| A | B | C | D | |
|---|---|---|---|---|
1 | Policy Path | Policy Name | Windows Server 2016/2019 | Windows 10/Workstation |
2 | Control Panel | Prohibit access to Control Panel and PC settings | Enabled (maybe, should consider locking other programs depending on your senario) | Enabled (big maybe) |
3 | Control Panel/Personalization | Enable screen saver | Enabled | Enabled |
4 | Control Panel/Personalization | Force specific screen saver | scrnsave.scr | scrnsave.scr |
5 | Control Panel/Personalization | Password protect the screen saver | Enabled | Enabled |
6 | Control Panel/Personalization | Screen saver timeout | 900 (maybe) | 900 (maybe) |
7 | Start Menu and Taskbar/Notifications | Turn off toast notifications on the lock screen | Enabled | Enabled |
8 | System | Prevent access to registry editing tools | Enabled (maybe, should consider locking other programs depending on your senario) | Enabled (big maybe) |
9 | System | Prevent access to the command prompt | Enabled (maybe, should consider locking other programs depending on your senario) | Enabled (big maybe) |
10 | System/Internet Communication Management/Internet Communication Settings | Turn off Help Experience Improvement Program | Enabled (privacy) | Enabled (privacy) |
11 | System/Removable Storage Access (depending on your senario might want to configure more here) | All Removable Storage classes: Deny all access | Enabled | Enabled |
12 | Windows Components/Attachment Manager | Do not preserve zone information in file attachments | Disabled | Disabled |
13 | Windows Components/Attachment Manager | Notify antivirus programs when opening attachments | Enabled (maybe) | Enabled (maybe) |
14 | Windows Components/Cloud Content | Configure Windows spotlight on Lock Screen | Disabled | Disabled |
15 | Windows Components/Cloud Content | Do not suggest third-party content in Windows spotlight | Enabled | Enabled |
16 | Windows Components/Cloud Content | Turn off all Windows spotlight features | Enabled | Enabled |
17 | Windows Components/Internet Explorer | Turn on the auto-complete feature for user names and passwords on forms | Disabled | Disabled |
18 | Windows Components/Network Sharing | Prevent users from sharing files within their profile | Enabled (maybe) | Enabled (maybe) |
19 | Windows Components/Windows Installer | Always install with elevated privileges | Disabled | Disabled |
20 | Windows Components/Windows Media Player/Playback | Prevent Codec Download | Enabled | Enabled |