| GCRUH-PO-SEC-C-Citzen Account-Agent Policy | |
| Data collected on: 2-9-2025 13:09:36 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\atyya.6-adm |
| Created | 24-6-2025 13:12:14 |
| Modified | 25-8-2025 17:57:50 |
| User Revisions | 115 (AD), 115 (SYSVOL) |
| Computer Revisions | 9 (AD), 9 (SYSVOL) |
| Unique ID | {815cef51-342c-4df5-94b7-6d9ca6d36698} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Agents | Yes | Enabled | emea.tpg.ads/Special-Services/GC/Agents |
| Name |
|---|
| EMEA\GC-G-ORG-DMM-Citzen Account Agents |
| EMEA\GC-G-ORG-JED-Citzen Account Agent |
| EMEA\GC-G-ORG-RUH-Citzen Account Agents |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\atyya.6-adm | Edit settings, delete, modify security | No |
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\GC-G-ORG-DMM-Citzen Account Agents | Read (from Security Filtering) | No |
| EMEA\GC-G-ORG-JED-Citzen Account Agent | Read (from Security Filtering) | No |
| EMEA\GC-G-ORG-RUH-Citzen Account Agents | Read (from Security Filtering) | No |
| EMEA\GC-G-ORG-ServerAdmin | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Enforcement | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Designated File Types | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Trusted Publishers | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| Policy | Setting |
|---|---|
| Default Security Level | Unrestricted |
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% | ||||||
| ||||||
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% | ||||||
|
| Policy | Setting | Comment |
|---|---|---|
| Prevent the usage of OneDrive for file storage | Enabled | Disable Windows APPs. |
| Prevent the usage of OneDrive for file storage on Windows 8.1 | Enabled | Disable Windows APPs. |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Windows Calendar | Enabled | Disable Windows APPs. |
| Policy | Setting | Comment |
|---|---|---|
| Enables or disables Windows Game Recording and Broadcasting | Disabled | Disable Windows APPs. |
| Policy | Setting | Comment |
|---|---|---|
| Prevent users from modifying settings | Enabled | Disable Windows APPs. |
| Enforcement | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Designated File Types | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Trusted Publishers | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| Policy | Setting |
|---|---|
| Default Security Level | Unrestricted |
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% | ||||||
| ||||||
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% | ||||||
| ||||||
| %ProgramFiles%\WindowsApps\microsoft.windowscommunicationsapps_*\App\HxCalendarApp.exe | ||||||
| ||||||
| %programfiles%\WindowsApps\Microsoft.WindowsStore* | ||||||
| ||||||
| %windir%\system32\mspaint.exe | ||||||
| ||||||
| %windir%\system32\osk.exe | ||||||
| ||||||
| %WINDIR%\SystemApps\Microsoft.MicrosoftEdge* | ||||||
| ||||||
| C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe | ||||||
| ||||||
| C:\Program Files\Windows NT\Accessories\Wordpad.exe | ||||||
| ||||||
| C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2407.22431.0_x64__8wekyb3d8bbwe | ||||||
| ||||||
| C:\Program Files\WindowsApps\Microsoft.MicrosoftSticky* | ||||||
| ||||||
| C:\Program Files\WindowsApps\Microsoft.MicrosoftSticky* | ||||||
| ||||||
| C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes* | ||||||
| ||||||
| C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes* | ||||||
| ||||||
| C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes* | ||||||
| ||||||
| C:\Program Files\WindowsApps\Microsoft.WindowsCalc* | ||||||
| ||||||
| C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk | ||||||
| ||||||
| C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sticky Notes (new).lnk | ||||||
| ||||||
| C:\Windows\regedit.exe | ||||||
| ||||||
| C:\windows\system32\charmap.exe | ||||||
| ||||||
| C:\Windows\System32\cmd.exe | ||||||
| ||||||
| C:\Windows\System32\mspaint.exe | ||||||
| ||||||
| C:\Windows\System32\notepad.exe | ||||||
| ||||||
| C:\windows\system32\psr.exe | ||||||
| ||||||
| C:\Windows\System32\regedt32.exe | ||||||
| ||||||
| C:\windows\system32\WFS.exe | ||||||
|
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Prohibit access to Control Panel and PC settings | Enabled | Disable Panel Control | ||||
| Show only specified Control Panel items | Enabled | Disable Panel Control | ||||
| ||||||
| Policy | Setting | Comment |
|---|---|---|
| Hide Add New Programs page | Enabled | Disable Control Panel Policy |
| Hide Add/Remove Windows Components page | Enabled | Disable Control Panel Policy |
| Hide Change or Remove Programs page | Enabled | Disable Control Panel Policy |
| Hide the "Add a program from CD-ROM or floppy disk" option | Enabled | Disable Control Panel Policy |
| Hide the "Add programs from Microsoft" option | Enabled | Disable Control Panel Policy |
| Hide the "Add programs from your network" option | Enabled | Disable Control Panel Policy |
| Hide the Set Program Access and Defaults page | Enabled | Disable Control Panel Policy |
| Remove Add or Remove Programs | Enabled | Disable Control Panel Policy |
| Remove Support Information | Enabled | Disable Control Panel Policy |
| Policy | Setting | Comment |
|---|---|---|
| Hide Settings tab | Enabled | Disable Control Panel Policy |
| Policy | Setting | Comment |
|---|---|---|
| Prevent changing desktop background | Enabled | Disable Control Panel Policy |
| Policy | Setting | Comment |
|---|---|---|
| Prevent addition of printers | Enabled | Disable Control Panel Policy |
| Prevent deletion of printers | Enabled | Disable Control Panel Policy |
| Policy | Setting | Comment |
|---|---|---|
| Hide "Get Programs" page | Enabled | Disable Control Panel Policy |
| Hide "Programs and Features" page | Enabled | Disable Control Panel Policy |
| Hide the Programs Control Panel | Enabled | Disable Control Panel Policy |
| Policy | Setting | Comment |
|---|---|---|
| Hide the geographic location option | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Don't save settings at exit | Enabled | Disable Control Panel Policy |
| Hide and disable all items on the desktop | Not Configured | Disable Control Panel |
| Hide Network Locations icon on desktop | Enabled | Disable Control Panel Policy |
| Prevent adding, dragging, dropping and closing the Taskbar's toolbars | Enabled | Disable Control Panel Policy |
| Prohibit User from manually redirecting Profile Folders | Enabled | |
| Remove Computer icon on the desktop | Enabled | Disable Control Panel Policy |
| Remove My Documents icon on the desktop | Enabled | Disable Control Panel Policy |
| Remove Properties from the Computer icon context menu | Enabled | Disable Control Panel Policy |
| Remove Properties from the Documents icon context menu | Enabled | Disable Control Panel Policy |
| Remove Properties from the Recycle Bin context menu | Enabled | Disable Control Panel Policy |
| Remove Recycle Bin icon from desktop | Enabled | |
| Remove the Desktop Cleanup Wizard | Enabled | Disable Control Panel Policy |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Enable Active Desktop | Enabled | |||
| ||||
| Policy | Setting | Comment | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Allow Dinosaur Easter Egg Game | Disabled | Google Chrome Policy | |||||||||||||
| Allow download restrictions | Enabled | ||||||||||||||
| |||||||||||||||
| Policy | Setting | Comment | |||||||||||||
| Allow invocation of file selection dialogs | Enabled | ||||||||||||||
| Allow queries to a Google time service | Disabled | ||||||||||||||
| Allow remote debugging | Disabled | ||||||||||||||
| Allow user feedback | Disabled | ||||||||||||||
| Always Open PDF files externally | Disabled | ||||||||||||||
| Block access to a list of URLs | Enabled | ||||||||||||||
| |||||||||||||||
| Policy | Setting | Comment | |||||||||||||
| Continue running background apps when Google Chrome is closed | Disabled | ||||||||||||||
| Control SafeSites adult content filtering. | Enabled | ||||||||||||||
| |||||||||||||||
| Policy | Setting | Comment | |||||||||||||
| Control where Developer Tools can be used | Enabled | ||||||||||||||
| |||||||||||||||
| Policy | Setting | Comment | |||||||||||||
| Define domains allowed to access Google Workspace | Enabled | ||||||||||||||
| |||||||||||||||
| Policy | Setting | Comment | |||||||||||||
| Disable saving browser history | Enabled | ||||||||||||||
| Disable synchronization of data with Google | Enabled | ||||||||||||||
| Disable taking screenshots | Enabled | ||||||||||||||
| Enable AutoFill for addresses | Disabled | ||||||||||||||
| Enable AutoFill for credit cards | Disabled | ||||||||||||||
| Enable Bookmark Bar | Disabled | ||||||||||||||
| Enable guest mode in browser | Disabled | ||||||||||||||
| Enable or disable bookmark editing | Disabled | ||||||||||||||
| Enable or disable spell checking web service | Disabled | ||||||||||||||
| Enable reporting of usage and crash-related data | Disabled | ||||||||||||||
