| Turn off Federation Service | Computer |
| Allow Print Spooler to accept client connections | Computer |
| Web-based printing | Computer |
| Activate Shutdown Event Tracker System State Data feature | Computer |
| Do not display Manage Your Server page at logon | Computer |
| Enable Persistent Time Stamp | Computer |
| Allow Cross-Forest User Policy and Roaming User Profiles | Computer |
| Always use local ADM files for Group Policy Object Editor | Computer |
| Do not allow additional session logins | Computer |
| Do not allow changes to initiator iqn name | Computer |
| Do not allow changes to initiator CHAP secret | Computer |
| Do not allow connections without IPsec | Computer |
| Do not allow sessions without mutual CHAP | Computer |
| Do not allow sessions without one-way CHAP | Computer |
| Do not allow adding new targets via manual configuration | Computer |
| Do not allow manual configuration of discovered targets | Computer |
| Do not allow manual configuration of iSNS servers | Computer |
| Do not allow manual configuration of target portals | Computer |
| Netlogon share compatibility | Computer |
| Sysvol share compatibility | Computer |
| Ignore Delegation Failure | Computer |
| Do not display Initial Configuration Tasks window automatically at logon | Computer |
| Do not display Server Manager automatically at logon | Computer |
| Global Configuration Settings | Computer |
| Configure Windows NTP Client | Computer |
| Enable Windows NTP Client | Computer |
| Enable Windows NTP Server | Computer |
| Allow remote start of unlisted programs | Computer |
| Redirect only the default client printer | Computer |
| Use Terminal Services Easy Print driver first | Computer |
| Use TS Session Broker load balancing | Computer |
| Disk Diagnostic: Configure custom alert text | Computer |
| Disk Diagnostic: Configure execution level | Computer |
| Report unplanned shutdown events | Computer |
| Prevent access to 16-bit applications | Computer |
| Remove Program Compatibility Property Page | Computer |
| Turn Off Application Compatibility Engine | Computer |
| Turn Off Program Compatibility Wizard | Computer |
| Prevent IIS installation | Computer |
| Set the number of retries for Password sync Servers | Computer |
| Set the retry interval for Password sync Servers | Computer |
| Turn On Extensive logging for Password sync Servers | Computer |
| Turn on the Windows to NIS password sync for migrated users for Password sync Servers | Computer |
| Set Update Interval to NIS subordinate servers | Computer |
| Turn on extensive logging for domain controllers running Server for NIS | Computer |
| Allow .rdp files from unknown publishers | Computer |
| Allow .rdp files from valid publishers and user’s default .rdp settings | Computer |
| Configure server authentication for client | Computer |
| Do not allow passwords to be saved | Computer |
| Prompt for credentials on the client computer | Computer |
| Specify SHA1 thumbprints of certificates representing trusted .rdp publishers | Computer |
| Allow reconnection from original client only | Computer |
| Allow users to connect remotely using Terminal Services | Computer |
| Automatic reconnection | Computer |
| Configure keep-alive connection interval | Computer |
| Deny logoff of an administrator logged in to the console session | Computer |
| Limit number of connections | Computer |
| Restrict Terminal Services users to a single remote session | Computer |
| Set rules for remote control of Terminal Services user sessions | Computer |
| Allow audio redirection | Computer |
| Allow time zone redirection | Computer |
| Do not allow clipboard redirection | Computer |
| Do not allow COM port redirection | Computer |
| Do not allow drive redirection | Computer |
| Do not allow LPT port redirection | Computer |
| Do not allow smart card device redirection | Computer |
| Do not allow supported Plug and Play device redirection | Computer |
| Hide notifications about TS Licensing problems that affect the terminal server | Computer |
| Set the Terminal Services licensing mode | Computer |
| Use the specified Terminal Services license servers | Computer |
| Do not allow client printer redirection | Computer |
| Do not set default client printer to be default printer in a session | Computer |
| Specify terminal server fallback printer driver behavior | Computer |
| Set path for TS Roaming Profiles | Computer |
| Set TS User Home Directory | Computer |
| Use mandatory profiles on the terminal server | Computer |
| Always show desktop on connection | Computer |
| Enforce Removal of Remote Desktop Wallpaper | Computer |
| Limit maximum color depth | Computer |
| Remove “Disconnect” option from Shut Down dialog | Computer |
| Remove Windows Security item from Start menu | Computer |
| Start a program on connection | Computer |
| Always prompt for password upon connection | Computer |
| Do not allow local administrators to customize permissions | Computer |
| Require secure RPC communication | Computer |
| Require use of specific security layer for remote (RDP) connections | Computer |
| Require user authentication for remote connections by using Network Level Authentication | Computer |
| Server Authentication Certificate Template | Computer |
| Set client connection encryption level | Computer |
| Set time limit for active but idle Terminal Services sessions | Computer |
| Set time limit for active Terminal Services sessions | Computer |
| Set time limit for disconnected sessions | Computer |
| Terminate session when time limits are reached | Computer |
| Do not delete temp folder upon exit | Computer |
| Do not use temporary folders per session | Computer |
| Join TS Session Broker | Computer |
| Configure TS Session Broker farm name | Computer |
| Configure TS Session Broker server name | Computer |
| Use IP Address Redirection | Computer |
| License server security group | Computer |
| Prevent license upgrade | Computer |
| Prevent Windows Media DRM Internet Access | Computer |
| Set the Email IDs to which notifications are to be sent | Computer |
| Set the SMTP Server used to send notifications | Computer |
| Set the Time interval in minutes for logging accounting data | Computer |
| Turn on Accounting for WSRM | Computer |
| Microsoft network server: Amount of idle time required before suspending session | Computer |
| Microsoft network server: Digitally sign communications (always) | Computer |
| Microsoft network server: Digitally sign communications (if client agrees) | Computer |
| Microsoft network server: Disconnect clients when log-on hours expire | Computer |
| Environment | Computer |
| Registry | Computer |
| Network Shares | Computer |
| Data Sources | Computer |
| Local Users and Groups | Computer |
| Services | Computer |
