;Jurjen van Leeuwen - Leodesk.com
;24.01.2012
;Custom Silverlight ADM template since Microsoft only seems to offer an ADMX version.
;Reference: http://www.microsoft.com/getsilverlight/resources/documentation/grouppolicysettings.aspx
;Disclaimer: Use at your own risk. Leodesk is not responsible for any problems or issues that arise after you implement this ADM template. 

CLASS MACHINE

CATEGORY  !!Silverlight

	KEYNAME "Software\Microsoft\Silverlight"		
	POLICY !!Silverlight_DisableUpdate
		EXPLAIN !!Silverlight_DisableUpdate_Help
		VALUENAME "UpdateMode"
		VALUEON  NUMERIC 2
		VALUEOFF NUMERIC 0
	END POLICY

	POLICY !!Silverlight_Webcam
		EXPLAIN !!Silverlight_Webcam_Help
		VALUENAME "AllowWebcam"
		VALUEON  NUMERIC 1
		VALUEOFF NUMERIC 0
	END POLICY

	POLICY !!Silverlight_TrustedAppsLaunch
		EXPLAIN !!Silverlight_TrustedAppsLaunch_Help
		VALUENAME "AllowLaunchOfElevatedTrustApps"
		VALUEON  NUMERIC 1
		VALUEOFF NUMERIC 0
	END POLICY

	POLICY !!Silverlight_TrustedAppsInstall
		EXPLAIN !!Silverlight_TrustedAppsInstall_Help
		VALUENAME "AllowInstallOfElevatedTrustApps"
		VALUEON  NUMERIC 1
		VALUEOFF NUMERIC 0
	END POLICY

	POLICY !!Silverlight_TrustedAppsInBrowser
		EXPLAIN !!Silverlight_TrustedAppsInBrowser_Help
		VALUENAME "AllowElevatedTrustAppsInBrowser"
		VALUEON  NUMERIC 1
		VALUEOFF NUMERIC 0
	END POLICY

	POLICY !!Silverlight_UDP
		EXPLAIN !!Silverlight_UDP_Help
		VALUENAME "AllowUdpMulticastClientApi"
		VALUEON  NUMERIC 1
		VALUEOFF NUMERIC 0
	END POLICY

	POLICY !!Silverlight_Storage
		EXPLAIN !!Silverlight_Storage_Help
		VALUENAME "AllowMaximumIsolatedStorage"
		VALUEON  NUMERIC 1
		VALUEOFF NUMERIC 0
	END POLICY

END CATEGORY
	
CLASS USER

CATEGORY  !!Silverlight

	KEYNAME "Software\Microsoft\Silverlight"		
	POLICY !!Silverlight_DRM
		EXPLAIN !!Silverlight_DRM_Help
		VALUENAME "DRMEnabled"
		VALUEON  NUMERIC 0
		VALUEOFF NUMERIC 1
	END POLICY

END CATEGORY


[Strings]

;==================================
Silverlight="Microsoft Silverlight"
Silverlight_Help="Configuration settings for Microsoft Silverlight"
Silverlight_DisableUpdate="Disable Silverlight Control's Automatic Update"
Silverlight_DisableUpdate_Help="When this policy is enabled, it will prevent the Silverlight control from automatically checking for updates.  If the policy is set to not configured or disabled, it will not change the default behavior and the control will automatically check for new updates over the internet. The Silverlight control's automatic update mechanism is independent of both the Windows Update and Microsoft Update mechanisms. This option does not need to be used when Silverlight is deployed using a Microsoft Update method, such as WSUS, because this method automatically disables Silverlight's automatic update control."
Silverlight_DRM="Disable DRM content playback"
Silverlight_DRM_Help="By default on a new install of Silverlight version 2 or later using any method, Silverlight will play content which is protected by digital rights management (DRM). It may be desired to disable the playback of DRM-enabled content for Silverlight. When the Disable DRM Content setting is enabled, it will set the user's account to not play DRM protected content."
Silverlight_Webcam="Allow access to webcam and microphone"
Silverlight_Webcam_Help="By default, a website may access the webcam and microphone but only after showing a dialog asking if the user wishes to allow the site access to the webcam/microphone.  When this policy is disabled, websites may never use the webcam/microphone via Silverlight and no dialog will be shown."
Silverlight_TrustedAppsLaunch="Allow user to run trusted out of browser apps written in Silverlight"
Silverlight_TrustedAppsLaunch_Help="If this policy is disabled, users may not run previously installed trusted out of browser apps. Sandboxed out of browser apps may still be run. In browser apps are not affected. Trusted apps run with elevated permissions and can access user data."
Silverlight_TrustedAppsInstall="Allow user to install trusted out of browser apps written in Silverlight"
Silverlight_TrustedAppsInstall_Help="By default, users are allowed to install Silverlight trusted out of browser apps. If this policy is disabled, users may not install trusted out of browser applications, and the trusted application install dialog is not shown. Sandboxed out of browser applications may still be installed. Trusted apps run with elevated permissions and can access user data."
Silverlight_TrustedAppsInBrowser="Allow user to run trusted apps written in Silverlight inside of the browser"
Silverlight_TrustedAppsInBrowser_Help="Silverlight apps that run in the browser come in two flavors, sandboxed and trusted. Sandboxed apps are always allowed to run because they are safe. Trusted apps are allowed in browser if this policy is enabled, and if the trusted app in question is signed with a certificate that's in the trusted publishers store. If this policy is disabled or left default, users may not run trusted apps in browser, even if they are signed with an appropriate certificate. This policy does not affect trusted out of browser apps. Most people that disable this policy will also want to disable installation of Silverlight trusted apps out of browser."
Silverlight_UDP="Allow Silverlight applications to use UDP multicast"
Silverlight_UDP_Help="By default, a Silverlight application may use UDP multicast networking APIs.  If this policy is disabled, the application can't directly use multicast. This setting does not affect the Silverlight MediaElement, which can use multicast if the media server and network support it. Unlike the UDP multicast API, the MediaElement doesn't allow the application to see the multicast data that's being sent and received."
Silverlight_Storage="Allow Silverlight applications to be allocated the maximum amount of isolated storage"
Silverlight_Storage_Help="By default, a Silverlight application is allocated a predetermined amount of isolated storage based on if it is an in browser or out of browser application. If this policy is enabled the application will be allocated the maximum amount."