RESTRICTIONS enumeration

These flags are used with the SHRestricted function. SHRestricted is used to determine whether a specified administrator policy is in effect. In many cases, applications need to modify certain behaviors in order to comply with the policies enacted by system administrators.

Syntax


typedef enum  { 
  REST_NONE,
  REST_NORUN,
  REST_NOCLOSE,
  REST_NOSAVESET,
  REST_NOFILEMENU,
  REST_NOSETFOLDERS,
  REST_NOSETTASKBAR,
  REST_NODESKTOP,
  REST_NOFIND,
  REST_NODRIVES,
  REST_NODRIVEAUTORUN,
  REST_NODRIVETYPEAUTORUN,
  REST_NONETHOOD,
  REST_STARTBANNER,
  REST_RESTRICTRUN,
  REST_NOPRINTERTABS,
  REST_NOPRINTERDELETE,
  REST_NOPRINTERADD,
  REST_NOSTARTMENUSUBFOLDERS,
  REST_MYDOCSONNET,
  REST_NOEXITTODOS,
  REST_ENFORCESHELLEXTSECURITY,
  REST_LINKRESOLVEIGNORELINKINFO,
  REST_NOCOMMONGROUPS,
  REST_SEPARATEDESKTOPPROCESS,
  REST_NOWEB,
  REST_NOTRAYCONTEXTMENU,
  REST_NOVIEWCONTEXTMENU,
  REST_NONETCONNECTDISCONNECT,
  REST_STARTMENULOGOFF,
  REST_NOSETTINGSASSIST,
  REST_NOINTERNETICON,
  REST_NORECENTDOCSHISTORY,
  REST_NORECENTDOCSMENU,
  REST_NOACTIVEDESKTOP,
  REST_NOACTIVEDESKTOPCHANGES,
  REST_NOFAVORITESMENU,
  REST_CLEARRECENTDOCSONEXIT,
  REST_CLASSICSHELL,
  REST_NOCUSTOMIZEWEBVIEW,
  REST_NOHTMLWALLPAPER,
  REST_NOCHANGINGWALLPAPER,
  REST_NODESKCOMP,
  REST_NOADDDESKCOMP,
  REST_NODELDESKCOMP,
  REST_NOCLOSEDESKCOMP,
  REST_NOCLOSE_DRAGDROPBAND,
  REST_NOMOVINGBAND,
  REST_NOEDITDESKCOMP,
  REST_NORESOLVESEARCH,
  REST_NORESOLVETRACK,
  REST_FORCECOPYACLWITHFILE,
  REST_NOLOGO3CHANNELNOTIFY,
  REST_NOFORGETSOFTWAREUPDATE,
  REST_NOSETACTIVEDESKTOP,
  REST_NOUPDATEWINDOWS,
  REST_NOCHANGESTARMENU,
  REST_NOFOLDEROPTIONS,
  REST_HASFINDCOMPUTERS,
  REST_INTELLIMENUS,
  REST_RUNDLGMEMCHECKBOX,
  REST_ARP_ShowPostSetup,
  REST_NOCSC,
  REST_NOCONTROLPANEL,
  REST_ENUMWORKGROUP,
  REST_ARP_NOARP,
  REST_ARP_NOREMOVEPAGE,
  REST_ARP_NOADDPAGE,
  REST_ARP_NOWINSETUPPAGE,
  REST_GREYMSIADS,
  REST_NOCHANGEMAPPEDDRIVELABEL,
  REST_NOCHANGEMAPPEDDRIVECOMMENT,
  REST_MaxRecentDocs,
  REST_NONETWORKCONNECTIONS,
  REST_FORCESTARTMENULOGOFF,
  REST_NOWEBVIEW,
  REST_NOCUSTOMIZETHISFOLDER,
  REST_NOENCRYPTION,
  REST_DONTSHOWSUPERHIDDEN,
  REST_NOSHELLSEARCHBUTTON,
  REST_NOHARDWARETAB,
  REST_NORUNASINSTALLPROMPT,
  REST_PROMPTRUNASINSTALLNETPATH,
  REST_NOMANAGEMYCOMPUTERVERB,
  REST_NORECENTDOCSNETHOOD,
  REST_DISALLOWRUN,
  REST_NOWELCOMESCREEN,
  REST_RESTRICTCPL,
  REST_DISALLOWCPL,
  REST_NOSMBALLOONTIP,
  REST_NOSMHELP,
  REST_NOWINKEYS,
  REST_NOENCRYPTONMOVE,
  REST_NOLOCALMACHINERUN,
  REST_NOCURRENTUSERRUN,
  REST_NOLOCALMACHINERUNONCE,
  REST_NOCURRENTUSERRUNONCE,
  REST_FORCEACTIVEDESKTOPON,
  REST_NOCOMPUTERSNEARME,
  REST_NOVIEWONDRIVE,
  REST_NONETCRAWL,
  REST_NOSHAREDDOCUMENTS,
  REST_NOSMMYDOCS,
  REST_NOSMMYPICS,
  REST_ALLOWBITBUCKDRIVES,
  REST_NONLEGACYSHELLMODE,
  REST_NOCONTROLPANELBARRICADE,
  REST_NOSTARTPAGE,
  REST_NOAUTOTRAYNOTIFY,
  REST_NOTASKGROUPING,
  REST_NOCDBURNING,
  REST_MYCOMPNOPROP,
  REST_MYDOCSNOPROP,
  REST_NOSTARTPANEL,
  REST_NODISPLAYAPPEARANCEPAGE,
  REST_NOTHEMESTAB,
  REST_NOVISUALSTYLECHOICE,
  REST_NOSIZECHOICE,
  REST_NOCOLORCHOICE,
  REST_SETVISUALSTYLE,
  REST_STARTRUNNOHOMEPATH,
  REST_NOUSERNAMEINSTARTPANEL,
  REST_NOMYCOMPUTERICON,
  REST_NOSMNETWORKPLACES,
  REST_NOSMPINNEDLIST,
  REST_NOSMMYMUSIC,
  REST_NOSMEJECTPC,
  REST_NOSMMOREPROGRAMS,
  REST_NOSMMFUPROGRAMS,
  REST_NOTRAYITEMSDISPLAY,
  REST_NOTOOLBARSONTASKBAR,
  REST_NOSMCONFIGUREPROGRAMS,
  REST_HIDECLOCK,
  REST_NOLOWDISKSPACECHECKS,
  REST_NOENTIRENETWORK,
  REST_NODESKTOPCLEANUP,
  REST_BITBUCKNUKEONDELETE,
  REST_BITBUCKCONFIRMDELETE,
  REST_BITBUCKNOPROP,
  REST_NODISPBACKGROUND,
  REST_NODISPSCREENSAVEPG,
  REST_NODISPSETTINGSPG,
  REST_NODISPSCREENSAVEPREVIEW,
  REST_NODISPLAYCPL,
  REST_HIDERUNASVERB,
  REST_NOTHUMBNAILCACHE,
  REST_NOSTRCMPLOGICAL,
  REST_NOPUBLISHWIZARD,
  REST_NOONLINEPRINTSWIZARD,
  REST_NOWEBSERVICES,
  REST_ALLOWUNHASHEDWEBVIEW,
  REST_ALLOWLEGACYWEBVIEW,
  REST_REVERTWEBVIEWSECURITY,
  REST_INHERITCONSOLEHANDLES,
  REST_SORTMAXITEMCOUNT,
  REST_NOREMOTERECURSIVEEVENTS,
  REST_NOREMOTECHANGENOTIFY,
  REST_NOSIMPLENETIDLIST,
  REST_NOENUMENTIRENETWORK,
  REST_NODETAILSTHUMBNAILONNETWORK,
  REST_NOINTERNETOPENWITH,
  REST_ALLOWLEGACYLMZBEHAVIOR,
  REST_DONTRETRYBADNETNAME,
  REST_ALLOWFILECLSIDJUNCTIONS,
  REST_NOUPNPINSTALL,
  REST_ARP_DONTGROUPPATCHES,
  REST_ARP_NOCHOOSEPROGRAMSPAGE,
  REST_NODISCONNECT,
  REST_NOSECURITY,
  REST_NOFILEASSOCIATE,
  REST_ALLOWCOMMENTTOGGLE,
  REST_USEDESKTOPINICACHE
} RESTRICTIONS;

