title: Where in the registry can I find the current setting of an IE8 policy?
body: <p>I have set the following policy with gpedit in a Windows Server 2008 machine that has IE8:</p>
  
  <p><img src="https://i.stack.imgur.com/L7Zdm.png" alt="gpedit screenshot"></p>
  
  <p>I have a source that tells me that configuration resides in <code>HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoExtensionManagement</code> -- but that's a lie. There isn't even an <code>Internet Explorer</code> folder under <code>Software\Policies\Microsoft</code>.</p>
  
  <p>Moreover, the same source says the setting is under "Computer Configuration\Network\Internet Explorer\Do Not Allow Users to enable or Disable Add-Ons" on gpedit. As you see above, that isn't true either.</p>
  
  <p>OK, the "source" I'm talking about is the US Government: <a href="http://usgcb.nist.gov/usgcb/download_ie8.html" rel="nofollow noreferrer">http://usgcb.nist.gov/usgcb/download_ie8.html</a> -- namely, their IE8 OVAL definitions.</p>
  
  <p>So, <em>where</em> in the registry is that setting?</p>