SectionName
  
ValueName - [ms-gpie]: Group Policy: Internet Explorer Maintenance Extension Intellectual Property...

|
[ms-gpie]: Group Policy: Internet Explorer Maintenance Extension Intellectual Property Rights Notice for Open Specifications Documentation
|
bet | 25/25 | Sana | 24.03.2021 | Hajmi | 107,28 Kb. | | #13509 |
SectionName
|
ValueName
|
Value type
|
Sample value
|
Description
|
Security Imports
|
IEESCEnabled
|
Boolean
|
1
|
Indicates the state of the enhanced security level of the following zone security settings.
|
|
Zones
|
Numeric
|
2
|
The count of Internet security zones listed in the file.
|
SectionName
|
ValueName
|
Value type
|
Sample value
|
Description
|
Zone%d _ HKCU
|
DisplayName
|
String
|
Local intranet
|
The friendly name of the zone.
|
|
Description
|
String
|
This zone is for all websites that are found on the user's intranet.
|
A longer, friendly description of the zone.
|
|
Icon
|
String
|
explorer.exe#100
|
The string is composed of # pointing to the icon for the zone.
|
|
CurrentLevel
|
Numeric
|
66816
|
An integer denoting the default security level for URL actions in this zone. For more information, see [MSDN-SECZONES].
|
|
Flags
|
Numeric
|
323
|
An integer conveying additional behavioral parameters for this zone. For more information, see [MSDN-SECZONES].
|
|
Action%d
|
Hexadecimal: Numeric
|
1201:1
|
The string :.
Conveys a new security level for this URL action in this zone.
|
|
MinLevel
|
Numeric
|
3
|
An integer denoting the minimum security level for all URL actions in this zone.
|
|
RecommendedLevel
|
Numeric
|
3
|
An integer denoting the recommended security level for this zone.
|
|
Mapping%d
|
URL
|
|
A URL that maps to this zone.
|
Zone%d _ HKLM
|
DisplayName
|
String
|
Trusted sites
|
The friendly name of the zone.
|
|
Description
|
String
|
This zone contains websites that the user trusts not to damage the user's computer and files.
|
A longer, friendly description of the zone.
|
|
Icon
|
String
|
explorer.exe#100
|
The string is composed of # pointing to the icon for the zone.
|
|
CurrentLevel
|
Numeric
|
69632
|
An integer denoting the default security level for URL actions in this zone.
|
|
Flags
|
Numeric
|
71
|
An integer conveying additional behavioral parameters for this zone.
|
|
Action%d
|
Hexadecimal: Numeric
|
1201:1
|
The string : conveys a new security level for this URL action in this zone.
|
|
MinLevel
|
Numeric
|
3
|
An integer denoting the minimum security level for all URL actions in this zone.
|
|
RecommendedLevel
|
Numeric
|
3
|
An integer denoting the recommended security level for this zone.
|
|
Mapping%d
|
URL
|
|
A URL that maps to this zone.
|
PRIVACY
|
|
|
|
|
|
AdvancedSettings
|
Numeric
|
2
|
An integer conveying an Internet Explorer privacy level.
|
|
FirstPartyType
|
Numeric
|
3
|
An integer conveying an Internet Explorer privacy level for first-party cookies.
|
|
FirstPartyTypeText%d
|
URL
|
|
A URL that maps to the first-party privacy setting.
|
|
ThirdPartyType
|
Numeric
|
4
|
An integer conveying an Internet Explorer privacy level for third-party cookies.
|
|
ThirdPartyTypeText%d
|
URL
|
|
A URL that maps to the third-party privacy setting.
|
Ratrsop.INF File Format
An informative description of the setting names and legal values in Ratrsop.inf follows, which uses the definitions of value type from section 4.1.1. An example of this file format is provided in section 4.5.
SectionName
|
ValueName
|
Value type
|
Sample value
|
Description
|
GENERAL
|
|
|
|
|
|
Filename%d
|
Filename
|
|
The file name to be used by Internet Explorer for a website rating system.
|
|
Allow_Unknowns
|
Boolean
|
1
|
View unknown rated sites.
|
|
PleaseMom
|
Boolean
|
0
|
Password override enabled.
|
|
Approved%d
|
URL
|
|
Viewable sites.
|
|
Disapproved%d
|
URL
|
|
Unviewable sites.
|
|
Bureau
|
String
|
|
Ratings bureau.
| BMP File Format
The BMP files under SYSVOL are not interpreted by the Group Policy: Internet Explorer Maintenance Extension protocol client or administrative tool plug-ins. For more information about BMP files, see [MSDN-BMPST].
ICO File Format
The ICO files under SYSVOL are not interpreted by the Group Policy: Internet Explorer Maintenance Extension protocol client or administrative tool plug-ins. For more information on ICO files, see [MSDN-ICO].
CONNECT.RAS File Format
The format of this file is specified in the ABNF that follows. For more information on the RAS file format, see [MSDN-RAS]. The content of this file is not interpreted by the Group Policy: Internet Explorer Maintenance Extension protocol; it is simply given directly to Internet Explorer.
RasFile = Version *RasEntry
Version = %x01.00.00.00
RasEntry = 1*Dword
DWord = 4Byte
Byte = %x00-FF
CS.DAT File Format
The format of this file is specified in the following ABNF. For more information, see [MSDN-RAS2], [MSDN-WININET1], and [MSDN-WININET2]. The content of this file is not interpreted by the Group Policy: Internet Explorer Maintenance Extension protocol; it is simply given directly to Internet Explorer.
csfile = csversion csheader sszname *setting
csversion = %x02.00.00.00
csheader = %xDE.AD.BE.AF
setting = rassetting / credsetting / wininetsetting
rassetting = csras dwsize csrasentry
credsetting = cscred dwsize sszcredname sszcredpwd sszcreddomain
wininetsetting = cswininet dwsize sszconnection dwoption *csipco
sszname = sizedstring
csras = %xDE.AF.BE.AF
dwsize = dword
csrasentry = dwsize csdata
csdata = *byte
cscred = %xFE.ED.BA.CC
sszcredname = sizedstring
sszcredpwd = sizedstring
sszcreddomain = sizedstring
cswininet = %xDE.CA.FB.AD
sszconnection = sizedstring
dwoption = dword
csipco = dword
sizedstring = strsize 1*wchar
strsize = dword
dword = wchar wchar
wchar = byte byte
byte = %x00-FF
dwsize: A 32-bit unsigned integer in little-endian order that specifies the number of octets in the csdata field.
csdata: A binary large object (BLOB) of data to be passed uninterpreted to Internet Explorer settings. The number of octets is equal to the value in the dwsize field.
strsize: A 32-bit unsigned integer in little-endian order that specifies the number of Unicode characters in the sizedstring field.
sizedstring: A BLOB of data to be passed uninterpreted to Internet Explorer settings. The number of octets is equal to two times the value in the strsize field.
INSTALL.INS Example
In this example, a system administrator chooses to not allow users in her group to configure proxy settings on their local machines. She, therefore, chooses to use the Internet Explorer Maintenance (IEM) Group Policy Extension to configure key proxy settings, such as "Address of Proxy Servers" and "Exceptions" list. The IEM Group Policy Extension not only helps those users by automatically providing them the correct proxy address, but it also helps the administrator manage users in her organizational unit by guaranteeing that they use the same settings, which she can modify, as necessary.
For example, suppose the administrator wants her users to use myproxy.mycorp.com as the proxy address for all URLs except those matching "http://*.mycorp.com".
For this example, the IEM install.ins would be as follows (adhering to the layout specified in section 2.2.1) on the remote storage location in a GPO path, such as "\\Redmond\SYSVOL\Redmond\Policies\{GPO-GUID}\user\Microsoft\IEAK". The text "GPO-GUID" is replaced with the appropriate GPO GUID from the running Group Policy server for example "\\Redmond\SYSVOL\Redmond\Policies\{E11F4FD7-25E3-4069-876B-B8C90C4A61AF}\user\Microsoft\IEAK". This GPO path is written by the administrative tool extension (as defined in section 1.3.2):
[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=myproxy.mycorp.com:80
Use_Same_Proxy=1
Proxy_Override="http://*.mycorp.com;"
[Branding]
GPVersion=6.0.5356.0
The IEM primary client-side plug-in when invoked then reads this configuration data from the path described above and changes the proxy settings to the address specified above. During this process, it also adds "http://*.mycorp.com" in the exception list as specified above by the configuration data. The client-side plug-in does not parse or interpret the settings or understand their semantics; it merely configures Internet Explorer with the values.
Examples of Seczones.INF, Authcode.INF, Ratings.INF, and Programs.INF
The INF file format is specified in section 4.1.3. These files are placed according to the layout specified in section 2.2.1 on the remote storage location in a GPO path, such as "\\Redmond\SYSVOL\Redmond\Policies\{GPO-GUID}\user\Microsoft\IEAK". The text "GPO-GUID" is replaced with the appropriate GPO GUID from the running Group Policy server; for example, "\\Redmond\SYSVOL\Redmond\Policies\{E11F4FD7-25E3-4069-876B-B8C90C4A61AF}\user\Microsoft\IEAK". This GPO path is written by the administrative tool extension. The following sections give examples of these INF file formats.
SECZONES.INF Example
The following is an example of the Seczones.INF file format.
[Version]
Signature=$Chicago$
AdvancedINF=2.5
[DefaultInstall]
RequiredEngine=SetupAPI,"Fatal Error - missing setupapi.dll"
CustomDestination=CustInstDestSection
AddReg=AddReg.Hkcu,AddReg.Hklm
[CustInstDestSection]
49000,49001,49002,49003=ProgramFilesDir,21
49100,49101,49102,49103=IEDir,21
[ProgramFilesDir]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion","ProgramFilesDir"
,,"%24%\Program Files"
[IEDir]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\
iexplore.exe","Path",,"%49001%\Internet Explorer"
[AddReg.Hklm]
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
Zones",,,""
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
Zones\2",,,""
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
Zones\2",DisplayName,,"Trusted sites"
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
Zones\2",CurrentLevel,0x10001,00,10,01,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
Zones\2",Flags,0x10001,47,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
Zones\2",120A,0x10001,03,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
Zones\2",1400,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
ZoneMap",,,""
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
ZoneMap",UNCAsIntranet,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
ZoneMap",AutoDetect,0x10001,01,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
ZoneMap\Domains",,,""
HKLM,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
ZoneMap\Domains\contoso.com\www",http,0x10001,02,00,00,00
[AddReg.Hkcu]
HKCU,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
Zones",,,""
HKCU,"Software\Microsoft\Windows\CurrentVersion\Internet Settings\
Zones\2",,,""
HKCU,"Software\Microsoft\Internet Explorer\New Windows",PlaySound,
0x10001,01,00,00,00
HKCU,"Software\Microsoft\Internet Explorer\New Windows",UseSecBand,
0x10001,01,00,00,00
HKCU,"Software\Microsoft\Internet Explorer\New Windows",BlockUserInit,
0x10001,00,00,00,00
HKCU,"Software\Microsoft\Internet Explorer\New Windows",UseHooks,
0x10001,01,00,00,00
HKCU,"Software\Microsoft\Internet Explorer\New Windows",AllowHTTPS,
0x10001,00,00,00,00
HKCU,"Software\Microsoft\Internet Explorer\New Windows",BlockControls,
0x10001,00,00,00,00
HKCU,"Software\Microsoft\Internet Explorer\New Windows",PopupMgr,
0x10001,01,00,00,00
AUTHCODE.INF Example
The following is an example of the Authcode.INF file format.
[Version]
Signature=$Chicago$
AdvancedINF=2.5
[DefaultInstall]
RequiredEngine=SetupAPI,"Fatal Error - missing setupapi.dll"
CustomDestination=CustInstDestSection
AddReg=AddReg.Hkcu
[IeakInstall.Hkcu]
RequiredEngine=SetupAPI,"Fatal Error - missing setupapi.dll"
CustomDestination=CustInstDestSection
AddReg=AddReg.Hkcu
[CustInstDestSection]
49000,49001,49002,49003=ProgramFilesDir,21
49100,49101,49102,49103=IEDir,21
[ProgramFilesDir]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion","ProgramFilesDir",,"%24%\Program Files"
[IEDir]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\iexplore.exe","Path",,"%49001%\Internet Explorer"
[AddReg.Hkcu]
HKCU,"Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0",mjjngfjeninhealdcflmbmjjeddcpgha bicgjfnidofeoilgbaedbnpcncepokfp,,"Contoso Test Root Authority"
HKCU,"Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0",mhakmeenekpdljcgjcikfejnnbciilai mngnindodflkogelilcgapilhnpjjoef,,"Test CodeSign CA"
RATINGS.INF Example
The following is an example of the Ratings.INF file format.
[Version]
Signature=$Chicago$
AdvancedINF=2.5
[DefaultInstall]
RequiredEngine=SetupAPI,"Fatal Error - missing setupapi.dll"
CustomDestination=CustInstDestSection
AddReg=AddReg.Hklm
[IeakInstall.Hklm]
RequiredEngine=SetupAPI,"Fatal Error - missing setupapi.dll"
CustomDestination=CustInstDestSection
AddReg=AddReg.Hklm
[CustInstDestSection]
49000,49001,49002,49003=ProgramFilesDir,21
49100,49101,49102,49103=IEDir,21
[ProgramFilesDir]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion","ProgramFilesDir",,"%24%\Program Files"
[IEDir]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\iexplore.exe","Path",,"%49001%\Internet Explorer"
[AddReg.Hklm]
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings",Key,1,C3,C7,8A,54,57,D1,20,6E,5B,22,4C,DA,09,E0,BE,4F
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings",Hint,,"Jack"
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings",FileName0,,"%11%\icrav03.rat"
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default",Allow_Unknowns,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default",PleaseMom,0x10001,01,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default",Enabled,0x10001,01,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",n,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",s,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",v,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",l,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",oa,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",ob,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",oc,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",od,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",oe,0x10001,02,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",of,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",og,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",oh,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default\http://www.icra.org/pics/vocabularyv03/",c,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default",NumSys,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0",dwFlags,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0",errLine,0x10001,00,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy",PRNumPolicy,0x10001,01,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\0",PRPPolicyAttribute,0x10001,02,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\0\PRPPolicySub",PRNumURLExpressions,0x10001,01,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\0\PRPPolicySub\0",PRBUInternetPattern,0x10001,01,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\0\PRPPolicySub\0",PRBUNonWild,0x10001,0D,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\0\PRPPolicySub\0",PRBUSpecified,0x10001,1F,00,00,00
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\0\PRPPolicySub\0",PRBUScheme,,"http"
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\0\PRPPolicySub\0",PRBUHost,,"www.contoso.com"
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\0\PRPPolicySub\0",PRBUPort,,"80"
HKLM,"Software\Microsoft\Windows\CurrentVersion\Policies\Ratings\PICSRules\.Default\0\PRPolicy\0\PRPPolicySub\0",PRBUUrl,,"http://www.contoso.com"
PROGRAMS.INF Example
The following is an example of the Programs.INF file format.
[Version]
Signature=$Chicago$
AdvancedINF=2.5
[DefaultInstall]
RequiredEngine=SetupAPI,"Fatal Error - missing setupapi.dll"
CustomDestination=CustInstDestSection
AddReg=AddReg.Hkcu,AddReg.Hklm
[IeakInstall.Hkcu]
RequiredEngine=SetupAPI,"Fatal Error - missing setupapi.dll"
CustomDestination=CustInstDestSection
AddReg=AddReg.Hkcu
[IeakInstall.Hklm]
RequiredEngine=SetupAPI,"Fatal Error - missing setupapi.dll"
CustomDestination=CustInstDestSection
AddReg=AddReg.Hklm
[CustInstDestSection]
49000,49001,49002,49003=ProgramFilesDir,21
49100,49101,49102,49103=IEDir,21
[ProgramFilesDir]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion","ProgramFilesDir",,"%24%\Program Files"
[IEDir]
HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\iexplore.exe","Path",,"%49001%\Internet Explorer"
[AddReg.Hklm]
HKLM,"Software\Clients\Calendar",,,"Microsoft Outlook"
HKLM,"Software\Clients\Contacts",,,"Microsoft Outlook"
HKLM,"Software\Clients\Mail",,,"Microsoft Outlook"
HKCR,"mailto",,,"URL:MailTo Protocol"
HKCR,"mailto",URL Protocol,,""
HKCR,"mailto",EditFlags,1,02,00,00,00
HKCR,"mailto\DefaultIcon",,,"C:\PROGRA~2\MICROS~2\Office14\OUTLOOK.EXE,-9403"
HKCR,"mailto\shell",,,"open"
HKCR,"mailto\shell\open\command",,,""C:\PROGRA~2\MICROS~2\Office14\OUTLOOK.EXE" -c IPM.Note /m "%1""
[AddReg.Hkcu]
HKCU,"Software\Microsoft\Internet Explorer\Main",Check_Associations,,"yes"
HKCU,"Software\Microsoft\Internet Explorer\Default HTML Editor",Description,,"Notepad"
HKCU,"Software\Microsoft\Internet Explorer\Default HTML Editor\shell\edit\command",,,"%11%\NOTEPAD.EXE %1"
SECZRSOP.INF Example
The INF file format is specified earlier in section 4.1.3. The following example demonstrates its use in describing the security zone settings for Internet Explorer through use of SECZRSOP.INF file. This file is placed according to the layout specified in section 2.2.1 on the remote storage location in a GPO path, such as "\\Redmond\Sysvol\Redmond\Policies\{GPO-GUID}\user\Microsoft\IEAK" as written by the administrative tool extension.
