Not logged in - Login
View History

RoboForm Enterprise Group Policies


Feature management of RoboForm Enterprise is implemented through Group Policies. An ADM File is available containing all of the Group Policy options for RoboForm Enterprise. These policies will allow the administrator to perform the following:
  1. Selectively restrict certain actions within RoboForm Enterprise,
  2. Configure the Master Password Recovery Mechanism.)

Setup

Group Policy Template - ADM

To load ADM files in Group Policy Object Editor:
  1. Select Start -> Run, type: gpedit.msc, press Enter.
  2. In the tree go to 'Local Computer Policy' -> 'Computer Configuration' -> 'Administrative Templates'.
  3. Right-click 'Administrative Templates', select 'Add/Remove templates' -> 'Add...',
  4. Browse for roboform.adm and click 'Close'.
  5. The new sub-tree with RoboForm policies will appear under 'Administrative Templates'.
  6. To enable a policy, select this policy in Editor, right-click it, select Enabled.
  7. Policy will become effective after RoboForm restart.


RoboForm Policy Editor

RoboForm Policy Editor is a tool that allows you to quickly create registry .bat file and deploy it on individual User's machines. Used to implement a consistent level of security across multiple machines.

RoboForm Policy Editor

Best Practices

The following policies are the default policies we suggest when performing a RoboForm Enterprise Deployment. There are many more policies available and we do encourage you to read through the rest of the policies to see if there is any additional configuration you would like to perform.

Log Off Security

AutoForgetTime – Set the time in mins that you would like to have RoboForm keep the Master Password cached. Suggested value: no more than 30mins
AutoLogoffScreensaverStart -Logs out of RoboForm when ScreenSaver comes on.
AutoLogoffStandby - Logs out of RoboForm when in StandBy mode.
AutoLogoffOnUserSwitch - Logs out of RoboForm when Switching User.
LogoffEmptyClipboard - RoboForm will clear User's Clipboard history at LogOff.
LogoffClearSearchHistory - RoboForm will clear User's Search History at LogOfff.
ClearGeneratedPasswordsOnLogoff - RoboForm will clear User's Generated Passwords at LogOff.

RoboForm File Security

EncryptNewPasscard- Automatically encrypt all new Passcards
EncryptNewIdentity- Automatically encrypt all new Identity
EncryptNewSafenote- Automatically encrypt all new Safenote
ProtectNewObject – This should be set to “1”. In combination with DisableUnprotectCommand, it ensures that all RoboForm data is encrypted and nothing is stored in plain text.
DisableUnprotectCommand - In combination with ProtectNewObject, it ensures that all RoboForm data is encrypted and nothing is stored in plain text.

Password Complexity

The following policies should be configured to require the proper password complexity for your security policies. Suggested values are in parentheses.
MasterPasswordMinLength - Require Users to set minimum password length. Recommended (8).
MasterPasswordMinUpperCaseChars - Require Users to set at least (1) upper case character.
MasterPasswordMinLowerCaseChars - Require Users to set at least (1) lower case character.
MasterPasswordMinDigitChars - Require Users to set at least (1) number.

SSO: Single Sign On - Optional

StoreMPInSystemProtectedStorage - Allows for SSO (Single Sign On) experience, by automatically logging into RoboForm at the time of logging into computer.

Master Password Recovery

PasswordRecoveryStorage – If you want the ability to recover user Master Passwords this should be configured. See the Admin Guide for more details.
For more information on Master Password Recovery, see: Master Password Recovery

Additional Commonly Used Policies

CustomEverywhereServiceLocation - Set the alternate location for the RoboForm Online Server: ip/host
DisableSync - Disable RoboForm data files synchronization commands
DualPassEncryptionKeyScheme - This policy specifies the encryption schema used by RoboForm: Enabled: Dual Password Schema used; Disabled: Normal single password used
NoIdentities - RoboForm hides from the user all controls related to Identities: buttons, menu items, context menu items; RoboForm also blocks all functionality related to Identities
NoSafenotes - RoboForm hides from the user all controls related to Safenotes: buttons, menu items, context menu items; RoboForm also blocks all functionality related to Safenotes
NoPasscards - All controls related to Passcards are hidden from the user: buttons, menu items, context menu items; all functionality related to Passcards is blocked
NoToolbar - Do not register toolbar and its classes with IE
NoTaskbarIcon - Do not register/start RoboForm Taskbar Icon

Complete List of Policies

RoboForm Toolbar

MyIdentitiesCausesSubmit
True: the default action for the My Identity button on toolbar is Fill&Submit.
False: the default action for the My Identity button on toolbar in Fill Form (no automatic submit).

MatchingPasscardsCausesSubmit
True: the default action for the Matching Passcards button on toolbar is Fill&Submit;
False: the default action for the Matching Passcards button on toolbar is Fill Form (no automatic submit).

MyIdentityNumber
This policy specifies the number of MyIdentity buttons on toolbar.

MyIdentityWidth
This policy controls the width of the MyIdentity button.

MatchingPasscardsButtonWidth
This policy specifies the width of the Matching Passcards button on toolbar.

SearchBoxWidth
This policy controls the width of the Search box on toolbar.

ShowLowerToolbarIE
When Upper RoboForm toolbar cannot be shown in Internet Explorer because it is not installed or not allowed, show Upper Attached Toolbar, Lower Toolbar or no toolbar. Preferred location of RoboForm toolbar is:
0: Upper Toolbar;
1: Lower Toolbar;
2: No Toolbar.

OrderByUrlMatch
This policy controls the order of Passcards in the Matching Passcards mini-dialog:
True: show matching Passcards with the best URL match on top;
False: order matching Passcards alphabetically.

Login Browser

LoginOpensSiteType
This policy controls where the Login toolbar button opens the corresponding website:
0: same window;
3: new window.

TaskbarOpensSiteNewWindow This policy controls where the Login taskbar icon or editor opens the corresponding web site:
0: same window;
1: new window.

TaskbarIconOpenBrowser This policy controls the nature of the New Browser window for the Open icon from Taskbar:
0: default browser
1: Internet Explorer
2: Firefox
3: user specified browser
NOTE: For RoboForm Pro, the default value is 'Default Browser'. For RoboForm2Go, the default value is 'Internet Explorer'.

UserDefinedWB This policy specifies the browser that will be used when the User specified browser (TaskbarIconOpenBrowser=3) option is selected.

PopupBlockerUsing True: RoboForm will open a new browser window by calling the default browser, because low quality popup blocker that is present will not allow RoboForm to open them using other techniques;
False: RoboForm will use regular techniques to open a new browser window.

DefaultActionForPasscardIsLogin True: the default action for RoboForm file type is Login;
False: the default action for RoboForm file type is Edit.

AutoSave Dialog

AutoSaveEnable
True: AutoSave is turned on for HTML forms;
False: AutoSave is turned off for HTML forms.

AutoSaveWinDialogsEnable
True: AutoSave is turned on for Basic Authentication and Windows dialogs;
False: AutoSave is turned off for Basic Authentication and Windows dialogs.

AutoSaveAltClickEnable
True: the Alt+Click combination forces AutoSave;
False: the Alt+Click combination does not force AutoSave.

AutoSaveShiftEnterEnable
True: the Shift+Enter combination forces AutoSave;
False: the Shift+Enter combination does not force AutoSave.

AutoSaveUseNewAccountFeature This policy controls the behavior of the AutoSave dialog box, enabling or disabling the option to create a new account.
True: enable the New Account feature;
False: disable the New Account feature.

DisableSaveForms
This policy enables or disables the Save Forms and AutoSave dialog boxes.
True: RoboForm does not give the user an option to save new username/password data or new form data; RoboForm also blocks all related functionality;
False: RoboForm will give the user an option to save new username/password data or new form data.

AutoFill Dialog

AutoFillEnable
True: RoboForm will show the AutoFill dialog when there are forms to be filled;
False: RoboForm will disable the AutoFill dialog.

ConfirmAutoFillEnable
True: RoboForm will ask for user confirmation when performing the AutoFill action;
False: RoboForm will not ask for user confirmation when performing the AutoFill action.

AutoFillWinDialogsEnable
True: RoboForm will show the AutoFill dialog box when matching windows dialog appears;
False: RoboForm will not show the AutoFill dialog box when matching windows dialog appears.

AutoFillEmptyOnlyPC
True: the Fill Only Empty Fields option will be selected by default in the AutoFill dialog box for Passcards;
False: the Fill Only Empty Fields option will not be selected by default in the AutoFill dialog box for Passcards.

AutoFillEmptyOnlyID
True: the Fill Only Empty Fields option will be selected by default in the AutoFill dialog box for Identities.
False: the Fill Only Empty Fields option will not be selected by default in the AutoFill dialog box for Identities.

AutoFillEngSelValues
True: The Fill English Selection Values option will be selected by default in the AutoFill dialog box (Identities only).

AutoFillSubmitDefaultPC
True: Fill&Submit will be the default action in the AutoFill dialog when a Passcard is selected;
False: Fill Forms (Fill only, no Auto Submit) will be the default action in the AutoFill dialog when a Passcard is selected.

AutoFillSubmitDefaultID
True: Fill&Submit will be the default action in the AutoFill dialog when an Identity is selected;
False: Fill Forms (Fill only, no auto submit) will be the default action in the AutoFill dialog when an Identity is selected.

AutoFillOnlyIfPasswords
True: RoboForm will show the AutoFill dialog only on pages with password fields;
False: RoboForm will show the AutoFill dialog on all HTML pages with forms.

AutoFillFromIdentityOrPasscard
This policy controls when AutoFill dialog appears:
when there is a Passcard only to fill;
when there is an Identity only to fill;
when there is either a Passcard or an Identity to fill.

AutoFillThreshold
This policy specifies the minimal number of fields that causes the AutoFill from Identity box to appear.

AutoFillDialogPosition
This policy controls the position of the AutoFill dialog when it appears:
0: right out;
1: center;
2: right in.

AutoFillDialogStealFocus
This policy controls the behavior of the AutoFill dialog box when it appears
True: the keyboard focus will be set to the AutoFill dialog when it appears;
False: the keyboard focus will not be set to the AutoFill dialog when it appears.

AutoFillDialogAutoHideOn
This policy controls if the AutoFill dialog automatically hides when its main window does not have focus.
True: the AutoFill dialog will automatically hide itself when its main window does not have focus;
False: the AutoFill dialog will NOT automatically hide itself when its main window does not have focus.

Master Password

EncryptAlg
This policy specifies the encryption algorithm that RoboForm will use when saving files:
1: 1DES;
3: 3DES;
4: AES;
5: Blowfish;
6: RC6.

EncryptionKeyScheme
This policy specifies the encryption schema used by RoboForm:
0: normal (single password);
1: dual password.

AutoForgetTime
This policy specifies the AutoLogoff time in minutes. RoboForm will forget the Master Password after AutoLogoff minutes of inactivity.

AutoLogoffScreensaverStart
This policy controls the behavior of RoboForm when the screensaver starts.
True: RoboForm will perform the AutoLogoff and forget the Master Password on Screensaver Start.
False: RoboForm will not perform the AutoLogoff on Screensaver Start.

AutoLogoffStandby
This policy controls the behavior or RoboForm when user's computer goes into the Standby mode.
True: RoboForm will perform the AutoLogoff and forget the Master Password on Standby;
False: RoboForm will not perform the AutoLogoff on Standby.

AutoLogoffOnUserSwitch
This policy controls the behavior or RoboForm when a different user logs in into the computer on which RoboForm is running
True: RoboForm will perform the AutoLogoff and forget the Master Password on User Switch;
False: RoboForm will not perform the AutoLogoff on User Switch.

LogoffEmptyClipboard
True: RoboForm will empty clipboard upon logoff;
False: RoboForm will not empty clipboard upon logoff.

LogoffClearSearchHistory
True: RoboForm will clear search history upon logoff;
False: RoboForm will not clear search history upon logoff.

ClearGeneratedPasswordsOnLogoff
True: RoboForm will clear the list of generated passwords on logoff;
False: RoboForm will not clear the list of generated passwords on logoff.

EncryptNewPasscard
True: RoboForm will offer the user to encrypt new Passcard;
False: RoboForm will not offer the user to encrypt new Passcard.

EncryptNewIdentity
True: RoboForm will offer the user to encrypt new Identity;
False: RoboForm will not offer the user to encrypt new Identity.

EncryptNewSafenote
True: RoboForm will offer the user to encrypt new Safenote;
False: RoboForm will not offer the user to encrypt new Safenote.

MasterPasswordMinLength
This policy specifies the minimal length of Master Passwords that RoboForm will enforce

MasterPasswordMinUpperCaseChars
This policy specifies the minimal number of upper-case letters in Master Password that RoboForm will enforce.

