Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
ALTIR-PR-WIN-U-SumUP Settings
Data collected on: 2-9-2025 10:37:07
General
Details
Domainemea.tpg.ads
OwnerEMEA\pengili.6-adm
Created28-7-2022 14:29:46
Modified3-4-2025 16:31:32
User Revisions168 (AD), 168 (SYSVOL)
Computer Revisions65 (AD), 65 (SYSVOL)
Unique ID{cddac47f-689a-40a3-966b-886fcc9ca795}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
TIRNoEnabledemea.tpg.ads/AL/Systems/Clients/TIR

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
EMEA\ALTIR-G-ORG-Computers SumUP
EMEA\ALTIR-L-SEC-User Configuration SumUP
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\AL-G-ORG-OU AdminsEdit settings, delete, modify securityNo
EMEA\ALTIR-G-ORG-Computers SumUPRead (from Security Filtering)No
EMEA\ALTIR-L-SEC-User Configuration SumUPRead (from Security Filtering)No
EMEA\Domain AdminsEdit settings, delete, modify securityNo
EMEA\Domain ComputersReadNo
EMEA\Laboti.6-admEdit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersReadNo
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Public Key Policies/Certificate Services Client - Auto-Enrollment Settings
PolicySetting
Automatic certificate managementEnabled
OptionSetting
Enroll new certificates, renew expired certificates, process pending certificate requests and remove revoked certificatesEnabled
Update and manage certificates that use certificate templates from Active DirectoryEnabled
Preferences
Windows Settings
Registry
Collection: SumUp FortiClient/Registry Wizard Values/HKEY_LOCAL_MACHINE/SOFTWARE/Fortinet/FortiClient/Sslvpn/Tunnels/TLP
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: TLP
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: (Default)
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value name(Default)
Value typeREG_SZ
Value data
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: use_external_browser
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value nameuse_external_browser
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: sso_enabled
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value namesso_enabled
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: single_user_mode
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value namesingle_user_mode
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: ServerCert
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value nameServerCert
Value typeREG_SZ
Value data1
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: Server
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value nameServer
Value typeREG_SZ
Value datasslvpn.sam-app.ro:443
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: promptusername
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value namepromptusername
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: promptcertificate
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value namepromptcertificate
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: machine
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value namemachine
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: Description
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value nameDescription
Value typeREG_SZ
Value data
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: DATA2
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value nameDATA2
Value typeREG_SZ
Value dataEncLM 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
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: DATA1
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value nameDATA1
Value typeREG_SZ
Value data
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: CertFilter
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value nameCertFilter
Value typeREG_SZ
Value data{"version":1,"CN":{"type":1,"pattern":"*"},"CA":{"type":1,"pattern":"*"},"OIDS":[{"type":1,"pattern":"*"}]}
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: azure_auto_login
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\TLP
Value nameazure_auto_login
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Control Panel Settings
Local Users and Groups
Group (Name: OpenVPN Administrators)
OpenVPN Administrators (Order: 1)
Local Group
ActionDelete
Properties
Group nameOpenVPN Administrators
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
User Configuration (Enabled)
Policies
Windows Settings
Scripts
Logon
For this GPO, Script order: Not configured
NameParameters
\\emea\al\Tirana\Clients\SumUP\Settings\Redirected\Desktop\OPVPN.bat
Security Settings
Software Restriction Policies
Enforcement
PolicySetting
Apply Software Restriction Policies to the followingAll software files except libraries (such as DLLs)
Apply Software Restriction Policies to the following usersAll users
When applying Software Restriction PoliciesIgnore certificate rules
Designated File Types
File ExtensionFile Type
ADEADE File
ADPADP File
BASBAS File
BATWindows Batch File
CHMCompiled HTML Help file
CMDWindows Command Script
COMMS-DOS Application
CPLControl panel item
CRTSecurity Certificate
EXEApplication
HLPHelp file
HTAHTML Application
INFSetup Information
INSINS File
ISPISP File
LNKShortcut
MDBMDB File
MDEMDE File
MSCMicrosoft Common Console Document
MSIWindows Installer Package
MSPWindows Installer Patch
MSTMST File
OCXActiveX control
PCDPCD File
PIFShortcut to MS-DOS Program
REGRegistration Entries
SCRScreen saver
SHSSHS File
URLInternet Shortcut
VBVisual Basic Source File
WSCWindows Script Component
Trusted Publishers
Trusted publisher managementAllow all administrators and users to manage user's own Trusted Publishers
Certificate verificationNone
Software Restriction Policies/Security Levels
PolicySetting
Default Security LevelUnrestricted
Software Restriction Policies/Additional Rules
Path Rules
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
Security LevelUnrestricted
Description
Date last modified8-8-2022 13:48:06
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
Security LevelUnrestricted
Description
Date last modified8-8-2022 13:48:06
Folder Redirection
Desktop
Setting: Advanced (Specify locations for various user groups)
GroupPath
EMEA\ALTIR-G-ORG-SumUP Agent\\emea\al\Tirana\Clients\SumUP\Settings\Redirected\Desktop
Options
Grant user exclusive rights to DesktopDisabled
