| DEDOR-PO-WIN-C-ThinClient Configuration | |
| Data collected on: 2-9-2025 09:12:41 | |
| Domain | emea.tpg.ads |
| Owner | S-1-5-21-513466819-3096973226-347852806-242371 |
| Created | 17-4-2018 12:00:52 |
| Modified | 2-8-2023 10:00:26 |
| User Revisions | 0 (AD), 0 (SYSVOL) |
| Computer Revisions | 410 (AD), 410 (SYSVOL) |
| Unique ID | {b02285e6-4ceb-4511-a56e-ed2b445a731d} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| DOR | No | Enabled | emea.tpg.ads/DE/Systems/Clients/DOR |
| Name |
|---|
| EMEA\DEDOR-L-SEC-ThinClient Configuration |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\DEDOR-L-SEC-ThinClient Configuration | Read (from Security Filtering) | No |
| EMEA\DE-L-SEC-Delegation Modify Group Policy Settings Access | Edit settings, delete, modify security | No |
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\Domain Computers | Read | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| S-1-5-21-513466819-3096973226-347852806-242371 | Edit settings, delete, modify security | No |
| Policy | Setting |
|---|---|
| Minimum password length | 12 characters |
| Password must meet complexity requirements | Enabled |
| Policy | Setting |
|---|---|
| Interactive logon: Do not require CTRL+ALT+DEL | Enabled |
| Interactive logon: Message text for users attempting to log on | |
| Interactive logon: Message title for users attempting to log on | "" |
| Policy | Setting |
|---|---|
| User Account Control: Admin Approval Mode for the Built-in Administrator account | Disabled |
| User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode | Elevate without prompting |
| Policy | Setting |
|---|---|
| Accounts: Block Microsoft accounts | Users can't add or log on with Microsoft accounts |
| Owner |
| Type | Name | Permission | Apply To |
|---|---|---|---|
| Allow | APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES | Read and Execute | This folder, subfolders and files |
| Allow | NT AUTHORITY\Authenticated Users | Modify | This folder, subfolders and files |
| Allow | CREATOR OWNER | Full Control | Subfolders and files only |
| Allow | NT AUTHORITY\SYSTEM | Full Control | This folder, subfolders and files |
| Allow | BUILTIN\Administrators | Full Control | This folder, subfolders and files |
| Allow | BUILTIN\Users | Read and Execute | This folder, subfolders and files |
| Allow inheritable permissions from the parent to propagate to this object and all child objects | Disabled |
| Action | Replace |
| Source file(s) | \\emea.tpg.ads\SYSVOL\emea.tpg.ads\Policies\{B02285E6-4CEB-4511-A56E-ED2B445A731D}\Machine\ThinClients.bgi |
| Destination file | C:\Program Files\BGinfo\ThinClients.bgi |
| Suppress errors on individual file actions | Enabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | Yes |
| Action | Replace |
| Source file(s) | \\emea.tpg.ads\SYSVOL\emea.tpg.ads\Policies\{B02285E6-4CEB-4511-A56E-ED2B445A731D}\Machine\Bginfo64.exe |
| Destination file | C:\Program Files\BGinfo\Bginfo64.exe |
| Suppress errors on individual file actions | Enabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | Yes |
| Action | Replace |
| Source file(s) | \\emea.tpg.ads\SYSVOL\emea.tpg.ads\Policies\{B02285E6-4CEB-4511-A56E-ED2B445A731D}\Machine\Bginfo64 Autostart.lnk |
| Destination file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\Bginfo64 Autostart.lnk |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | Yes |
| Action | Replace |
| Source file(s) | \\emea.tpg.ads\SYSVOL\emea.tpg.ads\Policies\{B02285E6-4CEB-4511-A56E-ED2B445A731D}\Machine\ThinClient neu starten!.lnk |
| Destination file | C:\Users\Public\Desktop\ThinClient neu starten!.lnk |
| Suppress errors on individual file actions | Enabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | Yes |
| Action | Replace |
| Path | C:\GCTI\ReportingStore |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Delete this folder (if emptied) | Disabled |
| Recursively delete all subfolders (if emptied) | Disabled |
| Delete all files in the folder(s) | Disabled |
| Allow deletion of read-only files/folders | Disabled |
| Ignore errors for files/folders that cannot be deleted | Disabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | Yes |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | Software\Policies\Microsoft\Windows\WindowsUpdate\AU |
| Value name | NoAutoUpdate |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | Yes |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ |
| Value name | AutoAdminLogon |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | Yes |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ |
| Value name | DefaultPassword |
| Value type | REG_SZ |
| Value data |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | Yes |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ |
| Value name | DefaultUserName |
| Value type | REG_SZ |
| Value data | .\User |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | Yes |
| Action | Update |
| User name | User |
| Full name | User |
| Description | ThinClient User |
| User cannot change password | True |
| Password never expires | True |
| Account is disabled | False |
| Account expires | Never |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Make this the active Power Plan: | Enabled |
| Name | High performance |
| When computer is: | Plugged in | Running on batteries |
|---|---|---|
| Require a password on wakeup: | No | No |
| Turn off hard disk after: | Never | Never |
| Sleep after: | Never | Never |
| Allow hybrid sleep: | Off | Off |
| Hibernate after: | Never | Never |
| Lid close action: | Sleep | Sleep |
| Power button action: | Shutdown | Shutdown |
| Start menu power button: | Do nothing | Do nothing |
| Link State Power Management: | Off | Off |
| Minimum processor state: | After 100 minutes | After 5 minutes |
| Maximum processor state: | After 100 minutes | After 100 minutes |
| Turn off display after: | Never | Never |
| Adaptive display: | Off | Off |
| Critical battery action: | Hibernate | Hibernate |
| Low battery level: | After 10 minutes | After 10 minutes |
| Critical battery level: | After 5 minutes | After 5 minutes |
| Low battery notification: | Off | Off |
| Low battery action: | Do nothing | Do nothing |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |