| DACH-PR-WIN-C-CrowdStrike ZTA Settings | |
| Data collected on: 2-9-2025 11:16:15 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\flach.6-adm |
| Created | 12-5-2023 14:27:00 |
| Modified | 20-9-2023 09:32:32 |
| User Revisions | 0 (AD), 0 (SYSVOL) |
| Computer Revisions | 32 (AD), 32 (SYSVOL) |
| Unique ID | {7b87289c-b324-46db-931b-b36a1688dd06} |
| GPO Status | User settings disabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | No | Enabled | emea.tpg.ads/BA/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/CH/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/DE/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/GE/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/HR/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/MK/Systems/Clients |
| Name |
|---|
| EMEA\BA-L-SEC-CrowdStrike ZTA Settings |
| EMEA\CH-L-SEC-CrowdStrike ZTA Settings |
| EMEA\DE-L-SEC-CrowdStrike ZTA Settings |
| EMEA\Domain Computers |
| EMEA\GE-L-SEC-CrowdStrike ZTA Settings |
| EMEA\HR-L-SEC-CrowdStrike ZTA Settings |
| EMEA\MK-L-SEC-CrowdStrike ZTA Settings |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\BA-L-SEC-CrowdStrike ZTA Settings | Read (from Security Filtering) | No |
| EMEA\CH-L-SEC-CrowdStrike ZTA Settings | Read (from Security Filtering) | No |
| EMEA\DE-L-SEC-CrowdStrike ZTA Settings | Read (from Security Filtering) | No |
| EMEA\DE-L-SEC-Delegation Modify Group Policy Settings Access | Edit settings, delete, modify security | No |
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\Domain Computers | Read (from Security Filtering) | No |
| EMEA\GE-L-SEC-CrowdStrike ZTA Settings | Read (from Security Filtering) | No |
| EMEA\HR-L-SEC-CrowdStrike ZTA Settings | Read (from Security Filtering) | No |
| EMEA\MK-L-SEC-CrowdStrike ZTA Settings | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Policy | Setting | Comment | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Turn On Virtualization Based Security | Enabled | |||||||||||||
| ||||||||||||||
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\SystemGuard |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| #Enable SMM protection |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | System\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| #Enable Windows Defender Credential Guard |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | System\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity |
| Value name | WasEnabledBy |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| #Enable Windows Defender Credential Guard |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\DeviceGuard |
| Value name | Locked |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| #Enable virtualization-based protection of code integrity + strict |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| #Enable virtualization-based protection of code integrity + strict |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity |
| Value name | Locked |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| #Enable virtualization-based protection of code integrity + strict |