MasterPasswordMinLowerCaseChars
This policy specifies the minimal number of lower-case letters in Master Password that RoboForm will enforce.

MasterPasswordMinDigitChars
This policy specifies the minimal number of letters in Master Password that RoboForm will enforce.

DisableChangeMasterPassword
This policy allows or prevents the user from changing his or her Master Password.
True: RoboForm will not allow users to change their Master Password;
False: RoboForm will allow users to change their Master Password.

ProtectNewObject
This policy controls how RoboForm protects new user files:
0: user can choose encryption mode when creating new Passcard/Safenote/Identity;
1: always protect; user cannot create an unprotected object;
2: always unprotect; user cannot create a protected object.

DisableProtectCommand
This policy allows or prevents the user from protecting unprotected Passcards, Identities, and Safenotes.
True: RoboForm will not allow the user to protect existing unprotected Passcards/Identities/Safenotes; RoboForm will also disable the Protect All command in the Set Master Password dialog. False: RoboForm will allow the user to protect existing unprotected Passcards, Identities, and Safenotes.

DisableUnprotectCommand
This policy allows or prevents the user from unprotecting Passcards, Identities, and Safenotes that have been previously protected with a Master Password.
True: RoboForm will not allow the user to unprotect existing protected Passcards, Identities, or Safenotes. RoboForm will also disable the Unprotect All command in the Set Master Password dialog;
False: RoboForm will allow the user to unprotect existing protected Passcards, Identities, and Safenotes.

StoreMPInSystemProtectedStorage
This policy tells RoboFrom to cache the user's Master Password in System Protected Storage. (ie: The Master Password is then tied to the windows account so the user can access it by just logging in)

PasswordRecoveryStorage
This policy specifies the output folder where encrypted copies of Master Passwords will be saved.

User Data Options

MruMaxNumber
This policy specifies the maximum number of items in the Most Recently Used list.

ShowIconsInMenu
True: RoboForm will show icons in its menus. Menus will be shown by default;
False: RoboForm will not show icons in its menus.

ShowObjectContextMenuByTimer
True: RoboForm will show context menu in Passcards/Identities/Safenotes menu after 5 seconds of inactivity;
False: RoboForm will not show context menu in Passcards/Identities/Safenotes menu after 5 seconds of inactivity.

DisableChangeUserDataFolder
This policy controls user ability to change the location of the User Data folder.
True: RoboForm will not allow the user to change the location of the User Data folder and disable most commands in Profiles menu;
False: RoboForm will allow the user to change the location of the User Data folder and will allow all commands in the Profiles menu.

DisableBackupRestore
This policy controls the ability of the user to perform backup and restore of Passcards, Identities, and Safenotes.
True: RoboForm will not allow the user to perform backup and restore operations;
False: RoboForm will allow the user to perform backup and restore operations.

NoIdentities
This policy enables or disables the use of Identities.
True: RoboForm hides from the user all controls related to Identities: buttons, menu items, context menu items; RoboForm also blocks all functionality related to Identities;
False: RoboForm allows the use of Identities.
Note that after change of this policy roboform.dll registration must be updated to apply new policies to IE's context menu and toolbar items. Other items will be updated after 'Refresh Folder' command or on next update of settings.

NoSafenotes
This policy enables or disables the use of Safenotes.
True: RoboForm hides from the user all controls related to Safenotes: buttons, menu items, context menu items; RoboForm also blocks all functionality related to Safenotes;
False: the use of Safenotes is allowed.
Note that after change of this policy roboform.dll registration must be updated to apply new policies to IE's context menu and toolbar items. Other items will be updated after 'Refresh Folder' command or on next update of settings.

NoPasscards
This policy enables or disables the use of Passcards.
True: all controls related to Passcards are hidden from the user: buttons, menu items, context menu items; all functionality related to Passcards is blocked;
False: the use of Passcards is allowed.
Note that after change of this policy roboform.dll registration must be updated to apply new policies to IE's context menu and toolbar items. Other items will be updated after 'Refresh Folder' command or on next update of settings.

Search Box

ShowSearchResultsInNewWindow
True: RoboForm will show search results in new window;
False: RoboForm will show search results in the same window;

SaveSearchHistory
True: RoboForm will save Search History;
False: RoboForm will not save Search History.

SearchHistoryMaxNumber
This policy controls the maximum number of items that RoboForm will save in Search History.

