| AE-PO-WIN-U-Agentpolicy | |
| Data collected on: 2-9-2025 09:02:18 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\ygalal.5 |
| Created | 12-3-2017 17:28:26 |
| Modified | 29-5-2025 02:01:42 |
| User Revisions | 169 (AD), 169 (SYSVOL) |
| Computer Revisions | 3 (AD), 3 (SYSVOL) |
| Unique ID | {597f5ad7-f031-4940-9b85-196367f95670} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Agents | Yes | Enabled | emea.tpg.ads/AE/Agents |
| Name |
|---|
| EMEA\AE-L-SEC-AgentPolicies Settings |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\abdelhakim.49-adm | Edit settings, delete, modify security | No |
| EMEA\AE-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\AE-L-SEC-AgentPolicies Settings | Read (from Security Filtering) | No |
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\ygalal.5 | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Enforcement | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Designated File Types | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Trusted Publishers | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| Policy | Setting |
|---|---|
| Default Security Level | Unrestricted |
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% | ||||||
| ||||||
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% | ||||||
| ||||||
| %ProgramFiles%\Windows Media Player\wmplayer.exe | ||||||
| ||||||
| %ProgramFiles(x86)%\Windows Media Player\wmplayer.exe | ||||||
|
| Policy | Setting | Comment | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Hide specified Control Panel items | Enabled | ||||||||
| |||||||||
| Policy | Setting | Comment | |||||||
| Show only specified Control Panel items | Enabled | ||||||||
| |||||||||
| Policy | Setting | Comment |
|---|---|---|
| Hide Change or Remove Programs page | Enabled | |
| Remove Add or Remove Programs | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable the Display Control Panel | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Enable screen saver | Disabled | |
| Prevent changing desktop icons | Enabled | |
| Screen saver timeout | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Browse a common web site to find printers | Disabled | |
| Browse the network to find printers | Disabled | |
| Prevent addition of printers | Enabled | |
| Prevent deletion of printers | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not add shares of recently opened documents to Network Locations | Enabled | |
| Hide Internet Explorer icon on desktop | Enabled | |
| Hide Network Locations icon on desktop | Enabled | |
| Prohibit User from manually redirecting Profile Folders | Enabled | |
| Remove Computer icon on the desktop | Enabled | |
| Remove My Documents icon on the desktop | Enabled | |
| Remove Recycle Bin icon from desktop | Enabled | |
| Remove the Desktop Cleanup Wizard | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Hide Active Directory folder | Enabled | |||
| Maximum size of Active Directory searches | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Allow user feedback | Disabled | |||
| Clear Browsing Data on Exit | Disabled | |||
| Disable saving browser history | Disabled | |||
| Disable synchronization of data with Google | Enabled | |||
| Enable deleting browser and download history | Disabled | |||
| Enable ending processes in Task Manager | Disabled | |||
| Enable or disable bookmark editing | Disabled | |||
| Enable reporting of usage and crash-related data | Disabled | |||
| Ephemeral profile | Disabled | |||
| Incognito mode availability | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Use hardware acceleration when available | Disabled | |||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Default cookies setting | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Disable Developer Tools | Enabled | |
| Enable AutoFill | Enabled |
| Policy | Setting | Comment | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Allow users to show passwords in Password Manager (deprecated) | Enabled | |||||||||||||
| Block access to a list of URLs | Enabled | |||||||||||||
| ||||||||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Allow importing of favorites | Disabled | |||
| Allow importing of saved passwords | Disabled | |||
| Browser sign-in settings | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Clear browsing data when Microsoft Edge closes | Enabled | |||
| Clear cached images and files when Microsoft Edge closes | Enabled | |||
| Control where developer tools can be used | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Disable taking screenshots | Enabled | |||
| Enable the Collections feature | Disabled | |||
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Control which extensions cannot be installed | Enabled | |||||