[Security Imports]
Zones=5
IEESCEnabled=0
[Privacy]
AdvancedSettings=0
FirstPartyType=3
ThirdPartyType=3
[Zone0_HKCU]
DisplayName=Computer
Description=Your computer
Icon=explorer.exe#0100
CurrentLevel=0
Flags=33
Action0=1201:1
Action1=1200:0
Action2=1E05:196608
Action15=1C00:131072
Action18=1400:0
Action19=1405:0
[Zone1_HKCU]
DisplayName=Local intranet
Description=This zone is for all websites that are found on your
intranet.
Icon=shell32.dll#0018
MinLevel=65536
RecommendedLevel=66816
CurrentLevel=66816
Flags=323
Action0=1201:3
Action1=1200:0
Action2=1E05:131072
Action15=1C00:131072
Action18=1400:0
Action19=1405:0
Mapping0=ftp://144.16.2.1
[Zone2_HKLM]
DisplayName=Trusted sites
Description=This zone contains websites that you trust not to
damage your computer or data.
Icon=inetcpl.cpl#00004480
CurrentLevel=69632
Flags=71
Action0=1201:3
Action1=1200:0
Action2=1E05:131072
Action5=1A00:131072
Action15=1C00:65536
Action16=1402:0
Action18=1400:0
Action23=1804:1
Mapping0=www.contoso.com
RATRSOP.INF Example
The INF file format is specified earlier in section 4.1.3. The following example demonstrates its use in describing the Content Advisor (site ratings) settings for Internet Explorer through use of RATRSOP.INF file. This file is placed according to the layout specified in section 2.2.1 on the remote storage location in a GPO path, such as "\\Redmond\SYSVOL\Redmond\Policies\{GPO-GUID}\user\Microsoft\IEAK" as written by the administrative tool extension.
[General]
FileName0=C:\Windows\system32\icrav03.rat
Allow_Unknowns=0
PleaseMom=1
Disapproved0=http://www.contoso.com
Approved0=http://www.microsoft.com
Security Security Considerations for Implementers
None.
None.
Appendix A: Product Behavior
The information in this specification is applicable to the following Microsoft products or supplemental software. References to product versions include released service packs.
Windows 2000 operating system
Windows XP operating system
Windows Server 2003 operating system
Windows Vista operating system
Windows Server 2008 operating system
Windows 7 operating system
Windows Server 2008 R2 operating system
Exceptions, if any, are noted below. If a service pack or Quick Fix Engineering (QFE) number appears with the product version, behavior changed in that service pack or QFE. The new behavior also applies to subsequent service packs of the product unless otherwise specified. If a product edition appears with the product version, behavior is different in that product edition.
Unless otherwise specified, any statement of optional behavior in this specification that is prescribed using the terms SHOULD or SHOULD NOT implies product behavior in accordance with the SHOULD or SHOULD NOT prescription. Unless otherwise specified, the term MAY implies that the product does not follow the prescription.
<1> Section 1.3.2: This client-side plug-in uses a command exposed by Internet Explorer to configure Internet Explorer settings. The exposed command is:
rundll32.exe iedkcs32.dll,BrandInternetExplorer /mode:gp /ins:
Where, is the complete path of the INSTALL.INS file, which has been copied to a client computer by the client side plug-in.
<2> Section 1.7: The following versions of the Internet Explorer browser are supported on the listed operating systems.
Windows version
|
Internet Explorer version
|
Windows 2000
|
Windows Internet Explorer 5, Internet Explorer 5.5, or Internet Explorer 6.
|
Windows XP
|
Internet Explorer 6, Internet Explorer 7, or Internet Explorer 8.
|
Windows Server 2003
|
Internet Explorer 6, Internet Explorer 7, or Internet Explorer 8.
|
Windows Vista and Windows Server 2008
|
Internet Explorer 7, Internet Explorer 8, or Internet Explorer 9.
|
Windows 7 and Windows Server 2008 R2
|
Internet Explorer 8 or Internet Explorer 9.
|
<3> Section 3.2.5: Windows uses the function ImpersonateLoggedOnUser() to achieve this impersonation.
<4> Section 3.2.5: Windows copies these files to a temporary folder.
<5> Section 4.1.1: For more information on the Windows interpretation of these settings, see [MSFT-IEM].
Change Tracking
No table of changes is available. The document is either new or has had no changes since its last release.
Index
A
Abstract data model
administrative tool plug-in 14
client-side plug-in 15
ADM file format example 34
Administrative tool plug-in
abstract data model 14
higher-layer triggered events 14
initialization 14
local events 15
message processing 14
overview 14
sequencing rules 14
timer events 15
timers 14
Applicability 10
Authcode.INF file format example 35
B
Background 9
BMP file format example 39
C
Capability negotiation 10
Change tracking 49
Client-side plug-in
abstract data model 15
higher-layer triggered events 15
initialization 15
local events 16
message processing 15
overview 15
sequencing rules 15
timer events 16
timers 15
CONNECT.RAS file format example 40
CS.DAT file format example 40
D
Data model - abstract
administrative tool plug-in 14
client-side plug-in 15
E
Examples
ADM file format 34
Authcode.INF file format 35
BMP file format 39
CONNECT.RAS file format 40
CS.DAT file format 40
file formats - overview 17
ICO file format 40
INS file format 17
INSTALL.INS 41
overview 17
Programs.INF file format 35
Ratings.INF file format 35
RATRSOP.INF 46
Ratrsop.INF file format 39
SECZONES.INF 41
Seczones.INF file format 35
SECZRSOP.INF 45
Seczrsop.INF file format 37
F
Fields - vendor-extensible 11
G
Glossary 6
H
Higher-layer triggered events
administrative tool plug-in 14
client-side plug-in 15
I
ICO file format example 40
Implementer - security considerations 47
Index of security parameters 47
Informative references 8
Initialization
administrative tool plug-in 14
client-side plug-in 15
INS file format example 17
INSTALL.INS example 41
Internet Explorer maintenance extension 9
Introduction 6
L
Local events
administrative tool plug-in 15
client-side plug-in 16
M
Message processing
administrative tool plug-in 14
client-side plug-in 15
Messages
SYSVOL Structure 12
transport 12
Messages - transport 12
N
Normative references 8
O
Overview (synopsis) 9
P
Parameters - security index 47
Preconditions 10
Prerequisites 10
Product behavior 48
Programs.INF file format example 35
R
Ratings.INF file format example 35
RATRSOP.INF example 46
Ratrsop.INF file format example 39
References 8
informative 8
normative 8
Relationship to other protocols 10
S
Security
implementer considerations 47
parameter index 47
SECZONES.INF example 41
Seczones.INF file format example 35
SECZRSOP.INF example 45
Seczrsop.INF file format example 37
Sequencing rules
administrative tool plug-in 14
client-side plug-in 15
Standards assignments 11
Structure - SYSVOL 12
SYSVOL structure 12
SYSVOL Structure message 12
T
Timer events
administrative tool plug-in 15
client-side plug-in 16
Timers
administrative tool plug-in 14
client-side plug-in 15
Tracking changes 49
Transport 12
Triggered events
administrative tool plug-in 14
client-side plug-in 15
V
Vendor-extensible fields 11
Versioning 10
/
[MS-GPIE] - v20160714
Group Policy: Internet Explorer Maintenance Extension
Copyright © 2016 Microsoft Corporation
Release: July 14, 2016
5>4>3>2>1>
|
|
Bosh sahifa
Aloqalar
Bosh sahifa
[ms-gpie]: Group Policy: Internet Explorer Maintenance Extension Intellectual Property Rights Notice for Open Specifications Documentation
|