9-BED3-505054503030}									Success and Failure
839	91	Advanced Audit Policy Configuration	MPSSVC Rule-Level Policy Change	auditpol	{0CCE9232-69AE-11D9-BED3-505054503030}									No Auditing
840	781	Advanced Audit Policy Configuration	Other Account Management Events	auditpol	{0CCE923A-69AE-11D9-BED3-505054503030}
841	81	Advanced Audit Policy Configuration	Other Logon/Logoff Events	auditpol	{0CCE921C-69AE-11D9-BED3-505054503030}									No Auditing
842	86	Advanced Audit Policy Configuration	Other Object Access Events	auditpol	{0CCE9227-69AE-11D9-BED3-505054503030}									No Auditing
843	92	Advanced Audit Policy Configuration	Other Policy Change Events	auditpol	{0CCE9234-69AE-11D9-BED3-505054503030}									No Auditing
844	94	Advanced Audit Policy Configuration	Other System Events	auditpol	{0CCE9214-69AE-11D9-BED3-505054503030}									Success and Failure
845	76	Advanced Audit Policy Configuration	Plug and Play Events	auditpol	{0cce9248-69ae-11d9-bed3-505054503030}									No Auditing
846	77	Advanced Audit Policy Configuration	Process Creation	auditpol	{0CCE922B-69AE-11D9-BED3-505054503030}									No Auditing
847	87	Advanced Audit Policy Configuration	Removable Storage	auditpol	{0CCE9245-69AE-11D9-BED3-505054503030}									No Auditing
848	88	Advanced Audit Policy Configuration	SAM	auditpol	{0CCE9220-69AE-11D9-BED3-505054503030}									No Auditing
849	73	Advanced Audit Policy Configuration	Security Group Management	auditpol	{0CCE9237-69AE-11D9-BED3-505054503030}									Success
850	95	Advanced Audit Policy Configuration	Security State Change	auditpol	{0CCE9210-69AE-11D9-BED3-505054503030}									Success
851	96	Advanced Audit Policy Configuration	Security System Extension	auditpol	{0CCE9211-69AE-11D9-BED3-505054503030}									No Auditing
852	93	Advanced Audit Policy Configuration	Sensitive Privilege Use	auditpol	{0CCE9228-69AE-11D9-BED3-505054503030}									No Auditing
853	82	Advanced Audit Policy Configuration	Special Logon	auditpol	{0CCE921B-69AE-11D9-BED3-505054503030}									Success
854	97	Advanced Audit Policy Configuration	System Integrity	auditpol	{0CCE9212-69AE-11D9-BED3-505054503030}									Success and Failure
855	74	Advanced Audit Policy Configuration	User Account Management	auditpol	{0CCE9235-69AE-11D9-BED3-505054503030}									Success
856	1	Features	SMBv1 Support	WindowsOptionalFeature	smb1protocol									Disabled
857	1910	MS Security Guide	Add Extended Protection for LDAP Authentication (Domain Controllers only)	Registry		HKLM:\System\CurrentControlSet\Services\NTDS\Parameters	LdapEnforceChannelBinding
858	537	MS Security Guide	Apply UAC restrictions to local accounts on network logons	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	LocalAccountTokenFilterPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\MSSecurityGuide	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\MSSecurityGuide	ApplyUACRestrictionsToLocalAccountsOnNetworkLogon
859	790	MS Security Guide	Apply UAC restrictions to local accounts on network logons (Member)	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	LocalAccountTokenFilterPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\MSSecurityGuide	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\MSSecurityGuide	ApplyUACRestrictionsToLocalAccountsOnNetworkLogon				0
860	1696	MS Security Guide	Configure RPC packet level privacy setting for incoming connections	Registry		HKLM:\System\CurrentControlSet\Control\Print	RpcAuthnLevelPrivacyEnabled
861	538	MS Security Guide	Configure SMB v1 client driver	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\MrxSmb10	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\MSSecurityGuide	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\MSSecurityGuide	ConfigureSMBV1ClientDriver				1
862	539	MS Security Guide	Configure SMB v1 server	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters	SMB1	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\MSSecurityGuide	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\MSSecurityGuide	ConfigureSMBV1Server				1
863	1801	MS Security Guide	Enable Certificate Padding	Registry		HKLM:\SOFTWARE\Microsoft\Cryptography\Wintrust\Config	EnableCertPaddingCheck
864	1912	MS Security Guide	Enable Certificate Padding (32-bit subsystem on 64-bit OS)	Registry		HKLM:\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Wintrust\Config	EnableCertPaddingCheck
865	540	MS Security Guide	Enable Structured Exception Handling Overwrite Protection (SEHOP)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\kernel	DisableExceptionChainValidation	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\MSSecurityGuide	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\MSSecurityGuide	EnableStructuredExceptionHandlingOverwriteProtection				0
866	791	MS Security Guide	Extended Protection for LDAP Authentication (DC)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\NTDS\Parameters	LdapEnforceChannelBinding							1
867	270	MS Security Guide	LSA Protection	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\Lsa	RunAsPPL
868	1652	MS Security Guide	Limits print driver installation to Administrators	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint	RestrictDriverInstallationToAdministrators
869	271	MS Security Guide	Lsass.exe audit mode	Registry		HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\LSASS.exe	AuditLevel
870	1715	MS Security Guide	Manage processing of Queue-specific files	Registry		HKLM:\Software\Policies\Microsoft\Windows NT\Printers	CopyFilesPolicy
871	272	MS Security Guide	NetBT NodeType configuration	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\NetBT\Parameters	NodeType	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\MSSecurityGuide	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\MSSecurityGuide	NetBTNodeTypeConfiguration				0
872	1324	MS Security Guide	Remove "Run As Different User" from context menus (batfile)	Registry		HKLM:\SOFTWARE\Classes\batfile\shell\runasuser	SuppressionPolicy
873	1325	MS Security Guide	Remove "Run As Different User" from context menus (cmdfile)	Registry		HKLM:\SOFTWARE\Classes\cmdfile\shell\runasuser	SuppressionPolicy
874	1326	MS Security Guide	Remove "Run As Different User" from context menus (exefile)	Registry		HKLM:\SOFTWARE\Classes\exefile\shell\runasuser	SuppressionPolicy
875	1327	MS Security Guide	Remove "Run As Different User" from context menus (mscfile)	Registry		HKLM:\SOFTWARE\Classes\mscfile\shell\runasuser	SuppressionPolicy
876	273	MS Security Guide	WDigest Authentication	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest	UseLogonCredential	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\MSSecurityGuide	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\MSSecurityGuide	WDigestAuthentication				0
877	541	MSS (Legacy)	MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)	Registry		HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon	AutoAdminLogon	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSS-legacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSS-legacy	Pol_MSS_AutoAdminLogon				0
878	542	MSS (Legacy)	MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)	Registry		HKLM:\System\CurrentControlSet\Services\Tcpip6\Parameters	DisableIPSourceRouting	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\MSSLegacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\MSSLegacy	IPv6SourceRoutingProtectionLevel				0
879	543	MSS (Legacy)	MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)	Registry		HKLM:\System\CurrentControlSet\Services\Tcpip\Parameters	DisableIPSourceRouting	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\MSSLegacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\MSSLegacy	SourceRoutingProtectionLevel				1
880	544	MSS (Legacy)	MSS: (DisableSavePassword) Prevent the dial-up password from being saved	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\RasMan\Parameters	DisableSavePassword	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSS-legacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSS-legacy	Pol_MSS_DisableSavePassword
881	1547	MSS (Legacy)	MSS: (EnableDeadGWDetect) Allow automatic detection of dead network gateways (could lead to DoS)	Registry		HKLM:\System\CurrentControlSet\Services\Tcpip\Parameters	EnableDeadGWDetect	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSS-legacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSS-legacy	Pol_MSS_EnableDeadGWDetect
882	545	MSS (Legacy)	MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes	Registry		HKLM:\System\CurrentControlSet\Services\Tcpip\Parameters	EnableICMPRedirect	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\MSSLegacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\MSSLegacy	AllowICMPRedirectsToOverrideGeneratedRoute				1
883	546	MSS (Legacy)	MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters	KeepAliveTime	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSS-legacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSS-legacy	Pol_MSS_KeepAliveTime				7200000
884	547	MSS (Legacy)	MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers	Registry		HKLM:\System\CurrentControlSet\Services\Netbt\Parameters	NoNameReleaseOnDemand	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\MSSLegacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\MSSLegacy	AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers				0
885	548	MSS (Legacy)	MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters	PerformRouterDiscovery	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSS-legacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSS-legacy	Pol_MSS_PerformRouterDiscovery				0
886	274	MSS (Legacy)	MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager	SafeDLLSearchMode	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSS-legacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSS-legacy	Pol_MSS_SafeDllSearchMode				0
887	549	MSS (Legacy)	MSS: (ScreenSaverGracePeriod) The time in seconds before the screen saver grace period expires (0 recommended)	Registry		HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon	ScreenSaverGracePeriod	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSS-legacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSS-legacy	Pol_MSS_ScreenSaverGracePeriod				5
888	550	MSS (Legacy)	MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted	Registry		HKLM:\System\CurrentControlSet\Services\Tcpip6\Parameters	TcpMaxDataRetransmissions	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSS-legacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSS-legacy	Pol_MSS_TcpMaxDataRetransmissionsIPv6				5
889	551	MSS (Legacy)	MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted	Registry		HKLM:\System\CurrentControlSet\Services\Tcpip\Parameters	TcpMaxDataRetransmissions	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSS-legacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSS-legacy	Pol_MSS_TcpMaxDataRetransmissions				5
890	552	MSS (Legacy)	MSS: (WarningLevel) Percentage threshold for the security event log at which the system will generate a warning	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\Eventlog\Security	WarningLevel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\ADMX_MSS-legacy	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\ADMX_MSS-legacy	Pol_MSS_WarningLevel				0
891	685	Microsoft Defender Application Guard	Allow auditing events in Microsoft Defender Application Guard	Registry		HKLM:\SOFTWARE\Policies\Microsoft\AppHVSI	AuditApplicationGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\AuditApplicationGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\AuditApplicationGuard	AuditApplicationGuard
892	686	Microsoft Defender Application Guard	Allow camera and microphone access in Microsoft Defender Application Guard	Registry		HKLM:\SOFTWARE\Policies\Microsoft\AppHVSI	AllowCameraMicrophoneRedirection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\AuditApplicationGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\AuditApplicationGuard	AllowCameraMicrophoneRedirection
893	687	Microsoft Defender Application Guard	Allow data persistence for Microsoft Defender Application Guard	Registry		HKLM:\SOFTWARE\Policies\Microsoft\AppHVSI	AllowPersistence	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\AuditApplicationGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\AuditApplicationGuard	AllowPersistence
894	688	Microsoft Defender Application Guard	Allow files to download and save to the host operating system from Microsoft Defender Application Guard	Registry		HKLM:\SOFTWARE\Policies\Microsoft\AppHVSI	SaveFilesToHost	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\AuditApplicationGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\AuditApplicationGuard	SaveFilesToHost
895	1314	Microsoft Defender Application Guard	Allow users to trust files that open in Windows Defender Application Guard	Registry		HKLM:\SOFTWARE\Policies\Microsoft\AppHVSI	FileTrustCriteria
896	689	Microsoft Defender Application Guard	Configure Microsoft Defender Application Guard clipboard settings: Clipboard behavior setting	Registry		HKLM:\SOFTWARE\Policies\Microsoft\AppHVSI	AppHVSIClipboardSettings	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\AuditApplicationGuard	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\AuditApplicationGuard	ClipboardSettings
897	1306	Microsoft Defender Application Guard	Support for Microsoft Defender Application Guard	WindowsOptionalFeature	Windows-Defender-ApplicationGuard									Disabled
898	690	Microsoft Defender Application Guard	Turn on Microsoft Defender Application Guard in Managed Mode	Registry		HKLM:\SOFTWARE\Policies\Microsoft\AppHVSI	AllowAppHVSI_ProviderSet
899	1362	Microsoft Defender Exploit Guard	Exploit protection: Child Process: Override Child Process (GROOVE.EXE)	ProcessmitigationApplication	GROOVE.EXE/ChildProcess/OverrideChildProcess
900	1352	Microsoft Defender Exploit Guard	Exploit protection: Child Process: Override Child Process (fltldr.exe)	ProcessmitigationApplication	fltldr.exe/ChildProcess/OverrideChildProcess
901	248	Microsoft Defender Exploit Guard	Exploit protection: Control flow guard (CFG)	Processmitigation	Cfg.Enable									On
902	249	Microsoft Defender Exploit Guard	Exploit protection: Data Execution Prevention (DEP)	Processmitigation	DEP.Enable									On
903	1372	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (AcroRd32.exe)	ProcessmitigationApplication	AcroRd32.exe/ASLR/ForceRelocateImages
904	1364	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (Acrobat.exe)	ProcessmitigationApplication	Acrobat.exe/ASLR/ForceRelocateImages
905	1381	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (EXCEL.EXE)	ProcessmitigationApplication	EXCEL.EXE/ASLR/ForceRelocateImages
906	1354	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (GROOVE.EXE)	ProcessmitigationApplication	GROOVE.EXE/ASLR/ForceRelocateImages
907	1397	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (INFOPATH.EXE)	ProcessmitigationApplication	INFOPATH.EXE/ASLR/ForceRelocateImages
908	1426	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (LYNC.EXE)	ProcessmitigationApplication	LYNC.EXE/ASLR/ForceRelocateImages
909	1434	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (MSACCESS.EXE)	ProcessmitigationApplication	MSACCESS.EXE/ASLR/ForceRelocateImages
910	1442	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (MSPUB.EXE)	ProcessmitigationApplication	MSPUB.EXE/ASLR/ForceRelocateImages
911	1334	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (ONEDRIVE.EXE)	ProcessmitigationApplication	ONEDRIVE.EXE/ASLR/ForceRelocateImages
912	1457	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (OUTLOOK.EXE)	ProcessmitigationApplication	OUTLOOK.EXE/ASLR/ForceRelocateImages
913	1472	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (POWERPNT.EXE)	ProcessmitigationApplication	POWERPNT.EXE/ASLR/ForceRelocateImages
914	1480	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (PPTVIEW.EXE)	ProcessmitigationApplication	PPTVIEW.EXE/ASLR/ForceRelocateImages
915	1488	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (VISIO.EXE)	ProcessmitigationApplication	VISIO.EXE/ASLR/ForceRelocateImages
916	1496	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (VPREVIEW.EXE)	ProcessmitigationApplication	VPREVIEW.EXE/ASLR/ForceRelocateImages
917	1504	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (WINWORD.EXE)	ProcessmitigationApplication	WINWORD.EXE/ASLR/ForceRelocateImages
918	1343	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (firefox.exe)	ProcessmitigationApplication	firefox.exe/ASLR/ForceRelocateImages
919	1389	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (ASLR) (iexplore.exe)	ProcessmitigationApplication	iexplore.exe/ASLR/ForceRelocateImages
920	252	Microsoft Defender Exploit Guard	Exploit protection: Force randomization for images (Mandatory ASLR)	Processmitigation	ASLR.ForceRelocateImages									Off
921	256	Microsoft Defender Exploit Guard	Exploit protection: High-entropy ASLR	Processmitigation	ASLR.HighEntropy									On
922	1361	Microsoft Defender Exploit Guard	Exploit protection: ImageLoad: Override Block Remote Images (GROOVE.EXE)	ProcessmitigationApplication	GROOVE.EXE/ImageLoad/OverrideBlockRemoteImageLoads
923	1341	Microsoft Defender Exploit Guard	Exploit protection: ImageLoad: Override Block Remote Images (ONEDRIVE.EXE)	ProcessmitigationApplication	ONEDRIVE.EXE/ImageLoad/OverrideBlockRemoteImageLoads
924	1350	Microsoft Defender Exploit Guard	Exploit protection: ImageLoad: Override Block Remote Images (fltldr.exe)	ProcessmitigationApplication	fltldr.exe/ImageLoad/OverrideBlockRemoteImageLoads
925	250	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP)	Processmitigation	DEP.OverrideDEP									False
926	1371	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (AcroRd32.exe)	ProcessmitigationApplication	AcroRd32.exe/DEP/OverrideDEP
927	1363	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (Acrobat.exe)	ProcessmitigationApplication	Acrobat.exe/DEP/OverrideDEP
928	1380	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (EXCEL.EXE)	ProcessmitigationApplication	EXCEL.EXE/DEP/OverrideDEP
929	1353	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (GROOVE.EXE)	ProcessmitigationApplication	GROOVE.EXE/DEP/OverrideDEP
930	1396	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (INFOPATH.EXE)	ProcessmitigationApplication	INFOPATH.EXE/DEP/OverrideDEP
931	1425	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (LYNC.EXE)	ProcessmitigationApplication	LYNC.EXE/DEP/OverrideDEP
932	1433	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (MSACCESS.EXE)	ProcessmitigationApplication	MSACCESS.EXE/DEP/OverrideDEP
933	1441	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (MSPUB.EXE)	ProcessmitigationApplication	MSPUB.EXE/DEP/OverrideDEP
934	1449	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (OIS.EXE)	ProcessmitigationApplication	OIS.EXE/DEP/OverrideDEP
935	1332	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (ONEDRIVE.EXE)	ProcessmitigationApplication	ONEDRIVE.EXE/DEP/OverrideDEP
936	1456	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (OUTLOOK.EXE)	ProcessmitigationApplication	OUTLOOK.EXE/DEP/OverrideDEP
937	1471	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (POWERPNT.EXE)	ProcessmitigationApplication	POWERPNT.EXE/DEP/OverrideDEP
938	1479	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (PPTVIEW.EXE)	ProcessmitigationApplication	PPTVIEW.EXE/DEP/OverrideDEP
939	1487	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (VISIO.EXE)	ProcessmitigationApplication	VISIO.EXE/DEP/OverrideDEP
940	1495	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (VPREVIEW.EXE)	ProcessmitigationApplication	VPREVIEW.EXE/DEP/OverrideDEP
941	1503	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (WINWORD.EXE)	ProcessmitigationApplication	WINWORD.EXE/DEP/OverrideDEP
942	1379	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (chrome.exe)	ProcessmitigationApplication	chrome.exe/DEP/OverrideDEP
943	1342	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (firefox.exe)	ProcessmitigationApplication	firefox.exe/DEP/OverrideDEP
944	1351	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (fltldr.exe)	ProcessmitigationApplication	fltldr.exe/DEP/OverrideDEP
945	1388	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (iexplore.exe)	ProcessmitigationApplication	iexplore.exe/DEP/OverrideDEP
946	1404	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (java.exe)	ProcessmitigationApplication	java.exe/DEP/OverrideDEP
947	1411	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (javaw.exe)	ProcessmitigationApplication	javaw.exe/DEP/OverrideDEP
948	1418	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (javaws.exe)	ProcessmitigationApplication	javaws.exe/DEP/OverrideDEP
949	1464	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (plugin-container.exe)	ProcessmitigationApplication	plugin-container.exe/DEP/OverrideDEP
950	1511	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (wmplayer.exe)	ProcessmitigationApplication	wmplayer.exe/DEP/OverrideDEP
951	1518	Microsoft Defender Exploit Guard	Exploit protection: Override Data Execution Prevention (DEP) (wordpad.exe)	ProcessmitigationApplication	wordpad.exe/DEP/OverrideDEP
952	1333	Microsoft Defender Exploit Guard	Exploit protection: Override Relocate Images (ASLR) (ONEDRIVE.EXE)	ProcessmitigationApplication	ONEDRIVE.EXE/ASLR/OverrideForceRelocateImages
953	253	Microsoft Defender Exploit Guard	Exploit protection: Override force randomization for images (Mandatory ASLR)	Processmitigation	ASLR.OverrideForceRelocateImages									False
954	257	Microsoft Defender Exploit Guard	Exploit protection: Override high-entropy ASLR	Processmitigation	ASLR.OverrideHighEntropy									False
955	255	Microsoft Defender Exploit Guard	Exploit protection: Override randomize memory allocations (Bottom-up ASLR)	Processmitigation	ASLR.OverrideBottomUp									False
956	260	Microsoft Defender Exploit Guard	Exploit protection: Override validate exception chains (SEHOP)	Processmitigation	SEHOP.OverrideSEHOP									False
957	262	Microsoft Defender Exploit Guard	Exploit protection: Override validate heap integrity	Processmitigation	HEAP.OverrideHEAP									False
958	1373	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (AcroRd32.exe)	ProcessmitigationApplication	AcroRd32.exe/Payload/OverrideEnableExportAddressFilter
959	1365	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (Acrobat.exe)	ProcessmitigationApplication	Acrobat.exe/Payload/OverrideEnableExportAddressFilter
960	1382	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (EXCEL.EXE)	ProcessmitigationApplication	EXCEL.EXE/Payload/OverrideEnableExportAddressFilter
961	1355	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (GROOVE.EXE)	ProcessmitigationApplication	GROOVE.EXE/Payload/OverrideEnableExportAddressFilter
962	1398	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (INFOPATH.EXE)	ProcessmitigationApplication	INFOPATH.EXE/Payload/OverrideEnableExportAddressFilter
963	1427	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (LYNC.EXE)	ProcessmitigationApplication	LYNC.EXE/Payload/OverrideEnableExportAddressFilter
964	1435	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (MSACCESS.EXE)	ProcessmitigationApplication	MSACCESS.EXE/Payload/OverrideEnableExportAddressFilter
965	1443	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (MSPUB.EXE)	ProcessmitigationApplication	MSPUB.EXE/Payload/OverrideEnableExportAddressFilter
966	1450	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (OIS.EXE)	ProcessmitigationApplication	OIS.EXE/Payload/OverrideEnableExportAddressFilter
967	1335	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (ONEDRIVE.EXE)	ProcessmitigationApplication	ONEDRIVE.EXE/Payload/OverrideEnableExportAddressFilter
968	1458	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (OUTLOOK.EXE)	ProcessmitigationApplication	OUTLOOK.EXE/Payload/OverrideEnableExportAddressFilter
969	1473	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (POWERPNT.EXE)	ProcessmitigationApplication	POWERPNT.EXE/Payload/OverrideEnableExportAddressFilter
970	1505	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (WINWORD.EXE)	ProcessmitigationApplication	WINWORD.EXE/Payload/OverrideEnableExportAddressFilter
971	1344	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (fltldr.exe)	ProcessmitigationApplication	fltldr.exe/Payload/OverrideEnableExportAddressFilter
972	1390	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (iexplore.exe)	ProcessmitigationApplication	iexplore.exe/Payload/OverrideEnableExportAddressFilter
973	1405	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (java.exe)	ProcessmitigationApplication	java.exe/Payload/OverrideEnableExportAddressFilter
974	1412	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (javaw.exe)	ProcessmitigationApplication	javaw.exe/Payload/OverrideEnableExportAddressFilter
975	1419	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (javaws.exe)	ProcessmitigationApplication	javaws.exe/Payload/OverrideEnableExportAddressFilter
976	1465	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (plugin-container.exe)	ProcessmitigationApplication	plugin-container.exe/Payload/OverrideEnableExportAddressFilter
977	1512	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (wmplayer.exe)	ProcessmitigationApplication	wmplayer.exe/Payload/OverrideEnableExportAddressFilter
978	1519	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter (wordpad.exe)	ProcessmitigationApplication	wordpad.exe/Payload/OverrideEnableExportAddressFilter
979	1374	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (AcroRd32.exe)	ProcessmitigationApplication	AcroRd32.exe/Payload/OverrideEnableExportAddressFilterPlus
980	1366	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (Acrobat.exe)	ProcessmitigationApplication	Acrobat.exe/Payload/OverrideEnableExportAddressFilterPlus
981	1383	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (EXCEL.EXE)	ProcessmitigationApplication	EXCEL.EXE/Payload/OverrideEnableExportAddressFilterPlus
982	1356	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (GROOVE.EXE)	ProcessmitigationApplication	GROOVE.EXE/Payload/OverrideEnableExportAddressFilterPlus
983	1399	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (INFOPATH.EXE)	ProcessmitigationApplication	INFOPATH.EXE/Payload/OverrideEnableExportAddressFilterPlus
984	1428	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (LYNC.EXE)	ProcessmitigationApplication	LYNC.EXE/Payload/OverrideEnableExportAddressFilterPlus
985	1436	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (MSACCESS.EXE)	ProcessmitigationApplication	MSACCESS.EXE/Payload/OverrideEnableExportAddressFilterPlus
986	1444	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (MSPUB.EXE)	ProcessmitigationApplication	MSPUB.EXE/Payload/OverrideEnableExportAddressFilterPlus
987	1451	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (OIS.EXE)	ProcessmitigationApplication	OIS.EXE/Payload/OverrideEnableExportAddressFilterPlus
988	1336	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (ONEDRIVE.EXE)	ProcessmitigationApplication	ONEDRIVE.EXE/Payload/OverrideEnableExportAddressFilterPlus
989	1459	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (OUTLOOK.EXE)	ProcessmitigationApplication	OUTLOOK.EXE/Payload/OverrideEnableExportAddressFilterPlus
990	1474	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (POWERPNT.EXE)	ProcessmitigationApplication	POWERPNT.EXE/Payload/OverrideEnableExportAddressFilterPlus
991	1482	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (PPTVIEW.EXE)	ProcessmitigationApplication	PPTVIEW.EXE/Payload/OverrideEnableExportAddressFilterPlus
992	1490	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (VISIO.EXE)	ProcessmitigationApplication	VISIO.EXE/Payload/OverrideEnableExportAddressFilterPlus
993	1498	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (VPREVIEW.EXE)	ProcessmitigationApplication	VPREVIEW.EXE/Payload/OverrideEnableExportAddressFilterPlus
994	1506	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (WINWORD.EXE)	ProcessmitigationApplication	WINWORD.EXE/Payload/OverrideEnableExportAddressFilterPlus
995	1345	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (fltldr.exe)	ProcessmitigationApplication	fltldr.exe/Payload/OverrideEnableExportAddressFilterPlus
996	1391	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (iexplore.exe)	ProcessmitigationApplication	iexplore.exe/Payload/OverrideEnableExportAddressFilterPlus
997	1406	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (java.exe)	ProcessmitigationApplication	java.exe/Payload/OverrideEnableExportAddressFilterPlus
998	1413	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (javaw.exe)	ProcessmitigationApplication	javaw.exe/Payload/OverrideEnableExportAddressFilterPlus
999	1420	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (javaws.exe)	ProcessmitigationApplication	javaws.exe/Payload/OverrideEnableExportAddressFilterPlus
1000	1466	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (plugin-container.exe)	ProcessmitigationApplication	plugin-container.exe/Payload/OverrideEnableExportAddressFilterPlus
1001	1513	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (wmplayer.exe)	ProcessmitigationApplication	wmplayer.exe/Payload/OverrideEnableExportAddressFilterPlus
1002	1520	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export Address Filter Plus (wordpad.exe)	ProcessmitigationApplication	wordpad.exe/Payload/OverrideEnableExportAddressFilterPlus
1003	1481	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export AddressFilter (PPTVIEW.EXE)	ProcessmitigationApplication	PPTVIEW.EXE/Payload/OverrideEnableExportAddressFilter
1004	1489	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export AddressFilter (VISIO.EXE)	ProcessmitigationApplication	VISIO.EXE/Payload/OverrideEnableExportAddressFilter
1005	1497	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Export AddressFilter (VPREVIEW.EXE)	ProcessmitigationApplication	VPREVIEW.EXE/Payload/OverrideEnableExportAddressFilter
1006	1375	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (AcroRd32.exe)	ProcessmitigationApplication	AcroRd32.exe/Payload/OverrideEnableImportAddressFilter
1007	1367	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (Acrobat.exe)	ProcessmitigationApplication	Acrobat.exe/Payload/OverrideEnableImportAddressFilter
1008	1384	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (EXCEL.EXE)	ProcessmitigationApplication	EXCEL.EXE/Payload/OverrideEnableImportAddressFilter
1009	1357	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (GROOVE.EXE)	ProcessmitigationApplication	GROOVE.EXE/Payload/OverrideEnableImportAddressFilter
1010	1400	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (INFOPATH.EXE)	ProcessmitigationApplication	INFOPATH.EXE/Payload/OverrideEnableImportAddressFilter
1011	1429	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (LYNC.EXE)	ProcessmitigationApplication	LYNC.EXE/Payload/OverrideEnableImportAddressFilter
1012	1437	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (MSACCESS.EXE)	ProcessmitigationApplication	MSACCESS.EXE/Payload/OverrideEnableImportAddressFilter
1013	1445	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (MSPUB.EXE)	ProcessmitigationApplication	MSPUB.EXE/Payload/OverrideEnableImportAddressFilter
1014	1452	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (OIS.EXE)	ProcessmitigationApplication	OIS.EXE/Payload/OverrideEnableImportAddressFilter
1015	1337	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (ONEDRIVE.EXE)	ProcessmitigationApplication	ONEDRIVE.EXE/Payload/OverrideEnableImportAddressFilter
1016	1460	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (OUTLOOK.EXE)	ProcessmitigationApplication	OUTLOOK.EXE/Payload/OverrideEnableImportAddressFilter
1017	1475	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (POWERPNT.EXE)	ProcessmitigationApplication	POWERPNT.EXE/Payload/OverrideEnableImportAddressFilter
1018	1483	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (PPTVIEW.EXE)	ProcessmitigationApplication	PPTVIEW.EXE/Payload/OverrideEnableImportAddressFilter
1019	1491	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (VISIO.EXE)	ProcessmitigationApplication	VISIO.EXE/Payload/OverrideEnableImportAddressFilter
1020	1499	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (VPREVIEW.EXE)	ProcessmitigationApplication	VPREVIEW.EXE/Payload/OverrideEnableImportAddressFilter
1021	1507	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (WINWORD.EXE)	ProcessmitigationApplication	WINWORD.EXE/Payload/OverrideEnableImportAddressFilter
1022	1346	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (fltldr.exe)	ProcessmitigationApplication	fltldr.exe/Payload/OverrideEnableImportAddressFilter
1023	1392	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (iexplore.exe)	ProcessmitigationApplication	iexplore.exe/Payload/OverrideEnableImportAddressFilter
1024	1407	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (java.exe)	ProcessmitigationApplication	java.exe/Payload/OverrideEnableImportAddressFilter
1025	1414	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (javaw.exe)	ProcessmitigationApplication	javaw.exe/Payload/OverrideEnableImportAddressFilter
1026	1421	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (javaws.exe)	ProcessmitigationApplication	javaws.exe/Payload/OverrideEnableImportAddressFilter
1027	1467	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (plugin-container.exe)	ProcessmitigationApplication	plugin-container.exe/Payload/OverrideEnableImportAddressFilter
1028	1514	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (wmplayer.exe)	ProcessmitigationApplication	wmplayer.exe/Payload/OverrideEnableImportAddressFilter
1029	1521	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable Import Address Filter (wordpad.exe)	ProcessmitigationApplication	wordpad.exe/Payload/OverrideEnableImportAddressFilter
1030	1377	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (AcroRd32.exe)	ProcessmitigationApplication	AcroRd32.exe/Payload/OverrideEnableRopCallerCheck
1031	1369	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (Acrobat.exe)	ProcessmitigationApplication	Acrobat.exe/Payload/OverrideEnableRopCallerCheck
1032	1386	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (EXCEL.EXE)	ProcessmitigationApplication	EXCEL.EXE/Payload/OverrideEnableRopCallerCheck
1033	1359	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (GROOVE.EXE)	ProcessmitigationApplication	GROOVE.EXE/Payload/OverrideEnableRopCallerCheck
1034	1402	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (INFOPATH.EXE)	ProcessmitigationApplication	INFOPATH.EXE/Payload/OverrideEnableRopCallerCheck
1035	1431	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (LYNC.EXE)	ProcessmitigationApplication	LYNC.EXE/Payload/OverrideEnableRopCallerCheck
1036	1439	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (MSACCESS.EXE)	ProcessmitigationApplication	MSACCESS.EXE/Payload/OverrideEnableRopCallerCheck
1037	1447	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (MSPUB.EXE)	ProcessmitigationApplication	MSPUB.EXE/Payload/OverrideEnableRopCallerCheck
1038	1454	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (OIS.EXE)	ProcessmitigationApplication	OIS.EXE/Payload/OverrideEnableRopCallerCheck
1039	1339	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (ONEDRIVE.EXE)	ProcessmitigationApplication	ONEDRIVE.EXE/Payload/OverrideEnableRopCallerCheck
1040	1462	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (OUTLOOK.EXE)	ProcessmitigationApplication	OUTLOOK.EXE/Payload/OverrideEnableRopCallerCheck
1041	1477	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (POWERPNT.EXE)	ProcessmitigationApplication	POWERPNT.EXE/Payload/OverrideEnableRopCallerCheck
1042	1485	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (PPTVIEW.EXE)	ProcessmitigationApplication	PPTVIEW.EXE/Payload/OverrideEnableRopCallerCheck
1043	1493	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (VISIO.EXE)	ProcessmitigationApplication	VISIO.EXE/Payload/OverrideEnableRopCallerCheck
1044	1501	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (VPREVIEW.EXE)	ProcessmitigationApplication	VPREVIEW.EXE/Payload/OverrideEnableRopCallerCheck
1045	1509	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (WINWORD.EXE)	ProcessmitigationApplication	WINWORD.EXE/Payload/OverrideEnableRopCallerCheck
1046	1348	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (fltldr.exe)	ProcessmitigationApplication	fltldr.exe/Payload/OverrideEnableRopCallerCheck
1047	1394	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (iexplore.exe)	ProcessmitigationApplication	iexplore.exe/Payload/OverrideEnableRopCallerCheck
1048	1409	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (java.exe)	ProcessmitigationApplication	java.exe/Payload/OverrideEnableRopCallerCheck
1049	1416	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (javaw.exe)	ProcessmitigationApplication	javaw.exe/Payload/OverrideEnableRopCallerCheck
1050	1423	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (javaws.exe)	ProcessmitigationApplication	javaws.exe/Payload/OverrideEnableRopCallerCheck
1051	1469	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (plugin-container.exe)	ProcessmitigationApplication	plugin-container.exe/Payload/OverrideEnableRopCallerCheck
1052	1516	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (wmplayer.exe)	ProcessmitigationApplication	wmplayer.exe/Payload/OverrideEnableRopCallerCheck
1053	1523	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Caller Check (wordpad.exe)	ProcessmitigationApplication	wordpad.exe/Payload/OverrideEnableRopCallerCheck
1054	1378	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (AcroRd32.exe)	ProcessmitigationApplication	AcroRd32.exe/Payload/OverrideEnableRopSimExec
1055	1370	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (Acrobat.exe)	ProcessmitigationApplication	Acrobat.exe/Payload/OverrideEnableRopSimExec
1056	1387	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (EXCEL.EXE)	ProcessmitigationApplication	EXCEL.EXE/Payload/OverrideEnableRopSimExec
1057	1360	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (GROOVE.EXE)	ProcessmitigationApplication	GROOVE.EXE/Payload/OverrideEnableRopSimExec
1058	1403	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (INFOPATH.EXE)	ProcessmitigationApplication	INFOPATH.EXE/Payload/OverrideEnableRopSimExec
1059	1432	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (LYNC.EXE)	ProcessmitigationApplication	LYNC.EXE/Payload/OverrideEnableRopSimExec
1060	1440	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (MSACCESS.EXE)	ProcessmitigationApplication	MSACCESS.EXE/Payload/OverrideEnableRopSimExec
1061	1448	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (MSPUB.EXE)	ProcessmitigationApplication	MSPUB.EXE/Payload/OverrideEnableRopSimExec
1062	1455	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (OIS.EXE)	ProcessmitigationApplication	OIS.EXE/Payload/OverrideEnableRopSimExec
1063	1340	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (ONEDRIVE.EXE)	ProcessmitigationApplication	ONEDRIVE.EXE/Payload/OverrideEnableRopSimExec
1064	1463	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (OUTLOOK.EXE)	ProcessmitigationApplication	OUTLOOK.EXE/Payload/OverrideEnableRopSimExec
1065	1478	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (POWERPNT.EXE)	ProcessmitigationApplication	POWERPNT.EXE/Payload/OverrideEnableRopSimExec
1066	1486	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (PPTVIEW.EXE)	ProcessmitigationApplication	PPTVIEW.EXE/Payload/OverrideEnableRopSimExec
1067	1494	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (VISIO.EXE)	ProcessmitigationApplication	VISIO.EXE/Payload/OverrideEnableRopSimExec
1068	1502	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (VPREVIEW.EXE)	ProcessmitigationApplication	VPREVIEW.EXE/Payload/OverrideEnableRopSimExec
1069	1510	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (WINWORD.EXE)	ProcessmitigationApplication	WINWORD.EXE/Payload/OverrideEnableRopSimExec
1070	1349	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (fltldr.exe)	ProcessmitigationApplication	fltldr.exe/Payload/OverrideEnableRopSimExec
1071	1395	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (iexplore.exe)	ProcessmitigationApplication	iexplore.exe/Payload/OverrideEnableRopSimExec
1072	1410	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (java.exe)	ProcessmitigationApplication	java.exe/Payload/OverrideEnableRopSimExec
1073	1417	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (javaw.exe)	ProcessmitigationApplication	javaw.exe/Payload/OverrideEnableRopSimExec
1074	1424	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (javaws.exe)	ProcessmitigationApplication	javaws.exe/Payload/OverrideEnableRopSimExec
1075	1470	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (plugin-container.exe)	ProcessmitigationApplication	plugin-container.exe/Payload/OverrideEnableRopSimExec
1076	1517	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (wmplayer.exe)	ProcessmitigationApplication	wmplayer.exe/Payload/OverrideEnableRopSimExec
1077	1524	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Sim Exec (wordpad.exe)	ProcessmitigationApplication	wordpad.exe/Payload/OverrideEnableRopSimExec
1078	1376	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (AcroRd32.exe)	ProcessmitigationApplication	AcroRd32.exe/Payload/OverrideEnableRopStackPivot
1079	1368	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (Acrobat.exe)	ProcessmitigationApplication	Acrobat.exe/Payload/OverrideEnableRopStackPivot
1080	1385	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (EXCEL.EXE)	ProcessmitigationApplication	EXCEL.EXE/Payload/OverrideEnableRopStackPivot
1081	1358	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (GROOVE.EXE)	ProcessmitigationApplication	GROOVE.EXE/Payload/OverrideEnableRopStackPivot
1082	1401	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (INFOPATH.EXE)	ProcessmitigationApplication	INFOPATH.EXE/Payload/OverrideEnableRopStackPivot
1083	1430	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (LYNC.EXE)	ProcessmitigationApplication	LYNC.EXE/Payload/OverrideEnableRopStackPivot
1084	1438	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (MSACCESS.EXE)	ProcessmitigationApplication	MSACCESS.EXE/Payload/OverrideEnableRopStackPivot
1085	1446	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (MSPUB.EXE)	ProcessmitigationApplication	MSPUB.EXE/Payload/OverrideEnableRopStackPivot
1086	1453	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (OIS.EXE)	ProcessmitigationApplication	OIS.EXE/Payload/OverrideEnableRopStackPivot
1087	1338	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (ONEDRIVE.EXE)	ProcessmitigationApplication	ONEDRIVE.EXE/Payload/OverrideEnableRopStackPivot
1088	1461	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (OUTLOOK.EXE)	ProcessmitigationApplication	OUTLOOK.EXE/Payload/OverrideEnableRopStackPivot
1089	1476	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (POWERPNT.EXE)	ProcessmitigationApplication	POWERPNT.EXE/Payload/OverrideEnableRopStackPivot
1090	1484	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (PPTVIEW.EXE)	ProcessmitigationApplication	PPTVIEW.EXE/Payload/OverrideEnableRopStackPivot
1091	1492	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (VISIO.EXE)	ProcessmitigationApplication	VISIO.EXE/Payload/OverrideEnableRopStackPivot
1092	1500	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (VPREVIEW.EXE)	ProcessmitigationApplication	VPREVIEW.EXE/Payload/OverrideEnableRopStackPivot
1093	1508	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (WINWORD.EXE)	ProcessmitigationApplication	WINWORD.EXE/Payload/OverrideEnableRopStackPivot
1094	1347	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (fltldr.exe)	ProcessmitigationApplication	fltldr.exe/Payload/OverrideEnableRopStackPivot
1095	1393	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (iexplore.exe)	ProcessmitigationApplication	iexplore.exe/Payload/OverrideEnableRopStackPivot
1096	1408	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (java.exe)	ProcessmitigationApplication	java.exe/Payload/OverrideEnableRopStackPivot
1097	1415	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (javaw.exe)	ProcessmitigationApplication	javaw.exe/Payload/OverrideEnableRopStackPivot
1098	1422	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (javaws.exe)	ProcessmitigationApplication	javaws.exe/Payload/OverrideEnableRopStackPivot
1099	1468	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (plugin-container.exe)	ProcessmitigationApplication	plugin-container.exe/Payload/OverrideEnableRopStackPivot
1100	1515	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (wmplayer.exe)	ProcessmitigationApplication	wmplayer.exe/Payload/OverrideEnableRopStackPivot
1101	1522	Microsoft Defender Exploit Guard	Exploit protection: Payload: Override Enable ROP Stack Pivot (wordpad.exe)	ProcessmitigationApplication	wordpad.exe/Payload/OverrideEnableRopStackPivot
1102	254	Microsoft Defender Exploit Guard	Exploit protection: Randomize memory allocations (Bottom-up ASLR)	Processmitigation	ASLR.BottomUp									On
1103	259	Microsoft Defender Exploit Guard	Exploit protection: Validate exception chains (SEHOP (Telemetry only)	Processmitigation	SEHOP.TelemetryOnly									NOTSET
1104	258	Microsoft Defender Exploit Guard	Exploit protection: Validate exception chains (SEHOP)	Processmitigation	SEHOP.Enable									On
1105	261	Microsoft Defender Exploit Guard	Exploit protection: Validate heap integrity	Processmitigation	HEAP.TerminateOnError									On
1106	251	Microsoft Defender Exploit Guard	Force use of Data Execution Prevention (DEP)	bcdedit	nx									OptIn
1107	1331	Microsoft Defender Exploit Guard	Use a common set of exploit protection settings	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender ExploitGuard\Exploit Protection	ExploitProtectionSettings
1108	1000	Office 2016 / Office 365	Global Options: Disable UI extending from documents and templates (Access)	Registry		HKCU:\software\policies\microsoft\office\16.0\common\toolbars\access	noextensibilitycustomizationfromdocument
1109	1001	Office 2016 / Office 365	Global Options: Disable UI extending from documents and templates (Excel)	Registry		HKCU:\software\policies\microsoft\office\16.0\common\toolbars\excel	noextensibilitycustomizationfromdocument
1110	1002	Office 2016 / Office 365	Global Options: Disable UI extending from documents and templates (Infopath)	Registry		HKCU:\software\policies\microsoft\office\16.0\common\toolbars\infopath	noextensibilitycustomizationfromdocument
1111	1003	Office 2016 / Office 365	Global Options: Disable UI extending from documents and templates (Outlook)	Registry		HKCU:\software\policies\microsoft\office\16.0\common\toolbars\outlook	noextensibilitycustomizationfromdocument
1112	1004	Office 2016 / Office 365	Global Options: Disable UI extending from documents and templates (PowerPoint)	Registry		HKCU:\software\policies\microsoft\office\16.0\common\toolbars\powerpoint	noextensibilitycustomizationfromdocument
1113	1005	Office 2016 / Office 365	Global Options: Disable UI extending from documents and templates (Project)	Registry		HKCU:\software\policies\microsoft\office\16.0\common\toolbars\project	noextensibilitycustomizationfromdocument
1114	1006	Office 2016 / Office 365	Global Options: Disable UI extending from documents and templates (Publisher)	Registry		HKCU:\software\policies\microsoft\office\16.0\common\toolbars\publisher	noextensibilitycustomizationfromdocument
1115	1007	Office 2016 / Office 365	Global Options: Disable UI extending from documents and templates (Visio)	Registry		HKCU:\software\policies\microsoft\office\16.0\common\toolbars\visio	noextensibilitycustomizationfromdocument
1116	1008	Office 2016 / Office 365	Global Options: Disable UI extending from documents and templates (Word)	Registry		HKCU:\software\policies\microsoft\office\16.0\common\toolbars\word	noextensibilitycustomizationfromdocument
1117	1093	Office 2016 / Office 365	IE Security: Add-on Management (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	msaccess.exe
1118	1090	Office 2016 / Office 365	IE Security: Add-on Management (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	excel.exe
1119	1091	Office 2016 / Office 365	IE Security: Add-on Management (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	exprwd.exe
1120	1092	Office 2016 / Office 365	IE Security: Add-on Management (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	groove.exe
1121	1096	Office 2016 / Office 365	IE Security: Add-on Management (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	onenote.exe
1122	1097	Office 2016 / Office 365	IE Security: Add-on Management (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	outlook.exe
1123	1099	Office 2016 / Office 365	IE Security: Add-on Management (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	pptview.exe
1124	1098	Office 2016 / Office 365	IE Security: Add-on Management (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	powerpnt.exe
1125	1102	Office 2016 / Office 365	IE Security: Add-on Management (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	winproj.exe
1126	1095	Office 2016 / Office 365	IE Security: Add-on Management (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	mspub.exe
1127	1094	Office 2016 / Office 365	IE Security: Add-on Management (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	mse7.exe
1128	1100	Office 2016 / Office 365	IE Security: Add-on Management (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	spdesign.exe
1129	1101	Office 2016 / Office 365	IE Security: Add-on Management (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	visio.exe
1130	1103	Office 2016 / Office 365	IE Security: Add-on Management (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_addon_management	winword.exe
1131	1107	Office 2016 / Office 365	IE Security: Consistent Mime Handling (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	msaccess.exe
1132	1104	Office 2016 / Office 365	IE Security: Consistent Mime Handling (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	excel.exe
1133	1105	Office 2016 / Office 365	IE Security: Consistent Mime Handling (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	exprwd.exe
1134	1106	Office 2016 / Office 365	IE Security: Consistent Mime Handling (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	groove.exe
1135	1110	Office 2016 / Office 365	IE Security: Consistent Mime Handling (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	onenote.exe
1136	1111	Office 2016 / Office 365	IE Security: Consistent Mime Handling (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	outlook.exe
1137	1113	Office 2016 / Office 365	IE Security: Consistent Mime Handling (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	pptview.exe
1138	1112	Office 2016 / Office 365	IE Security: Consistent Mime Handling (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	powerpnt.exe
1139	1116	Office 2016 / Office 365	IE Security: Consistent Mime Handling (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	winproj.exe
1140	1109	Office 2016 / Office 365	IE Security: Consistent Mime Handling (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	mspub.exe
1141	1108	Office 2016 / Office 365	IE Security: Consistent Mime Handling (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	mse7.exe
1142	1114	Office 2016 / Office 365	IE Security: Consistent Mime Handling (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	spdesign.exe
1143	1115	Office 2016 / Office 365	IE Security: Consistent Mime Handling (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	visio.exe
1144	1117	Office 2016 / Office 365	IE Security: Consistent Mime Handling (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_handling	winword.exe
1145	1121	Office 2016 / Office 365	IE Security: Disable user name and password (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	msaccess.exe
1146	1118	Office 2016 / Office 365	IE Security: Disable user name and password (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	excel.exe
1147	1119	Office 2016 / Office 365	IE Security: Disable user name and password (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	exprwd.exe
1148	1120	Office 2016 / Office 365	IE Security: Disable user name and password (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	groove.exe
1149	1124	Office 2016 / Office 365	IE Security: Disable user name and password (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	onenote.exe
1150	1125	Office 2016 / Office 365	IE Security: Disable user name and password (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	outlook.exe
1151	1127	Office 2016 / Office 365	IE Security: Disable user name and password (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	pptview.exe
1152	1126	Office 2016 / Office 365	IE Security: Disable user name and password (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	powerpnt.exe
1153	1130	Office 2016 / Office 365	IE Security: Disable user name and password (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	winproj.exe
1154	1123	Office 2016 / Office 365	IE Security: Disable user name and password (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	mspub.exe
1155	1122	Office 2016 / Office 365	IE Security: Disable user name and password (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	mse7.exe
1156	1128	Office 2016 / Office 365	IE Security: Disable user name and password (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	spdesign.exe
1157	1129	Office 2016 / Office 365	IE Security: Disable user name and password (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	visio.exe
1158	1131	Office 2016 / Office 365	IE Security: Disable user name and password (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_http_username_password_disable	winword.exe
1159	1135	Office 2016 / Office 365	IE Security: Information Bar (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	msaccess.exe
1160	1132	Office 2016 / Office 365	IE Security: Information Bar (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	excel.exe
1161	1133	Office 2016 / Office 365	IE Security: Information Bar (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	exprwd.exe
1162	1134	Office 2016 / Office 365	IE Security: Information Bar (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	groove.exe
1163	1138	Office 2016 / Office 365	IE Security: Information Bar (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	onenote.exe
1164	1139	Office 2016 / Office 365	IE Security: Information Bar (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	outlook.exe
1165	1141	Office 2016 / Office 365	IE Security: Information Bar (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	pptview.exe
1166	1140	Office 2016 / Office 365	IE Security: Information Bar (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	powerpnt.exe
1167	1144	Office 2016 / Office 365	IE Security: Information Bar (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	winproj.exe
1168	1137	Office 2016 / Office 365	IE Security: Information Bar (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	mspub.exe
1169	1136	Office 2016 / Office 365	IE Security: Information Bar (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	mse7.exe
1170	1142	Office 2016 / Office 365	IE Security: Information Bar (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	spdesign.exe
1171	1143	Office 2016 / Office 365	IE Security: Information Bar (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	visio.exe
1172	1145	Office 2016 / Office 365	IE Security: Information Bar (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_securityband	winword.exe
1173	1149	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	msaccess.exe
1174	1146	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	excel.exe
1175	1147	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	exprwd.exe
1176	1148	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	groove.exe
1177	1152	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	onenote.exe
1178	1153	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	outlook.exe
1179	1155	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	pptview.exe
1180	1154	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	powerpnt.exe
1181	1158	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	winproj.exe
1182	1151	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	mspub.exe
1183	1150	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	mse7.exe
1184	1156	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	spdesign.exe
1185	1157	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	visio.exe
1186	1159	Office 2016 / Office 365	IE Security: Local Machine Zone Lockdown Security (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_localmachine_lockdown	winword.exe
1187	1163	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	msaccess.exe
1188	1160	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	excel.exe
1189	1161	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	exprwd.exe
1190	1162	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	groove.exe
1191	1166	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	onenote.exe
1192	1167	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	outlook.exe
1193	1169	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	pptview.exe
1194	1168	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	powerpnt.exe
1195	1172	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	winproj.exe
1196	1165	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	mspub.exe
1197	1164	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	mse7.exe
1198	1170	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	spdesign.exe
1199	1171	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	visio.exe
1200	1173	Office 2016 / Office 365	IE Security: Mime Sniffing Safety Feature (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_mime_sniffing	winword.exe
1201	1177	Office 2016 / Office 365	IE Security: Navigate URL (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	msaccess.exe
1202	1174	Office 2016 / Office 365	IE Security: Navigate URL (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	excel.exe
1203	1175	Office 2016 / Office 365	IE Security: Navigate URL (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	exprwd.exe
1204	1176	Office 2016 / Office 365	IE Security: Navigate URL (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	groove.exe
1205	1180	Office 2016 / Office 365	IE Security: Navigate URL (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	onenote.exe
1206	1181	Office 2016 / Office 365	IE Security: Navigate URL (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	outlook.exe
1207	1183	Office 2016 / Office 365	IE Security: Navigate URL (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	pptview.exe
1208	1182	Office 2016 / Office 365	IE Security: Navigate URL (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	powerpnt.exe
1209	1186	Office 2016 / Office 365	IE Security: Navigate URL (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	winproj.exe
1210	1179	Office 2016 / Office 365	IE Security: Navigate URL (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	mspub.exe
1211	1178	Office 2016 / Office 365	IE Security: Navigate URL (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	mse7.exe
1212	1184	Office 2016 / Office 365	IE Security: Navigate URL (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	spdesign.exe
1213	1185	Office 2016 / Office 365	IE Security: Navigate URL (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	visio.exe
1214	1187	Office 2016 / Office 365	IE Security: Navigate URL (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_validate_navigate_url	winword.exe
1215	1191	Office 2016 / Office 365	IE Security: Object Caching Protection (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	msaccess.exe
1216	1188	Office 2016 / Office 365	IE Security: Object Caching Protection (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	excel.exe
1217	1189	Office 2016 / Office 365	IE Security: Object Caching Protection (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	exprwd.exe
1218	1190	Office 2016 / Office 365	IE Security: Object Caching Protection (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	groove.exe
1219	1194	Office 2016 / Office 365	IE Security: Object Caching Protection (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	onenote.exe
1220	1195	Office 2016 / Office 365	IE Security: Object Caching Protection (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	outlook.exe
1221	1197	Office 2016 / Office 365	IE Security: Object Caching Protection (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	pptview.exe
1222	1196	Office 2016 / Office 365	IE Security: Object Caching Protection (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	powerpnt.exe
1223	1200	Office 2016 / Office 365	IE Security: Object Caching Protection (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	winproj.exe
1224	1193	Office 2016 / Office 365	IE Security: Object Caching Protection (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	mspub.exe
1225	1192	Office 2016 / Office 365	IE Security: Object Caching Protection (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	mse7.exe
1226	1198	Office 2016 / Office 365	IE Security: Object Caching Protection (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	spdesign.exe
1227	1199	Office 2016 / Office 365	IE Security: Object Caching Protection (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	visio.exe
1228	1201	Office 2016 / Office 365	IE Security: Object Caching Protection (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_object_caching	winword.exe
1229	1205	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	msaccess.exe
1230	1202	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	excel.exe
1231	1203	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	exprwd.exe
1232	1204	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	groove.exe
1233	1208	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	onenote.exe
1234	1209	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	outlook.exe
1235	1211	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	pptview.exe
1236	1210	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	powerpnt.exe
1237	1214	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	winproj.exe
1238	1207	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	mspub.exe
1239	1206	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	mse7.exe
1240	1212	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	spdesign.exe
1241	1213	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	visio.exe
1242	1215	Office 2016 / Office 365	IE Security: Protection From Zone Elevation (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_zone_elevation	winword.exe
1243	1219	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	msaccess.exe
1244	1216	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	excel.exe
1245	1217	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	exprwd.exe
1246	1218	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	groove.exe
1247	1222	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	onenote.exe
1248	1223	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	outlook.exe
1249	1225	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	pptview.exe
1250	1224	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	powerpnt.exe
1251	1228	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	winproj.exe
1252	1221	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	mspub.exe
1253	1220	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	mse7.exe
1254	1226	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	spdesign.exe
1255	1227	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	visio.exe
1256	1229	Office 2016 / Office 365	IE Security: Restrict ActiveX Install (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall	winword.exe
1257	1233	Office 2016 / Office 365	IE Security: Restrict File Download (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	msaccess.exe
1258	1230	Office 2016 / Office 365	IE Security: Restrict File Download (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	excel.exe
1259	1231	Office 2016 / Office 365	IE Security: Restrict File Download (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	exprwd.exe
1260	1232	Office 2016 / Office 365	IE Security: Restrict File Download (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	groove.exe
1261	1236	Office 2016 / Office 365	IE Security: Restrict File Download (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	onenote.exe
1262	1237	Office 2016 / Office 365	IE Security: Restrict File Download (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	outlook.exe
1263	1239	Office 2016 / Office 365	IE Security: Restrict File Download (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	pptview.exe
1264	1238	Office 2016 / Office 365	IE Security: Restrict File Download (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	powerpnt.exe
1265	1242	Office 2016 / Office 365	IE Security: Restrict File Download (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	winproj.exe
1266	1235	Office 2016 / Office 365	IE Security: Restrict File Download (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	mspub.exe
1267	1234	Office 2016 / Office 365	IE Security: Restrict File Download (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	mse7.exe
1268	1240	Office 2016 / Office 365	IE Security: Restrict File Download (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	spdesign.exe
1269	1241	Office 2016 / Office 365	IE Security: Restrict File Download (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	visio.exe
1270	1243	Office 2016 / Office 365	IE Security: Restrict File Download (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_filedownload	winword.exe
1271	1247	Office 2016 / Office 365	IE Security: Saved from URL (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	msaccess.exe
1272	1244	Office 2016 / Office 365	IE Security: Saved from URL (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	excel.exe
1273	1245	Office 2016 / Office 365	IE Security: Saved from URL (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	exprwd.exe
1274	1246	Office 2016 / Office 365	IE Security: Saved from URL (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	groove.exe
1275	1250	Office 2016 / Office 365	IE Security: Saved from URL (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	onenote.exe
1276	1251	Office 2016 / Office 365	IE Security: Saved from URL (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	outlook.exe
1277	1253	Office 2016 / Office 365	IE Security: Saved from URL (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	pptview.exe
1278	1252	Office 2016 / Office 365	IE Security: Saved from URL (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	powerpnt.exe