EnableSelectionSearch
True: RoboForm will put the text selection of the current browser into the Search box when the user clicks on it;
False: RoboForm will not put the text selection of the current browser in the Search box when the user clicks on it.

Keyboard Shortcuts

DisableShortcuts
True: RoboForm will disable keyboard shortcuts;
False: RoboForm will enable keyboard shortcuts.

RightAltForShortcuts
True: RoboForm will enable the use of right ALT button for keyboard shortcuts;
False: RoboForm will disable the use of right ALT button for keyboard shortcuts.

ShortcutAuxKey
Use these keys for RF keyboard shortcuts:
1: Ctrl;
2: Shift;
4: Alt.

Graphical User Interface (GUI) Limited by Admin

NoToolbar
True: do not register toolbar and its classes with IE;
False: register toolbar.

NoContextMenu
True: do not register context menu and its classes with IE.
False: register RoboForm context menu.

NoBHO
True: do not register RoboForm Browser Helper Object (BHO) with IE. NOTE: WE DO NOT RECOMMEND SELECTING THIS OPTION;
False: register RoboForm Browser Helper Object (BHO) with IE.

NoStartMenu
True: do not register AI RoboForm Start Menu items;
False: register Start Menu items.

NoTaskbarIcon
True: do not register/start RoboForm Taskbar Icon;
False: register RoboForm taskbar icon to start when Windows starts.

Configuration Options

NoUninstall
True: disable RoboForm uninstaller to be shown in Add/Remove Programs.
False: add RoboForm uninstaller to Add/Remove Programs.

NoConfirmOpenPasscard
True: RoboForm will suppress Open/Save confirmation dialog showing when user clicks on a link to RoboForm file on a web page;
False: RoboForm allow the Open/Save confirmation dialog showing when user clicks on a link to RoboForm file on a web page.

CreateNewAsContact
True: RoboForm will offer to create New Identity as Contact;
False: RoboForm will not offer to create New Identity as Contact.

MiniDialogShowDelayTime
This policy specifies the delay time of the Mini Dialog.

AttachToFirefox
This policy tells RoboForm to attach or not to Firefox if adapter is not installed. This policy is ON by default.
True: RoboForm will attach itself to Firefox if adapter is not installed;
False: RoboForm will not attach itself to Firefox if adapter is not installed.

RequestChangesConfirmationInEditor
True: RoboForm will force users to confirm that the changes they made to Passcard, Identity, or SafeNote in RoboForm Editor are actually desired;
False: RoboForm will not force users to confirm that the changes they made to Passcard, Identity, or SafeNote in RoboForm Editor are actually desired.

FillingFromPasscardChecksDomain
This policy allows or prevents from using a Passcard to fill a form located on a domain that is different from the Domain that is specified in the Passcard. This policy (when set to False) is used to protect against phishing attacks and enforce the privacy of passwords (e.g., when the user is not allowed to view the information in the passcard, he or she may choose to create a custom HTML form that reveals the username and password to them).
True: the user is allowed to use a Passcard to fill a form on a domain that is different from the Domain on the Passcard;
False: the user is not allowed to use a Passcard to fill a form on a domain that is different from the Domain on the Passcard.

Domains

OnlyDomains
This policy is obsolete. Use AutoSaveOnlyInDomains instead.

AutoSaveOnlyInDomains
This policy controls the list of domains on which the AutoSave functionality of RoboForm will work. Multiple domains must be separated with a semicolon.
Example: roboform.com;roboform.org;searchcardplace.com

NoAutoSaveInDomains
This policy controls the list of domains on which the AutoSave functionality of RoboForm will not work. Multiple domains must be separated with a semicolon.
Example: roboform.com;roboform.org;searchcardplace.com

DisableForceNonOnlyDomains
This policy controls the availability of the forced AutoSave (ALT+Click and SHIFT+Enter) to the users for domains which are not listed in AutoSaveOnlyInDomains or listed in NoAutoSaveInDomains. This key takes effect when AutoSaveOnlyInDomains and/or NoAutoSaveOnlyInDomains are not empty.
True: RoboForm will not allow the users to use the forced AutoSave on domains which are not listed in AutoSaveOnlyInDomains or listed in NoAutoSaveInDomains.
False: RoboForm will allow the users to use the forced AutoSave on domains which are not listed in AutoSaveOnlyInDomains or listed in NoAutoSaveInDomains.