| ||||||
| Policy | Setting | Comment |
|---|---|---|
| Enable saving passwords to the password manager | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Ability to Enable/Disable a LAN connection | Disabled | |
| Ability to rename LAN connections | Enabled | |
| Prohibit access to properties of a LAN connection | Enabled | |
| Prohibit viewing of status for an active connection | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Prevent use of Offline Files folder | Enabled | |||
| Prohibit user configuration of Offline Files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Remove "Make Available Offline" command | Enabled | |||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Add Search Internet link to Start Menu | Disabled | |||
| Add the Run command to the Start Menu | Disabled | |||
| Clear history of recently opened documents on exit | Enabled | |||
| Do not allow pinning programs to the Taskbar | Enabled | |||
| Do not allow taskbars on more than one display | Enabled | |||
| Do not display any custom toolbars in the taskbar | Enabled | |||
| Do not keep history of recently opened documents | Enabled | |||
| Do not search communications | Enabled | |||
| Do not search for files | Enabled | |||
| Do not search Internet | Enabled | |||
| Do not search programs and Control Panel items | Enabled | |||
| Force classic Start Menu | Disabled | |||
| Hide the TaskView button | Enabled | |||
| Lock all taskbar settings | Enabled | |||
| Lock the Taskbar | Enabled | |||
| Prevent changes to Taskbar and Start Menu Settings | Enabled | |||
| Prevent grouping of taskbar items | Enabled | |||
| Prevent users from adding or removing toolbars | Enabled | |||
| Prevent users from customizing their Start Screen | Enabled | |||
| Prevent users from uninstalling applications from Start | Enabled | |||
| Remove access to the context menus for the taskbar | Enabled | |||
| Remove All Programs list from the Start menu | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Remove Balloon Tips on Start Menu items | Enabled | |||
| Remove common program groups from Start Menu | Enabled | |||
| Remove Default Programs link from the Start menu. | Enabled | |||
| Remove Documents icon from Start Menu | Enabled | |||
| Remove Downloads link from Start Menu | Enabled | |||
| Remove Favorites menu from Start Menu | Enabled | |||
| Remove frequent programs list from the Start Menu | Enabled | |||
| Remove Games link from Start Menu | Enabled | |||
| Remove Help menu from Start Menu | Enabled | |||
| Remove Homegroup link from Start Menu | Enabled | |||
| Remove links and access to Windows Update | Enabled | |||
| Remove Music icon from Start Menu | Enabled | |||
| Remove Network Connections from Start Menu | Enabled | |||
| Remove Network icon from Start Menu | Enabled | |||
| Remove Pictures icon from Start Menu | Enabled | |||
| Remove pinned programs from the Taskbar | Enabled | |||
| Remove pinned programs list from the Start Menu | Enabled | |||
| Remove programs on Settings menu | Enabled | |||
| Remove Quick Settings | Enabled | |||
| Remove Recent Items menu from Start Menu | Enabled | |||
| Remove Recorded TV link from Start Menu | Enabled | |||
| Remove Run menu from Start Menu | Enabled | |||
| Remove Search Computer link | Enabled | |||
| Remove Search link from Start Menu | Enabled | |||
| Remove See More Results / Search Everywhere link | Enabled | |||
| Remove the People Bar from the taskbar | Enabled | |||
| Remove user folder link from Start Menu | Enabled | |||
| Remove user name from Start Menu | Enabled | |||
| Remove user's folders from the Start Menu | Enabled | |||
| Remove Videos link from Start Menu | Enabled | |||
| Show QuickLaunch on Taskbar | Disabled | |||
| Show Windows Store apps on the taskbar | Disabled | |||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Prevent access to registry editing tools | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Prevent access to the command prompt | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Remove Task Manager | Enabled |
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Configure Group Policy slow link detection | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment |
|---|---|---|
| All Removable Storage classes: Deny all access | Enabled | |
| CD and DVD: Deny read access | Enabled | |
| CD and DVD: Deny write access | Enabled | |
| Floppy Drives: Deny read access | Enabled | |
| Floppy Drives: Deny write access | Enabled | |
| Removable Disks: Deny read access | Enabled | |
| Removable Disks: Deny write access | Enabled | |
| Tape Drives: Deny read access | Enabled | |
| Tape Drives: Deny write access | Enabled | |
| WPD Devices: Deny read access | Enabled | |
| WPD Devices: Deny write access | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Disallow Autoplay for non-volume devices | Enabled | |||
| Prevent AutoPlay from remembering user choices. | Enabled | |||
| Set the default behavior for AutoRun | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off Autoplay | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Turn off desktop gadgets | Enabled | |
| Turn Off user-installed desktop gadgets | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon | Enabled | |||
| Do not display the Welcome Center at user logon | Enabled | |||
| Hides the Manage item on the File Explorer context menu | Enabled | |||
| No Computers Near Me in Network Locations | Enabled | |||
| No Entire Network in Network Locations | Enabled | |||
| Prevent access to drives from My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Prevent users from adding files to the root of their Users Files folder. | Enabled | |||
| Remove "Map Network Drive" and "Disconnect Network Drive" | Enabled | |||
| Remove CD Burning features | Enabled | |||
| Remove File Explorer's default context menu | Enabled | |||
| Remove File menu from File Explorer | Enabled | |||
| Remove Hardware tab | Enabled | |||
| Remove Search button from File Explorer | Enabled | |||
| Remove Security tab | Enabled | |||
| Remove Shared Documents from My Computer | Enabled | |||
| Remove the Search the Internet "Search again" link | Enabled | |||
| Start File Explorer with ribbon minimized | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off display of recent search entries in the File Explorer search box | Enabled | |||
| Turn off Windows Key hotkeys | Enabled | |||
| Turn off Windows Libraries features that rely on indexed file data | Enabled | |||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Turn off Preview Pane | Enabled | |||
| Turn on or off details pane | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Hide previous versions list for local files | Enabled | |
| Hide previous versions list for remote files | Enabled | |
| Hide previous versions of files on backup location | Enabled | |
| Prevent restoring local previous versions | Enabled | |
| Prevent restoring previous versions from backups | Enabled | |
| Prevent restoring remote previous versions | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable changing Automatic Configuration settings | Enabled | |
| Turn on the auto-complete feature for user names and passwords on forms | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide Favorites menu | Disabled | |
| Tools menu: Disable Internet Options... menu option | Enabled | |
| View menu: Disable Source menu option | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow deleting browsing history on exit | Disabled | |
| Prevent access to Delete Browsing History | Enabled | |
| Prevent deleting ActiveX Filtering, Tracking Protection, and Do Not Track data | Enabled | |
| Prevent deleting cookies | Enabled | |
| Prevent deleting download history | Enabled | |
| Prevent deleting form data | Enabled | |
| Prevent deleting temporary Internet files | Enabled | |
| Prevent deleting websites that the user has visited | Enabled | |
| Prevent the deletion of temporary Internet files and cookies | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable the Advanced page | Enabled | |
| Disable the Connections page | Enabled | |
| Disable the Content page | Enabled | |
| Disable the General page | Enabled | |
| Disable the Privacy page | Enabled | |
| Disable the Programs page | Enabled | |
| Disable the Security page | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Empty Temporary Internet Files folder when browser is closed | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Developer Tools | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow clearing browsing data on exit | Enabled | |
| Configure Autofill | Disabled | |
| Configure Password Manager | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent users from sharing files within their profile. | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent Task Run or End | Enabled | |
| Prohibit Browse | Enabled | |
| Prohibit New Task Creation | Enabled | |
| Prohibit Task Deletion | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent removable media source for any installation | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Media Center to run | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent CD and DVD Media Information Retrieval | Enabled | |
| Prevent Music File Media Information Retrieval | Enabled | |
| Prevent Radio Station Preset Retrieval | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Messenger to be run | Enabled | |
| Do not automatically start Windows Messenger initially | Enabled |