| ALTIR-PR-WIN-C-SPLUNK Reporting | |
| Data collected on: 2-9-2025 09:47:07 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\likaj.7-adm |
| Created | 1-7-2020 11:17:04 |
| Modified | 9-2-2023 14:53:34 |
| User Revisions | 0 (AD), 0 (SYSVOL) |
| Computer Revisions | 70 (AD), 70 (SYSVOL) |
| Unique ID | {25367e3a-6c40-45b2-9334-cbca515c189b} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| TIR | No | Enabled | emea.tpg.ads/AL/Systems/Clients/TIR |
| Name |
|---|
| EMEA\AL-L-SEC-Computer Configuration SPLUNK Reporting |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\AL-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\AL-L-SEC-Computer Configuration SPLUNK Reporting | Read (from Security Filtering) | No |
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\Domain Computers | Read | No |
| EMEA\Domain Users | Read | No |
| EMEA\likaj.7-adm | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Action | Update |
| Source file(s) | \\emea.tpg.ads\sysvol\emea.tpg.ads\Policies\{25367E3A-6C40-45B2-9334-CBCA515C189B}\Machine\Preferences\Files\cygwin1.dll |
| Destination file | c:\Windows\iperfCollect\iperf-3.1.3-win64\cygwin1.dll |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Disabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Source file(s) | \\emea.tpg.ads\sysvol\emea.tpg.ads\Policies\{25367E3A-6C40-45B2-9334-CBCA515C189B}\Machine\Preferences\Files\iperf3.exe |
| Destination file | c:\Windows\iperfCollect\iperf-3.1.3-win64\iperf3.exe |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Disabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Source file(s) | \\emea.tpg.ads\sysvol\emea.tpg.ads\Policies\{25367E3A-6C40-45B2-9334-CBCA515C189B}\Machine\Preferences\Files\iperfCollect.ps1 |
| Destination file | c:\Windows\iperfCollect\iperfCollect.ps1 |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Disabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Name | Splunk Reporting v.1 | |||
| Author | EMEA\likaj.7-adm | |||
| Description | Reports to Splunk server every 1 hour. | |||
| Run only when user is logged on | ||||
| GroupId | SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Repeat task every 1 hour for a duration of Indefinitely | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Stop task if it runs longer than | 30 minutes | |||
| Activate | 1-7-2020 15:30:00 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | |||
| Arguments | C:\Windows\iperfCollect\iperfCollect.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Start only if the following network connection is available | Any connection | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 1 hour | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | StopExisting |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |