• Remove Search button from Windows Explorer
Recommended setting: Enabled
It is recommended that you enable this policy to prevent users from searching for applications from Windows Explorer. This policy does not prevent search routines in other applications or the Start Menu.

• Remove Security Tab
Recommended setting: Enabled
This policy removes the Security tab from Windows Explorer. If users can open the Properties dialog box for file system objects, including folders, files, shortcuts, and drives, they cannot access the Security tab. It is recommended that you enable this policy to prevent users from changing the security settings or viewing a list of all users who have access to the object.

• Remove Windows Explorer's default context menu
Recommended setting: Enabled
This setting removes the shortcut menu from Windows Explorer. It is recommended that you enable this policy to prevent easy access to applications that place hooks into the shortcut menu. This policy does not remove other methods of accessing applications on the shortcut menu, such as using shortcut hotkeys.

• Hides the Manage item on the Windows Explorer shortcut menu
Recommended setting: Enabled
This policy removes the Manage option from Windows Explorer or My Computer. The Manage option opens the Computer Management MMC snap-in (compmgmt.msc). It is recommended that you enable this policy to remove easy access to system information about the Terminal Server.

• Hide these specified drives in My Computer
Recommended setting: Enabled – Restrict C drive only
This policy only removes the icons from My Computer, Windows Explorer, and the standard file dialog box. It does not prevent users from access these drives by using other means such as the command prompt. The policy only allows you to hide drives A through D. It is recommended that you enable this policy to hide the floppy disk drive, the CD-ROM drive, and the operating system partition. A partition for public data can be configured to be the only drive viewable to the users. If required, NTFS permissions can be used to restrict access to this partition.

• Prevent access to drives from My Computer
Recommended setting: Enabled –C drive only
This policy prevents access to drives A through D with My Computer, Windows Explorer and the standard file dialog box. This policy does not prevent access from programs that do not use the common dialog boxes. The users can still start applications that reside on the restricted drives. It is recommended that you enable this policy to restrict file browsing of system partitions.

• Remove Hardware tab
Recommended setting: Enabled
This policy removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel, and from the Properties dialog box for all local drives. It is recommended that you enable this policy to prevent users from using the Hardware tab to view the device list or device properties.

• Remove Shared Documents from My Computer
Recommended setting: Enabled
It is recommended that you enable this policy to remove the default Shared Documents folder from the machine.

• Remove Publish to Web from File and Folders Tasks
Recommended setting: Enabled
This policy setting removes Publish this file to the Web, Publish this folder to the Web, and Publish the selected items to the Web from File and Folder tasks in Window Explorer. It is recommended that you enable this policy to prevent users from publishing files or folders to a Web page.

• No “Computers Near Me” in My Network Places
Recommended setting: Enabled
This policy removes computers in the user's domain from lists of network resources in Windows Explorer and My Network Places. It does not prevent users from connecting to other computers by other methods, such as the command prompt or the Map Network Drive dialog box. It is recommended that you enable this policy to remove easy access to browsing the domain.

• No “Entire Network” in My Network Places
Recommended setting: Enabled
This policy removes all computers outside of the user's local domain from lists of network resources in Windows Explorer and My Network Places. It does not prevent users from connecting to other computers by other methods, such as command prompt or the Map Network Drive dialog box. It is recommended that you enable this policy to remove easy access to browsing the network.

• Turn off Windows+X hotkeys
Recommended setting: Enabled
This policy turns off Windows+X hotkeys. Keyboards with a Windows logo key provide users with shortcuts to common shell features. For example, pressing the keyboard sequence Windows+R opens the Run dialog box; pressing the Windows+E starts Windows Explorer. It is recommended that you enable this policy to prevent users from starting applications with the Windows logo hotkey.

• Turn Shell protected protocol mode
Recommended setting: Disabled
This policy turns off Windows+X hotkeys. Keyboards with a Windows logo key provide users with shortcuts to common shell features. For example, pressing the keyboard sequence Windows+R opens the Run dialog box; pressing the Windows+E starts Windows Explorer. It is recommended that you enable this policy to prevent users from starting applications with the Windows logo hotkey

• Turn on Classic Shell
Recommended setting: Enabled
This policy allows you to remove the Active Desktop and Web view features. If you enable this setting, it disables the Active Desktop and Web view. Also, users cannot configure their system to open items by single-clicking (such as in Mouse in Control Panel). As a result, the user interface looks and operates like the interface for Windows NT 4.0, and users cannot restore the new features. It is recommended that you enable this policy to remove Folder Tasks. Some Folder Task, such as for the My Music folder can start Internet Explorer.

[User Configuration\Administrative Templates\Windows Components\Windows Explorer \Common Open File Dialog]
• Hide the common dialog places bar
Recommended setting: Enabled
This policy removes the shortcut bar from the Common Open File dialog box. This feature was originally added in Windows 2000, so disabling it makes it look as it did in Windows NT 4.0 and earlier. These policies affect only programs that use the common dialog box. It is recommended that you enable this policy to remove easy access to browsing the network or the local computer.

• Items displayed in Places Bar
This policy allows you to replace the Place Bar items in the Common Open File dialog box with predefined entries. To view this bar, start Notepad, select File, and then click Open. You could set this to automatically force users to save to a network share instead of to the Terminal Server. Be careful you don't restrict them from saving files down to their computers if they need them offsite though.