'Disable all items' (Remove Active Desktop items from the desktop)ID: oval:org.secpod.oval:def:27846 | Date: (C)2015-10-08 (M)2022-10-10 |
Class: COMPLIANCE | Family: windows |
Removes Active Desktop content and prevents users from adding Active Desktop content.
This setting removes all Active Desktop items from the desktop. It also removes the Web tab from Display in Control Panel. As a result, users cannot add Web pages or pictures from the Internet or an intranet to the desktop.
Note: This setting does not disable Active Desktop. Users can still use image formats, such as JPEG and GIF, for their desktop wallpaper.
Fix:
(1) GPO: User Configuration\Administrative Templates\Desktop\Desktop!Disable all items
(2) REG: HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoComponents
Platform: |
Microsoft Windows Server 2012 R2 |