| AL-ADM-WIN-U-Supervisors TP Policy | |
| Data collected on: 2-9-2025 09:54:23 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\likaj.7-adm |
| Created | 10-3-2021 10:25:34 |
| Modified | 28-8-2025 12:32:14 |
| User Revisions | 406 (AD), 406 (SYSVOL) |
| Computer Revisions | 16 (AD), 16 (SYSVOL) |
| Unique ID | {55e85bf5-3f94-4276-b1be-6332f846db86} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| DRZ | No | Enabled | emea.tpg.ads/AL/Systems/Clients/DRZ |
| TIR | No | Enabled | emea.tpg.ads/AL/Systems/Clients/TIR |
| Name |
|---|
| EMEA\AL-L-SEC-User Configuration Restricted Supervisors TP Policy |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\AL-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\AL-L-SEC-User Configuration Restricted Supervisors TP Policy | Read (from Security Filtering) | No |
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\Domain Computers | Read | No |
| EMEA\likaj.7-adm | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Enforcement | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Designated File Types | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Trusted Publishers | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| Policy | Setting |
|---|---|
| Default Security Level | Unrestricted |
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% | ||||||
| ||||||
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% | ||||||
| ||||||
| %programfiles%\WindowsApps\Microsoft.Windows.Photo* | ||||||
| ||||||
| %programfiles%\WindowsApps\Microsoft.WindowsStore* | ||||||
| ||||||
| C:\Program Files\Microsoft Office\root\Office16\lync.exe | ||||||
| ||||||
| C:\Users\%username%\AppData\Local\Microsoft\OneDrive | ||||||
| ||||||
| C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy | ||||||
|
| Policy | Setting | Comment | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Settings Page Visibility | Enabled | ||||||||||
| |||||||||||
| Policy | Setting | Comment | |||||||||
| Show only specified Control Panel items | Enabled | ||||||||||
| |||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Hide Add New Programs page | Enabled | |
| Hide Add/Remove Windows Components page | Enabled | |
| Hide Change or Remove Programs page | Enabled | |
| Hide the "Add a program from CD-ROM or floppy disk" option | Enabled | |
| Hide the "Add programs from Microsoft" option | Enabled | |
| Hide the "Add programs from your network" option | Enabled | |
| Hide the Set Program Access and Defaults page | Enabled | |
| Remove Add or Remove Programs | Enabled | |
| Remove Support Information | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide "Get Programs" page | Enabled | |
| Hide "Programs and Features" page | Enabled | |
| Hide "Windows Features" | Enabled | |
| Hide the Programs Control Panel | Enabled |
| Policy | Setting | Comment | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Allow access to a list of URLs | Enabled | ||||||||||||||||||
| |||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||
| Allow user feedback | Disabled | ||||||||||||||||||
| Allow websites to query for available payment methods. | Disabled | ||||||||||||||||||
| Block access to a list of URLs | Enabled | ||||||||||||||||||
| |||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||
| Browser sign in settings | Enabled | ||||||||||||||||||
| |||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||
| Control where Developer Tools can be used | Enabled | ||||||||||||||||||
| |||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||
| Enable AutoFill for addresses | Disabled | ||||||||||||||||||
| Enable AutoFill for credit cards | Disabled | ||||||||||||||||||
| Enable guest mode in browser | Disabled | ||||||||||||||||||
| Enable High Efficiency Mode | Disabled | ||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Allow Google Cast to connect to Cast devices on all IP addresses. | Disabled | |
| Enable Google Cast | Disabled | |
| Show media controls for Google Cast sessions started by other devices on the local network | Disabled | |
| Show the Google Cast toolbar icon | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Enable saving passwords to the password manager | Disabled |
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Action on startup | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Configure the home page URL | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Show Home button on toolbar | Enabled | |||||
| URLs to open on startup | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Allow users to configure Family safety and Kids Mode | Disabled | |||||||||||||||||||||||||||
| Allow websites to query for available payment methods | Disabled | |||||||||||||||||||||||||||
| Block access to a list of URLs | Enabled | |||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||
| Configure the Share experience | Enabled | |||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||
| Control where developer tools can be used | Enabled | |||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||
| Define a list of allowed URLs | Enabled | |||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||
| Define domains allowed to access Google Workspace | Enabled | |||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||
| Disable synchronization of data using Microsoft sync services | Enabled | |||||||||||||||||||||||||||
| Enable AutoFill for addresses | Disabled | |||||||||||||||||||||||||||
| Enable AutoFill for payment instruments | Disabled | |||||||||||||||||||||||||||
| Enable guest mode | Disabled | |||||||||||||||||||||||||||
| Enable profile creation from the Identity flyout menu or the Settings page | Disabled | |||||||||||||||||||||||||||
| Enable the Collections feature | Disabled | |||||||||||||||||||||||||||
| Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge | Disabled | |||||||||||||||||||||||||||
| Enable usage and crash-related data reporting (obsolete) | Disabled | |||||||||||||||||||||||||||
| Hide the First-run experience and splash screen | Enabled | |||||||||||||||||||||||||||
| Shopping in Microsoft Edge Enabled | Disabled | |||||||||||||||||||||||||||
| Show Hubs Sidebar | Disabled | |||||||||||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Enable Google Cast | Disabled | |
| Show the cast icon in the toolbar | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Enable Workspaces | Disabled |
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Control which extensions cannot be installed | Enabled | |||||
| ||||||
| Policy | Setting | Comment |
|---|---|---|
| Enable saving passwords to the password manager | Disabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Configure when efficiency mode should become active | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Efficiency mode enabled | Disabled | |||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Configure proxy server settings (deprecated) | Enabled | |||
| ||||
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Action to take on Microsoft Edge startup | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Configure the home page URL | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Show Home button on toolbar | Enabled | |||||
| Sites to open when the browser starts | Enabled | |||||
| ||||||
| Policy | Setting | Comment | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Block about:config | Enabled | ||||||||||||
| Block about:profiles | Enabled | ||||||||||||
| Block Add-ons Manager | Enabled | ||||||||||||
| Blocked websites | Enabled | ||||||||||||
| |||||||||||||
| Policy | Setting | Comment | |||||||||||
| Define domains allowed to access Google Workspace | Enabled | ||||||||||||
| |||||||||||||
| Policy | Setting | Comment | |||||||||||
| Disable Developer Tools | Enabled | ||||||||||||
| Disable Feedback Commands | Enabled | ||||||||||||
| Disable Firefox Accounts | Enabled | ||||||||||||
| Disable Firefox Screenshots | Enabled | ||||||||||||
| Disable Firefox Studies | Enabled | ||||||||||||
| Disable Master Password Creation | Enabled | ||||||||||||
| Disable Pocket | Enabled | ||||||||||||
| Disable Private Browsing | Enabled | ||||||||||||
| Disable Profile Import | Enabled | ||||||||||||
| Disable Set Desktop Background | Enabled | ||||||||||||
| Disable Update | Enabled | ||||||||||||
| Display Bookmarks Toolbar (Deprecated) | Enabled | ||||||||||||
| Don't Check Default Browser | Enabled | ||||||||||||
| Offer to save logins | Disabled | ||||||||||||
| Offer to save logins (default) | Disabled | ||||||||||||
| Override the first run page | Enabled | ||||||||||||
| |||||||||||||
| Policy | Setting | Comment | |||||||||||
| Password Manager | Disabled | ||||||||||||
| Printing | Disabled | ||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Allow add-on installs from websites | Disabled | |
| Allowed Sites | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Active Logins | Enabled | |
| Browsing History | Enabled | |
| Cache | Enabled | |
| Cookies | Enabled | |
| Download History | Enabled | |
| Form & Search History | Enabled | |
| Offline Website Data | Enabled | |
| Site Preferences | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Extension Management | Enabled | |||
| ||||
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Start Page | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| URL for Home page | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Connection Type | Enabled | |||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Do not allow proxy settings to be changed | Enabled | |||||||||
| HTTP Proxy | Enabled | |||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Proxy DNS when using SOCKS v5 | Enabled | |||||||||
| SOCKS Host | Enabled | |||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Use HTTP proxy for HTTPS | Enabled | |||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Add the Run command to the Start Menu | Disabled | |||
| Clear the recent programs list for new users | Enabled | |||
| Disable context menus in the Start Menu | Enabled | |||
| Do not search for files | Enabled | |||
| Do not search programs and Control Panel items | Enabled | |||
| Lock all taskbar settings | Enabled | |||
| Prevent changes to Taskbar and Start Menu Settings | Enabled | |||
| Prevent users from uninstalling applications from Start | Enabled | |||
| Remove "Recently added" list from Start Menu | Enabled | |||
| Remove access to the context menus for the taskbar | Enabled | |||
| Remove All Programs list from the Start menu | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Remove Documents icon from Start Menu | Enabled | |||
| Remove frequent programs list from the Start Menu | Enabled | |||
| Remove Games link from Start Menu | Enabled | |||
| Remove Help menu from Start Menu | Enabled | |||
