Windows client operating system such as Windows 7, Windows Vista, Windows XP and Windows server operating system such as Windows Server 2003, Windows Server 2008 and Windows Server 2008 R2 has thousands of settings, configurations, preferences and policies that alter, enable, disable, allow or restrict the behaviors, features, functions and other components within the environment.

All policy settings is registered in system registry. Normally, Windows has a built-in utility called Local Group Policy Editor (GPedit.msc) which allows end-users to easily configure and set the value for various policy settings of Group Policy Objects (GPO) instead of manually navigating through Registry Editor. However, some editions of Windows, especially versions for home use only does not include the GPedit.msc snap-in for MMC, forcing users to edit via Registry Editor to apply the policies. In addition, developers or programmers may also want to code the program or script to change or set the policy values.

To apply a policy via registry, user has to know which registry key which is corresponding with the policy, and the appropriate registry value to set. Microsoft provides Group Policy Settings Reference for Windows and Windows Server spreadsheets that list the policy settings for computer configuration and user configurations included in the Administrative template files delivered with the Windows operating systems specified.

These spreadsheets include the following categories of security policy settings: Account Policies (Password Policy, Account Lockout Policy, and Kerberos Policy), Local Policies (Audit Policy, User Rights Assignment, and Security Options), Event Log, Restricted Groups, System Services, Registry, and File System policy settings. These spreadsheets do not include security settings that exist outside of the Security Settings extension (scecli.dll), such as Wireless Network extension, Public Key Policies, or Software Restriction Policies.

The Group Policy Settings Reference for Windows and Windows Server spreadsheets can be downloaded from Microsoft Download Center, and has the following different versions:

  • Group Policy Settings Reference for Windows Server 2008 R2 and Windows 7: WindowsServer2008R2andWindows7GroupPolicySettings.xlsx

    – Cover Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista with SP1, Windows Server 2003 with SP2 and earlier service packs, Windows XP Professional with SP2 and earlier service packs, and Windows 2000 with SP4 and earlier service packs.

  • Group Policy Settings Reference for Windows Server 2008 and Windows Vista Service Pack 1: WindowsServer2008andWindowsVistaSP1GroupPolicySettings.xlsx

    – Cover Windows Server 2008, Windows Vista with SP1, Windows Server 2003, Windows XP Professional with SP2 or earlier service packs, and Windows 2000 with SP4 or earlier service packs.

  • Group Policy Settings Reference for Windows Vista: WindowsVistaGroupPolicySettings.xls

    – Cover Windows Vista, Microsoft Windows Server 2003, Windows XP Professional with SP2 or earlier service packs, and Windows 2000 with SP4 or earlier service packs.

  • Group Policy Settings Reference for Windows Server 2003 Service Pack 2: WindowsServer2003SP2GroupPolicySettings.xls

    – Cover Microsoft Windows Server 2003 with SP2 or earlier service packs, Windows XP Professional with SP3 or earlier service packs, and Microsoft Windows 2000 with SP4 or earlier service packs.

In addition to the spreadsheets above, it’s also possible to perform an online search of system policies to registry mapping at gps.cloudapp.net.

To enable the policy, add the registry value data suggested. Note that sometimes the registry subkeys must be manually created as it’s not existed priorly. To disable the policy, just delete the registry value. It’s important to correctly enter the registry value as it may requires decimal or hexadecimal format.