1279	1256	Office 2016 / Office 365	IE Security: Saved from URL (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	winproj.exe
1280	1249	Office 2016 / Office 365	IE Security: Saved from URL (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	mspub.exe
1281	1248	Office 2016 / Office 365	IE Security: Saved from URL (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	mse7.exe
1282	1254	Office 2016 / Office 365	IE Security: Saved from URL (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	spdesign.exe
1283	1255	Office 2016 / Office 365	IE Security: Saved from URL (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	visio.exe
1284	1257	Office 2016 / Office 365	IE Security: Saved from URL (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_unc_savedfilecheck	winword.exe
1285	1261	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (Access)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	msaccess.exe
1286	1258	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (Excel)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	excel.exe
1287	1259	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (Expression Web Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	exprwd.exe
1288	1260	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (Groove)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	groove.exe
1289	1264	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (OneNote)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	onenote.exe
1290	1265	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (Outlook)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	outlook.exe
1291	1267	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (PowerPoint Viewer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	pptview.exe
1292	1266	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (PowerPoint)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	powerpnt.exe
1293	1270	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (Project)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	winproj.exe
1294	1263	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (Publisher)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	mspub.exe
1295	1262	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (Script Editor)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	mse7.exe
1296	1268	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (SharePoint Designer)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	spdesign.exe
1297	1269	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (Visio)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	visio.exe
1298	1271	Office 2016 / Office 365	IE Security: Scripted Window Security Restrictions (Word)	Registry		HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_window_restrictions	winword.exe
1299	1272	Office 2016 / Office 365	MS Security Guide: Block Flash activation in Office documents	Registry		HKLM:\SOFTWARE\Microsoft\Office\Common\COM Compatibility	Comment
1300	968	Office 2016 / Office 365	Microsoft Access: Allow Trusted Locations on the network	Registry		HKCU:\software\policies\microsoft\office\16.0\access\security\trusted locations	allownetworklocations
1301	965	Office 2016 / Office 365	Microsoft Access: Block macros from running in Office files from the Internet	Registry		HKCU:\software\policies\microsoft\office\16.0\access\security	blockcontentexecutionfrominternet
1302	966	Office 2016 / Office 365	Microsoft Access: Disable Trust Bar Notification for unsigned application add-ins and block them	Registry		HKCU:\software\policies\microsoft\office\16.0\access\security	notbpromptunsignedaddin
1303	967	Office 2016 / Office 365	Microsoft Access: VBA Macro Notification Settings (Policy)	Registry		HKCU:\software\policies\microsoft\office\16.0\access\security	vbawarnings							2
1304	1868	Office 2016 / Office 365	Microsoft Access: VBA Macro Notification Settings (Policy) - Block certificates from trusted publishers that are only installed in the current user certificate store	Registry		HKCU:\software\policies\microsoft\office\16.0\access\security	vbarequirelmtrustedpublisher
1305	1869	Office 2016 / Office 365	Microsoft Access: VBA Macro Notification Settings (Policy) - Require Extended Key Usage (EKU) for certificates from trusted publishers	Registry		HKCU:\software\policies\microsoft\office\16.0\access\security	vbarequiredigsigwithcodesigningeku
1306	1302	Office 2016 / Office 365	Microsoft Access: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher	Registry		HKCU:\software\policies\microsoft\office\16.0\access\security	vbadigsigtrustedpublishers
1307	311	Office 2016 / Office 365	Microsoft Excel: Allow DDE	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\external content	disableddeserverlaunch							0
1308	999	Office 2016 / Office 365	Microsoft Excel: Allow Trusted Locations on the network	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\trusted locations	allownetworklocations
1309	993	Office 2016 / Office 365	Microsoft Excel: Always open untrusted database files in Protected View	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview	enabledatabasefileprotectedview
1310	309	Office 2016 / Office 365	Microsoft Excel: Always prevent untrusted Microsoft Query files from opening	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\external content	enableblockunsecurequeryfiles							0
1311	970	Office 2016 / Office 365	Microsoft Excel: Ask to update automatic links	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\options\binaryoptions	fupdateext_78_1
1312	1779	Office 2016 / Office 365	Microsoft Excel: Block Excel XLL Add-ins that come from an untrusted source	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	blockxllfrominternet
1313	315	Office 2016 / Office 365	Microsoft Excel: Block macros from running in Office files from the Internet	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\Excel\Security	blockcontentexecutionfrominternet							0
1314	972	Office 2016 / Office 365	Microsoft Excel: Disable AutoRepublish	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\options	disableautorepublish
1315	978	Office 2016 / Office 365	Microsoft Excel: Disable Trust Bar Notification for unsigned application add-ins and block them	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	notbpromptunsignedaddin
1316	994	Office 2016 / Office 365	Microsoft Excel: Do not open files from the Internet zone in Protected View	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview	disableinternetfilesinpv
1317	995	Office 2016 / Office 365	Microsoft Excel: Do not open files in unsafe locations in Protected View	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview	disableunsafelocationsinpv
1318	973	Office 2016 / Office 365	Microsoft Excel: Do not show AutoRepublish warning alert	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\options	disableautorepublishwarning
1319	969	Office 2016 / Office 365	Microsoft Excel: Do not show data extraction options when opening corrupt workbooks	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\options	extractdatadisableui
1320	310	Office 2016 / Office 365	Microsoft Excel: Don't update links	Registry		HKCU:\Software\Microsoft\Office\16.0\Excel\Options	DontUpdateLinks							0
1321	313	Office 2016 / Office 365	Microsoft Excel: Don’t allow Dynamic Data Exchange (DDE) server launch in Excel	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\external content	disableddeserverlaunch							0
1322	312	Office 2016 / Office 365	Microsoft Excel: Don’t allow Dynamic Data Exchange (DDE) server lookup in Excel	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\external content	disableddeserverlookup							0
1323	1689	Office 2016 / Office 365	Microsoft Excel: Don’t allow Dynamic Data Exchange (DDEAllowed)	Registry		HKCU:\Software\Microsoft\Office\16.0\Excel\Options	DDEAllowed							1
1324	314	Office 2016 / Office 365	Microsoft Excel: Don’t allow Dynamic Data Exchange (DDECleaned)	Registry		HKCU:\Software\Microsoft\Office\16.0\Excel\Options	DDECleaned							0
1325	980	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Dif and Sylk files	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	difandsylkfiles
1326	981	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Excel 2 macrosheets and add-in files	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	xl2macros
1327	982	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Excel 2 worksheets	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	xl2worksheets
1328	983	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Excel 3 macrosheets and add-in files	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	xl3macros
1329	984	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Excel 3 worksheets	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	xl3worksheets
1330	985	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Excel 4 macrosheets and add-in files	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	xl4macros
1331	986	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Excel 4 workbooks	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	xl4workbooks
1332	987	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Excel 4 worksheets	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	xl4worksheets
1333	988	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Excel 95 workbooks	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	xl95workbooks
1334	989	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Excel 95-97 workbooks and templates	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	xl9597workbooksandtemplates
1335	990	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Excel 97-2003 workbooks and templates	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	xl97workbooksandtemplates
1336	1919	Office 2016 / Office 365	Microsoft Excel: File Block Settings: File Block includes external link files	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	fileblockexternallinks
1337	991	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Set default file block behavior	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	openinprotectedview
1338	992	Office 2016 / Office 365	Microsoft Excel: File Block Settings: Web pages and Excel 2003 XML spreadsheets	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	htmlandxmlssfiles
1339	979	Office 2016 / Office 365	Microsoft Excel: File Block Settings: dBase III / IV files	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\fileblock	dbasefiles
1340	974	Office 2016 / Office 365	Microsoft Excel: Force file extension to match file type	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	extensionhardening
1341	971	Office 2016 / Office 365	Microsoft Excel: Load pictures from Web pages not created in Excel	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\internet	donotloadpictures
1342	1660	Office 2016 / Office 365	Microsoft Excel: Prevent Excel from running XLM macros	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	xl4macrooff
1343	1783	Office 2016 / Office 365	Microsoft Excel: Python Notification Settings	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	PythonFunctionWarnings
1344	1297	Office 2016 / Office 365	Microsoft Excel: Require that application add-ins are signed by Trusted Publisher	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	requireaddinsig
1345	975	Office 2016 / Office 365	Microsoft Excel: Scan encrypted macros in Excel Open XML workbooks	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	excelbypassencryptedmacroscan
1346	997	Office 2016 / Office 365	Microsoft Excel: Set document behavior if file validation fails (Allow edit in Protected View)	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\filevalidation	openinprotectedview
1347	996	Office 2016 / Office 365	Microsoft Excel: Set document behavior if file validation fails (Open in Protected View)	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\filevalidation	disableeditfrompv
1348	998	Office 2016 / Office 365	Microsoft Excel: Turn off Protected View for attachments opened from Outlook	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview	disableattachmentsinpv
1349	976	Office 2016 / Office 365	Microsoft Excel: Turn off file validation	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security\filevalidation	enableonload
1350	316	Office 2016 / Office 365	Microsoft Excel: VBA Macro Notification Settings	Registry		HKCU:\Software\Microsoft\Office\16.0\Excel\Security	vbawarnings							2
1351	317	Office 2016 / Office 365	Microsoft Excel: VBA Macro Notification Settings (Policy)	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\Excel\Security	vbawarnings							2
1352	1870	Office 2016 / Office 365	Microsoft Excel: VBA Macro Notification Settings (Policy) - Block certificates from trusted publishers that are only installed in the current user certificate store	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	vbarequirelmtrustedpublisher
1353	1880	Office 2016 / Office 365	Microsoft Excel: VBA Macro Notification Settings (Policy) - Enable Excel 4.0 macros when VBA macros are enabled	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	xl4macrowarningfollowvba
1354	1871	Office 2016 / Office 365	Microsoft Excel: VBA Macro Notification Settings (Policy) - Require Extended Key Usage (EKU) for certificates from trusted publishers	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	vbarequiredigsigwithcodesigningeku
1355	1299	Office 2016 / Office 365	Microsoft Excel: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	vbadigsigtrustedpublishers
1356	977	Office 2016 / Office 365	Microsoft Excel: WEBSERVICE Function Notification Settings	Registry		HKCU:\software\policies\microsoft\office\16.0\excel\security	webservicefunctionwarnings
1357	318	Office 2016 / Office 365	Microsoft OneNote: Disable embedded files	Registry		HKCU:\Software\Microsoft\Office\16.0\OneNote\Options	DisableEmbeddedFiles							0
1358	1025	Office 2016 / Office 365	Microsoft Outlook: Allow Active X One Off Forms	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	allowactivexoneoffforms
1359	1045	Office 2016 / Office 365	Microsoft Outlook: Allow hyperlinks in suspected phishing e-mail messages	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail	junkmailenablelinks
1360	1037	Office 2016 / Office 365	Microsoft Outlook: Allow scripts in one-off Outlook forms	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	enableoneoffformscripts
1361	1033	Office 2016 / Office 365	Microsoft Outlook: Allow users to demote attachments to Level 2	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	allowuserstolowerattachments
1362	1019	Office 2016 / Office 365	Microsoft Outlook: Authentication with Exchange Server	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	authenticationservice
1363	1039	Office 2016 / Office 365	Microsoft Outlook: Configure Outlook object model prompt when accessing an address book	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	promptoomaddressbookaccess
1364	1040	Office 2016 / Office 365	Microsoft Outlook: Configure Outlook object model prompt when accessing the Formula property of a UserProperty object	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	promptoomformulaaccess
1365	1041	Office 2016 / Office 365	Microsoft Outlook: Configure Outlook object model prompt when executing Save As	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	promptoomsaveas
1366	1042	Office 2016 / Office 365	Microsoft Outlook: Configure Outlook object model prompt when reading address information	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	promptoomaddressinformationaccess
1367	1043	Office 2016 / Office 365	Microsoft Outlook: Configure Outlook object model prompt when responding to meeting and task requests	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	promptoommeetingtaskrequestresponse
1368	1044	Office 2016 / Office 365	Microsoft Outlook: Configure Outlook object model prompt when sending mail	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	promptoomsend
1369	1034	Office 2016 / Office 365	Microsoft Outlook: Display Level 1 attachments	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	showlevel1attach
1370	1021	Office 2016 / Office 365	Microsoft Outlook: Do not allow Outlook object model scripts to run for public folders	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	publicfolderscript
1371	1022	Office 2016 / Office 365	Microsoft Outlook: Do not allow Outlook object model scripts to run for shared folders	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	sharedfolderscript
1372	1028	Office 2016 / Office 365	Microsoft Outlook: Do not display 'Publish to GAL' button	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	publishtogaldisabled
1373	1020	Office 2016 / Office 365	Microsoft Outlook: Enable RPC encryption	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\rpc	enablerpcencryption
1374	1917	Office 2016 / Office 365	Microsoft Outlook: Folder Home Pages for Outlook Special Folders: Do not allow Home Page URL to be set in folder Properties	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\webview	disable
1375	1027	Office 2016 / Office 365	Microsoft Outlook: Include Internet in Safe Zones for Automatic Picture Download	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail	internet
1376	1024	Office 2016 / Office 365	Microsoft Outlook: Junk E-mail protection level	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail	junkmailprotection
1377	1029	Office 2016 / Office 365	Microsoft Outlook: Minimum encryption settings	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	minenckey
1378	1032	Office 2016 / Office 365	Microsoft Outlook: Outlook Security Mode	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	adminsecuritymode
1379	1918	Office 2016 / Office 365	Microsoft Outlook: Outlook Today Settings: Outlook Today availability	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\today	disable
1380	1026	Office 2016 / Office 365	Microsoft Outlook: Prevent users from customizing attachment security settings	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook	disallowattachmentcustomization
1381	1035	Office 2016 / Office 365	Microsoft Outlook: Remove file extensions blocked as Level 1	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	fileextensionsremovelevel1
1382	1036	Office 2016 / Office 365	Microsoft Outlook: Remove file extensions blocked as Level 2	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	fileextensionsremovelevel2
1383	1031	Office 2016 / Office 365	Microsoft Outlook: Retrieving CRLs (Certificate Revocation Lists)	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	usecrlchasing
1384	1046	Office 2016 / Office 365	Microsoft Outlook: Security setting for macros	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	level
1385	1038	Office 2016 / Office 365	Microsoft Outlook: Set Outlook object model custom actions execution prompt	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	promptoomcustomaction
1386	1030	Office 2016 / Office 365	Microsoft Outlook: Signature Warning	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\security	warnaboutinvalid
1387	1023	Office 2016 / Office 365	Microsoft Outlook: Use Unicode format when dragging e-mail message to file system	Registry		HKCU:\software\policies\microsoft\office\16.0\outlook\options\general	msgformat
1388	1058	Office 2016 / Office 365	Microsoft PowerPoint: Allow Trusted Locations on the network	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\trusted locations	allownetworklocations
1389	319	Office 2016 / Office 365	Microsoft PowerPoint: Block macros from running in Office files from the Internet	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security	blockcontentexecutionfrominternet							0
1390	1050	Office 2016 / Office 365	Microsoft PowerPoint: Disable Trust Bar Notification for unsigned application add-ins and block them	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security	notbpromptunsignedaddin
1391	1053	Office 2016 / Office 365	Microsoft PowerPoint: Do not open files from the Internet zone in Protected View	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview	disableinternetfilesinpv
1392	1054	Office 2016 / Office 365	Microsoft PowerPoint: Do not open files in unsafe locations in Protected View	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview	disableunsafelocationsinpv
1393	1924	Office 2016 / Office 365	Microsoft PowerPoint: OLE Active Content	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security	enableoleactions
1394	1051	Office 2016 / Office 365	Microsoft PowerPoint: PowerPoint 97-2003 presentations, shows, templates and add-in files	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\fileblock	binaryfiles
1395	1298	Office 2016 / Office 365	Microsoft PowerPoint: Require that application add-ins are signed by Trusted Publisher	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security	requireaddinsig
1396	1047	Office 2016 / Office 365	Microsoft PowerPoint: Run Programs	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security	runprograms
1397	1048	Office 2016 / Office 365	Microsoft PowerPoint: Scan encrypted macros in PowerPoint Open XML presentations	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security	powerpointbypassencryptedmacroscan
1398	1052	Office 2016 / Office 365	Microsoft PowerPoint: Set default file block behavior	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\fileblock	openinprotectedview
1399	1056	Office 2016 / Office 365	Microsoft PowerPoint: Set document behavior if file validation fails (Allow edit in Protected View)	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\filevalidation	openinprotectedview
1400	1055	Office 2016 / Office 365	Microsoft PowerPoint: Set document behavior if file validation fails (Open in Protected View)	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\filevalidation	disableeditfrompv
1401	1057	Office 2016 / Office 365	Microsoft PowerPoint: Turn off Protected View for attachments opened from Outlook	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview	disableattachmentsinpv
1402	1049	Office 2016 / Office 365	Microsoft PowerPoint: Turn off file validation	Registry		HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\filevalidation	enableonload
1403	320	Office 2016 / Office 365	Microsoft PowerPoint: VBA Macro Notification Settings (Policy)	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security	vbawarnings							2
1404	1872	Office 2016 / Office 365	Microsoft PowerPoint: VBA Macro Notification Settings (Policy) - Block certificates from trusted publishers that are only installed in the current user certificate store	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security	vbarequirelmtrustedpublisher
1405	1873	Office 2016 / Office 365	Microsoft PowerPoint: VBA Macro Notification Settings (Policy) - Require Extended Key Usage (EKU) for certificates from trusted publishers	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security	vbarequiredigsigwithcodesigningeku
1406	1300	Office 2016 / Office 365	Microsoft PowerPoint: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\PowerPoint\Security	vbadigsigtrustedpublishers
1407	1059	Office 2016 / Office 365	Microsoft Project: Allow Trusted Locations on the network	Registry		HKCU:\software\policies\microsoft\office\16.0\ms project\security\trusted locations	allownetworklocations
1408	1881	Office 2016 / Office 365	Microsoft Project: Block macros from running in Office files from the internet	Registry		HKCU:\software\policies\microsoft\office\16.0\ms project\security	blockcontentexecutionfrominternet
1409	1060	Office 2016 / Office 365	Microsoft Project: Disable Trust Bar Notification for unsigned application add-ins and block them	Registry		HKCU:\software\policies\microsoft\office\16.0\ms project\security	notbpromptunsignedaddin
1410	1292	Office 2016 / Office 365	Microsoft Project: Require that application add-ins are signed by Trusted Publisher	Registry		HKCU:\software\policies\microsoft\office\16.0\ms project\security	requireaddinsig
1411	1061	Office 2016 / Office 365	Microsoft Project: VBA Macro Notification Settings (Policy)	Registry		HKCU:\software\policies\microsoft\office\16.0\ms project\security	vbawarnings							2
1412	1303	Office 2016 / Office 365	Microsoft Project: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher	Registry		HKCU:\software\policies\microsoft\office\16.0\ms project\security	vbadigsigtrustedpublishers
1413	1781	Office 2016 / Office 365	Microsoft Publisher: Block macros from running in Office files from the internet	Registry		HKCU:\software\policies\microsoft\office\16.0\publisher\security	blockcontentexecutionfrominternet
1414	1063	Office 2016 / Office 365	Microsoft Publisher: Disable Trust Bar Notification for unsigned application add-ins	Registry		HKCU:\software\policies\microsoft\office\16.0\publisher\security	notbpromptunsignedaddin
1415	1062	Office 2016 / Office 365	Microsoft Publisher: Publisher Automation Security Level	Registry		HKCU:\software\policies\microsoft\office\common\security	automationsecuritypublisher
1416	1293	Office 2016 / Office 365	Microsoft Publisher: Require that application add-ins are signed by Trusted Publisher	Registry		HKCU:\software\policies\microsoft\office\16.0\publisher\security	requireaddinsig
1417	1064	Office 2016 / Office 365	Microsoft Publisher: VBA Macro Notification Settings (Policy)	Registry		HKCU:\software\policies\microsoft\office\16.0\publisher\security	vbawarnings							2
1418	1874	Office 2016 / Office 365	Microsoft Publisher: VBA Macro Notification Settings (Policy) - Block certificates from trusted publishers that are only installed in the current user certificate store	Registry		HKCU:\software\policies\microsoft\office\16.0\publisher\security	vbarequirelmtrustedpublisher
1419	1875	Office 2016 / Office 365	Microsoft Publisher: VBA Macro Notification Settings (Policy) - Require Extended Key Usage (EKU) for certificates from trusted publishers	Registry		HKCU:\software\policies\microsoft\office\16.0\publisher\security	vbarequiredigsigwithcodesigningeku
1420	1304	Office 2016 / Office 365	Microsoft Publisher: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher	Registry		HKCU:\software\policies\microsoft\office\16.0\publisher\security	vbadigsigtrustedpublishers
1421	1065	Office 2016 / Office 365	Microsoft Visio: Allow Trusted Locations on the network	Registry		HKCU:\software\policies\microsoft\office\16.0\visio\security\trusted locations	allownetworklocations
1422	1066	Office 2016 / Office 365	Microsoft Visio: Block macros from running in Office files from the Internet	Registry		HKCU:\software\policies\microsoft\office\16.0\visio\security	blockcontentexecutionfrominternet
1423	1067	Office 2016 / Office 365	Microsoft Visio: Disable Trust Bar Notification for unsigned application add-ins and block them	Registry		HKCU:\software\policies\microsoft\office\16.0\visio\security	notbpromptunsignedaddin
1424	1069	Office 2016 / Office 365	Microsoft Visio: File Block Settings: Visio 2000-2002 Binary Drawings, Templates and Stencils	Registry		HKCU:\software\policies\microsoft\office\16.0\visio\security\fileblock	visio2000files
1425	1070	Office 2016 / Office 365	Microsoft Visio: File Block Settings: Visio 2003-2010 Binary Drawings, Templates and Stencils	Registry		HKCU:\software\policies\microsoft\office\16.0\visio\security\fileblock	visio2003files
1426	1071	Office 2016 / Office 365	Microsoft Visio: File Block Settings: Visio 5.0 or earlier Binary Drawings, Templates and Stencils	Registry		HKCU:\software\policies\microsoft\office\16.0\visio\security\fileblock	visio50andearlierfiles
1427	1294	Office 2016 / Office 365	Microsoft Visio: Require that application add-ins are signed by Trusted Publisher	Registry		HKCU:\software\policies\microsoft\office\16.0\visio\security	requireaddinsig
1428	1068	Office 2016 / Office 365	Microsoft Visio: VBA Macro Notification Settings (Policy)	Registry		HKCU:\software\policies\microsoft\office\16.0\visio\security	vbawarnings							2
1429	1876	Office 2016 / Office 365	Microsoft Visio: VBA Macro Notification Settings (Policy) - Block certificates from trusted publishers that are only installed in the current user certificate store	Registry		HKCU:\software\policies\microsoft\office\16.0\visio\security	vbarequirelmtrustedpublisher
1430	1877	Office 2016 / Office 365	Microsoft Visio: VBA Macro Notification Settings (Policy) - Require Extended Key Usage (EKU) for certificates from trusted publishers	Registry		HKCU:\software\policies\microsoft\office\16.0\visio\security	vbarequiredigsigwithcodesigningeku
1431	1305	Office 2016 / Office 365	Microsoft Visio: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher	Registry		HKCU:\software\policies\microsoft\office\16.0\visio\security	vbadigsigtrustedpublishers
1432	322	Office 2016 / Office 365	Microsoft Word (Mail): Don't update links	Registry		HKCU:\Software\Microsoft\Office\16.0\Word\Options\WordMail	DontUpdateLinks							0
1433	1089	Office 2016 / Office 365	Microsoft Word: Allow Trusted Locations on the network	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\trusted locations	allownetworklocations
1434	323	Office 2016 / Office 365	Microsoft Word: Block macros from running in Office files from the Internet	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\Word\Security	blockcontentexecutionfrominternet							0
1435	1073	Office 2016 / Office 365	Microsoft Word: Disable Trust Bar Notification for unsigned application add-ins and block them	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security	notbpromptunsignedaddin
1436	1084	Office 2016 / Office 365	Microsoft Word: Do not open files from the Internet zone in Protected View	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview	disableinternetfilesinpv
1437	1085	Office 2016 / Office 365	Microsoft Word: Do not open files in unsafe locations in Protected View	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview	disableunsafelocationsinpv
1438	321	Office 2016 / Office 365	Microsoft Word: Don't update links	Registry		HKCU:\Software\Microsoft\Office\16.0\Word\Options	DontUpdateLinks							0
1439	1295	Office 2016 / Office 365	Microsoft Word: Dynamic Data Exchange	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security	allowdde							0
1440	1075	Office 2016 / Office 365	Microsoft Word: File Block Settings: Set default file block behavior	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock	openinprotectedview
1441	1076	Office 2016 / Office 365	Microsoft Word: File Block Settings: Word 2 and earlier binary documents and templates	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock	word2files
1442	1077	Office 2016 / Office 365	Microsoft Word: File Block Settings: Word 2000 binary documents and templates	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock	word2000files
1443	1078	Office 2016 / Office 365	Microsoft Word: File Block Settings: Word 2003 binary documents and templates	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock	word2003files
1444	1079	Office 2016 / Office 365	Microsoft Word: File Block Settings: Word 2007 and later binary documents and templates	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock	word2007files
1445	1080	Office 2016 / Office 365	Microsoft Word: File Block Settings: Word 6.0 binary documents and templates	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock	word60files
1446	1081	Office 2016 / Office 365	Microsoft Word: File Block Settings: Word 95 binary documents and templates	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock	word95files
1447	1082	Office 2016 / Office 365	Microsoft Word: File Block Settings: Word 97 binary documents and templates	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock	word97files
1448	1083	Office 2016 / Office 365	Microsoft Word: File Block Settings: Word XP binary documents and templates	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock	wordxpfiles
1449	1296	Office 2016 / Office 365	Microsoft Word: Require that application add-ins are signed by Trusted Publisher	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security	requireaddinsig
1450	1074	Office 2016 / Office 365	Microsoft Word: Scan encrypted macros in Word Open XML documents	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security	wordbypassencryptedmacroscan
1451	1087	Office 2016 / Office 365	Microsoft Word: Set document behavior if file validation fails (Allow edit in Protected View)	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\filevalidation	openinprotectedview
1452	1086	Office 2016 / Office 365	Microsoft Word: Set document behavior if file validation fails (Open in Protected View)	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\filevalidation	disableeditfrompv
1453	1088	Office 2016 / Office 365	Microsoft Word: Turn off Protected View for attachments opened from Outlook	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview	disableattachmentsinpv
1454	1072	Office 2016 / Office 365	Microsoft Word: Turn off file validation	Registry		HKCU:\software\policies\microsoft\office\16.0\word\security\filevalidation	enableonload
1455	324	Office 2016 / Office 365	Microsoft Word: VBA Macro Notification Settings	Registry		HKCU:\Software\Microsoft\Office\16.0\Word\Security	vbawarnings							2
1456	325	Office 2016 / Office 365	Microsoft Word: VBA Macro Notification Settings (Policy)	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\Word\Security	vbawarnings							2
1457	1878	Office 2016 / Office 365	Microsoft Word: VBA Macro Notification Settings (Policy) - Block certificates from trusted publishers that are only installed in the current user certificate store	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\Word\Security	vbarequirelmtrustedpublisher
1458	1879	Office 2016 / Office 365	Microsoft Word: VBA Macro Notification Settings (Policy) - Require Extended Key Usage (EKU) for certificates from trusted publishers	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\Word\Security	vbarequiredigsigwithcodesigningeku
1459	1301	Office 2016 / Office 365	Microsoft Word: VBA Macro Notification Settings (Policy) - Require macros to be signed by a trusted publisher	Registry		HKCU:\Software\Policies\Microsoft\Office\16.0\Word\Security	vbadigsigtrustedpublishers
1460	1284	Office 2016 / Office 365	Restrict legacy JScript execution for Office (Access)	Registry		HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE	msaccess.exe
1461	1276	Office 2016 / Office 365	Restrict legacy JScript execution for Office (Excel)	Registry		HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE	excel.exe
1462	1279	Office 2016 / Office 365	Restrict legacy JScript execution for Office (OneNote)	Registry		HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE	onenote.exe
1463	1283	Office 2016 / Office 365	Restrict legacy JScript execution for Office (Outlook)	Registry		HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE	outlook.exe
1464	1278	Office 2016 / Office 365	Restrict legacy JScript execution for Office (PowerPoint)	Registry		HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE	powerpnt.exe
1465	1281	Office 2016 / Office 365	Restrict legacy JScript execution for Office (Project)	Registry		HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE	winproj.exe
1466	1277	Office 2016 / Office 365	Restrict legacy JScript execution for Office (Publisher)	Registry		HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE	mspub.exe
1467	1280	Office 2016 / Office 365	Restrict legacy JScript execution for Office (Visio)	Registry		HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE	visio.exe
1468	1282	Office 2016 / Office 365	Restrict legacy JScript execution for Office (Word)	Registry		HKLM:\software\policies\microsoft\internet explorer\main\featurecontrol\FEATURE_RESTRICT_LEGACY_JSCRIPT_PER_SECURITY_ZONE	winword.exe
1469	1009	Office 2016 / Office 365	Security Settings: ActiveX Control Initialization	Registry		HKCU:\software\policies\microsoft\office\common\security	uficontrols
1470	1782	Office 2016 / Office 365	Security Settings: Allow Basic Authentication prompts from network proxies	Registry		HKCU:\software\policies\microsoft\office\16.0\common\identity	basicauthproxybehavior
1471	1285	Office 2016 / Office 365	Security Settings: Allow VBA to load typelib references by path from untrusted intranet locations	Registry		HKCU:\software\policies\microsoft\vba\security	allowvbaintranetreferences
1472	1016	Office 2016 / Office 365	Security Settings: Allow mix of policy and user locations	Registry		HKCU:\software\policies\microsoft\office\16.0\common\security\trusted locations	allow user locations
1473	1290	Office 2016 / Office 365	Security Settings: Application Guard: Prevent users from removing Application Guard protection on files	Registry		HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard	disabletrustpromotion
1474	1291	Office 2016 / Office 365	Security Settings: Application Guard: Turn off protection of unsupported file types in Application Guard for Office	Registry		HKCU:\software\policies\microsoft\office\16.0\common\security\applicationguard	redirectunsupportedfiletypestopv
1475	1010	Office 2016 / Office 365	Security Settings: Automation Security	Registry		HKCU:\software\policies\microsoft\office\common\security	automationsecurity
1476	1920	Office 2016 / Office 365	Security Settings: Block Insecure Protocols	Registry		HKCU:\software\policies\microsoft\office\16.0\common\fileio	blockinsecureprotocols
1477	1921	Office 2016 / Office 365	Security Settings: Block OLE Graph	Registry		HKCU:\software\policies\microsoft\office\16.0\common\security	blockolegraph
1478	1922	Office 2016 / Office 365	Security Settings: Block OrgChart	Registry		HKCU:\software\policies\microsoft\office\16.0\common\security	blockorgchart
1479	1286	Office 2016 / Office 365	Security Settings: Control how Office handles form-based sign-in prompts	Registry		HKCU:\software\policies\microsoft\office\16.0\common	fbabehavior
1480	1287	Office 2016 / Office 365	Security Settings: Control how Office handles form-based sign-in prompts (Hosts)	Registry		HKCU:\software\policies\microsoft\office\16.0\common	fbaenabledhosts
1481	1018	Office 2016 / Office 365	Security Settings: Disable Smart Document's use of manifests	Registry		HKCU:\software\policies\microsoft\office\common\smart tag	neverloadmanifests
1482	1288	Office 2016 / Office 365	Security Settings: Disable additional security checks on VBA library references that may refer to unsafe locations on the local machine	Registry		HKCU:\software\policies\microsoft\vba\security	disablestrictvbarefssecurity
1483	1011	Office 2016 / Office 365	Security Settings: Disable all Trust Bar notifications for security issues	Registry		HKCU:\software\policies\microsoft\office\16.0\common\trustcenter	trustbar
1484	1017	Office 2016 / Office 365	Security Settings: Disable the Office client from polling the SharePoint Server for published links	Registry		HKCU:\software\policies\microsoft\office\16.0\common\portal	linkpublishingdisabled
1485	1780	Office 2016 / Office 365	Security Settings: Encryption mode for Information Rights Management (IRM)	Registry		HKCU:\software\policies\microsoft\office\16.0\common\drm	compatibleencryption
1486	1012	Office 2016 / Office 365	Security Settings: Encryption type for password protected Office 97-2003 files	Registry		HKCU:\software\policies\microsoft\office\16.0\common\security	defaultencryption12
1487	1013	Office 2016 / Office 365	Security Settings: Encryption type for password protected Office Open XML files	Registry		HKCU:\software\policies\microsoft\office\16.0\common\security	openxmlencryption
1488	1014	Office 2016 / Office 365	Security Settings: Load Controls in Forms3	Registry		HKCU:\software\policies\microsoft\vba\security	loadcontrolsinforms
1489	308	Office 2016 / Office 365	Security Settings: Macro Runtime Scan Scope	Registry		HKCU:\software\policies\microsoft\office\16.0\common\security	macroruntimescanscope							0
1490	1289	Office 2016 / Office 365	Security Settings: Macro Runtime Scan Scope	Registry		HKCU:\software\policies\microsoft\office\16.0\common\security	macroruntimescanscope
1491	1015	Office 2016 / Office 365	Security Settings: Protect document metadata for rights managed Office Open XML Files	Registry		HKCU:\software\policies\microsoft\office\16.0\common\security	drmencryptproperty
1492	1923	Office 2016 / Office 365	Security Settings: Restrict Apps from FPRPC Fallback	Registry		HKCU:\software\policies\microsoft\office\16.0\common\fileio	blockwecfallback
1493	1273	Office 2016 / Office 365	Skype for Business: Configure SIP security mode	Registry		HKLM:\software\policies\microsoft\office\16.0\lync	enablesiphighsecuritymode
1494	1274	Office 2016 / Office 365	Skype for Business: Disable HTTP fallback for SIP connection	Registry		HKLM:\software\policies\microsoft\office\16.0\lync	disablehttpconnect
1495	330	Office 365	Allow the use of additional optional connected experiences	Registry		HKCU:\Software\Policies\Microsoft\office\16.0\common\privacy	controllerconnectedservicesenabled
1496	327	Office 365	Allow the use of connected experiences in Office	Registry		HKCU:\Software\Policies\Microsoft\office\16.0\common\privacy	disconnectedstate
1497	328	Office 365	Allow the use of connected experiences that analyze content	Registry		HKCU:\Software\Policies\Microsoft\office\16.0\common\privacy	usercontentdisabled
1498	329	Office 365	Allow the use of connected experiences that download online content	Registry		HKCU:\Software\Policies\Microsoft\office\16.0\common\privacy	downloadcontentdisabled
1499	331	Office 365	Configure the level of client software diagnostic data sent by Office to Microsoft	Registry		HKCU:\Software\Policies\Microsoft\office\common\clienttelemetry	sendtelemetry
1500	326	Office 365	Disable the Office 365 Telemetry module	Registry		HKCU:\Software\Policies\Microsoft\office\common\clienttelemetry	DisableTelemetry
1501	1600	Schannel: TLS Settings: Ciphers	AES 128/128	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 128/128	Enabled
1502	1601	Schannel: TLS Settings: Ciphers	AES 256/256	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 256/256	Enabled
1503	1591	Schannel: TLS Settings: Ciphers	DES 56/56	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56	Enabled
1504	1590	Schannel: TLS Settings: Ciphers	NULL	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL	Enabled
1505	1594	Schannel: TLS Settings: Ciphers	RC2 128/128	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 128/128	Enabled
1506	1592	Schannel: TLS Settings: Ciphers	RC2 40/128	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 40/128	Enabled
1507	1593	Schannel: TLS Settings: Ciphers	RC2 56/128	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 56/128	Enabled
1508	1598	Schannel: TLS Settings: Ciphers	RC4 128/128	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128	Enabled
1509	1595	Schannel: TLS Settings: Ciphers	RC4 40/128	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128	Enabled
1510	1596	Schannel: TLS Settings: Ciphers	RC4 56/128	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128	Enabled
1511	1597	Schannel: TLS Settings: Ciphers	RC4 64/128	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 64/128	Enabled
1512	1599	Schannel: TLS Settings: Ciphers	Triple DES 168	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168	Enabled
1513	1603	Schannel: TLS Settings: Hashes	MD5	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\MD5	Enabled
1514	1604	Schannel: TLS Settings: Hashes	SHA-1	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA	Enabled
1515	1605	Schannel: TLS Settings: Hashes	SHA-256	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA256	Enabled
1516	1606	Schannel: TLS Settings: Hashes	SHA-384	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA384	Enabled
1517	1607	Schannel: TLS Settings: Hashes	SHA-512	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Hashes\SHA512	Enabled
1518	1608	Schannel: TLS Settings: KeyExchangeAlgorithms	Diffie-Hellman	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman	Enabled
1519	1610	Schannel: TLS Settings: KeyExchangeAlgorithms	Diffie-Hellman (ClientMinKeyBitLength)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman	ClientMinKeyBitLength
1520	1609	Schannel: TLS Settings: KeyExchangeAlgorithms	Diffie-Hellman (ServerMinKeyBitLength)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffie-Hellman	ServerMinKeyBitLength
1521	1611	Schannel: TLS Settings: KeyExchangeAlgorithms	ECDH	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\ECDH	Enabled
1522	1612	Schannel: TLS Settings: KeyExchangeAlgorithms	PKCS	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\PKCS	Enabled
1523	1613	Schannel: TLS Settings: KeyExchangeAlgorithms	PKCS (ClientMinKeyBitLength)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\PKCS	ClientMinKeyBitLength
1524	1564	Schannel: TLS Settings: Protocols	Client: Multi-Protocol Unified Hello	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Client	Enabled
1525	1565	Schannel: TLS Settings: Protocols	Client: Multi-Protocol Unified Hello (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Client	Disabledbydefault
1526	1568	Schannel: TLS Settings: Protocols	Client: PCT	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Client	Enabled
1527	1569	Schannel: TLS Settings: Protocols	Client: PCT (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Client	Disabledbydefault
1528	1572	Schannel: TLS Settings: Protocols	Client: SSLv2.0	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client	Enabled
1529	1573	Schannel: TLS Settings: Protocols	Client: SSLv2.0 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Client	Disabledbydefault
1530	1576	Schannel: TLS Settings: Protocols	Client: SSLv3.0	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client	Enabled
1531	1577	Schannel: TLS Settings: Protocols	Client: SSLv3.0 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client	Disabledbydefault
1532	1580	Schannel: TLS Settings: Protocols	Client: TLSv1.0	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client	Enabled
1533	1581	Schannel: TLS Settings: Protocols	Client: TLSv1.0 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client	Disabledbydefault
1534	1584	Schannel: TLS Settings: Protocols	Client: TLSv1.1	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client	Enabled
1535	1585	Schannel: TLS Settings: Protocols	Client: TLSv1.1 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client	Disabledbydefault
1536	1588	Schannel: TLS Settings: Protocols	Client: TLSv1.2	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client	Enabled
1537	1589	Schannel: TLS Settings: Protocols	Client: TLSv1.2 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client	Disabledbydefault
1538	1624	Schannel: TLS Settings: Protocols	Client: TLSv1.3	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client	Enabled
1539	1625	Schannel: TLS Settings: Protocols	Client: TLSv1.3 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client	Disabledbydefault
1540	1562	Schannel: TLS Settings: Protocols	Server: Multi-Protocol Unified Hello	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server	Enabled
1541	1563	Schannel: TLS Settings: Protocols	Server: Multi-Protocol Unified Hello (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\Multi-Protocol Unified Hello\Server	Disabledbydefault
1542	1566	Schannel: TLS Settings: Protocols	Server: PCT	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server	Enabled
1543	1567	Schannel: TLS Settings: Protocols	Server: PCT (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server	Disabledbydefault
1544	1570	Schannel: TLS Settings: Protocols	Server: SSLv2.0	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server	Enabled
1545	1571	Schannel: TLS Settings: Protocols	Server: SSLv2.0 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server	Disabledbydefault
1546	1574	Schannel: TLS Settings: Protocols	Server: SSLv3.0	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server	Enabled
1547	1575	Schannel: TLS Settings: Protocols	Server: SSLv3.0 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server	Disabledbydefault
1548	1578	Schannel: TLS Settings: Protocols	Server: TLSv1.0	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server	Enabled
1549	1579	Schannel: TLS Settings: Protocols	Server: TLSv1.0 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server	Disabledbydefault
1550	1582	Schannel: TLS Settings: Protocols	Server: TLSv1.1	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server	Enabled
1551	1583	Schannel: TLS Settings: Protocols	Server: TLSv1.1 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server	Disabledbydefault
1552	1586	Schannel: TLS Settings: Protocols	Server: TLSv1.2	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server	Enabled
1553	1587	Schannel: TLS Settings: Protocols	Server: TLSv1.2 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server	Disabledbydefault
1554	1622	Schannel: TLS Settings: Protocols	Server: TLSv1.3	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server	Enabled
1555	1623	Schannel: TLS Settings: Protocols	Server: TLSv1.3 (Disabledbydefault)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server	Disabledbydefault
1556	1714	Scheduled Task	XblGameSave Standby Task	ScheduledTask	XblGameSaveTask									Ready
1557	379	Security Options	Accounts: Administrator account status	localaccount	500									False
1558	765	Security Options	Accounts: Administrator account status (Member)	localaccount	500									True
1559	12	Security Options	Accounts: Block Microsoft accounts	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	NoConnectedUser	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	Accounts_BlockMicrosoftAccounts				0
1560	380	Security Options	Accounts: Guest account status	localaccount	501									False
1561	766	Security Options	Accounts: Guest account status (Member)	localaccount	501									False
1562	381	Security Options	Accounts: Limit local account use of blank passwords to console logon only	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	LimitBlankPasswordUse	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnly				1
1563	382	Security Options	Accounts: Rename administrator account	localaccount	500									Administrator
1564	383	Security Options	Accounts: Rename guest account	localaccount	501									Guest
1565	13	Security Options	Audit: Force audit policy subcategory settings to override audit policy category settings	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	SCENoApplyLegacyAuditPolicy	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	Audit_ForceAuditPolicySubcategorySettingsToOverrideAuditPolicyCategorySettings				1
1566	384	Security Options	Audit: Shut down system immediately if unable to log security audits	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\Lsa	CrashOnAuditFail	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	Audit_ShutdownSystemImmediatelyIfUnableToLogSecurityAudits				0
1567	385	Security Options	Devices: Allowed to format and eject removable media	Registry		HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon	AllocateDASD	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	Devices_AllowedToFormatAndEjectRemovableMedia				2
1568	386	Security Options	Devices: Prevent users from installing printer drivers	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers	AddPrinterDrivers	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrinters				0
1569	767	Security Options	Domain controller: Allow server operators to schedule tasks (DC)	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\Lsa	SubmitControl							0
1570	1320	Security Options	Domain controller: Allow vulnerable Netlogon secure channel connections	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters	VulnerableChannelAllowList
1571	961	Security Options	Domain controller: LDAP server channel binding token requirements	Registry		HKLM:\System\CurrentControlSet\Services\NTDS\Parameters	LdapEnforceChannelBinding							1
1572	768	Security Options	Domain controller: LDAP server signing requirements	Registry		HKLM:\System\CurrentControlSet\Services\NTDS\Parameters	LDAPServerIntegrity							1
1573	1867	Security Options	Domain controller: LDAP server signing requirements Enforcement	Registry		HKLM:\System\CurrentControlSet\Services\NTDS\Parameters	LDAPServerEnforceIntegrity
1574	769	Security Options	Domain controller: Refuse machine account password changes (DC)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters	RefusePasswordChange							1
1575	387	Security Options	Domain member: Digitally encrypt or sign secure channel data (always)	Registry		HKLM:\System\CurrentControlSet\Services\Netlogon\Parameters	RequireSignOrSeal	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	DomainMember_DigitallyEncryptOrSignSecureChannelDataAlways				1
1576	388	Security Options	Domain member: Digitally encrypt secure channel data (when possible)	Registry		HKLM:\System\CurrentControlSet\Services\Netlogon\Parameters	SealSecureChannel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	DomainMember_DigitallyEncryptSecureChannelDataWhenPossible				1
1577	389	Security Options	Domain member: Digitally sign secure channel data (when possible)	Registry		HKLM:\System\CurrentControlSet\Services\Netlogon\Parameters	SignSecureChannel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	DomainMember_DigitallySignSecureChannelDataWhenPossible				1
1578	390	Security Options	Domain member: Disable machine account password changes	Registry		HKLM:\System\CurrentControlSet\Services\Netlogon\Parameters	DisablePasswordChange	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	DomainMember_DisableMachineAccountPasswordChanges				0
1579	391	Security Options	Domain member: Maximum machine account password age	Registry		HKLM:\System\CurrentControlSet\Services\Netlogon\Parameters	MaximumPasswordAge	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	DomainMember_MaximumMachineAccountPasswordAge				30
1580	392	Security Options	Domain member: Require strong (Windows 2000 or later) session key	Registry		HKLM:\System\CurrentControlSet\Services\Netlogon\Parameters	RequireStrongKey	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	DomainMember_RequireStrongSessionKey				1
1581	14	Security Options	Interactive logon: Do not require CTRL+ALT+DEL	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System	DisableCAD	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	InteractiveLogon_DoNotRequireCTRLALTDEL				1
1582	15	Security Options	Interactive logon: Don't display last signed-in	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System	DontDisplayLastUserName	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	InteractiveLogon_DoNotDisplayLastSignedIn				0
1583	16	Security Options	Interactive logon: Don't display username at sign-in	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System	DontDisplayUserName	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	InteractiveLogon_DoNotDisplayUsernameAtSignIn				0
1584	393	Security Options	Interactive logon: Machine account lockout threshold	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	MaxDevicePasswordFailedAttempts	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	InteractiveLogon_MachineAccountLockoutThreshold				10
1585	394	Security Options	Interactive logon: Machine inactivity limit	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	InactivityTimeoutSecs	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	InteractiveLogon_MachineInactivityLimit				900
1586	395	Security Options	Interactive logon: Message text for users attempting to log on	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	LegalNoticeText	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	InteractiveLogon_MessageTextForUsersAttemptingToLogOn
1587	396	Security Options	Interactive logon: Message title for users attempting to log on	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	LegalNoticeCaption	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	InteractiveLogon_MessageTitleForUsersAttemptingToLogOn
1588	397	Security Options	Interactive logon: Number of previous logons to cache (in case domain controller is not available)	Registry		HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon	CachedLogonsCount	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	InteractiveLogon_NumberOfPreviousLogonsToCache				10
1589	398	Security Options	Interactive logon: Prompt user to change password before expiration (Max)	Registry		HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon	PasswordExpiryWarning	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	InteractiveLogon_PromptUserToChangePasswordBeforeExpiration				5
1590	399	Security Options	Interactive logon: Prompt user to change password before expiration (Min)	Registry		HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon	PasswordExpiryWarning	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	InteractiveLogon_PromptUserToChangePasswordBeforeExpiration				5
1591	770	Security Options	Interactive logon: Require Domain Controller Authentication to unlock workstation (Member)	Registry		HKLM:\Software\Microsoft\Windows NT\CurrentVersion\Winlogon	ForceUnlockLogon							0
1592	400	Security Options	Interactive logon: Smart card removal behavior	Registry		HKLM:\Software\Microsoft\Windows NT\CurrentVersion\Winlogon	ScRemoveOption	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	InteractiveLogon_SmartCardRemovalBehavior				0
1593	17	Security Options	Microsoft network client: Digitally sign communications (always)	Registry		HKLM:\System\CurrentControlSet\Services\LanmanWorkstation\Parameters	RequireSecuritySignature	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	MicrosoftNetworkClient_DigitallySignCommunicationsAlways				0
1594	18	Security Options	Microsoft network client: Digitally sign communications (if server agrees)	Registry		HKLM:\System\CurrentControlSet\Services\LanmanWorkstation\Parameters	EnableSecuritySignature	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgrees				1
1595	401	Security Options	Microsoft network client: Send unencrypted password to third-party SMB servers	Registry		HKLM:\System\CurrentControlSet\Services\LanmanWorkstation\Parameters	EnablePlainTextPassword	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	MicrosoftNetworkClient_SendUnencryptedPasswordToThirdPartySMBServers				0
1596	402	Security Options	Microsoft network server: Amount of idle time required before suspending session	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters	AutoDisconnect	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSession				15
1597	19	Security Options	Microsoft network server: Digitally sign communications (always)	Registry		HKLM:\System\CurrentControlSet\Services\LanManServer\Parameters	RequireSecuritySignature	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	MicrosoftNetworkServer_DigitallySignCommunicationsAlways				0
1598	20	Security Options	Microsoft network server: Digitally sign communications (if client agrees)	Registry		HKLM:\System\CurrentControlSet\Services\LanManServer\Parameters	EnableSecuritySignature	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	MicrosoftNetworkServer_DigitallySignCommunicationsIfClientAgrees				0
1599	403	Security Options	Microsoft network server: Disconnect clients when logon hours expire	Registry		HKLM:\System\CurrentControlSet\Services\LanManServer\Parameters	enableforcedlogoff	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	MicrosoftNetworkServer_DisconnectClientsWhenLogonHoursExpire				1
1600	404	Security Options	Microsoft network server: Server SPN target name validation level	Registry		HKLM:\System\CurrentControlSet\Services\LanManServer\Parameters	SMBServerNameHardeningLevel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	MicrosoftNetworkServer_ServerSPNTargetNameValidationLevel
1601	771	Security Options	Microsoft network server: Server SPN target name validation level (Member)	Registry		HKLM:\System\CurrentControlSet\Services\LanManServer\Parameters	SMBServerNameHardeningLevel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	MicrosoftNetworkServer_ServerSPNTargetNameValidationLevel				0
1602	405	Security Options	Network access: Allow anonymous SID/Name translation	secedit	System Access\LSAAnonymousNameLookup									0
1603	21	Security Options	Network access: Do not allow anonymous enumeration of SAM accounts	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	RestrictAnonymousSAM	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts				1
1604	772	Security Options	Network access: Do not allow anonymous enumeration of SAM accounts (Member)	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	RestrictAnonymousSAM	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccounts				1
1605	22	Security Options	Network access: Do not allow anonymous enumeration of SAM accounts and shares	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	RestrictAnonymous	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares				0
1606	773	Security Options	Network access: Do not allow anonymous enumeration of SAM accounts and shares (Member)	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	RestrictAnonymous	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_DoNotAllowAnonymousEnumerationOfSAMAccountsAndShares				0
1607	23	Security Options	Network access: Do not allow storage of passwords and credentials for network authentication	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	DisableDomainCreds	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_DoNotAllowStorageOfPasswordsAndCredentialsForNetworkAuthentication				0
1608	406	Security Options	Network access: Let Everyone permissions apply to anonymous users	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	EveryoneIncludesAnonymous	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers				0
1609	407	Security Options	Network access: Named Pipes that can be accessed anonymously	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters	NullSessionPipes	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_NamedPipesThatCanBeAccessedAnonymously
1610	774	Security Options	Network access: Named Pipes that can be accessed anonymously (DC)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters	NullSessionPipes	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_NamedPipesThatCanBeAccessedAnonymously
1611	775	Security Options	Network access: Named Pipes that can be accessed anonymously (Member)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters	NullSessionPipes	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_NamedPipesThatCanBeAccessedAnonymously
1612	408	Security Options	Network access: Remotely accessible registry paths	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths	Machine	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_RemotelyAccessibleRegistryPaths				System\CurrentControlSet\Control\ProductOptions System\CurrentControlSet\Control\Server Applications Software\Microsoft\Windows NT\CurrentVersion
1613	409	Security Options	Network access: Remotely accessible registry paths and sub-paths	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths	Machine	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpaths				System\CurrentControlSet\Control\Print\Printers System\CurrentControlSet\Services\Eventlog Software\Microsoft\OLAP Server Software\Microsoft\Windows NT\CurrentVersion\Print Software\Microsoft\Windows NT\CurrentVersion\Windows System\CurrentControlSet\Control\ContentIndex System\CurrentControlSet\Control\Terminal Server System\CurrentControlSet\Control\Terminal Server\UserConfig System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration Software\Microsoft\Windows NT\CurrentVersion\Perflib System\CurrentControlSet\Services\SysmonLog
1614	410	Security Options	Network access: Restrict anonymous access to Named Pipes and Shares	Registry		HKLM:\System\CurrentControlSet\Services\LanManServer\Parameters	RestrictNullSessAccess	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_RestrictAnonymousAccessToNamedPipesAndShares				1
1615	411	Security Options	Network access: Restrict clients allowed to make remote calls to SAM	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	RestrictRemoteSAM	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_RestrictClientsAllowedToMakeRemoteCallsToSAM
1616	776	Security Options	Network access: Restrict clients allowed to make remote calls to SAM (Member)	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	RestrictRemoteSAM	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_RestrictClientsAllowedToMakeRemoteCallsToSAM
1617	412	Security Options	Network access: Shares that can be accessed anonymously	Registry		HKLM:\System\CurrentControlSet\Services\LanManServer\Parameters	NullSessionShares	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_SharesThatCanBeAccessedAnonymously
1618	413	Security Options	Network access: Sharing and security model for local accounts	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	ForceGuest	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkAccess_SharingAndSecurityModelForLocalAccounts				0
1619	414	Security Options	Network security: Allow Local System to use computer identity for NTLM	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	UseMachineId	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkSecurity_AllowLocalSystemToUseComputerIdentityForNTLM				0
1620	24	Security Options	Network security: Allow LocalSystem NULL session fallback	Registry		HKLM:\System\CurrentControlSet\Control\Lsa\MSV1_0	allownullsessionfallback	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkSecurity_AllowLocalSystemNULLSessionFallback				0
1621	416	Security Options	Network security: Allow PKU2U authentication requests to this computer to use online identities	Registry		HKLM:\System\CurrentControlSet\Control\Lsa\pku2u	AllowOnlineID	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkSecurity_AllowPKU2UAuthenticationRequests
1622	417	Security Options	Network security: Configure encryption types allowed for Kerberos	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters	SupportedEncryptionTypes							2147483644
1623	418	Security Options	Network security: Do not store LAN Manager hash value on next password change	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	NoLMHash	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkSecurity_DoNotStoreLANManagerHashValueOnNextPasswordChange				1
1624	419	Security Options	Network security: Force logoff when logon hours expires	secedit	System Access\ForceLogoffWhenHourExpire									0
1625	25	Security Options	Network security: LAN Manager authentication level	Registry		HKLM:\System\CurrentControlSet\Control\Lsa	LmCompatibilityLevel	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkSecurity_LANManagerAuthenticationLevel				3
1626	1882	Security Options	Network security: LDAP client encryption requirements	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\LDAP	LDAPClientConfidentiality							1
1627	26	Security Options	Network security: LDAP client signing requirements	Registry		HKLM:\System\CurrentControlSet\Services\LDAP	LDAPClientIntegrity	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkSecurity_LDAPClientSigningRequirements				1
1628	27	Security Options	Network security: Minimum session security for NTLM SSP based (including secure RPC) clients	Registry		HKLM:\System\CurrentControlSet\Control\Lsa\MSV1_0	NTLMMinClientSec	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClients				536870912
1629	28	Security Options	Network security: Minimum session security for NTLM SSP based (including secure RPC) servers	Registry		HKLM:\System\CurrentControlSet\Control\Lsa\MSV1_0	NTLMMinServerSec	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServers				536870912
1630	29	Security Options	Network security: Restrict NTLM: Audit Incoming NTLM Traffic	Registry		HKLM:\System\CurrentControlSet\Control\Lsa\MSV1_0	AuditReceivingNTLMTraffic	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkSecurity_RestrictNTLM_AuditIncomingNTLMTraffic				0
1631	30	Security Options	Network security: Restrict NTLM: Audit NTLM authentication in this domain	Registry		HKLM:\System\CurrentControlSet\Services\Netlogon\Parameters	AuditNTLMInDomain							0
1632	1800	Security Options	Network security: Restrict NTLM: Audit NTLM authentication in this domain (DC only)	Registry		HKLM:\System\CurrentControlSet\Services\Netlogon\Parameters	AuditNTLMInDomain							0
1633	1558	Security Options	Network security: Restrict NTLM: Incoming NTLM traffic	Registry		HKLM:\System\CurrentControlSet\Control\Lsa\MSV1_0	RestrictReceivingNTLMTraffic	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkSecurity_RestrictNTLM_IncomingNTLMTraffic
1634	31	Security Options	Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers	Registry		HKLM:\System\CurrentControlSet\Control\Lsa\MSV1_0	RestrictSendingNTLMTraffic	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	NetworkSecurity_RestrictNTLM_OutgoingNTLMTrafficToRemoteServers				0
1635	32	Security Options	Shutdown: Allow system to be shut down without having to log on	Registry		HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System	ShutdownWithoutLogon	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOn				1
1636	420	Security Options	System cryptography: Force strong key protection for user keys stored on the computer	Registry		HKLM:\SOFTWARE\Policies\Microsoft\Cryptography	ForceKeyProtection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	SystemCryptography_ForceStrongKeyProtection
1637	1321	Security Options	System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy	Enabled
1638	421	Security Options	System objects: Require case insensitivity for non-Windows subsystem	Registry		HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel	ObCaseInsensitive	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystems				1
1639	422	Security Options	System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)	Registry		HKLM:\System\CurrentControlSet\Control\Session Manager	ProtectionMode	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	SystemObjects_StrengthenDefaultPermissionsOfInternalSystemObjects				1
1640	1559	Security Options	System settings: Optional subsystems	Registry		HKLM:\System\CurrentControlSet\Control\Session Manager\Subsystems	Optional
1641	33	Security Options	User Account Control: Admin Approval Mode for the Built-in Administrator account	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	FilterAdministratorToken	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	UserAccountControl_UseAdminApprovalMode				0
1642	1537	Security Options	User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	EnableUIADesktopToggle	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	UserAccountControl_AllowUIAccessApplicationsToPromptForElevation
1643	34	Security Options	User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	ConsentPromptBehaviorAdmin	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	UserAccountControl_BehaviorOfTheElevationPromptForAdministrators				5
1644	1827	Security Options	User Account Control: Behavior of the elevation prompt for administrators running with Administrator protection	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	ConsentPromptBehaviorEnhancedAdmin	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	UserAccountControl_BehaviorOfTheElevationPromptForAdministratorProtection
1645	35	Security Options	User Account Control: Behavior of the elevation prompt for standard users	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	ConsentPromptBehaviorUser	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	UserAccountControl_BehaviorOfTheElevationPromptForStandardUsers				0
1646	1828	Security Options	User Account Control: Configure type of Admin Approval Mode Admin approval mode	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	TypeOfAdminApprovalMode	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	UserAccountControl_TypeOfAdminApprovalMode
1647	423	Security Options	User Account Control: Detect application installations and prompt for elevation	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	EnableInstallerDetection	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	UserAccountControl_DetectApplicationInstallationsAndPromptForElevation				1
1648	424	Security Options	User Account Control: Only elevate UIAccess applications that are installed in secure locations	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	EnableSecureUIAPaths	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocations				1
1649	425	Security Options	User Account Control: Run all administrators in Admin Approval Mode	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	EnableLUA	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	UserAccountControl_RunAllAdministratorsInAdminApprovalMode				1
1650	426	Security Options	User Account Control: Switch to the secure desktop when prompting for elevation	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	PromptOnSecureDesktop	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevation				1
1651	427	Security Options	User Account Control: Virtualize file and registry write failures to per-user locations	Registry		HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System	EnableVirtualization	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\LocalPoliciesSecurityOptions	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\LocalPoliciesSecurityOptions	UserAccountControl_VirtualizeFileAndRegistryWriteFailuresToPerUserLocations				1
1652	428	System Services	Bluetooth Audio Gateway Service (BTAGService)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\BTAGService	Start							3
1653	429	System Services	Bluetooth Audio Gateway Service (BTAGService) (Service Startup type)	service	BTAGService									Manual
1654	430	System Services	Bluetooth Support Service (bthserv)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\bthserv	Start							3
1655	431	System Services	Bluetooth Support Service (bthserv) (Service Startup type)	service	bthserv									Manual
1656	432	System Services	Computer Browser (Browser)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\Browser	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureComputerBrowserServiceStartupMode
1657	433	System Services	Computer Browser (Browser) (Service Startup type) (!Check for false positive for service "bowser"!)	service	Browser									Manual
1658	1560	System Services	Diagnostics Tracking Service (DiagTrack)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\DiagTrack	Start							2
1659	1561	System Services	Diagnostics Tracking Service (DiagTrack) (Service Startup type)	service	DiagTrack									Automatic
1660	1778	System Services	Disable mDNS in Dnscache service	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters	EnableMDNS
1661	434	System Services	Downloaded Maps Manager (MapsBroker)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\MapsBroker	Start							2
1662	435	System Services	Downloaded Maps Manager (MapsBroker) (Service Startup type)	service	MapsBroker									Automatic
1663	1885	System Services	GameInput Service (GameInputSvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\GameInputSvc	Start							3
1664	1886	System Services	GameInput Service (GameInputSvc) (Service Startup type)	service	GameInputSvc									Manual
1665	436	System Services	Geolocation Service (lfsvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\lfsvc	Start							3
1666	437	System Services	Geolocation Service (lfsvc) (Service Startup type)	service	lfsvc									Manual
1667	438	System Services	IIS Admin Service (IISADMIN)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\IISADMIN	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureIISAdminServiceStartupMode
1668	439	System Services	IIS Admin Service (IISADMIN) (Service Startup type)	service	IISADMIN
1669	440	System Services	Infrared monitor service (irmon)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\irmon	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureInfraredMonitorServiceStartupMode
1670	441	System Services	Infrared monitor service (irmon) (Service Startup type)	service	irmon
1671	442	System Services	Internet Connection Sharing (ICS) (SharedAccess)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureInternetConnectionSharingServiceStartupMode				3
1672	443	System Services	Internet Connection Sharing (ICS) (SharedAccess) (Service Startup type)	service	SharedAccess									Manual
1673	444	System Services	Link-Layer Topology Discovery Mapper (lltdsvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\lltdsvc	Start							3
1674	445	System Services	Link-Layer Topology Discovery Mapper (lltdsvc) (Service Startup type)	service	lltdsvc									Manual
1675	446	System Services	LxssManager (LxssManager)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\LxssManager	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureLxssManagerServiceStartupMode
1676	447	System Services	LxssManager (LxssManager) (Service Startup type)	service	LxssManager
1677	448	System Services	Microsoft FTP Service (FTPSVC)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\FTPSVC	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureMicrosoftFTPServiceStartupMode
1678	449	System Services	Microsoft FTP Service (FTPSVC) (Service Startup type)	service	FTPSVC
1679	1315	System Services	Microsoft Store Install Service (InstallService)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\InstallService	Start							3
1680	1316	System Services	Microsoft Store Install Service (InstallService) (Service Startup type)	service	InstallService									Manual
1681	450	System Services	Microsoft iSCSI Initiator Service (MSiSCSI)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\MSiSCSI	Start							3
1682	451	System Services	Microsoft iSCSI Initiator Service (MsiSCSI) (Service Startup type)	service	MsiSCSI									Manual
1683	452	System Services	OpenSSH SSH Server (sshd)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\sshd	Start
1684	453	System Services	OpenSSH SSH Server (sshd) (Service Startup type)	service	sshd
1685	460	System Services	PNRP Machine Name Publication Service (PNRPAutoReg)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\PNRPAutoReg	Start							3
1686	461	System Services	PNRP Machine Name Publication Service (PNRPAutoReg) (Service Startup type)	service	PNRPAutoReg									Manual
1687	454	System Services	Peer Name Resolution Protocol (PNRPsvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\PNRPsvc	Start							3
1688	455	System Services	Peer Name Resolution Protocol (PNRPsvc) (Service Startup type)	service	PNRPsvc									Manual
1689	456	System Services	Peer Networking Grouping (p2psvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\p2psvc	Start							3
1690	457	System Services	Peer Networking Grouping (p2psvc) (Service Startup type)	service	p2psvc									Manual
1691	458	System Services	Peer Networking Identity Manager (p2pimsvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\p2pimsvc	Start							3
1692	459	System Services	Peer Networking Identity Manager (p2pimsvc) (Service Startup type)	service	p2pimsvc									Manual
1693	1664	System Services	Print Spooler (Spooler)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\Spooler	Start							2
1694	1680	System Services	Print Spooler (Spooler) (DC only)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\Spooler	Start							2
1695	1682	System Services	Print Spooler (Spooler) (MS only)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\Spooler	Start							2
1696	1665	System Services	Print Spooler (Spooler) (Service Startup type)	service	Spooler									Automatic
1697	1681	System Services	Print Spooler (Spooler) (Service Startup type) (DC only)	service	Spooler									Automatic
1698	1683	System Services	Print Spooler (Spooler) (Service Startup type) (MS only)	service	Spooler									Automatic
1699	462	System Services	Problem Reports and Solutions Control Panel Support (wercplsupport)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\wercplsupport	Start							3
1700	463	System Services	Problem Reports and Solutions Control Panel Support (wercplsupport) (Service Startup type)	service	wercplsupport									Manual
1701	464	System Services	Remote Access Auto Connection Manager (RasAuto)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\RasAuto	Start							3
1702	465	System Services	Remote Access Auto Connection Manager (RasAuto) (Service Startup type)	service	RasAuto									Manual
1703	466	System Services	Remote Desktop Configuration (SessionEnv)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SessionEnv	Start							3
1704	467	System Services	Remote Desktop Configuration (SessionEnv) (Service Startup type)	service	SessionEnv									Manual
1705	468	System Services	Remote Desktop Services (TermService)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\TermService	Start							3
1706	469	System Services	Remote Desktop Services (TermService) (Service Startup type)	service	TermService									Manual
1707	470	System Services	Remote Desktop Services UserMode Port Redirector (UmRdpService)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\UmRdpService	Start							3
1708	471	System Services	Remote Desktop Services UserMode Port Redirector (UmRdpService) (Service Startup type)	service	UmRdpService									Manual
1709	472	System Services	Remote Procedure Call (RPC) Locator (RpcLocator)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\RpcLocator	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureRemoteProcedureCallLocatorServiceStartupMode				3
1710	473	System Services	Remote Procedure Call (RPC) Locator (RpcLocator) (Service Startup type)	service	RpcLocator									Manual
1711	474	System Services	Remote Registry (RemoteRegistry)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\RemoteRegistry	Start							4
1712	475	System Services	Remote Registry (RemoteRegistry) (Service Startup type)	service	RemoteRegistry									Disabled
1713	476	System Services	Routing and Remote Access (RemoteAccess)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\RemoteAccess	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureRoutingAndRemoteAccessServiceStartupMode				4
1714	477	System Services	Routing and Remote Access (RemoteAccess) (Service Startup type)	service	RemoteAccess									Disabled
1715	482	System Services	SNMP Service (SNMP)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SNMP	Start
1716	483	System Services	SNMP Service (SNMP) (Service Startup type)	service	SNMP
1717	486	System Services	SSDP Discovery (SSDPSRV)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SSDPSRV	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureSSDPDiscoveryServiceStartupMode				3
1718	487	System Services	SSDP Discovery (SSDPSRV) (Service Startup type)	service	SSDPSRV									Manual
1719	1322	System Services	Secondary Logon (seclogon)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\seclogon	Start							3
1720	1323	System Services	Secondary Logon (seclogon) (Service Startup type)	service	seclogon									Manual
1721	478	System Services	Server (LanmanServer)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer	Start							2
1722	479	System Services	Server (LanmanServer) (Service Startup type)	service	LanmanServer									Automatic
1723	480	System Services	Simple TCP/IP Services (simptcp)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\simptcp	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureSimpleTCPIPServicesStartupMode
1724	481	System Services	Simple TCP/IP Services (simptcp) (Service Startup type)	service	simptcp
1725	484	System Services	Special Administration Console Helper (sacsvr)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\sacsvr	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureSpecialAdministrationConsoleHelperServiceStartupMode
1726	485	System Services	Special Administration Console Helper (sacsvr) (Service Startup type)	service	sacsvr
1727	488	System Services	UPnP Device Host (upnphost)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\upnphost	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureUPnPDeviceHostServiceStartupMode				3
1728	489	System Services	UPnP Device Host (upnphost) (Service Startup type)	service	upnphost									Manual
1729	490	System Services	Web Management Service (WMSvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\WMSvc	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureWebManagementServiceStartupMode
1730	491	System Services	Web Management Service (WMSvc) (Service Startup type)	service	WMSvc
1731	1745	System Services	WebClient (WebClient)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\WebClient	Start							3
1732	1746	System Services	WebClient (WebClient) (Service Startup type)	service	WebClient									Manual
1733	1883	System Services	WinHTTP Web Proxy Auto-Discovery Service (WinHttpAutoProxySvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\WinHttpAutoProxySvc	Start							3
1734	1884	System Services	WinHTTP Web Proxy Auto-Discovery Service (WinHttpAutoProxySvc) (Service Startup type)	service	WinHttpAutoProxySvc									Manual
1735	492	System Services	Windows Error Reporting Service (WerSvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\WerSvc	Start							3
1736	493	System Services	Windows Error Reporting Service (WerSvc) (Service Startup type)	service	WerSvc									Manual
1737	494	System Services	Windows Event Collector (Wecsvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\Wecsvc	Start							3
1738	495	System Services	Windows Event Collector (Wecsvc) (Service Startup type)	service	Wecsvc									Manual
1739	496	System Services	Windows Media Player Network Sharing Service (WMPNetworkSvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\WMPNetworkSvc	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode				3
1740	497	System Services	Windows Media Player Network Sharing Service (WMPNetworkSvc) (Service Startup type)	service	WMPNetworkSvc									Manual
1741	498	System Services	Windows Mobile Hotspot Service (icssvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\icssvc	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureWindowsMobileHotspotServiceStartupMode				3
1742	499	System Services	Windows Mobile Hotspot Service (icssvc) (Service Startup type)	service	icssvc									Manual
1743	500	System Services	Windows Push Notifications System Service (WpnService)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\WpnService	Start							2
1744	501	System Services	Windows Push Notifications System Service (WpnService) (Service Startup type)	service	WpnService									Automatic
1745	502	System Services	Windows PushToInstall Service (PushToInstall)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\PushToInstall	Start							3
1746	503	System Services	Windows PushToInstall Service (PushToInstall) (Service Startup type)	service	PushToInstall									Manual
1747	504	System Services	Windows Remote Management (WS-Management) (WinRM)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\WinRM	Start							3
1748	505	System Services	Windows Remote Management (WS-Management) (WinRM) (Service Startup type)	service	WinRM									Manual
1749	506	System Services	World Wide Web Publishing Service (W3SVC)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\W3SVC	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureWorldWideWebPublishingServiceStartupMode
1750	507	System Services	World Wide Web Publishing Service (W3SVC) (Service Startup type)	service	W3SVC
1751	508	System Services	Xbox Accessory Management Service (XboxGipSvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\XboxGipSvc	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureXboxAccessoryManagementServiceStartupMode				3
1752	509	System Services	Xbox Accessory Management Service (XboxGipSvc) (Service Startup type)	service	XboxGipSvc									Manual
1753	510	System Services	Xbox Live Auth Manager (XblAuthManager)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\XblAuthManager	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureXboxLiveAuthManagerServiceStartupMode				3
1754	511	System Services	Xbox Live Auth Manager (XblAuthManager) (Service Startup type)	service	XblAuthManager									Manual
1755	512	System Services	Xbox Live Game Save (XblGameSave)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\XblGameSave	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureXboxLiveGameSaveServiceStartupMode				3
1756	513	System Services	Xbox Live Game Save (XblGameSave) (Service Startup type)	service	XblGameSave									Manual
1757	514	System Services	Xbox Live Networking Service (XboxNetApiSvc)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\XboxNetApiSvc	Start	HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\{GUID}\default\Device\SystemServices	HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\SystemServices	ConfigureXboxLiveNetworkingServiceStartupMode				3
1758	515	System Services	Xbox Live Networking Service (XboxNetApiSvc) (Service Startup type)	service	XboxNetApiSvc									Manual
1759	345	User Rights Assignment	Access Credential Manager as a trusted caller	accesschk	SeTrustedCredManAccessPrivilege
1760	5	User Rights Assignment	Access this computer from the network	accesschk	SeNetworkLogonRight									BUILTIN\Backup Operators;BUILTIN\Users;BUILTIN\Administrators;Everyone
1761	745	User Rights Assignment	Access this computer from the network (DC)	accesschk	SeNetworkLogonRight									NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS;BUILTIN\Pre-Windows 2000 Compatible Access;BUILTIN\Administrators;NT AUTHORITY\Authenticated Users;Everyone
1762	746	User Rights Assignment	Access this computer from the network (Member)	accesschk	SeNetworkLogonRight									BUILTIN\Pre-Windows 2000 Compatible Access;BUILTIN\Administrators;NT AUTHORITY\Authenticated Users;Everyone
1763	346	User Rights Assignment	Act as part of the operating system	accesschk	SeTcbPrivilege
1764	747	User Rights Assignment	Add workstations to domain (DC)	accesschk	SeMachineAccountPrivilege									NT AUTHORITY\Authenticated Users
1765	347	User Rights Assignment	Adjust memory quotas for a process	accesschk	SeIncreaseQuotaPrivilege									BUILTIN\Administrators;NT AUTHORITY\NETWORK SERVICE;NT AUTHORITY\LOCAL SERVICE
1766	6	User Rights Assignment	Allow log on locally	accesschk	SeInteractiveLogonRight									BUILTIN\Backup Operators;BUILTIN\Users;BUILTIN\Administrators;COMPUTERNAME\Guest
1767	1799	User Rights Assignment	Allow log on locally (DC only)	accesschk	SeInteractiveLogonRight									BUILTIN\Backup Operators;BUILTIN\Users;BUILTIN\Administrators;COMPUTERNAME\Guest
1768	348	User Rights Assignment	Allow log on through Remote Desktop Services	accesschk	SeRemoteInteractiveLogonRight									BUILTIN\Remote Desktop Users;BUILTIN\Administrators
1769	748	User Rights Assignment	Allow log on through Remote Desktop Services (DC)	accesschk	SeRemoteInteractiveLogonRight									BUILTIN\Administrators
1770	749	User Rights Assignment	Allow log on through Remote Desktop Services (Member)	accesschk	SeRemoteInteractiveLogonRight									BUILTIN\Remote Desktop Users;BUILTIN\Administrators
1771	349	User Rights Assignment	Back up files and directories	accesschk	SeBackupPrivilege									BUILTIN\Administrators;BUILTIN\Backup Operators
1772	350	User Rights Assignment	Change the system time	accesschk	SeSystemTimePrivilege									BUILTIN\Administrators;NT AUTHORITY\LOCAL SERVICE
1773	351	User Rights Assignment	Change the time zone	accesschk	SeTimeZonePrivilege									BUILTIN\Device Owners;BUILTIN\Users;BUILTIN\Administrators;NT AUTHORITY\LOCAL SERVICE
1774	352	User Rights Assignment	Create a pagefile	accesschk	SeCreatePagefilePrivilege									BUILTIN\Administrators
1775	353	User Rights Assignment	Create a token object	accesschk	SeCreateTokenPrivilege
1776	354	User Rights Assignment	Create global objects	accesschk	SeCreateGlobalPrivilege									NT AUTHORITY\SERVICE;BUILTIN\Administrators;NT AUTHORITY\NETWORK SERVICE;NT AUTHORITY\LOCAL SERVICE
1777	355	User Rights Assignment	Create permanent shared objects	accesschk	SeCreatePermanentPrivilege
1778	356	User Rights Assignment	Create symbolic links	accesschk	SeCreateSymbolicLinkPrivilege									BUILTIN\Administrators
1779	750	User Rights Assignment	Create symbolic links (DC)	accesschk	SeCreateSymbolicLinkPrivilege									BUILTIN\Administrators
1780	357	User Rights Assignment	Create symbolic links (Hyper-V)	accesschk	SeCreateSymbolicLinkPrivilege									S-1-5-83-0;BUILTIN\Administrators
1781	751	User Rights Assignment	Create symbolic links (Member)	accesschk	SeCreateSymbolicLinkPrivilege									BUILTIN\Administrators
1782	752	User Rights Assignment	Create symbolic links (Member, Hyper-V)	accesschk	SeCreateSymbolicLinkPrivilege									S-1-5-83-0;BUILTIN\Administrators
1783	7	User Rights Assignment	Debug programs	accesschk	SeDebugPrivilege									BUILTIN\Administrators
1784	8	User Rights Assignment	Deny access to this computer from the network	accesschk	SeDenyNetworkLogonRight									COMPUTERNAME\Guest
1785	753	User Rights Assignment	Deny access to this computer from the network (DC)	accesschk	SeDenyNetworkLogonRight									BUILTIN\Guests
1786	754	User Rights Assignment	Deny access to this computer from the network (Member)	accesschk	SeDenyNetworkLogonRight									BUILTIN\Guests
1787	9	User Rights Assignment	Deny log on as a batch job	accesschk	SeDenyBatchLogonRight
1788	10	User Rights Assignment	Deny log on as a service	accesschk	SeDenyServiceLogonRight
1789	358	User Rights Assignment	Deny log on locally	accesschk	SeDenyInteractiveLogonRight									BUILTIN\Guests
1790	11	User Rights Assignment	Deny log on through Remote Desktop Services	accesschk	SeDenyRemoteInteractiveLogonRight
1791	755	User Rights Assignment	Deny log on through Remote Desktop Services (DC)	accesschk	SeDenyRemoteInteractiveLogonRight
1792	756	User Rights Assignment	Deny log on through Remote Desktop Services (Member)	accesschk	SeDenyRemoteInteractiveLogonRight
1793	359	User Rights Assignment	Enable computer and user accounts to be trusted for delegation	accesschk	SeEnableDelegationPrivilege
1794	757	User Rights Assignment	Enable computer and user accounts to be trusted for delegation (DC)	accesschk	SeEnableDelegationPrivilege									BUILTIN\Administrators
1795	758	User Rights Assignment	Enable computer and user accounts to be trusted for delegation (Member)	accesschk	SeEnableDelegationPrivilege
1796	360	User Rights Assignment	Force shutdown from a remote system	accesschk	SeRemoteShutdownPrivilege									BUILTIN\Administrators
1797	361	User Rights Assignment	Generate security audits	accesschk	SeAuditPrivilege									NT AUTHORITY\NETWORK SERVICE;NT AUTHORITY\LOCAL SERVICE
1798	362	User Rights Assignment	Impersonate a client after authentication	accesschk	SeImpersonatePrivilege									NT AUTHORITY\SERVICE;BUILTIN\Administrators;NT AUTHORITY\NETWORK SERVICE;NT AUTHORITY\LOCAL SERVICE
1799	759	User Rights Assignment	Impersonate a client after authentication (DC)	accesschk	SeImpersonatePrivilege									NT AUTHORITY\SERVICE;BUILTIN\Administrators;NT AUTHORITY\NETWORK SERVICE;NT AUTHORITY\LOCAL SERVICE
1800	760	User Rights Assignment	Impersonate a client after authentication (Member)	accesschk	SeImpersonatePrivilege									NT AUTHORITY\SERVICE;BUILTIN\Administrators;NT AUTHORITY\NETWORK SERVICE;NT AUTHORITY\LOCAL SERVICE
1801	363	User Rights Assignment	Increase scheduling priority	accesschk	SeIncreaseBasePriorityPrivilege									Window Manager\Window Manager Group;BUILTIN\Administrators
1802	364	User Rights Assignment	Load and unload device drivers	accesschk	SeLoadDriverPrivilege									BUILTIN\Administrators
1803	365	User Rights Assignment	Lock pages in memory	accesschk	SeLockMemoryPrivilege
1804	366	User Rights Assignment	Log on as a batch job	accesschk	SeBatchLogonRight									BUILTIN\Performance Log Users;BUILTIN\Backup Operators;BUILTIN\Administrators
1805	761	User Rights Assignment	Log on as a batch job (DC)	accesschk	SeBatchLogonRight									BUILTIN\Performance Log Users;BUILTIN\Backup Operators;BUILTIN\Administrators
1806	367	User Rights Assignment	Log on as a service	accesschk	SeServiceLogonRight									NT SERVICE\ALL SERVICES;NT AUTHORITY\NETWORK SERVICE
1807	368	User Rights Assignment	Log on as a service (Hyper-V)	accesschk	SeServiceLogonRight									S-1-5-83-0;NT SERVICE\ALL SERVICES;NT AUTHORITY\NETWORK SERVICE
1808	1804	User Rights Assignment	Log on as a service (Windows Defender Application Guard)	accesschk	SeServiceLogonRight									S-1-5-83-0;NT SERVICE\ALL SERVICES;NT AUTHORITY\NETWORK SERVICE
1809	369	User Rights Assignment	Manage auditing and security log	accesschk	SeSecurityPrivilege									BUILTIN\Administrators
1810	763	User Rights Assignment	Manage auditing and security log (DC and Exchange)	accesschk	SeSecurityPrivilege									BUILTIN\Administrators
1811	762	User Rights Assignment	Manage auditing and security log (DC)	accesschk	SeSecurityPrivilege									BUILTIN\Administrators
1812	764	User Rights Assignment	Manage auditing and security log (Member)	accesschk	SeSecurityPrivilege									BUILTIN\Administrators
1813	370	User Rights Assignment	Modify an object label	accesschk	SeReLabelPrivilege
1814	371	User Rights Assignment	Modify firmware environment values	accesschk	SeSystemEnvironmentPrivilege									BUILTIN\Administrators
1815	372	User Rights Assignment	Perform volume maintenance tasks	accesschk	SeManageVolumePrivilege									BUILTIN\Administrators
1816	373	User Rights Assignment	Profile single process	accesschk	SeProfileSingleProcessPrivilege									BUILTIN\Administrators
1817	374	User Rights Assignment	Profile system performance	accesschk	SeSystemProfilePrivilege									NT SERVICE\WdiServiceHost;BUILTIN\Administrators
1818	375	User Rights Assignment	Replace a process level token	accesschk	SeAssignPrimaryTokenPrivilege									NT AUTHORITY\NETWORK SERVICE;NT AUTHORITY\LOCAL SERVICE
1819	376	User Rights Assignment	Restore files and directories	accesschk	SeRestorePrivilege									BUILTIN\Backup Operators;BUILTIN\Administrators
1820	377	User Rights Assignment	Shut down the system	accesschk	SeShutdownPrivilege									BUILTIN\Backup Operators;BUILTIN\Users;BUILTIN\Administrators
1821	800	User Rights Assignment	Synchronize directory service data (DC)	accesschk	SeSyncAgentPrivilege
1822	378	User Rights Assignment	Take ownership of files or other objects	accesschk	SeTakeOwnershipPrivilege									BUILTIN\Administrators
1823	522	Windows Firewall	Apply local connection security rules (Public Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile	AllowLocalIPsecPolicyMerge	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\PublicProfile		AllowLocalIpsecPolicyMerge				0
1824	521	Windows Firewall	Apply local firewall rules (Public Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile	AllowLocalPolicyMerge	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\PublicProfile		AllowLocalPolicyMerge				0
1825	816	Windows Firewall	Display a notification (Domain Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile	DisableNotifications							0
1826	516	Windows Firewall	Display a notification (Domain Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile	DisableNotifications	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\DomainProfile		DisableInboundNotifications				0
1827	817	Windows Firewall	Display a notification (Private Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile	DisableNotifications							0
1828	518	Windows Firewall	Display a notification (Private Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile	DisableNotifications	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\StandardProfile		DisableInboundNotifications				0
1829	818	Windows Firewall	Display a notification (Public Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile	DisableNotifications							0
1830	520	Windows Firewall	Display a notification (Public Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile	DisableNotifications	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\PublicProfile		DisableInboundNotifications				0
1831	37	Windows Firewall	EnableFirewall (Domain Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile	EnableFirewall							1
1832	36	Windows Firewall	EnableFirewall (Domain Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile	EnableFirewall	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\DomainProfile		EnableFirewall				0
1833	49	Windows Firewall	EnableFirewall (Private Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile	EnableFirewall							1
1834	48	Windows Firewall	EnableFirewall (Private Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile	EnableFirewall	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\StandardProfile		EnableFirewall				0
1835	61	Windows Firewall	EnableFirewall (Public Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile	EnableFirewall							1
1836	60	Windows Firewall	EnableFirewall (Public Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile	EnableFirewall	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\PublicProfile		EnableFirewall				0
1837	294	Windows Firewall	HardeningKitty-Block-RunScriptHelper-x64	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\System32\RunScriptHelper.exe\|									False
1838	295	Windows Firewall	HardeningKitty-Block-RunScriptHelper-x86	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\Syswow64\RunScriptHelper.exe\|									False
1839	275	Windows Firewall	HardeningKitty-Block-TCP-NetBIOS	FirewallRule	Any\|Inbound\|Block\|TCP\|137,138,139\|\|									False
1840	276	Windows Firewall	HardeningKitty-Block-TCP-RDP	FirewallRule	Any\|Inbound\|Block\|TCP\|3389\|\|									False
1841	277	Windows Firewall	HardeningKitty-Block-TCP-RPC	FirewallRule	Any\|Inbound\|Block\|TCP\|135,593\|\|									False
1842	278	Windows Firewall	HardeningKitty-Block-TCP-SMB	FirewallRule	Any\|Inbound\|Block\|TCP\|445\|\|									False
1843	279	Windows Firewall	HardeningKitty-Block-TCP-WinRM	FirewallRule	Any\|Inbound\|Block\|TCP\|5985,5986\|\|									False
1844	280	Windows Firewall	HardeningKitty-Block-UDP-NetBIOS	FirewallRule	Any\|Inbound\|Block\|UDP\|137,138,139\|\|									False
1845	281	Windows Firewall	HardeningKitty-Block-UDP-RPC	FirewallRule	Any\|Inbound\|Block\|UDP\|135,593\|\|									False
1846	282	Windows Firewall	HardeningKitty-Block-calc-x64	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\System32\calc.exe\|									False
1847	283	Windows Firewall	HardeningKitty-Block-calc-x86	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\Syswow64\calc.exe\|									False
1848	284	Windows Firewall	HardeningKitty-Block-certutil-x64	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\System32\certutil.exe\|									False
1849	285	Windows Firewall	HardeningKitty-Block-certutil-x86	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\Syswow64\certutil.exe\|									False
1850	286	Windows Firewall	HardeningKitty-Block-conhost-x64	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\System32\conhost.exe\|									False
1851	287	Windows Firewall	HardeningKitty-Block-conhost-x86	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\Syswow64\conhost.exe\|									False
1852	288	Windows Firewall	HardeningKitty-Block-cscript-x64	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\System32\cscript.exe\|									False
1853	289	Windows Firewall	HardeningKitty-Block-cscript-x86	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\Syswow64\cscript.exe\|									False
1854	290	Windows Firewall	HardeningKitty-Block-mshta-x64	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\System32\mshta.exe\|									False
1855	291	Windows Firewall	HardeningKitty-Block-mshta-x86	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\Syswow64\mshta.exe\|									False
1856	292	Windows Firewall	HardeningKitty-Block-notepad-x64	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\System32\notepad.exe\|									False
1857	293	Windows Firewall	HardeningKitty-Block-notepad-x86	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\Syswow64\notepad.exe\|									False
1858	296	Windows Firewall	HardeningKitty-Block-wscript-x64	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\System32\wscript.exe\|									False
1859	297	Windows Firewall	HardeningKitty-Block-wscript-x86	FirewallRule	Any\|Outbound\|Block\|\|\|%SystemRoot%\Syswow64\wscript.exe\|									False
1860	39	Windows Firewall	Inbound Connections (Domain Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile	DefaultInboundAction							1
1861	38	Windows Firewall	Inbound Connections (Domain Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile	DefaultInboundAction	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\DomainProfile		DefaultInboundAction				1
1862	51	Windows Firewall	Inbound Connections (Private Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile	DefaultInboundAction							1
1863	50	Windows Firewall	Inbound Connections (Private Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile	DefaultInboundAction	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\StandardProfile		DefaultInboundAction				1
1864	63	Windows Firewall	Inbound Connections (Public Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile	DefaultInboundAction							1
1865	62	Windows Firewall	Inbound Connections (Public Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile	DefaultInboundAction	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\PublicProfile		DefaultInboundAction				1
1866	45	Windows Firewall	Log dropped packets (Domain Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging	LogDroppedPackets							0
1867	44	Windows Firewall	Log dropped packets (Domain Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging	LogDroppedPackets	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\DomainProfile		EnableLogDroppedPackets				0
1868	57	Windows Firewall	Log dropped packets (Private Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging	LogDroppedPackets							0
1869	56	Windows Firewall	Log dropped packets (Private Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging	LogDroppedPackets	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\StandardProfile		EnableLogDroppedPackets				0
1870	69	Windows Firewall	Log dropped packets (Public Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging	LogDroppedPackets							0
1871	68	Windows Firewall	Log dropped packets (Public Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging	LogDroppedPackets	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\PublicProfile		EnableLogDroppedPackets				0
1872	43	Windows Firewall	Log size limit (Domain Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging	LogFileSize							4096
1873	42	Windows Firewall	Log size limit (Domain Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging	LogFileSize	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\DomainProfile		LogMaxFileSize				4096
1874	55	Windows Firewall	Log size limit (Private Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging	LogFileSize							4096
1875	54	Windows Firewall	Log size limit (Private Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging	LogFileSize	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\StandardProfile		LogMaxFileSize				4096
1876	67	Windows Firewall	Log size limit (Public Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging	LogFileSize							4096
1877	66	Windows Firewall	Log size limit (Public Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging	LogFileSize	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\PublicProfile		LogMaxFileSize				4096
1878	47	Windows Firewall	Log successful connections (Domain Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging	LogSuccessfulConnections							0
1879	46	Windows Firewall	Log successful connections (Domain Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging	LogSuccessfulConnections	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\DomainProfile		EnableLogSuccessConnections				0
1880	59	Windows Firewall	Log successful connections (Private Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging	LogSuccessfulConnections							0
1881	58	Windows Firewall	Log successful connections (Private Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging	LogSuccessfulConnections	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\StandardProfile		EnableLogSuccessConnections				0
1882	71	Windows Firewall	Log successful connections (Public Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging	LogSuccessfulConnections							0
1883	70	Windows Firewall	Log successful connections (Public Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging	LogSuccessfulConnections	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\PublicProfile		EnableLogSuccessConnections				0
1884	517	Windows Firewall	Name of log file (Domain Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging	LogFilePath	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\DomainProfile		LogFilePath
1885	519	Windows Firewall	Name of log file (Private Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging	LogFilePath	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\StandardProfile		LogFilePath
1886	523	Windows Firewall	Name of log file (Public Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging	LogFilePath	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\PublicProfile		LogFilePath
1887	41	Windows Firewall	Outbound Connections (Domain Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile	DefaultOutboundAction							0
1888	40	Windows Firewall	Outbound Connections (Domain Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile	DefaultOutboundAction	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\DomainProfile		DefaultOutboundAction				0
1889	53	Windows Firewall	Outbound Connections (Private Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile	DefaultOutboundAction							0
1890	52	Windows Firewall	Outbound Connections (Private Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile	DefaultOutboundAction	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\StandardProfile		DefaultOutboundAction				0
1891	65	Windows Firewall	Outbound Connections (Public Profile)	Registry		HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile	DefaultOutboundAction							0
1892	64	Windows Firewall	Outbound Connections (Public Profile, Policy)	Registry		HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile	DefaultOutboundAction	HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\PublicProfile		DefaultOutboundAction				0
1893	337	Windows Settings	Devices: AutoPlay: Use AutoPlay for all media and devices	Registry		HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers	DisableAutoplay							0
1894	336	Windows Settings	Devices: Typing: Autocorrect misspelled words	Registry		HKCU:\Software\Microsoft\TabletTip\1.7	EnableAutocorrection							1
1895	333	Windows Settings	System: Notification & actions: Get tips, tricks, and suggestions as you use Windows	Registry		HKCU:\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager	SubscribedContent-338389Enabled							1
1896	332	Windows Settings	System: Notification & actions: Show me the Windows welcome experience after updates and occasionally when I sign in to highlight what's new and suggested	Registry		HKCU:\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager	SubscribedContent-310093Enabled							1
1897	334	Windows Settings	System: Shared experiences: Shared across devices 1	Registry		HKCU:\Software\Microsoft\Windows\CurrentVersion\CDP	RomeSdkChannelUserAuthzPolicy							1
1898	335	Windows Settings	System: Shared experiences: Shared across devices 2	Registry		HKCU:\Software\Microsoft\Windows\CurrentVersion\CDP	CdpSessionUserAuthzPolicy							1

510 KiB Raw Blame History

510 KiB

Raw Blame History