RESTRICTIONS2

Each member of the RESTRICTIONS2 enumeration is an ID that selects a registry value. The defining interpretation is by the SHDOCVW function SHRestricted2. The selected registry value is sometimes referred to as an Internet Explorer restriction. Each is in the same key relative to either or both of HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER, the former having precedence. The DWORD of data from this registry value is returned as the value of the restriction. All restrictions default to zero.

Incidentally, since neither the enumeration nor the function is yet documented by Microsoft, the name RESTRICTIONS2 and the notion of an “Internet Explorer restriction” are invented in the pattern of what Microsoft eventually disclosed for the SHELL32 function SHRestricted and its enumeration RESTRICTIONS.

That said, Microsoft does document some of the registry values. Those that are highlighted in the lists below are the ones that are not in the list that Microsoft presents in the Knowledge Base article The restrictions that are available to Internet Explorer 6.0 SP1. Others may be documented elsewhere, of course, but an article with such a title doesn’t have much point except as a complete record of what Microsoft means to disclose.

The IDs nowadays form three distinct series. Each is associated with one registry key, such that the values in the series are all in that key or some subkey:

The original implementation, for version 4.71, has only the second series. Perhaps it starts at 0x50000001 to distinguish it better from the RESTRICTIONS enumeration which had by then settled into a series starting from 0x40000001. This original series was extended in late builds of version 4.72, for Internet Explorer 4.01 SP2, but only temporarily. A rethink for version 5.0 saw the introduction of the other two series. Restrictions that version 4.72 added to the original series were relocated to the new series. That incompatibilities from this were experienced in everyday use seems at least plausible but is not known.

Development of SHDOCVW is frozen at version 6.0 from the last service-pack releases of Windows XP and Windows Server 2003. Starting with the version 6.0 from Windows Vista, the SHRestricted2 function continues to be exported from SHDOCVW but only as a forward to IEFRAME. Where the lists below give version numbers without naming a DLL, they are SHDOCVW version numbers but with the understanding that SHDOCVW version 6.0 continues to IEFRAME version 7.0. Note anyway that IEFRAME version 8.0 adds no restrictions.

Windows Explorer Restrictions

The key for this series is Software\Microsoft\Windows\CurrentVersion\Policies, but it happens that all values are in one subkey: Explorer.

This lowest-numbered series dates from version 5.0, but note that one of them was earlier selected by a different ID. This series has been very stable, with one addition in version 5.50 and another for version 6.0, until four more for Windows Vista (which is still version 6.0).

The NoToolbarCustomize restriction has user-interface support through the Group Policy Object Editor, as “Disable customizing browser toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The NoBandCustomize restriction has user-interface support through the Group Policy Object Editor, as “Disable customizing browser toolbars” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The SmallIcons restriction has no known user-interface support.

The LockIconSize restriction has no known user-interface support.

The SpecifyDefaultButtons restriction has user-interface support through the Group Policy Object Editor, as “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Back restriction has user-interface support through the Group Policy Object Editor, as “Show Back button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Forward restriction has user-interface support through the Group Policy Object Editor, as “Show Forward button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Stop restriction has user-interface support through the Group Policy Object Editor, as “Show Stop button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Refresh restriction has user-interface support through the Group Policy Object Editor, as “Show Refresh button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Home restriction has user-interface support through the Group Policy Object Editor, as “Show Home button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Search restriction has user-interface support through the Group Policy Object Editor, as “Show Search button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_History restriction has user-interface support through the Group Policy Object Editor, as “Show History button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Favorites restriction has user-interface support through the Group Policy Object Editor, as “Show Favorites button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Folders restriction has user-interface support through the Group Policy Object Editor, as “Show Folders button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Fullscreen restriction has user-interface support through the Group Policy Object Editor, as “Show Fullscreen button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Tools restriction has user-interface support through the Group Policy Object Editor, as “Show Tools button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_MailNews restriction has user-interface support through the Group Policy Object Editor, as “Show Mail button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Size restriction has user-interface support through the Group Policy Object Editor, as “Show Font size button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Print restriction has user-interface support through the Group Policy Object Editor, as “Show Print button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Edit restriction has user-interface support through the Group Policy Object Editor, as “Show Edit button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Discussions restriction has user-interface support through the Group Policy Object Editor, as “Show Discussions button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Cut restriction has user-interface support through the Group Policy Object Editor, as “Show Cut button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Copy restriction has user-interface support through the Group Policy Object Editor, as “Show Copy button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Paste restriction has user-interface support through the Group Policy Object Editor, as “Show Paste button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The Btn_Encoding restriction has user-interface support through the Group Policy Object Editor, as “Show Encoding button” among the options for “Configure toolbar buttons” in the Toolbars category of the Internet Explorer administrative template (displayed under Windows Components).