Constants

REST_NONE

Not used.

REST_NORUN

If nonzero, the system administrator has forbidden access to the Run command on the Start menu. Applications should remove similar functionality. For example, a browser with an address bar should deny attempts by the user to type the path of a local file into the address bar.

REST_NOCLOSE

If nonzero, the system administrator has forbidden access to the Shut Down command on the Start menu. Applications should remove the ability to shut down or restart the computer.

REST_NOSAVESET

If nonzero, the system administrator has requested that applications do not save their state at exit for restoration the next time they are run. Applications should disable saving their window position and settings.

REST_NOFILEMENU

If nonzero, the system administrator has forbidden access to the Windows Explorer File menu. Applications should remove similar functionality.

REST_NOSETFOLDERS

If nonzero, the system administrator has forbidden access to Control Panel, Printers, and Network and Dial up Connections. Applications should prevent users from viewing those folders.

REST_NOSETTASKBAR

If nonzero, the system administrator has forbidden access to taskbar settings. Applications should prevent users from changing those settings.

REST_NODESKTOP

If nonzero, the system administrator has specified that all icons on the desktop should be hidden. Applications do not need to perform any special actions.

REST_NOFIND

If nonzero, the system administrator has indicated that the user should not be enabled to search for files. Applications should remove similar functionality.

REST_NODRIVES

A 32-bit value that specifies the drives that should not be displayed to the user. Bit 0 corresponds to drive A, up to bit 25 which corresponds to drive Z. Applications that display a list of drives should remove drives that have their corresponding bits set.

REST_NODRIVEAUTORUN

A 32-bit value that specifies the drives for which AutoRun should be disabled. Bit 0 corresponds to drive A, up to bit 25 which corresponds to drive Z. Applications should not offer to AutoRun any drive that has its corresponding bit set.

REST_NODRIVETYPEAUTORUN

A 32-bit value that specifies the drive types for which AutoRun should be disabled. The bits are numbered according to the return value of GetDriveType. For example, bit DRIVE_CDROM disables AutoRun on CD-ROM drives. Applications should not offer to AutoRun any drive whose type has its corresponding bit set.

REST_NONETHOOD

If nonzero, the system administrator has removed Network Neighborhood (also known as My Network Places) from the Shell namespace. Applications should disable functionality that enables the user to browse the network.

REST_STARTBANNER

Not used.

REST_RESTRICTRUN

If nonzero, the system administrator has restricted the programs the user can run. Only programs listed under the registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer can be run either from the Run dialog box, by double-clicking, or by selecting from the File menu. Applications should prevent users from running programs not listed under that key. Applications that use the ShellExecute or ShellExecuteEx functions to run programs do not need to take any special action because those functions check the policy.

REST_NOPRINTERTABS

Not used.

REST_NOPRINTERDELETE

If nonzero, the system administrator has disabled the user's ability to delete printers. Applications should remove the ability to delete printers.

REST_NOPRINTERADD

If nonzero, the system administrator has disabled the user's ability to add printers. Applications should remove the ability to add printers.

REST_NOSTARTMENUSUBFOLDERS

If nonzero, subfolders of the Start menu and Programs menu are not shown on the top of the classic Start menu, the Programs list on the classic Start menu, or the All Programs list on the Start menu. Applications that enumerate the contents of the Start menu should avoid subfolders. If nonzero, this flag does not restrict any menus other than those listed here; in particular, My Computer can still expand.

REST_MYDOCSONNET

Not used.

REST_NOEXITTODOS

Not used.

REST_ENFORCESHELLEXTSECURITY

If nonzero, the system administrator has forbidden the use of unapproved Shell extensions. Applications should not instantiate Shell extensions unless they are marked as approved by the system administrator. For more information, see Creating Shell Extension Handlers.

REST_LINKRESOLVEIGNORELINKINFO

If nonzero, the system does not attempt to reconnect mapped network drives when resolving a broken shortcut to a file or folder on a mapped network drive. Applications do not need to perform any special actions.

REST_NOCOMMONGROUPS

If nonzero, indicates the system administrator has forbidden access to the CSIDL_COMMON_STARTMENU or CSIDL_COMMON_PROGRAMS folders on the Start menu. Applications that enumerate the contents of the Start menu should avoid those folders.

REST_SEPARATEDESKTOPPROCESS

If nonzero, the administrator has required that folders be opened in a separate process. This overrides and disables the corresponding setting in the Folder Options dialog box. Applications do not need to perform any special actions.

REST_NOWEB

If nonzero, the system administrator has removed the Web tab from the desktop Properties dialog box. Applications do not need to perform any special actions. Windows XP and later: Not used.

REST_NOTRAYCONTEXTMENU

If nonzero, the system administrator has forbidden access to context menus for the taskbar. Applications do not need to perform any special actions.

REST_NOVIEWCONTEXTMENU

If nonzero, the system administrator has forbidden access to context menus for Shell objects. Applications should disable context menus for Shell objects.

REST_NONETCONNECTDISCONNECT

If nonzero, the system administrator has denied users the ability to map or disconnect network drives. Applications should remove the ability to map or disconnect network drives.

REST_STARTMENULOGOFF

If 1, the system administrator has removed the Log Off option from the Start menu. If 2, the system administrator has forced the Log Off option to be shown. Applications do not need to perform any special actions.

REST_NOSETTINGSASSIST

Not used.

REST_NOINTERNETICON

If nonzero, the system administrator has removed the Internet Explorer icon from the desktop. Applications do not need to perform any special actions.

REST_NORECENTDOCSHISTORY

If nonzero, the system administrator has disabled recent document history. Applications must disable all MRU lists, such as those that are often displayed on the File menu. Adherence to this setting is mandatory for Windows logo compliance.

REST_NORECENTDOCSMENU

If nonzero, the system administrator has removed the Recent Documents menu from the Start menu. Applications do not need to perform any special actions.

REST_NOACTIVEDESKTOP

If nonzero, the system administrator has disabled the ability to create web content on the desktop. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_NOACTIVEDESKTOPCHANGES

If nonzero, the system administrator has disabled the ability to change web content on the desktop. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_NOFAVORITESMENU

If nonzero, the system administrator has removed the Favorites menu from the Start menu. Applications do not need to perform any special actions.

REST_CLEARRECENTDOCSONEXIT

If nonzero, the system administrator has required that recent document history and related history information be deleted when the user logs off. Applications should erase recent document history when they exit.

REST_CLASSICSHELL

Not used.

REST_NOCUSTOMIZEWEBVIEW

If nonzero, the system administrator has disabled the ability to customize the appearance of Windows Explorer folders. Applications do not need to perform any special actions.

REST_NOHTMLWALLPAPER

If nonzero, the system administrator has disabled the ability to set the wallpaper to any image that is not a bitmap (*.bmp) image. Applications that enable the user to change desktop wallpaper should disable web content. Windows Vista or later: Not used.

REST_NOCHANGINGWALLPAPER

If nonzero, the system administrator has disabled the ability to change the desktop wallpaper. Applications should disable corresponding functionality.

REST_NODESKCOMP

If nonzero, the system administrator has disabled desktop components. Applications that create or modify desktop components should disable this functionality. Windows Vista or later: Not used.

REST_NOADDDESKCOMP

If nonzero, the system administrator has disabled the ability to create desktop components. Applications that create desktop components should disable this functionality.

REST_NODELDESKCOMP

If nonzero, the system administrator has disabled the ability to delete desktop components. Applications that delete desktop components should disable this functionality. Windows Vista or later: Not used.

REST_NOCLOSEDESKCOMP

If nonzero, the system administrator has disabled the ability to close desktop components. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_NOCLOSE_DRAGDROPBAND

If nonzero, the system administrator has disabled the ability to drag, drop, or close desktop bands. Applications do not need to perform any special actions.

REST_NOMOVINGBAND

If nonzero, the system administrator has disabled the ability to move a desktop band. Applications do not need to perform any special actions.

REST_NOEDITDESKCOMP

If nonzero, indicates the system administrator has disabled the ability to modify desktop components. Applications that modify desktop components should disable this functionality. Windows Vista or later: Not used.

REST_NORESOLVESEARCH

If nonzero, the system administrator has disabled heuristic file searching when resolving broken shortcuts. Applications do not need to perform any special actions.

REST_NORESOLVETRACK

If nonzero, the system administrator has disabled the use of the link tracking service when resolving broken shortcuts. Applications do not need to perform any special actions.

REST_FORCECOPYACLWITHFILE

If nonzero, the system administrator has forced Shell file copy operations to copy the ACL with the file rather than inheriting the ACL from the target folder. Applications that use the SHFileOperation function do not need to perform any special actions. Applications that copy files manually should ensure that the source ACL is copied.

REST_NOLOGO3CHANNELNOTIFY

If nonzero, the system administrator has disabled channel updates when resolving shortcuts. Applications do not need to perform any special actions. Windows Vista or later: Not supported.

REST_NOFORGETSOFTWAREUPDATE

If nonzero, the system administrator has disabled the ability to uncheck the Remind me until I update the current version checkbox in the SoftwareUpdateMessageBox function. Applications do not need to perform any special actions.

REST_NOSETACTIVEDESKTOP

If nonzero, the system administrator has disabled the ability to change settings for web content on the desktop. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_NOUPDATEWINDOWS

If nonzero, the system administrator has hidden the Windows Update shortcut on the Start menu. Applications that enumerate the contents of the Start menu should not show the Windows Update shortcut to the user.

REST_NOCHANGESTARMENU

If nonzero, the system administrator has disabled the ability to make changes to the Start menu. Applications should disable any feature that enables the user to reorganize their Start menu.

REST_NOFOLDEROPTIONS

If nonzero, the system administrator has denied access to the Folder Options dialog box. Applications that display Folder Options in Control Panel should disable this functionality.

REST_HASFINDCOMPUTERS

If nonzero, the system administrator has disabled the ability to search for computers on the network. Applications should remove the ability to search for computers on the network.

REST_INTELLIMENUS

If nonzero, the system administrator has disabled personalized menus. Applications should not hide infrequently-used menu commands.

REST_RUNDLGMEMCHECKBOX

If nonzero, the system administrator has disabled the Run in separate memory space option in the Run dialog. Applications that provide similar functionality should remove the corresponding checkbox.

REST_ARP_ShowPostSetup

If nonzero, the system administrator has removed the list of incomplete setup operations from the "Add/Remove Windows Components" section of the Add/Remove Programs dialog box. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_NOCSC

If nonzero, the system administrator has removed Synchronize All from the Start menu. Applications do not need to perform any special actions.

REST_NOCONTROLPANEL

If nonzero, the system administrator has denied access to Control Panel. Applications should disable any functionality that runs Control Panel.

REST_ENUMWORKGROUP

If nonzero, the system administrator has indicated that the Network Neighborhood should include the computer workgroup. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_ARP_NOARP

If nonzero, the system administrator has denied access to the Add/Remove Programs dialog box. Applications should disable any functionality that runs the Add/Remove Programs dialog box. Windows Vista or later: Not used.

REST_ARP_NOREMOVEPAGE

If nonzero, the system administrator has denied access to the Change or Remove Programs section of the Add/Remove Programs dialog box. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_ARP_NOADDPAGE

If nonzero, the system administrator has denied access to the Add Programs section of the Add/Remove Programs dialog box. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_ARP_NOWINSETUPPAGE

If nonzero, the system administrator has denied access to the Add/Remove Windows Components section of the Add/Remove Programs dialog box. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_GREYMSIADS

If nonzero, the system administrator has specified that Windows Installer shortcuts that refer to applications that are available but not yet installed should be displayed on the Start menu in gray. Applications do not need to perform any special actions.

