TipHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
| Data type | Range | Default value |
|---|---|---|
| REG_DWORD | 0 | 1 | 0 |
Directs Windows to start only the user interface extensions that the system security or the user have approved.
When the system detects that the user is downloading an external program that runs as part of the Windows user interface, the system searches for a digital certificate or requests that the user approve the action.
This entry stores the setting of the Only allow approved Shell extensions Group Policy. Group Policy adds this entry to the registry with a value of 1 when you enable the policy. If you disable the policy or set it to Not configured, Group Policy deletes the entry from the registry and the system behaves as though the value is 0.
| Value | Meaning |
|---|---|
| 0 (or not in registry) | The policy is disabled or not configured. Windows starts all interface extensions. |
| 1 | The policy is enabled. Windows only starts approved interface extensions. |
To change the value of this entry, use Group Policy. This entry corresponds to the Only allow approved Shell extensions policy (User Configuration\Administrative Templates\Windows Components\Windows Explorer).
Tip
For detailed information about particular Group Policy settings, see the Group Policy Reference (Gp.chm) on the Windows 2000 Resource Kit companion CD.
For general information about Group Policy, see Group Policy in Windows 2000 Help.
To see a table associating policies with their corresponding registry entries, see the Group Policy Reference Table.