The NoInstrumentation restriction has user-interface support through the Group Policy Object Editor, as “Turn off user tracking” in the “Start Menu and Taskbar” administrative template. It is there said to require “at least Microosft Windows 2000”.

The registry value for the NoWindowsUpdate restriction has other programmatic support:

• among the shell restrictions, as REST_NOWINDOWSUPDATE, in SHELL32 version 4.72 and higher;
• among the Windows policies, as POLID_NoWindowsUpdate, in the Windows Vista build of SHLWAPI version 6.0, and higher.

The NoWindowsUpdate restriction has user-interface support through the Group Policy Object Editor, as “Remove links and access to Windows Update” in the “Start Menu and Taskbar” administrative template. It is there said to require “at least Microosft Windows 2000”.

The NoExpandedNewMenu restriction has no known user-interface support.

The registry value for this restriction has other programmatic support:

• among the shell restrictions, with ID 0x40000022, in some builds of SHELL32 version 4.72;
• among the shell restrictions, with ID 0x50000024, in late builds of SHELL32 version 4.72;
• among the Internet Explorer restrictions, with ID 0x50000024, in late builds of SHDOCVW version 4.72.

The NoFileUrl restriction has no known user-interface support.

The Btn_Preview restriction has no known user-interface support.

The Btn_Media restriction has no known user-interface support.

The Btn_Panning restriction has no known user-interface support.

The Btn_Feeds restriction has no known user-interface support.

The Btn_Page restriction has no known user-interface support.

The Btn_Help restriction has no known user-interface support.

Infodelivery Restrictions for Internet Explorer

The key for this series is Software\Policies\Microsoft\Internet Explorer\Infodelivery, but again all values happen to be in one subkey: Restrictions.

This series is the original, dating from version 4.71. Once the many new values that were added for Internet Explorer 4.01 Service Pack 2 were reassigned and three more added for Internet Explorer 5.0, the series was unchanged until four additions for Windows Vista.

The NoChannelUI restriction has user-interface support through the Group Policy Object Editor, as “Disable channel user interface completely” in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

This restriction is subject to URL-specific evaluation (see below).

The NoAddingChannels restriction has user-interface support through the Group Policy Object Editor, as “Disable adding channels” in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

This restriction is subject to URL-specific evaluation (see below).

The NoEditingChannels restriction has no known user-interface support.

This restriction is subject to URL-specific evaluation (see below).

The NoRemovingChannels restriction has user-interface support through the Group Policy Object Editor, as “Disable removing channels” in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

This restriction is subject to URL-specific evaluation (see below).

The NoAddingSubscriptions restriction has user-interface support through the Group Policy Object Editor, as “Disable adding schedules for offline pages” in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

This restriction is subject to URL-specific evaluation (see below).

The NoEditingSubscriptions restriction has user-interface support through the Group Policy Object Editor, as “Disable editing schedules for offline pages” in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

This restriction is subject to URL-specific evaluation (see below).

The NoRemovingSubscriptions restriction has user-interface support through the Group Policy Object Editor, as “Disable removing schedules for offline pages” in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

This restriction is subject to URL-specific evaluation (see below).

The NoChannelLogging restriction has user-interface support through the Group Policy Object Editor, as “Disable offline page hit logging” in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The NoManualUpdates restriction has no known user-interface support.

The NoScheduledUpdates restriction has user-interface support through the Group Policy Object Editor, as “Disable all scheduled offline pages” in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The NoUnattendedDialing restriction has no known user-interface support.

The NoChannelContent restriction has no known user-interface support.

The NoSubscriptionContent restriction has user-interface support through the Group Policy Object Editor, as “Disable downloading of site subscription content” in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The NoEditingScheduleGroups restriction has user-interface support through the Group Policy Object Editor, as “Disable editing and creating of schedule groups” in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The MaxChannelSize restriction has no known user-interface support.

The MaxSubscriptionSize restriction has user-interface support through the Group Policy Object Editor, as “Maximum size of subscriptions in kilobytes” among the options for Subscription Limits in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The MaxChannelCount restriction has no known user-interface support.

The MaxSubscriptionCount restriction has user-interface support through the Group Policy Object Editor, as “Maximum number of offline pages” among the options for Subscription Limits in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The MinUpdateInterval restriction has user-interface support through the Group Policy Object Editor, as “Minimum number of minutes between scheduled updates” among the options for Subscription Limits in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The UpdateExcludeBegin restriction has user-interface support through the Group Policy Object Editor, as “Time to begin preventing scheduled updates” among the options for Subscription Limits in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The UpdateExcludeEnd restriction has user-interface support through the Group Policy Object Editor, as “Time to end preventing scheduled updates” among the options for Subscription Limits in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The UpdateInNewProcess restriction has no known user-interface support.

The MaxWebCrawlLevels restriction has user-interface support through the Group Policy Object Editor, as “Maximum offline page crawl depth” among the options for Subscription Limits in the Offline Pages category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The MaxChannelLevels restriction has no known user-interface support.

The NoSubscriptionPasswords restriction has no known user-interface support.

Late builds of SHDOCVW version 4.72 use this ID for NoFileOpen, which version 5.0 reassigns to 0x60000001.

The NoBrowserSaveWebComplete restriction has user-interface support through the Group Policy Object Editor, as “File menu: Disable Save As Web Page Complete” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

Late builds of SHDOCVW version 4.72 use this ID for NoFileNew, which version 5.0 reassigns to 0x60000002.

The NoSearchCustomization restriction has user-interface support through the Group Policy Object Editor, as “Search: Disable Search Customization” in the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

Late builds of SHDOCVW version 4.72 use this ID for NoBrowserSaveAs, which version 5.0 reassigns to 0x60000003.

The NoSplash restriction has user-interface support through the Group Policy Object Editor, as “Disable showing the splash screen” in the Internet Explorer administrative template (displayed under Windows Components).

Late builds of SHDOCVW version 4.72 use this ID for NoBrowserOptions, which version 5.0 reassigns to 0x60000004.

The NoSearchBox restriction has user-interface support through the Group Policy Object Editor, as “Prevent the Internet Explorer search box from displaying” in the Internet Explorer administrative template (displayed under Windows Components).

Late builds of SHDOCVW version 4.72 use this ID for NoFavorites, which version 5.0 reassigns to 0x60000005.

The NoChangeDefaultSearchProvider restriction has user-interface support through the Group Policy Object Editor, as “Restrict changing the default search provider” in the Internet Explorer administrative template (displayed under Windows Components).

Late builds of SHDOCVW version 4.72 use this ID for NoSelectDownloadDir, which version 5.0 reassigns to 0x60000006.

The AddPolicySearchProviders restriction has user-interface support through the Group Policy Object Editor, as “Add a specific list of search providers to the user’s search provider list” in the Internet Explorer administrative template (displayed under Windows Components).

Late builds of SHDOCVW version 4.72 use this ID for NoBrowserContextMenu, which version 5.0 reassigns to 0x60000007.

The UsePolicySearchProvidersOnly restriction has user-interface support through the Group Policy Object Editor, as “Restrict search providers to a specific list of providers” in the Internet Explorer administrative template (displayed under Windows Components).

Discontinued IDs Not Yet Reused

Late builds of version 4.72 use the following IDs for restrictions that were soon reassigned. The discontinued IDs have not yet been reused.

URL-Specific Evaluation

The usual registry values, as listed above, need not count for restrictions 0x50000002 to 0x50000008 inclusive. For these, if the SHRestricted2 function is given a URL, it lets the Internet Security Manager evaluate the restriction according to the security zone, if any, that applies to this URL. The relevant actions, for the ParseUrlAction method of the IInternetSecurityManager interface, are:

• URLACTION_INFODELIVERY_NO_ADDING_CHANNELS
• URLACTION_INFODELIVERY_NO_EDITING_CHANNELS
• URLACTION_INFODELIVERY_NO_REMOVING_CHANNELS
• URLACTION_INFODELIVERY_NO_ADDING_SUBSCRIPTIONS
• URLACTION_INFODELIVERY_NO_EDITING_SUBSCRIPTIONS
• URLACTION_INFODELIVERY_NO_REMOVING_SUBSCRIPTIONS
• URLACTION_INFODELIVERY_NO_CHANNEL_LOGGING

All are annotated as “Reserved” in Microsoft’s documentation. If a URL policy permission is successfully obtained, the restriction evaluates as true if the policy is anything other than to allow (e.g., to disallow or query). If no URL policy permission is successfully obtained, SHRestricted2 falls back on the ordinary registry value as if no URL were given.

Internet Explorer Restrictions

For this series, each value is in a subkey of Software\Policies\Microsoft\Internet Explorer.

This series dates from version 5.00, but note that the originals had a slightly earlier life with different IDs. Significant extensions were made even while still in version 5.0, starting for Windows 2000. Version 6.0 brought three additions, with three more for Windows XP SP2 and Windows Server 2003 SP1. Windows Vista adds one and takes two away.

The registry value for this restriction is supported with the ID 0x5000001A in late builds of version 4.72.

The NoFileOpen restriction has user-interface support through the Group Policy Object Editor, as “File menu: Disable Open menu option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x5000001B in late builds of version 4.72.

The NoFileNew restriction has user-interface support through the Group Policy Object Editor, as “File menu: Disable New menu option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x5000001C in late builds of version 4.72.