SaveFormsOnlyInDomains
This policy forces RoboForm to restrict the SaveForms functionality only to the domains listed in this policy. Multiple domains must be separated with a semicolon.
Example: roboform.com;roboform.org;searchcardplace.com

NoSaveFormsInDomains
This policy forces RoboForm to prevent the user from using the SaveForms functionality on the domains listed in this policy. Multiple domains must be separated with a semicolon.
Example: roboform.com;roboform.org;searchcardplace.com

AutoFillOnlyInDomains
This policy forces RoboForm to restrict the AutoFill functionality only on the domains listed in this policy. Multiple domains must be separated with a semicolon.
Example: roboform.com;roboform.org;searchcardplace.com

NoAutoFillInDomains
This policy forces RoboForm to prevent the user from using the AutoFill functionality on domains listed in this policy. Multiple domains must be separated with a semicolon.
Example: roboform.com;roboform.org;searchcardplace.com

FillFormsFromPasscardsOnlyInDomains
This policy forces RoboForm to restrict the FillForms from Passcards functionality to only domains listed in this policy. Multiple domains must be separated with a semicolon.
Example: roboform.com;roboform.org;searchcardplace.com

NoFillFormsFromPasscardsInDomains
This policy forces RoboForm to present the user from using the FillForms from Passcards functionality on the domains listed in this policy. Multiple domains must be separated with a semicolon.
Example: roboform.com;roboform.org;searchcardplace.com

FillFormsFromIdentitiesOnlyInDomains
This policy forces RoboForm to restrict the FillForms from Identities functionality to only domains listed in this policy. Multiple domains must be separated with a semicolon.
Example: roboform.com;roboform.org;searchcardplace.com

NoFillFormsFromIdentitiesInDomains
This policy forces RoboForm to present the user from using the FillForms from Identities functionality on the domains listed in this policy. Multiple domains must be separated with a semicolon.
Example: roboform.com;roboform.org;searchcardplace.com

FillSubmitWithoutAskingOnURLs
This policy specifies a list of URLs that RoboForm will automatically Fill and Submit from an exact matching passcard. Seperate multiple URLs with \n

FillWithoutAskingOnURLs
This policy specifies a list of URLs that RoboForm will automatically Fill from an exact matching passcard. Seperate multiple URLs with \n

General

NoAutoUpdate
This policy controls the AutoUpdate functionality of RoboForm.
True: RoboForm will not check for a new version on www.siber.com/roboform/version.txt;
False: RoboForm will check for a new version on www.siber.com/roboform/version.txt.

NoEmailingDataFiles
This policy controls the ability of the user to send his or her data files (Passcards, Identities, and Safenotes) via email.
True: RoboForm will not allow the user to send his or her data files by email;
False: RoboForm will allow the user to send his or her data files by email.
NOTE: the user will still be able to send his data files via email with other programs outside of RoboForm.

DisableAddShortcutToDesktop
This policy controls the availability of the Add Shortcut To Desktop command to the user.
True: RoboForm will not present the Add Shortcut To Desktop command to the user;
False: RoboForm will present the Add Shortcut to Desktop command to the user.
NOTE: the user will still be able to manually add a shortcut to the desktop.

DisableAddShortcutToLinksToolbar
This policy controls the availability of the Add Shortcut To Links Toolbar command to the user.
True: RoboForm will not present the Add Shortcut To Links Toolbar command to the user;
False: RoboForm will present the Add Shortcut To Links Toolbar command to the user.

DisableAddShortcutToQuickLaunch
This policy controls the availability of the Add Shortcut To QuickLaunch command to the user.
True: RoboForm will not present the Add Shortcut To QuickLaunch command to the user;
False: RoboForm will present the Add Shortcut To QuickLaunch command to the user.

ForbiddenIdentityEditorGroups
This policy allows the administrator to restrict user access to different tabs in Identities. The following is the list of all tab names to which access can be restricted (you can list multiple tabs separated by a comma):
Summary,
Person,
Business,
Address,
Credit Card,
Bank Account,
Authentication,
Custom.
Example: to disallow Credit Card and Bank tabs, this policy must be set to: Credit Card,Bank Account.

DisableChangeCustomDomainEquiv
This policy controls the ability of the user to change custom domains equivalences.