Secure Access to Floppy Drives (Windows NT/2000/XP)
This setting determines whether data in the floppy disk drive is accessible to other users.

Secure Access to Removable Drives (Windows NT/2000/XP)
This setting determines whether the ability to access removable drives is available to other users.

Secure Access to CD-ROM Drives (Windows NT/2000/XP)
This setting determines whether data in the CD-ROM drive is accessible to other users.

Specify Executable Files to be Lauched by Winlogon (Windows NT/2000/XP)
This setting specifies a list of executable files to be run by Winlogon in the system context when Windows starts.

Secure Network Access to the Windows Registry (Windows NT/2000/XP)
Windows supports accessing a remote registry via the Registry Editor across a network. The default setting allows for users to connect and modify data within the remote registry.

Restrict Access to Base System Objects (Windows NT/2000/XP)
In Windows the core operating system libraries are kept in virtual memory and shared between the programs running on the system. This has exposed a vulnerability that could allow a user to gain administrative privileges on the computer the user is interactively logged onto.

Control Whether Windows Reboots After a Crash (Windows NT/2000/XP)
This parameter controls whether Windows should automatically reboot after a crash or system failure.

Specify a Replacement GINA Authentication DLL (Windows NT/2000/XP)
Windows is shipped to load and execute the standard Microsoft GINA DLL (Graphical Identification and Authentication dynamic-link library) called MSGina.dll. You can specify a replacement GINA DLL using this setting.

Restart the Shell Automatically (Windows NT/2000/XP)
By default if the Windows user interface or one of its components fails, the interface is restarted automatically, the can be changed so that you must restart the interface by logging off and logging on again manually.

Prompt for Password on Resume (Windows XP)
This setting allows you to configure the computer to always lock and require a password after resuming from hibernate or suspend mode.

Restrict Access to the Event Logs (Windows NT/2000/XP)
The Windows event log contains records documenting application, security and system events taking place on the machine. As these logs can contain sensitive data this tweak allows you to restrict access to administrators and system accounts only.

Disable CD Burning (Windows XP)
This restriction is used to disable the use of the inbuilt CD recording functions of Windows.

Specify the Drives to Enable Autorun Feature (All Versions)
Determines whether the Autorun feature is enabled on each drive connected to the system. When Autorun is enabled, media is started automatically when it is inserted in the drive.