REST_NOCHANGEMAPPEDDRIVELABEL

Not used.

REST_NOCHANGEMAPPEDDRIVECOMMENT

Not used.

REST_MaxRecentDocs

A 32-bit value that specifies the maximum number of documents to be retained in the Recent Documents menu. If this value is zero, then the system administrator has not specified any maximum, and applications can choose a default. If this value is nonzero, applications should restrict their Recent Documents list to the specified number of items.

REST_NONETWORKCONNECTIONS

If nonzero, the system administrator has removed the Network Connections menu from the Start menu. Applications should hide lists of network and dial-up connections.

REST_FORCESTARTMENULOGOFF

If nonzero, the system administrator has forced the Log Off command onto the Start menu. Applications do not need to perform any special actions.

REST_NOWEBVIEW

If nonzero, the system administrator has disabled folder HTML templates (Windows 2000) or folder tasks (Windows XP) in Windows Explorer. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_NOCUSTOMIZETHISFOLDER

If nonzero, the system administrator has disabled the ability to customize the appearance of Windows Explorer folders. Applications do not need to perform any special actions.

REST_NOENCRYPTION

If nonzero, the system administrator has disabled the ability to encrypt and decrypt files and folders. Applications should not call EncryptFile or DecryptFile.

REST_DONTSHOWSUPERHIDDEN

If nonzero, the system administrator has disabled the ability to view files marked System and Hidden ("super-hidden files"), overriding the fShowSuperHidden member of the SHELLSTATE structure. Applications should not show files that have both the FILE_ATTRIBUTE_SYSTEM and FILE_ATTRIBUTE_HIDDEN attributes to the user.

REST_NOSHELLSEARCHBUTTON

If nonzero, the system administrator has disabled the Search button in the Windows Explorer toolbar. Applications do not need to perform any special actions.

REST_NOHARDWARETAB

If nonzero, the system administrator has disabled the Hardware tab in the Drive, Mouse, Keyboard, and Multimedia property sheets. Applications do not need to perform any special actions.

REST_NORUNASINSTALLPROMPT

If nonzero, the system administrator has disabled the automatic prompt for automatic credentials when installing an application. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_PROMPTRUNASINSTALLNETPATH

If nonzero, the system administrator has disabled the automatic prompt for automatic credentials when installing an application from a network path. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_NOMANAGEMYCOMPUTERVERB

If nonzero, the system administrator has removed the Manage command from the My Computer context menu. Applications do not need to perform any special actions.

REST_NORECENTDOCSNETHOOD

Windows Vista. If nonzero, the system administrator has disabled the automatic addition of shortcuts in Network Neighborhood to recently-accessed network resources. Applications do not need to perform any special actions.

REST_DISALLOWRUN

If nonzero, the system administrator has restricted the programs the user can run. Programs listed under the registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun may not be run from the Run dialog box, by double-clicking, or by selecting from the File menu. Programs are listed by their full path (for example, "C:\Windows\system32\cmd.exe"). Applications should prevent users from running programs listed under that key. Applications that use the ShellExecute or ShellExecuteEx function to run programs do not need to take any special action because those functions will check the policy.

REST_NOWELCOMESCREEN

If nonzero, the system administrator has disabled the Welcome to Windows program that is run when a user logs on. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_RESTRICTCPL

If nonzero, the system administrator has restricted the control panel applications the user can run. In order to be run, a control panel application must be listed under the registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl . The control panel application can be listed either under its display name (for example, "Mouse") or under its filename (for example, "main.cpl"). Applications that launch control panel applications should prevent users from running control panel applications not listed under that key.

REST_DISALLOWCPL

If nonzero, the system administrator has restricted the control panel applications the user can run. In order to be run, a control panel application must not be listed under the registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowCpl . The control panel application can be listed either under its display name (for example, "Mouse") or under its filename (for example, "main.cpl"). Applications that launch control panel applications should prevent users from running control panel applications listed under that key.

REST_NOSMBALLOONTIP

If nonzero, the system administrator has disabled balloon tips that are displayed by the Start menu. Applications do not need to perform any special actions.

REST_NOSMHELP

If nonzero, the system administrator has removed the Help option from the Start menu. Applications do not need to perform any special actions.

REST_NOWINKEYS

If nonzero, the system administrator has disabled the keyboard shortcut associated with the Windows logo key. Applications do not need to perform any special actions.

REST_NOENCRYPTONMOVE

If nonzero, the system administrator has specified that unencrypted files and folders moved into an encrypted folder should remain unencrypted instead of inheriting the encryption attribute from the enclosing folder. Applications that move files and folders should unencrypt them if they were originally unencrypted and are moved into an encrypted folder. Applications that use the SHFileOperation function to move files do not need to perform any special actions because the SHFileOperation function respects this policy.

REST_NOLOCALMACHINERUN

If nonzero, the system administrator has disabled the execution of programs listed in the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run registry key. Applications do not need to perform any special actions.

