Disable Storage of Credentials and .NET Passwords
This setting controls the storage of authentication credentials and .NET passwords on the local system. By disabling this feature, passwords will not be stored.

Disable System Restore Tools and Settings
System Restore allows users to revert Windows settings and configuration changes to an earlier point in time (called Restore Points). This setting can be used to restrict user access to the System Restore tools and settings.

Secure Access to Removable Drives
This setting determines whether the ability to access removable drives is available to other users.

Disable Group Policy Objects
This setting is used to disable the use of group policy objects on the local computer.

Reboot Windows After a Crash
This parameter controls whether Windows should automatically reboot after a system failure or if the blue crash screen should be displayed.

Configure Windows Script Signature Security
This setting is used to define whether trusted and untrusted scripts should be executed when using signature verification. By requiring a signature the system will only execute scripts from verified authors.

Secure Access to Floppy Drives
This setting determines whether data in the floppy disk drive is accessible to other users.

Secure Access to CD-ROM Drives
This setting determines whether data in the CD-ROM drive is accessible to other users.

Restrict Access to Base System Objects
In Windows the core operating system libraries are kept in virtual memory and shared between the programs running on the system. This has exposed a vulnerability that could allow a user to gain administrative privileges on the computer the user is interactively logged onto.

Restart the Shell Automatically
By default if the Windows user interface or one of its components fails, the interface is restarted automatically, the can be changed so that you must restart the interface by logging off and logging on again manually.

Prompt for Password on Resume
This setting allows you to configure the computer to always lock and require a password after resuming from hibernate or suspend mode.

Restrict Access to the Event Logs
The Windows event log contains records documenting application, security and system events taking place on the machine. As these logs can contain sensitive data this setting allows you to restrict access to administrators and system accounts only.

Disable CD Burning
This setting is used to disable the use of the inbuilt CD recording functions of Windows.