Copyright: Monday, July 09, 2001 08:13:26


Displays the certificate type that is automatically requested by computers, subject to the security settings of this Group Policy object.


Displays the purpose of the certificate that is automatically requested by computers, subject to the security settings of this Group Policy object.


Displays the name of the certification authority that issues the certificate that is automatically requested by computers, subject to the security settings of this Group Policy object.


Lists the locations in which you can search for a certificate.


Specifies what text to search for in a specified field of the certificate.


Provides a space to type the text you want to search for in the certificate field you have specified.


Click to find all certificates based on the criteria you have chosen.


Click to stop searching for certificates.


Click to clear the current search criteria and results in order to begin a new search.


Displays the results of the search for certificates.


Choose which field to search in certificates for the specified text.


Select to provide users who are subject to the security settings of this Group Policy object with the ability to choose certification authorities to trust.


Click to allow users who are subject to the security settings of this Group Policy object to trust only the certificates in the enterprise root certificate store.


Type in a password to protect the private key in the PKCS #12 file you are exporting.


Type in the same password as above to confirm that you have entered it correctly. The password protects the private key in the PKCS #12 file you will export.


Specifies that you want to organize the certificate view by the purpose of the certificate, such as Client Authentication and IP Security user.


Specifies that you want to organize the certificate view by the names of the certificate stores where they reside, such as Personal and Trusted Root Certification Authorities.


Specifies that you want to include the view of the physical certificate stores when viewing certificates, organized by the names of the logical certificate stores where they reside. This is primarily useful for application developers and advanced users.


Specifies that you want to display archived (or, expired) certificates as well as active certificates.


Click to provide computers with the ability to trust only certification authorities whose certificates are in the Trusted Root Certification Authorities store.


Click to provide computers with the ability to trust certification authorities whose certificates are in either the Trusted Root Certification Authorities or the Third-Party Root Certification Authorities stores.


Click to enable users and computers who are subject to the security settings of this Group Policy object to be authenticated with certificates that are issued by certification authorities that are registered in Active Directory.


Click to enable users and computers that are subject to the security settings of this Group Policy object to be authenticated using certificates that are both compliant with user principal name constraints and that are issued by certification authorities that are registered in Active Directory.


Displays the description of the security level.


Sets this security level as the default level. This security level will be imposed on all the programs on your computer.


Displays current default security level.


Specifies that all users can be trusted to select trusted publishers when presented with a certificate.


Specifies that only local computer administrators have the right to specify trusted publishers on the local computer.


Specifies that Enterprise administrators have the right to specify trusted publishers at the organizational unit, domain, or site level.


Specifies whether revocation checking will occur in regards to publisher, you can choose this option along with the timestamp option.


Specifies whether revocation checking will occur in regards to the timestamp. You can choose this option along with the publisher option.


Lists the file types shared by all path rules and Internet zone rules.

For more information, see To create a path rule or To create a zone rule


Deletes the highlighted file type from the file types list.


Provides a space for you to add the file extension you wish to add to the designated file types list.


Adds a file type to the designated file type list after you enter a file extension in File extension.


Displays the certificate subject name you have chosen using Browse.


Click to browse to a certificate.


Selects the security level for the program associated with this certificate.


Provides a space for you to type a description for this rule.


Provides a space for you to type the path to the file or directory on which you want to apply this rule. The wildcard symbols for the path rule are * and ?.


Selects the security level you would like for the chosen path you've identified. The security levels are Unrestricted, which allows software to run with the full rights of the logged-in user, and Disallowed, in which the software cannot be run.


Specifies that this rule will apply to all the files for the directory you have chosen.


Specifies that only the files whose file types are included in Designated file types will have this rule applied to them. For more information, see To add or delete a designated file type.


Provides a space for you to enter a description for this rule.


Click to browse to a folder or file for which you would like to create rule.


Displays properties of the file such as the name of the file and the size of the file.


Click to browse to the file you would like to identify by hash. The hash will be calculated and displayed in File hash.


Selects a security level for this rule. The security levels are Unrestricted, which allows software to run with the full rights of the logged-in user, and Disallowed, where the software cannot run.


Provides a space for you to enter a description for this rule.


Selects an Internet zone you'd like to apply a rule to. These zones correspond to the zones you have set in Internet Explorer. The description of the zone appears in Description. Zone rules only affect Windows Installer packages.


Selects a security level for this rule. The security levels are Unrestricted, which allows software to run with the full rights of the logged-in user, and Disallowed, where the software cannot run.

Zone rules only affect Windows Installer packages.


Specifies that this rule will apply to all the files for the zone you have chosen.


Specifies that only the files whose file types are included in Designated file types will have this rule applied to them. For more information, see To add or delete a designated file type.

Zone rules only affect Windows Installer packages.


Describes the Internet zone.

Zone rules only affect Windows Installer packages.


Provides a space for the hash. You can browse to a file, and software restriction policies will calculate the hash and then display it in this field.

You can also paste the hash into this field if you calculated the hash with software restriction policies on another computer.


If selected, the software restriction policy rules do not affect libraries (such as .dll files).

Since most programs need multiple .dll files to run, specifying that these files are not subject to any rules will save you the trouble of having to create individual rules for each .dll file in an environment where the default level is set to Disallowed.


If selected, all software restriction policy rules will be applied to all files identified by rules in software restriction policies.


If selected, all specified rules apply to all users.


Click to browse to a folder or file for which you would like to create a path rule.


If selected, all rules that are specified will apply to all users except local administrators.