The NoBrowserSaveAs restriction has user-interface support through the Group Policy Object Editor, as “File menu: Disable Save As... menu option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x5000001D in late builds of version 4.72.

The NoBrowserOptions restriction has user-interface support through the Group Policy Object Editor, as “Tools menu: Disable Internet Options... menu option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x5000001E in late builds of version 4.72.

The NoFavorites restriction has user-interface support through the Group Policy Object Editor, as “Hide Favorites menu” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x5000001F in late builds of version 4.72.

The NoSelectDownloadDir restriction has user-interface support through the Group Policy Object Editor, as “Disable Save this program to disk option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x50000020 in late builds of version 4.72.

The NoBrowserContextMenu restriction has user-interface support through the Group Policy Object Editor, as “Disable Context menu” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x50000021 in late builds of version 4.72.

The NoBrowserClose restriction has user-interface support through the Group Policy Object Editor, as “File menu: Disable closing the browser and Explorer windows” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x50000023 in late builds of version 4.72.

The NoOpenInNewWnd restriction has user-interface support through the Group Policy Object Editor, as “Disable Open in New Window menu option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x50000025 in late builds of version 4.72.

The NoTheaterMode restriction has user-interface support through the Group Policy Object Editor, as “View menu: Disable Full Screen menu option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x50000026 in late builds of version 4.72.

The NoFindFiles restriction has user-interface support through the Group Policy Object Editor, as “Search: Disable Find Files via F3 within the browser” in the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x50000027 in late builds of version 4.72.

The NoViewSource restriction has user-interface support through the Group Policy Object Editor, as “View menu: Disable Source menu option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components).

The registry value for this restriction is supported with the ID 0x50000028 in late builds of version 4.72.

The RestGoMenu restriction has no known user-interface support.

The registry value for this restriction is supported with the ID 0x50000022 in late builds of version 4.72.

The NoToolbarOptions restriction has no known user-interface support.

The NoHelpItemTipOfTheDay restriction has user-interface support through the Group Policy Object Editor, as “Help menu: Remove 'Tip of the Day' menu option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The NoHelpItemNetscapeHelp restriction has user-interface support through the Group Policy Object Editor, as “Help menu: Remove 'For Netscape Users' menu option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “only Internet Explorer 5.0 and Internet Explorer 6.0”.

The NoHelpItemTutorial restriction has user-interface support through the Group Policy Object Editor, as “Help menu: Remove 'Tour' menu option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “at least Internet Explorer 7.0”.

The NoHelpItemSendFeedback restriction has user-interface support through the Group Policy Object Editor, as “Help menu: Remove 'Send Feedback' menu option” in the “Browser menus” category of the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “at least Internet Explorer 5.0”.

The AlwaysPromptWhenDownload restriction has no known user-interface support.

The NoNavButtons restriction has no known user-interface support.

The NoHelpMenu restriction has user-interface support through the Group Policy Object Editor, as “Turn off displaying the Internet Explorer Help Menu” in the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “at least Internet Explorer 7.0”.

The NoBrowserBars restriction has no known user-interface support.

The NoToolBar restriction has no known user-interface support.

The NoAddressBar restriction has no known user-interface support.

The NoLinksBar restriction has no known user-interface support.

This restriction seems intended to have started with version 5.50, but the lookup table gives the ID as 0x00000020. In the earliest build, for Windows Me, 0x00000020 will not be found since SHRestricted2 will have rejected this already as being out of range. Later builds, for Internet Explorer 5.50 and its Service Packs, relax the check, as if something has been noticed as wrong but the programmers have not yet realised that the defect is in the table. For these later builds, it looks as if the new restriction would be found using 0x00000020 as the ID.

The NoPrinting restriction has no known user-interface support.

The No_LaunchMediaBar restriction has user-interface support through the Group Policy Object Editor, as “Disable the Media Explorer Bar and auto-play feature” among the options for “Configure Media Explorer Bar” in the Internet Explorer administrative template (displayed under Windows Components). It is there said to require “Only Internet Explorer 6.0”.

The No_MediaBarOnlineContent restriction has no known user-interface support.

The NoCrashDetection restriction has user-interface support through the Group Policy Object Editor, as “Turn off Crash Detection” in the Internet Explorer administrative template (displayed under Windows Components).

The NoExtensionManagement restriction has user-interface support through the Group Policy Object Editor, as “Do not allow users to enable or disable add-ons” in the Internet Explorer administrative template (displayed under Windows Components).

The NoPopupManagement restriction has user-interface support through the Group Policy Object Editor, as “Turn off pop-up management” in the Internet Explorer administrative template (displayed under Windows Components).

The NoDefaultTextSize restriction has user-interface support through the Group Policy Object Editor, as “Prevent users from choosing default text size” in the “Display settings” category (under Internet Settings) of the Internet Explorer administrative template (displayed under Windows Components).