REST_NOCURRENTUSERRUN

If nonzero, the system administrator has disabled the execution of programs listed in the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run registry key. Applications do not need to perform any special actions.

REST_NOLOCALMACHINERUNONCE

If nonzero, the system administrator has disabled the execution of programs listed in the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce registry key. Applications do not need to perform any special actions.

REST_NOCURRENTUSERRUNONCE

If nonzero, the system administrator has disabled the execution of programs listed in the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce registry key. Applications do not need to perform any special actions.

REST_FORCEACTIVEDESKTOPON

If nonzero, the system administrator has forced web content to be enabled on the desktop. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_NOCOMPUTERSNEARME

Not supported under Windows Vista and later. If nonzero, the system administrator has hidden the Computers Near Me icon in the My Network Places folder. Applications should remove access to CSIDL_COMPUTERSNEARME.

REST_NOVIEWONDRIVE

A 32-bit value that specifies the drives the user cannot open or drop files into. Bit 0 corresponds to drive A, up to bit 25 which corresponds to drive Z. Applications that enable the user to open folders or drop files should prevent the user from opening a folder on a restricted drive or dropping files onto a restricted drive.

REST_NONETCRAWL

Windows XP, Windows2003, or IE_BACKCOMPAT_VERSION defined. If nonzero, the system administrator has disabled automatic searching for network folders and printers, overriding the fNoNetCrawling member of the SHELLSTATE structure. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_NOSHAREDDOCUMENTS

Windows XP, Windows2003 or IE_BACKCOMPAT_VERSION defined. If nonzero, the system administrator has hidden the Shared Documents icon in My Computer. Applications should hide access to CSIDL_COMMON_DOCUMENTS. Windows Vista or later: Not used.

REST_NOSMMYDOCS

If nonzero, the system administrator has hidden the My Documents icon on the Start menu. Applications do not need to perform any special actions.

REST_NOSMMYPICS

Windows XP or later. If nonzero, the system administrator has hidden the My Pictures icon on the Start menu. Applications do not need to perform any special actions.

REST_ALLOWBITBUCKDRIVES

Windows XP or later. A 32-bit value that specifies the drives for which the Recycle Bin should be forced to be enabled. The system typically disables the Recycle Bin on drives that are not local fixed drives. Bit 0 corresponds to drive A, up to bit 25 which corresponds to drive Z. Applications do not need to perform any special actions.

REST_NONLEGACYSHELLMODE

Windows XP or later. If nonzero, the system administrator has hidden the Back and Forward buttons in the Internet Explorer toolbar. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_NOCONTROLPANELBARRICADE

Windows XP or later. Ignored.

REST_NOSTARTPAGE

Windows XP or later. Ignored.

REST_NOAUTOTRAYNOTIFY

Windows XP or later. If nonzero, the system administrator has forced all taskbar icons to be visible, even if they are inactive, overriding the user's decision to hide inactive taskbar icons. Applications do not need to perform any special actions.

REST_NOTASKGROUPING

Windows XP or later. If nonzero, the system administrator has disabled grouping of similar taskbar buttons, overriding the user's decision to enable taskbar button grouping. Applications do not need to perform any special actions.

REST_NOCDBURNING

Windows XP or later. If nonzero, the system administrator has disabled CD burning. Applications should disable any CD-burning capabilities.

REST_MYCOMPNOPROP

Windows 2000 SP3 or later. If nonzero, the system administrator has disabled the System Properties dialog box. Applications should not launch the System Properties dialog box.

REST_MYDOCSNOPROP

Windows 2000 SP3 or later. If nonzero, the system administrator has disabled the ability to view properties of the My Documents folder. Applications should not redirect the My Documents folder.

REST_NOSTARTPANEL

Windows XP or later. If nonzero, the system administrator has disabled the Windows XP Start menu. Applications do not need to perform any special actions.

REST_NODISPLAYAPPEARANCEPAGE

Windows XP or later. If 1, the system administrator has disabled the Themes and Appearance pages from the Desktop Properties dialog box. Applications should not change system colors and appearance.

REST_NOTHEMESTAB

Windows XP or later. If nonzero, the system administrator has disabled the Themes page from the Desktop Properties dialog. Applications should not change visual styles.

REST_NOVISUALSTYLECHOICE

Windows XP or later. If nonzero, the system administrator has disabled the ability to change visual styles. Applications should not change visual styles.

REST_NOSIZECHOICE

Windows XP or later. If nonzero, the system administrator has disabled the ability to change font sizes from the Appearance page on the Desktop Properties dialog box. Applications should not change system metrics.

REST_NOCOLORCHOICE

Windows XP or later. If nonzero, the system administrator has disabled the ability to change system colors from the Appearance page on the Desktop Properties dialog box. Applications should not change system colors.

REST_SETVISUALSTYLE

Windows XP or later. If nonzero, the system administrator has forced a specific visual style. Applications should not change visual styles.

REST_STARTRUNNOHOMEPATH

Windows 2000 SP3 or later. If nonzero, the default working directory for programs run from the Run dialog is not forced to the user's home directory. Applications do not need to perform any special actions.

