Here is my very own Policy Template:-) Instead of sucking in .ADM files "all around the world" and getting lost in the maze of grayed/checked/cleared squares I collect only the policies I tend to enforce. All in one place, with short comments along. Well, look for yourself...

local.adm
CLASS MACHINE CATEGORY "IniFileMapping" KEYNAME "" POLICY "Data Fellow's Fsecure" KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\ssh.ini" VALUENAME "Recent File List" VALUEON "@USR:Software\Data Fellows\SSH\Recent File List" ACTIONLISTON KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\ssh.ini" VALUENAME "" VALUE "@USR:Software\Data Fellows\SSH\Other" KEYNAME "SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\f-secure.ini" VALUENAME "Settings" VALUE "@USR:Software\Data Fellows\Settings" VALUENAME "" VALUE "@USR:Software\Data Fellows\Other" VALUENAME "F-Secure SSH" VALUE "@USR:Software\Data Fellows\F-Secure SSH" END ACTIONLISTON PART "Moves F-secures settings to the user's registry." TEXT END PART END POLICY ; Data Fellow's Fsecure END CATEGORY ; IniFileMapping CATEGORY "Security tidbits" KEYNAME "" POLICY "Secure LSA" KEYNAME "System\CurrentControlSet\Control\Lsa" VALUENAME "RestrictAnonymous" END POLICY ; Secure LSA END CATEGORY ; Security tidbits CATEGORY "Office 97" KEYNAME "" POLICY "MultiUser settings" KEYNAME "Software\Microsoft\Shared Tools\Proofing Tools\Custom Dictionaries" VALUENAME "1" VALUEON "z:\.nt\Office97\Cutsom.dic" ACTIONLISTON KEYNAME "Software\Microsoft\Office\8.0\Shortcut Bar\Toolbar Root" VALUENAME "" VALUE "z:\.nt\Office97\Shortcut Bar" KEYNAME "Software\Microsoft\Office\8.0\New User Settings\Outlook\Journal" VALUENAME "Item Log File" VALUE "z:\.nt\Office97\offitems.log" VALUENAME "Outlook Item Log File" VALUE "z:\.nt\Office97\outitems.log" KEYNAME "Software\Microsoft\Shared Tools\Autocorrect\8.0" VALUENAME "Path" VALUE "\\sambadc\netlogon\etc\mso97.acl" END ACTIONLISTON PART "Setting Office to store its stuff on z:\.nt" TEXT END PART END POLICY ; MultiUser settings END CATEGORY ; Office 97 CATEGORY "Samba Tune-up" KEYNAME "SYSTEM\CurrentControlSet\Services\Rdr\Parameters" POLICY "Disable multiple users per single SMB connection" VALUENAME "MultipleUsersOnConnection" VALUEON NUMERIC 0 VALUEOFF DELETE PART "TSE SP4 specific, see Q190162 for details." TEXT END PART END POLICY ; Disable multiple users per single SMB connection POLICY "Disable 'Slow Link' detection" KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon" VALUENAME "SlowLinkDetectEnabled" VALUEON NUMERIC 0 END POLICY ; Disable 'Slow Link' detection END CATEGORY ; Samba Tune-up CATEGORY "DrWatson" KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\AeDebug" POLICY "Disable CoreDump" VALUENAME "Debugger" VALUEON DELETE ACTIONLISTON KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\AeDebug" VALUENAME "Auto" VALUE NUMERIC 0 END ACTIONLISTON PART "Disables debugging, when a application crashes," TEXT END PART PART "only a OK button appears..." TEXT END PART END POLICY ; Disable CoreDump END CATEGORY ; DrWatson CATEGORY "Startup" KEYNAME "Software\Microsoft\Windows\Run" POLICY "Disable LOADWC.EXE" VALUENAME "BrowserWebCheck" VALUEON DELETE END POLICY ; Disable LOADWC.EXE END CATEGORY ; Startup CLASS USER CATEGORY "Netscape" KEYNAME "Software\Netscape\Netscape Navigator\UserInfo" POLICY "Freeze Profile location" VALUENAME "ProfileDirectory" VALUEON "Z:\.nt\Netscape\profile" ACTIONLISTON KEYNAME "Software\Netscape\Netscape Navigator\UserInfo" VALUENAME "DirRoot" VALUE "Z:\.nt\Netscape\profile" END ACTIONLISTON PART "Bind Netscape profile to Z:\.nt" TEXT END PART END POLICY ; Freeze Profile location END CATEGORY ; Netscape CATEGORY "Control Panel" KEYNAME "Control Panel" POLICY "Swedish Regional