| AllWindows | Users can use all windows and user input events without restriction. | 
| NoWindows | Users cannot use any windows or user interface events. No user interface can be used. | 
| SafeSubWindows | Users can only use safe subwindows for drawing, and can only use user input events for user interface within that subwindow. A control displayed within a browser is an example of a safe subwindow. | 
| SafeTopLevelWindows | Users can only use safe top-level windows and safe subwindows for drawing, and can only use user input events for the user interface within those top-level windows and subwindows. Special safe windows for use by partially-trusted code are guaranteed to be clearly labeled and have minimum and maximum size restrictions. These restrictions prevent potentially harmful code from spoofing attacks, such as imitating trusted system dialogs. |