| Remove Personalized Website Recommendations from the Recommended section in the Start Menu | Enabled | |||
| Remove Pictures icon from Start Menu | Enabled | |||
| Remove pinned programs from the Taskbar | Enabled | |||
| Remove pinned programs list from the Start Menu | Enabled | |||
| Remove Recommended section from Start Menu | Enabled | |||
| Remove Run menu from Start Menu | Enabled | |||
| Remove Search Computer link | Enabled | |||
| Remove Search link from Start Menu | Enabled | |||
| Remove the People Bar from the taskbar | Enabled | |||
| Remove user folder link from Start Menu | Enabled | |||
| Remove user's folders from the Start Menu | Enabled | |||
| Show QuickLaunch on Taskbar | Disabled | |||
| Show Windows Store apps on the taskbar | Disabled | |||
| Policy | Setting | Comment | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Don't run specified Windows applications | Enabled | |||||||||||||
| ||||||||||||||
| Policy | Setting | Comment | ||||||||||||
| Prevent access to registry editing tools | Enabled | |||||||||||||
| ||||||||||||||
| Policy | Setting | Comment | ||||||||||||
| Prevent access to the command prompt | Enabled | |||||||||||||
| ||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Remove Task Manager | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon | Enabled | |||
| Hide these specified drives in My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Hides the Manage item on the File Explorer context menu | Enabled | |||
| No Computers Near Me in Network Locations | Enabled | |||
| Prevent access to drives from My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Prevent users from adding files to the root of their Users Files folder. | Enabled | |||
| Remove File Explorer's default context menu | Enabled | |||
| Remove Hardware tab | Enabled | |||
| Remove the Search the Internet "Search again" link | Enabled | |||
| Turn off Windows Key hotkeys | Enabled | |||
| Policy | Setting | Comment |
|---|---|---|
| Prevent changing proxy settings | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Tools menu: Disable Internet Options... menu option | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Developer Tools | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Restrict the user from entering author mode | Enabled | |
| Restrict users to the explicitly permitted list of snap-ins | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Only display the private store within the Microsoft Store | Enabled | |
| Turn off the Store application | Enabled |
| Setting | State |
|---|---|
| Software\Policies\Mozilla\Firefox\Proxy\FTPProxy | altirproxyrr.emea.tpg.ads |
| Software\Policies\Mozilla\Firefox\SanitizeOnShutdown | 1 |
| Action | Update |
| Path | %LOCALAPPDATA%\Microsoft\Windows\WinX\Group3 |
| Read-only | Disabled |
| Hidden | Enabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Path | %LOCALAPPDATA%\Microsoft\Windows\WinX\Group2 |
| Read-only | Disabled |
| Hidden | Enabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Path | %LOCALAPPDATA%\Microsoft\Windows\WinX\Group1 |
| Read-only | Disabled |
| Hidden | Enabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Policies\Google\Chrome |
| Value name | UserFeedbackAllowed |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Policies\Microsoft\Edge |
| Value name | UserFeedbackAllowed |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Search |
| Value name | SearchboxTaskbarMode |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Policies\Microsoft\Windows\Explorer |
| Value name | HideRecommendedSection |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | TaskbarDa |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Target type | File system object |
| Shortcut path | %DesktopDir%\FILE SERVER |
| Target path | \\emea\al |
| Icon path | %SystemRoot%\system32\SHELL32.dll |
| Icon index | 3 |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Target type | File system object |
| Shortcut path | %DesktopDir%\Snipping Tool |
| Target path | C:\windows\system32\SnippingTool.exe |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Target type | File system object |
| Shortcut path | %DesktopDir%\MS Paint |
| Target path | C:\windows\system32\mspaint.exe |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Target type | URL |
| Shortcut path | %DesktopDir%\CCMS |
| Target URL | https://sebra.ccms.teleperformance.com/ |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Target type | File system object |
| Shortcut path | %DesktopDir%\Internet Explorer X86 |
| Target path | C:\Program Files (x86)\Internet Explorer\iexplore.exe |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Name | Anti-Phishing-popUp | |||
| Author | EMEA\laboti.6-adm | |||
| Description | ||||
| Run only when user is logged on | InteractiveToken | |||
| UserId | %LogonDomain%\%LogonUser% | |||
| Run with highest privileges | LeastPrivilege | |||
| Hidden | No | |||
| Configure for | 1.2 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | C:\Program Files (x86)\Google\Chrome\Application\chrome.exe | |||
| Arguments | \\emea.tpg.ads\netlogon\public\phishing.jpg |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | Yes | |||
| Stop if the computer switches to battery power | Yes | |||
| Wake the computer to run this task | No | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | No | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | Yes |