Settings" KEYNAME "Control Panel\International" VALUENAME "sCountry" VALUEON "Sweden" ACTIONLISTON KEYNAME "Control Panel\International" VALUENAME "iCountry" VALUE "46" VALUENAME "iCurrDigits" VALUE "2" VALUENAME "iCurrency" VALUE "3" VALUENAME "iDate" VALUE "2" VALUENAME "iDigits" VALUE "2" VALUENAME "iLZero" VALUE "1" VALUENAME "iMeasure" VALUE "0" VALUENAME "iNegCurr" VALUE "8" VALUENAME "iTime" VALUE "1" VALUENAME "iTLZero" VALUE "1" VALUENAME "Locale" VALUE "0000041D" VALUENAME "s1159" VALUE "" VALUENAME "s2359" VALUE "" VALUENAME "sCurrency" VALUE "kr" VALUENAME "sDate" VALUE "-" VALUENAME "sDecimal" VALUE "," VALUENAME "sLanguage" VALUE "SVE" VALUENAME "sList" VALUE ";" VALUENAME "sLongDate" VALUE "dddd, 'den 'd MMMM yyyy" VALUENAME "sShortDate" VALUE "yyyy-MM-dd" VALUENAME "sThousand" VALUE "" VALUENAME "sTime" VALUE ":" END ACTIONLISTON PART "Enforce Swedish regional settings for all users" TEXT END PART END POLICY ; Swedish Regional Settings END CATEGORY ; Control Panel CATEGORY "QvtNet" KEYNAME "Software\QPC\QVTNet\4.1" POLICY "Terminal Default Settings (DISABLE)" KEYNAME "Software\QPC\QVTNet\4.1\Terminal\Defaults" VALUENAME "" VALUEON DELETE END POLICY ; Terminal Default Settings (DISABLE) END CATEGORY ; QvtNet CATEGORY "WinZip" KEYNAME "Software\Nico Mak Computing\WinZip\WinIni" POLICY "Version Info" VALUENAME "win32_version" VALUEON "R6.3-7.0" END POLICY ; Version Info END CATEGORY ; WinZip CATEGORY "User Profile" KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon" POLICY "Exclude Profile directory list" PART "Prevent following directories from roaming" TEXT END PART PART "semicolon-separated list:" EDITTEXT VALUENAME "ExcludeProfileDirs" DEFAULT "Temporary Internet Files;History;NetHood;PrintHood;TEMP" REQUIRED #if VERSION >= 2 EXPANDABLETEXT #endif END PART END POLICY ; Exclude Profile directory list END CATEGORY ; User Profile CATEGORY "Desktop" KEYNAME "" POLICY "Desktop Location" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" PART "Desktop gets *big* enough to become pain to" TEXT END PART PART "shuffle it around along with user profile..." TEXT END PART PART "Solution is to keep it elsewhere:" EDITTEXT VALUENAME "Desktop" DEFAULT "%HOMEDRIVE%%HOMEPATH%\.nt\Desktop" REQUIRED #if VERSION >= 2 EXPANDABLETEXT #endif END PART PART "... as well as Application Data:" EDITTEXT VALUENAME "AppData" DEFAULT "%HOMEDRIVE%%HOMEPATH%\.nt\Application Data" REQUIRED #if VERSION >= 2 EXPANDABLETEXT #endif END PART PART "... and Personal folder:" EDITTEXT VALUENAME "Personal" DEFAULT "%HOMEDRIVE%%HOMEPATH%\.nt\Desktop" REQUIRED #if VERSION >= 2 EXPANDABLETEXT #endif END PART END POLICY ; Desktop Location POLICY "Disable Desktop Wallpaper" KEYNAME "Control Panel\Desktop" VALUENAME "Wallpaper" VALUEON DELETE PART "... and save some bandwidth on Terminal Server." TEXT END PART END POLICY ; Disable Desktop Wallpaper END CATEGORY ; Desktop CATEGORY "Internet Explorer" KEYNAME "Software\Microsoft\Internet Explorer\Main" POLICY "Outlook Express" PART "Mailbox Location" EDITTEXT KEYNAME "Software\Microsoft\Outlook Express" VALUENAME "Store Root" DEFAULT "Z:\.nt\Application Data\Microsoft\Outlook Express" END PART END POLICY ; Outlook Express POLICY "Initial URL" PART "Enter initial URL:" EDITTEXT VALUENAME "Start Page" DEFAULT "http://fy.chalmers.se/" REQUIRED END PART END POLICY ; Initial URL POLICY "Disable Smooth Scroll" VALUENAME "Smoothscroll" VALUEON NUMERIC 0 PART "... and (again:-) save some bandwidth on Terminal Server." TEXT END PART END POLICY ; Disable Smooth Scroll POLICY "Don't 'Check for Default Browser'" VALUENAME "Check_Associations" VALUEON "no" PART "... and be excused from 'To be or not to be your default browser' question." TEXT END PART END POLICY ; Don't 'Check for Default