REST_NOUSERNAMEINSTARTPANEL

Windows XP, Windows 2003. If nonzero, the system administrator has hidden the user name on the Windows XP Start menu. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_NOMYCOMPUTERICON

Windows XP or later. If nonzero, the system administrator has hidden the My Computer icon. Applications should not permit access to the My Computer icon.

REST_NOSMNETWORKPLACES

Windows XP or later. If nonzero, the system administrator has hidden the Network Places icon on the Start menu. Applications do not need to perform any special actions.

REST_NOSMPINNEDLIST

Windows XP or later. If nonzero, the system administrator has hidden the list of "pinned" items on the Start menu. Applications do not need to perform any special actions.

REST_NOSMMYMUSIC

Windows XP or later. If nonzero, the system administrator has hidden the My Music icon on the Start menu. Applications do not need to perform any special actions.

REST_NOSMEJECTPC

Windows XP or later. If nonzero, the system administrator has hidden the Eject command on the Start menu. Applications should not enable the user to eject the computer.

REST_NOSMMOREPROGRAMS

Windows XP or later. If nonzero, the system administrator has hidden the All Programs item on the Windows XP Start menu. Applications should not show the contents of the Start menu folder to the user.

REST_NOSMMFUPROGRAMS

Windows XP or later. If nonzero, the system administrator has hidden the list of most frequently used programs on the Windows XP Start menu. Applications do not need to perform any special actions.

REST_NOTRAYITEMSDISPLAY

Windows XP or later. If nonzero, the system administrator has hidden all taskbar notification icons, regardless of activity. Applications do not need to perform any special actions.

REST_NOTOOLBARSONTASKBAR

Windows XP or later. If nonzero, the system administrator has hidden all taskbar toolbars, such as Quick Launch. Applications do not need to perform any special actions.

REST_NOSMCONFIGUREPROGRAMS

Windows 2000 SP3 or later. If nonzero, the system administrator has hidden the Set Program Access and Defaults shortcut on the Start menu. Applications that enumerate the contents of the Start menu should not show the Set Program Access and Defaults shortcut to the user.

REST_HIDECLOCK

Windows XP or later. If nonzero, the system administrator has hidden the clock on the taskbar, overriding any user preference. Applications do not need to perform any special actions.

REST_NOLOWDISKSPACECHECKS

Windows XP or later. If nonzero, the system administrator has disabled taskbar warnings when disk space has become low. Applications do not need to perform any special actions.

REST_NOENTIRENETWORK

Windows 2000 Service Pack 4 (SP4) or later. If nonzero, the system administrator has disabled the Entire Network icon in Network Places. Applications should remove the ability to browse domain resources.

REST_NODESKTOPCLEANUP

Windows XP, Windows2003. If nonzero, the system administrator has disabled the desktop cleaner. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_BITBUCKNUKEONDELETE

Windows XP or later. If nonzero, the system administrator has required that deleted files be removed immediately instead of being placed in the Recycle Bin, overriding any user preference. Applications do not need to perform any special actions.

REST_BITBUCKCONFIRMDELETE

Windows XP or later. If nonzero, the system administrator has disabled the user's ability to specify whether confirmation dialogs should be displayed when files are moved to the Recycle Bin. Applications do not need to perform any special actions.

REST_BITBUCKNOPROP

Windows XP or later. If nonzero, the system administrator has disabled the user's ability to view or modify Recycle Bin properties. Applications do not need to perform any special actions.

REST_NODISPBACKGROUND

Windows XP or later. If nonzero, the system administrator has disabled the user's ability to view or modify the desktop wallpaper. Applications should remove the ability to change the desktop wallpaper.

REST_NODISPSCREENSAVEPG

Windows XP or later. If nonzero, the system administrator has disabled the user's ability to view or modify screensaver settings. Applications should remove the ability to change the screensaver or screensaver settings.

REST_NODISPSETTINGSPG

Windows XP or later. If nonzero, the system administrator has disabled the user's ability to view or modify screen color depth and resolution settings. Applications should remove the ability to change display color depth and resolution.

REST_NODISPSCREENSAVEPREVIEW

Windows XP or later. Ignored.

REST_NODISPLAYCPL

Windows XP or later. If nonzero, the system administrator has disabled the Display Properties dialog box in Control Panel. Applications should remove the ability to change system colors, metrics, visual styles, font size, desktop wallpaper, screensaver, screensaver settings, screen color depth, or display resolution.

REST_HIDERUNASVERB

Windows XP or later. If nonzero, the system administrator has disabled the "Run As" command for Shell objects. Applications should remove corresponding functionality.

REST_NOTHUMBNAILCACHE

Windows XP or later. If nonzero, the system administrator has disabled caching of thumbnails. Applications do not need to perform any special actions.

REST_NOSTRCMPLOGICAL

Windows XP SP1 or later, or IE_BACKCOMPAT_VERSION defined. If nonzero, the system administrator has specified that filenames should be sorted with the StringCompare function instead of the StrCmpLogical function. Applications that sort filenames should sort accordingly. (This policy does not apply to Windows 2000.)

REST_NOPUBLISHWIZARD

Windows XP SP1 or later service pack, Windows Server 2003 or IE_BACKCOMPAT_VERSION defined. Disables the Windows Publishing Wizard (WPW).Windows Vista or later: Not used.

REST_NOONLINEPRINTSWIZARD

Windows XP SP1 or later, or IE_BACKCOMPAT_VERSION defined. Disables the Online Prints Wizard (OPW). Windows Vista or later: Not used.

REST_NOWEBSERVICES

Windows XP SP1 or later, or IE_BACKCOMPAT_VERSION defined. Disables the web specified services for both the Online Prints Wizard (OPW) and the Windows Publishing Wizard (WPW).

REST_ALLOWUNHASHEDWEBVIEW

Windows 2000 SP3 or later, Windows XP, or Windows Server 2003. If nonzero, the system administrator has granted permission for unregistered web view templates to be displayed. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_ALLOWLEGACYWEBVIEW

If nonzero, the system administrator has granted permission for old web view templates (created prior to Windows XP) to be converted to Windows XP templates. Applications do not need to perform any special actions. Windows Vista or later: Not used.

REST_REVERTWEBVIEWSECURITY

Windows 2000 SP3 or later, Windows XP, or Windows Server 2003. If nonzero, the system administrator has reduced web view security to the level that existed in Windows 2000 SP2 or earlier. Applications do not need to perform any special actions. (This policy does not apply to Windows 2000 SP2 or earlier.) Windows Vista or later: Not used.

REST_INHERITCONSOLEHANDLES

Windows 2000 Service Pack 4 (SP4) or later. If nonzero, the ShellExec function checks if the current process and target process are console processes that can inherit handles.

REST_SORTMAXITEMCOUNT

Windows XP SP2 and SP3 only. Not supported under Windows Vista or later. Do not sort views with more items than this key. Useful for viewing large numbers of files in one folder.

REST_NOREMOTERECURSIVEEVENTS

Windows XP SP2 or later. Do not register network change events recursively. This helps to avoid network traffic.

REST_NOREMOTECHANGENOTIFY

Windows XP SP2 or later. Do not notify for remote change notifications.

REST_NOSIMPLENETIDLIST

Windows XP SP2 or SP3 only. Not supported under Windows Vista or later. No simple network IDLists.

REST_NOENUMENTIRENETWORK

Windows XP SP2 or later. Do not enumerate the entire network.

REST_NODETAILSTHUMBNAILONNETWORK

Windows XP SP2 and SP3 only. Not supported under Windows Vista or later.

REST_NOINTERNETOPENWITH

Windows XP SP2 or later. If nonzero, the system administrator has removed the ability to resolve file associations using the Internet. The option Use the web service to find the appropriate program is unavailable in the dialog displayed when the user selects Open With or double-clicks an unassociated file type.

REST_ALLOWLEGACYLMZBEHAVIOR

Windows XP SP2 only. Not supported under Windows Vista or later. Indicates allowable LMZ behavior for ActiveX objects changed in Windows XP SP2, this policy gets the pre-Windows XP SP2 behavior.

REST_DONTRETRYBADNETNAME

Windows XP SP2 or later. In Network Places, if the provider returns ERROR_BAD_NET_NAME, do not retry.

REST_ALLOWFILECLSIDJUNCTIONS

Windows XP SP2 or later, Windows Server 2003. Re-enable legacy support for file.{guid} junctions in file system folders.

REST_NOUPNPINSTALL

Windows XP SP2 or later. Disable the Install Universal Plug and Play (UPnP) task in My Network Places.

REST_ARP_DONTGROUPPATCHES

If nonzero, the system administrator has removed the option to list individual patches in Add/Remove Programs. Windows Vista or later: Not used.

REST_ARP_NOCHOOSEPROGRAMSPAGE

If nonzero, the system administrator has removed the option to choose the programs page. Windows Vista or later: Not used.

REST_NODISCONNECT

Not supported under Windows Vista or later. If nonzero, the system administrator has removed the Disconnect option from the Start menu and Task Manager. Applications should remove the ability to disconnect users from a Terminal Server session.

REST_NOSECURITY

Not supported under Windows Vista and later. If nonzero, the system administrator has removed the Windows Security option from the Start menu and Task Manager. Applications do not need to perform any special actions.

REST_NOFILEASSOCIATE

Not supported under Windows Vista and later. If nonzero, the system administrator has removed the ability to change file associations. Applications should not enable users to change file associations arbitrarily.

REST_ALLOWCOMMENTTOGGLE

Windows XP SP2 only. Not supported under Windows Vista or later. Allows the user to toggle the position of the Comment and the Computer Name.

REST_USEDESKTOPINICACHE

Windows XP SP2 and SP3 only. Not supported under Windows Vista or later. Cache desktop.ini entries from network folders.

Requirements

Minimum supported client

Windows 2000 Professional [desktop apps only]

Minimum supported server

Windows 2000 Server [desktop apps only]

Header

Shlobj.h

 

 

Show: