Predefined Key Filter Reference (POSReady 7)

Article
04/30/2013

4/29/2013

Keyboard Filter provides predefined key filters that you can enable by using the Local Group Policy Editor (Gpedit.msc).

Predefined Key Filters

The predefined key filters are grouped as follows:

Accessibility Keys
Application Keys
Desktop and Shell Keys
Modifier Keys
Security Keys
Windows Management Keys
Not Categorized

Accessibility Keys

Filter	Keys	Description
Block Mouse Keys Switching	Left Shift+Left Alt+NumLock	This key filter prevents the use of the keyboard to control mouse or cursor movement and use.
Block High Contrast Switching	Left Shift+Left Alt+Print Screen	This key filter prevents the video resolution from changing the Windows color scheme and controls.
Block Accessibility	Windows+U	This key filter disables access to the Ease of Access Center that is used to start or configure the Magnifier, Narrator, On-Screen Keyboard, or High Contrast features in Windows. However, users can still run these features from Control Panel.

Application Keys

Filter	Keys	Description
Block Application Close	Alt+F4	This key filter prevents the current application or window from closing. It may still be closed in other ways, depending on the window, such as by using the OK or Cancel buttons; the Close button; or drop-down menus.
Block Window Close	Ctrl+F4	This key filter blocks the ability to close tabs or documents throughout an application.
Block System Help	Windows+F1	This key filter prevents the Windows Help documentation from displaying.

Desktop and Shell Keys

Filter	Keys	Description
Block Application Menus	Alt+Space	This key filter prevents users from accessing the Minimize, Restore, and Close menus in applications.
Block Start Menu	Ctrl+Esc	This key filter blocks access to the Start menu. The unblocked action produces the same result as pressing the Windows key, which must be blocked separately. (See Block Windows Keys in the Modifier Keys table.)
Block Computer Find	Ctrl+Windows+F	This key filter prevents access to searching the network for other computers and information.
Block System Properties	Windows+Break	This key filter prevents access to system information, for example, computer name, workgroup, domain, or other system and hardware settings.
Block Start Explorer	Windows+E	This key filter prevents access to the file system and to drives, libraries, and other resources.
Block Find	Windows+F	This key filter prevents users from searching for system information and files
Block Toggle Display	Windows+P Windows+Shift+P	This key filter prevents users from changing the desktop to other monitors and displays.
Block Run Dialog	Windows+R	This key filter prevents users from executing applications. The ability of the user to remove the option from the Start menu and from Task Manager should be disabled. To do this, open the Local Group Policy Editor (Gpedit.msc), and in the console tree, browse to the following path: User Configuration\ Administrative Templates\ Start Menu and Taskbar. In the details pane, enable the Remove Run menu from Start Menu policy setting.

Modifier Keys

Filter	Keys	Description
Block Alt Keys	Left Alt Right Alt	This key filter disables all keyboard shortcuts that use the Alt key. This filter may affect usability. This includes accessing menus and focus between controls in dialog boxes. This filter also blocks Ctrl+Alt+Del, which will no longer be available.
Block Ctrl Keys	Left Ctrl Right Ctrl	This key filter disables all keyboard shortcuts that use the Ctrl key, for example, Copy, Paste, Save, and Open. This filter may affect usability, such as accessibility within dialog boxes. In addition, Ctrl+Alt+Del will no longer be available.
Block Application Menu Key	Menu	This key filter prevents context-sensitive menus, for example, the Cut, Copy, and Paste menu, from appearing within applications.
Block Shift Keys	Left Shift Right Shift	This key filter disables all keyboard shortcuts that use the Shift key. Users will not be able to change case in text. The CapsLock key must be blocked separately. Note: The Sticky Keys prompt can be enabled even if Shift is blocked by Keyboard Filter. To prevent Sticky Keys from opening, you must either block the dialog with Dialog Filter or disable Sticky Keys in the Control Panel. Note: Sticky Keys lets users circumvent Keyboard Filter. Please disable Sticky Keys and prevent users from enabling it to ensure correct Keyboard Filter functionality.
Block Windows Keys	Left Windows Right Windows	This key filter disables all keyboard shortcuts that use the Windows key. When this key filter is enabled, the Windows key and any other key that is pressed after it will not perform any action.

Security Keys

Filter	Keys	Description
Block Secure Desktop	Ctrl+Alt+Del	This key filter prevents access to the Lock and Logon screens from the desktop. Note that Ctrl+Alt+Del filtering will not be enabled on the Logon and Unlock screens. However, filtering resumes when the user logs on.
Block Task Manager	Shift+Ctrl+Esc	This key filter prevents users from seeing applications and services that are running, and from viewing other performance information. Task Manager can still be run from the taskbar or from a secure desktop. To remove this option, open the Local Group Policy Editor (Gpedit.msc), and in the console tree, browse through the following path: User Configuration\ Administrative Templates\ System\ Ctrl+Alt+Del Options. In the details pane, enable the Remove Task Manager setting.
Block Lock Console	Windows+L	This key filter prevents access to suspend the current desktop and show the logon screen. The ability of the user to remove the option from the Start menu should also be disabled. To do this, open the Local Group Policy Editor (Gpedit.msc), and in the console tree, browse through the following path: User Configuration\ Administrative Templates\ System\ Ctrl+Alt+Del Options. In the details pane, enable Remove Lock Computer.

Block Secure Desktop

Ctrl+Alt+Del

This key filter prevents access to the Lock and Logon screens from the desktop.

Note that Ctrl+Alt+Del filtering will not be enabled on the Logon and Unlock screens. However, filtering resumes when the user logs on.

Block Task Manager

Shift+Ctrl+Esc

This key filter prevents users from seeing applications and services that are running, and from viewing other performance information. Task Manager can still be run from the taskbar or from a secure desktop. To remove this option, open the Local Group Policy Editor (Gpedit.msc), and in the console tree, browse through the following path: User Configuration\ Administrative Templates\ System\ Ctrl+Alt+Del Options. In the details pane, enable the Remove Task Manager setting.

Block Lock Console

Windows+L

This key filter prevents access to suspend the current desktop and show the logon screen.

The ability of the user to remove the option from the Start menu should also be disabled. To do this, open the Local Group Policy Editor (Gpedit.msc), and in the console tree, browse through the following path: User Configuration\ Administrative Templates\ System\ Ctrl+Alt+Del Options. In the details pane, enable Remove Lock Computer.

Windows Management Keys

Filter	Keys	Description
Block Task Switching	Alt+Tab Shift+Alt+Tab	This key filter blocks the ability to move between applications.
Block Window Switching	Ctrl+Tab Shift+Ctrl+Tab	This key filter blocks the ability to move between tabs or documents throughout an application.
Block Show Desktop	Windows+D	This key filter prevents minimizing or restoring all windows at the same time.
Block minimizing active window	Windows+Down	This key filter prevents the current active window from minimizing.
Block docking to the left	Windows+Left	This key filter prevents the current active window from docking to the left edge of the screen.
Block Minimize All	Windows+M	This key filter prevents all applications from being minimized and displaying the desktop.
Block docking to the right	Windows+Right	This key filter prevents the current active window from docking to the right edge of the screen.
Block restoring active window when maximized	Windows+Shift+Down	This key filter prevents the current active window from changing back to its original size from full-screen mode.
Block moving window to the left monitor	Windows+Shift+Left	This key filter prevents moving the current active window to the left monitor on systems that have multiple monitors.
Block moving window to the right monitor	Windows+Shift+Right	This key filter prevents moving the current active window to the right monitor on systems that have multiple monitors.
Block vertically maximizing active window	Windows+Shift+Up	This key filter prevents the current active window from docking to the top and bottom edges of the screen.
Block Aero Flip3D Task Switching	Windows+Tab Shift+Windows+Tab	This key filter prevents users from moving between applications by using the Aero Flip 3D feature.
Block maximizing active window	Windows+Up	This key filter prevents the current active window from maximizing to full-screen.

Not Categorized

Filter	Description
Block Filtering for Administrator	This key filter blocks the filtering of keys for users who have administrative credentials. When the administrator logs out or locks the console, filters are re-enabled. Enable this setting to enforce key filtering for all users except users who have administrative credentials.

Block Filtering for Administrator

This key filter blocks the filtering of keys for users who have administrative credentials. When the administrator logs out or locks the console, filters are re-enabled.

Enable this setting to enforce key filtering for all users except users who have administrative credentials.

Share via