Browser' POLICY "Cache Location" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" PART "Just like Desktop, cache doesn't belong in profile..." TEXT END PART PART "So move it elsewhere:" EDITTEXT VALUENAME "Cache" DEFAULT "%SystemDrive%\TEMP\%USERNAME%.cache" REQUIRED END PART END POLICY ; Cache Location POLICY "Cache Size Limit" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Content" PART "Microsoft used to set this in % of hardisk size..." TEXT END PART PART "You can set it in KB right here:" NUMERIC VALUENAME "CacheLimit" REQUIRED DEFAULT "5120" MAX 1048576 MIN 0 SPIN 1024 END PART END POLICY ; Cache Size Limit POLICY "Disable IC Wizard" KEYNAME "Software\Microsoft\Internet Connection Wizard" VALUENAME "Completed" VALUEON NUMERIC 1 PART "Does everybody has to cope with Internet Connection Wizard?" TEXT END PART END POLICY ; Disable IC Wizard END CATEGORY ; Internet Explorer CATEGORY "Tweak UI" KEYNAME "" POLICY "Don't 'Start Here'" KEYNAME "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" VALUENAME "NoStartBanner" VALUEON NUMERIC 1 VALUEOFF DELETE END POLICY ; Don't 'Start Here' POLICY "'Snap to Defalt Button'" KEYNAME "Control Panel\Mouse" VALUENAME "SnapToDefaultButton" VALUEON "1" END POLICY ; 'Snap to Defalt Button' POLICY "Disable Window Animations" KEYNAME "Control Panel\Desktop\WindowMetrics" VALUENAME "MinAnimate" VALUEON "1" END POLICY ; Disable Window Animations END CATEGORY ; Tweak UI CATEGORY "Office 97" KEYNAME "" POLICY "Excel Fine Tune" KEYNAME "Software\Microsoft\Office\8.0\Excel\Microsoft Excel" VALUENAME "Options95" VALUEOFF NUMERIC 3 PART "Undocumented? Bitfield options. " TEXT END PART PART "1 - Enable autocomplete in cells" TEXT END PART PART "2 - provide feedback with animation" TEXT END PART END POLICY ; Excel Fine Tune POLICY "Multiuser settings" KEYNAME "Software\Microsoft\Office\8.0\Word\Options" VALUENAME "AUTOSAVE-PATH" VALUEON "z:\.nt\Office97\" ACTIONLISTON KEYNAME "Software\Microsoft\Office\8.0\Word\Options" VALUENAME "STARTUP-PATH" VALUE "z:\.nt\office97\wrdstart" KEYNAME "Software\Microsoft\Office\8.0\Shortcut Bar\Toolbar Root" VALUENAME "" VALUE "z:\.nt\Office97\Shortcut Bar" KEYNAME "Software\Microsoft\Office\8.0\PowerPoint\Recent Folder List\Default" VALUENAME "" VALUE "z:\.nt\Desktop" KEYNAME "Software\Microsoft\Office\8.0\PowerPoint\Command Bars" VALUENAME "CmdBarFile" VALUE "z:\.nt\Office97\" KEYNAME "Software\Microsoft\Office\8.0\Outlook\Printing" VALUENAME "Print Settings File" VALUE "z:\.nt\Office97\OutPrnt" KEYNAME "Software\Microsoft\Office\8.0\Outlook\Office Explorer" VALUENAME "Favorites" VALUE "z:\.nt\office97\" VALUENAME "Views" VALUE "z:\.nt\office97\" KEYNAME "Software\Microsoft\Office\8.0\Outlook\Journal" VALUENAME "Item Log File" VALUE "z:\.nt\Office97\offitems.log" VALUENAME "Outlook Item Log File" VALUE "z:\.nt\Office97\outitems.log" KEYNAME "Software\Microsoft\Office\8.0\Excel\Microsoft Excel" VALUENAME "DefaultPath" VALUE "z:\.nt\Desktop" VALUENAME "CmdBarFile" VALUE "z:\.nt\Office97\" VALUENAME "AltStartup" VALUE "z:\.nt\Office97\ExlStart" VALUENAME "SavedQueriesFolder" VALUE "z:\.nt\Desktop" KEYNAME "Software\Microsoft\Office\8.0\Common\FileNew\SharedTemplates" VALUENAME "" VALUE "C:\Program Files\Microsoft Office\Templates" KEYNAME "Software\Microsoft\Office\8.0\Common\FileNew\LocalTemplates" VALUENAME "" VALUE "z:\.nt\Office97\Templates" KEYNAME "Software\Microsoft\Office\8.0\Access\Settings\CommandBars" VALUENAME "" VALUE "z:\.nt\Office97\" END ACTIONLISTON ACTIONLISTOFF KEYNAME "Software\Microsoft\Office\8.0\Access\Settings\CommandBars" VALUENAME "" VALUE DELETE END ACTIONLISTOFF PART "Setting office to store its stuff on z:\.nt" TEXT END PART END POLICY ; Multiuser settings END CATEGORY ; Office 97 [STRINGS]