Move the contents of Desktop to the new locationDisabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systemsDisabled
Policy Removal BehaviorRestore contents
Configuration ControlGroup Policy
Primary Computer EvaluationNot evaluated because primary computer policy is not enabled
Downloads
Setting: Advanced (Specify locations for various user groups)
GroupPath
EMEA\ALTIR-G-ORG-SumUP Agent\\emea\al\Tirana\Clients\SumUP\Settings\Redirected\Downloads\%USERNAME%\Downloads
EMEA\ALTIR-G-ORG-SumUP Supervisor\\emea\al\Tirana\Clients\SumUP\Settings\Redirected\Downloads\%USERNAME%\Downloads
EMEA\ALTIR-G-ORG-SumUP QA\\emea\al\Tirana\Clients\SumUP\Settings\Redirected\Downloads\%USERNAME%\Downloads
Options
Grant user exclusive rights to DownloadsDisabled
Move the contents of Downloads to the new locationDisabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systemsDisabled
Policy Removal BehaviorLeave contents
Configuration ControlGroup Policy
Primary Computer EvaluationNot evaluated because primary computer policy is not enabled
Favorites
Setting: Advanced (Specify locations for various user groups)
GroupPath
EMEA\ALTIR-G-ORG-SumUP\\emea\al\Tirana\Clients\SumUP\Settings\Redirected\Favorites
Options
Grant user exclusive rights to FavoritesDisabled
Move the contents of Favorites to the new locationDisabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systemsDisabled
Policy Removal BehaviorLeave contents
Configuration ControlGroup Policy
Primary Computer EvaluationNot evaluated because primary computer policy is not enabled
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Google/Google Chrome
PolicySettingComment
Block access to a list of URLsEnabled
Block access to a list of URLs
file:///C:/
PolicySettingComment
Browser sign in settingsEnabled
Browser sign in settingsDisable browser sign-in
PolicySettingComment
Define domains allowed to access Google WorkspaceEnabled
Define domains allowed to access Google Workspacesumup.com
PolicySettingComment
Disable saving browser historyEnabled
Enable AutoFill for addressesDisabled
Enable AutoFill for credit cardsDisabled
Import bookmarks from default browser on first runEnabled
Set download directoryEnabled
Set download directory\\emea.tpg.ads\AL\Tirana\Clients\SumUP\Settings\Redirected\Downloads\${user_name}\Downloads
Google/Google Chrome - Default Settings (users can override)/Deprecated policies
PolicySettingComment
Enable AutoFillDisabled
Google/Google Chrome - Default Settings (users can override)/Password manager
PolicySettingComment
Enable saving passwords to the password managerDisabled
Google/Google Chrome/Content settings
PolicySettingComment
Default cookies settingEnabled
Default cookies settingKeep cookies for the duration of the session
Google/Google Chrome/Deprecated policies
PolicySettingComment
Enable AutoFillDisabled
Google/Google Chrome/Extensions
PolicySettingComment
Configure extension installation allow listEnabled
Extension IDs to exempt from the blocklist
gppongmhjkpfnbhagpmjfkannfbllamg
aodjmnfhjibkcdimpodiifdjnnncaafh
bicpgcafpnanabffjhclgpeehoadhglp
PolicySettingComment
Configure extension installation blocklistEnabled
Extension IDs the user should be prevented from installing (or * for all)
*
PolicySettingComment
Configure the list of force-installed apps and extensionsEnabled
Extension/App IDs and update URLs to be silently installed
gppongmhjkpfnbhagpmjfkannfbllamg;https://clients2.google.com/service/update2/crx
aodjmnfhjibkcdimpodiifdjnnncaafh;https://clients2.google.com/service/update2/crx
bicpgcafpnanabffjhclgpeehoadhglp;https://clients2.google.com/service/update2/crx
PolicySettingComment
Extension management settingsEnabled
Extension management settings{ "*": { "installation_mode": "blocked"
Google/Google Chrome/Password manager
PolicySettingComment
Enable saving passwords to the password managerDisabled
Microsoft Edge
PolicySettingComment
Disable saving browser historyEnabled
Enable AutoFill for addressesDisabled
Enable AutoFill for payment instrumentsDisabled
Set download directoryEnabled
Set download directory\\emea.tpg.ads\AL\Tirana\Clients\SumUP\Settings\Redirected\Downloads\${user_name}\Downloads
Microsoft Edge - Default Settings (users can override)
PolicySettingComment
Enable AutoFill for addressesDisabled
Enable AutoFill for payment instrumentsDisabled
Microsoft Edge - Default Settings (users can override)/Password manager and protection
PolicySettingComment
Enable saving passwords to the password managerDisabled
Microsoft Edge/Content settings
PolicySettingComment
Configure cookiesEnabled
Configure cookiesKeep cookies for the duration of the session, except ones listed in "SaveCookiesOnExit"
Microsoft Edge/Password manager and protection
PolicySettingComment
Enable saving passwords to the password managerDisabled
Start Menu and Taskbar
PolicySettingComment
Remove pinned programs from the TaskbarEnabled
Preferences
Windows Settings
Registry
Collection: Proxy/HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Internet Settings
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Registry item: AutoConfigURL
General
ActionUpdate
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Windows\CurrentVersion\Internet Settings
Value nameAutoConfigURL
Value typeREG_SZ
Value datahttps://pac.zscloud.net/qCGdwkP92BTw/Authentication-Zscaler
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: ProxyEnable
General
ActionUpdate
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Windows\CurrentVersion\Internet Settings
Value nameProxyEnable
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: ProxyHttp1.1
General
ActionUpdate
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Windows\CurrentVersion\Internet Settings
Value nameProxyHttp1.1
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: ProxyServer
General
ActionUpdate
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Windows\CurrentVersion\Internet Settings
Value nameProxyServer
Value typeREG_SZ
Value dataaltirproxyrr.emea.tpg.ads:3128
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: ProxyOverride
General
ActionUpdate
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Windows\CurrentVersion\Internet Settings
Value nameProxyOverride
Value typeREG_SZ
Value data*10.118.*;*teleperformance.al*;*emea.tpg.ads*;*admin.sumup.com*
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo