| BNL-PO-WIN-ADM-U-User Laptop Restrictions and Hardening Unrestricted | |
| Data collected on: 2-9-2025 11:10:24 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\langras.5-adm |
| Created | 22-3-2023 14:35:44 |
| Modified | 18-6-2025 11:22:06 |
| User Revisions | 21 (AD), 21 (SYSVOL) |
| Computer Revisions | 6 (AD), 6 (SYSVOL) |
| Unique ID | {9be88cda-560f-453e-a6e9-8921829045f2} |
| GPO Status | Computer settings disabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| BE | No | Enabled | emea.tpg.ads/BE |
| NL | No | Enabled | emea.tpg.ads/NL |
| SR | No | Enabled | emea.tpg.ads/SR |
| Name |
|---|
| EMEA\BE-L-SEC-Users Laptop Restrictions and Harderning Unrestricted |
| EMEA\NL-L-SEC-Users Laptop Restrictions and Harderning Unrestricted |
| EMEA\SR-L-SEC-Users Laptop Restrictions and Harderning Unrestricted |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\BE-L-SEC-Users Laptop Restrictions and Harderning Unrestricted | Read (from Security Filtering) | No |
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\langras.5-adm | Edit settings, delete, modify security | No |
| EMEA\NL-L-SEC-Delegation Modify Group Policy Settings Access | Edit settings, delete, modify security | No |
| EMEA\NL-L-SEC-Users Laptop Restrictions and Harderning Unrestricted | Read (from Security Filtering) | No |
| EMEA\SR-L-SEC-Users Laptop Restrictions and Harderning Unrestricted | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Policy | Setting | Comment | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Settings Page Visibility | Enabled | ||||||||||||
| |||||||||||||
| Policy | Setting | Comment | |||||||||||
| Show only specified Control Panel items | Enabled | ||||||||||||
| |||||||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Prevent access to registry editing tools | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Prevent access to the command prompt | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Restrict users to the explicitly permitted list of snap-ins | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Certificates | Enabled |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | ShowCopilotButton |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | ShowTaskViewButton |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | TaskbarDa |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Search |
| Value name | SearchboxTaskbarMode |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Quick Actions\Control Center\Unpinned |
| Value name | Microsoft.QuickAction.ScreenClipping |
| Value type | REG_BINARY |
| Value data |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |