Microsoft Windows graphic

Enforce Show Policies Only

Requirements: At least Microsoft Windows 2000

Location: User Configuration\System\Group Policy\


Description:
Prevents administrators from viewing or using Group Policy preferences.

A Group Policy administration (.adm) file can contain both true settings and preferences. True settings, which are fully supported by Group Policy, must use registry entries in the Software\Policies or Software\Microsoft\Windows\CurrentVersion\Policies registry subkeys. Preferences, which are not fully supported, use registry entries in other subkeys.

If you enable this setting, the "Show Policies Only" command is turned on, and administrators cannot turn it off. As a result, Group Policy Object Editor displays only true settings; preferences do not appear.

If you disable this setting or do not configure it, the "Show Policies Only" command is turned on by default, but administrators can view preferences by turning off the "Show Policies Only" command.

Note

In Group Policy Object Editor, preferences have a red icon to distinguish them from true settings, which have a blue icon.

ADM File: system.adm