Disable Active DesktopID: oval:org.secpod.oval:def:27351 | Date: (C)2015-10-08 (M)2022-10-10 |
Class: COMPLIANCE | Family: windows |
Disables Active Desktop and prevents users from enabling it.
This setting prevents users from trying to enable or disable Active Desktop while a policy controls it.
If you disable this setting or do not configure it, Active Desktop is disabled by default, but users can enable it.
Note: If both the Enable Active Desktop setting and the Disable Active Desktop setting are enabled, the Disable Active Desktop setting is ignored. If the Turn on Classic Shell setting (in User Configuration\Administrative Templates\Windows Components\Windows Explorer) is enabled, Active Desktop is disabled, and both these policies are ignored.
Fix:
(1) GPO: User Configuration\Administrative Templates\Desktop\Desktop!Disable Active Desktop
(2) REG: HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktop
Platform: |
Microsoft Windows Server 2012 R2 |