Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows registry
To provide more flexibility in meeting the needs of customers who have specialized security requirements, Microsoft has provided a way to turn off all processing of metafiles system-wide by setting a flag in a registry key setting. This setting is available to all customers who are running Windows Vista and to customers who have applied security update 925902. Security update 925902 is described by security bulletin MS07-017.
Turning off processing of metafiles may cause the appearance of software or of system components to decrease in quality. Turning off processing of metafiles may also cause the software or the system components to fail completely. Examples include the following:
You cannot print on the computer.
Some applications on the computer may be unable to display clip art.
Some scenarios that involve OLE rendering may break. In particular, this problem occurs when the object server is not active.
Important This is intended only as an emergency measure if the latest GDI security update cannot be deployed quickly enough during an active attack. Turning off all processing of metafiles has not been fully tested. You should change this setting back to zero (0) as soon as possible and install the latest GDI security update to help increase security and to regain full functionality. For more information about how to set the DisableMetaFiles registry key, see the "More Information" section.
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
Turn off processing of GDI metafiles
To turn off processing of GDI metafiles, set the value of the DisableMetaFiles registry entry to one (1). This entry of type REG_DWORD is located in the following registry subkey:
Microsoft Windows Server 2003 Service Pack 1, Microsoft Windows Server 2003, Standard x64 Edition, Microsoft Windows Server 2003, Enterprise x64 Edition, Microsoft Windows Server 2003, Datacenter x64 Edition, Microsoft Windows XP Professional x64 Edition