; Machine-wide settings
CLASS MACHINE
CATEGORY !!IEURLLock
  KEYNAME "Software\Policies\Steven Lawrance\IEURLLock"

  ; The AllowUserOverride registry value
  POLICY !!AllowUserOverride
    VALUENAME AllowUserOverride
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
  END POLICY

  ; The Debug registry value
  POLICY !!Debug
    PART !!DebugLevel DROPDOWNLIST REQUIRED
      VALUENAME Debug
      ITEMLIST
        NAME !!DebugLevel_0 VALUE NUMERIC 0 DEFAULT
        NAME !!DebugLevel_1 VALUE NUMERIC 1
        NAME !!DebugLevel_2 VALUE NUMERIC 2
        NAME !!DebugLevel_3 VALUE NUMERIC 3
        NAME !!DebugLevel_4 VALUE NUMERIC 4
        NAME !!DebugLevel_5 VALUE NUMERIC 5
      END ITEMLIST
    END PART
  END POLICY

  ; Logging level
  POLICY !!Logging
    VALUENAME Logging
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    PART !!LogLevel DROPDOWNLIST REQUIRED
      VALUENAME LogLevel
      ITEMLIST
        NAME !!LogLevel_1 VALUE NUMERIC 1 DEFAULT
        NAME !!LogLevel_2 VALUE NUMERIC 2
        NAME !!LogLevel_3 VALUE NUMERIC 3
      END ITEMLIST
    END PART
  END POLICY

  ; The RedirectURL registry value
  POLICY !!RedirectURL
    PART !!RedirectURLText EDITTEXT EXPANDABLETEXT DEFAULT "%PROGRAMFILES%\IE URL Lock\securitywarning.html"
      VALUENAME RedirectURL
    END PART
  END POLICY

  ; The Enabled registry value
  POLICY !!Enabled
    VALUENAME Enabled
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
  END POLICY

  ; The RestrictWebOnly registry value
  POLICY !!RestrictWebOnly
    VALUENAME RestrictWebOnly
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    PART !!WebProtocols EDITTEXT REQUIRED DEFAULT "^(?:http(?:s)?):"
      VALUENAME WebProtocolRegex
    END PART
  END POLICY

  ; Access control settings
  POLICY !!AccessControl
    PART !!AccessOrder DROPDOWNLIST REQUIRED
      VALUENAME AccessOrder
      ITEMLIST
        NAME !!AllowDeny VALUE NUMERIC 0 DEFAULT
        NAME !!DenyAllow VALUE NUMERIC 1
      END ITEMLIST
    END PART
  END POLICY

  ; Allow list
  POLICY !!AllowList
    PART !!AllowListList LISTBOX EXPLICITVALUE
      KEYNAME "Software\Policies\Steven Lawrance\IEURLLock\AllowList"
    END PART
  END POLICY

  ; Deny list
  POLICY !!DenyList
    PART !!DenyListList LISTBOX EXPLICITVALUE
      KEYNAME "Software\Policies\Steven Lawrance\IEURLLock\DenyList"
    END PART
  END POLICY

END CATEGORY

; User-specific settings
CLASS USER
CATEGORY !!IEURLLock
  KEYNAME "Software\Policies\Steven Lawrance\IEURLLock"

  ; Logging level
  POLICY !!Logging
    VALUENAME Logging
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    PART !!LogLevel DROPDOWNLIST REQUIRED
      VALUENAME LogLevel
      ITEMLIST
        NAME !!LogLevel_1 VALUE NUMERIC 1 DEFAULT
        NAME !!LogLevel_2 VALUE NUMERIC 2
        NAME !!LogLevel_3 VALUE NUMERIC 3
      END ITEMLIST
    END PART
  END POLICY

  ; The RedirectURL registry value
  POLICY !!RedirectURL
    PART !!RedirectURLText EDITTEXT EXPANDABLETEXT DEFAULT "%PROGRAMFILES%\IE URL Lock\securitywarning.html"
      VALUENAME RedirectURL
    END PART
  END POLICY

  ; The Enabled registry value
  POLICY !!Enabled
    VALUENAME Enabled
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
  END POLICY

  ; The RestrictWebOnly registry value
  POLICY !!RestrictWebOnly
    VALUENAME RestrictWebOnly
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    PART !!WebProtocols EDITTEXT REQUIRED DEFAULT "^(?:http(?:s)?):"
      VALUENAME WebProtocolRegex
    END PART
  END POLICY

  ; Access control settings
  POLICY !!AccessControl
    PART !!AccessOrder DROPDOWNLIST REQUIRED
      VALUENAME AccessOrder
      ITEMLIST
        NAME !!AllowDeny VALUE NUMERIC 0 DEFAULT
        NAME !!DenyAllow VALUE NUMERIC 1
      END ITEMLIST
    END PART
  END POLICY

  ; Allow list
  POLICY !!AllowList
    PART !!AllowListList LISTBOX EXPLICITVALUE
      KEYNAME "Software\Policies\Steven Lawrance\IEURLLock\AllowList"
    END PART
  END POLICY

  ; Deny list
  POLICY !!DenyList
    PART !!DenyListList LISTBOX EXPLICITVALUE
      KEYNAME "Software\Policies\Steven Lawrance\IEURLLock\DenyList"
    END PART
  END POLICY

END CATEGORY

[Strings]

IEURLLock="IE URL Lock"

AllowUserOverride="Enable Non-Policy User Configurations"

Debug="Debugging"

DebugLevel="Debugging Level"
DebugLevel_0="0 No debugging"
DebugLevel_1="1 Errors"
DebugLevel_2="2 Warnings"
DebugLevel_3="3 Important Information"
DebugLevel_4="4 All Information"
DebugLevel_5="5 Minutiae"

Logging="Logging"

LogLevel="Logging Level"
LogLevel_1="Errors Only"
LogLevel_2="Blocked Sites and Errors"
LogLevel_3="Allowed Sites, Blocked Sites, and Errors"

RedirectURL="Access Denial Location"
RedirectURLText="URL, UNC, or File Path"

Enabled="Enable IE URL Lock"

RestrictWebOnly="Restrict Only Web Locations"

AccessControl="Access Control"
AccessOrder="Access Control Processing Order"
AllowDeny="Allow, Deny"
DenyAllow="Deny, Allow"
WebProtocols="Web Protocol Regular Expression"

AllowList="Allowed Location Regular Expression List"
AllowListList="Allowed Location Regular Expression List"

DenyList="Denied Location Regular Expression List"
DenyListList="Denied Location Regular Expression List"