| Enable Safe Browsing for trusted sources | Disabled | ||||||||||||||
| Enable scrolling to text specified in URL fragments | Disabled | ||||||||||||||
| Enable search suggestions | Disabled | ||||||||||||||
| Enable Translate | Enabled | ||||||||||||||
| Enforce browser guest mode | Disabled | ||||||||||||||
| Hide the web store from the New Tab Page and app launcher | Enabled | ||||||||||||||
| Import autofill form data from default browser on first run | Disabled | ||||||||||||||
| Import bookmarks from default browser on first run | Disabled | ||||||||||||||
| Import browsing history from default browser on first run | Disabled | ||||||||||||||
| Import saved passwords from default browser on first run | Disabled | ||||||||||||||
| Import search engines from default browser on first run | Disabled | ||||||||||||||
| Incognito mode availability | Enabled | Google Chrome Policy | |||||||||||||
| |||||||||||||||
| Policy | Setting | Comment | |||||||||||||
| Set Google Chrome as Default Browser | Enabled | ||||||||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Allow download restrictions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Always Open PDF files externally | Disabled | |||
| Enable AutoFill for addresses | Disabled | |||
| Enable AutoFill for credit cards | Disabled | |||
| Enable Bookmark Bar | Disabled | |||
| Enable or disable spell checking web service | Enabled | |||
| Enable search suggestions | Disabled | |||
| Enable Translate | Enabled | |||
| Import autofill form data from default browser on first run | Disabled | |||
| Import bookmarks from default browser on first run | Disabled | |||
| Import browsing history from default browser on first run | Disabled | |||
| Import saved passwords from default browser on first run | Disabled | |||
| Import search engines from default browser on first run | Disabled | |||
| Policy | Setting | Comment |
|---|---|---|
| Enable saving passwords to the password manager | Disabled |
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Blocks external extensions from being installed | Enabled | |||||
| Configure extension installation blocklist | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Configure the list of force-installed apps and extensions | Enabled | |||||
| ||||||
| Policy | Setting | Comment |
|---|---|---|
| Enable Google Cast | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Enable printing | Disabled |
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Block access to a list of URLs | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment |
|---|---|---|
| Disable proceeding from the Safe Browsing warning page | Enabled |
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Keyboard layout | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Keyboard Layout switching | Enabled | |||||
| Policy | Setting | Comment |
|---|---|---|
| Prevent Office 365 E-mail accounts from being configured within a simplified Interface | Enabled | |
| Prevent Outlook from interacting with the account settings detection service | Enabled | |
| Prevent saving credentials for Basic Authentication policy | Enabled | |
| Specify Offline Address Book path | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent adding non-default Exchange accounts | Enabled |
| Policy | Setting | Comment | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Prevent users from adding e-mail account types | Enabled | |||||||||||
| ||||||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Prevent Microsoft Teams from starting automatically after installation | Enabled | |||
| Restrict sign in to Teams to accounts in specific tenants | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Add Search Internet link to Start Menu | Enabled | Disable Windows APPs | ||
| Add the Run command to the Start Menu | Enabled | Disable Windows APPs | ||
| Clear history of recently opened documents on exit | Enabled | Disable Windows APPs | ||
| Clear the recent programs list for new users | Enabled | Disable Windows APPs | ||
| Disable context menus in the Start Menu | Enabled | Disable Windows APPs. | ||
| Do not keep history of recently opened documents | Enabled | Disable Windows APPs. | ||
| Remove "Recently added" list from Start Menu | Enabled | Disable Windows APPs. | ||
| Remove All Programs list from the Start menu | Enabled | Disable Windows APPs. | ||
| ||||
| Policy | Setting | Comment | ||
| Remove frequent programs list from the Start Menu | Enabled | Disable Windows APPs. | ||
| Show or hide "Most used" list from Start menu | Enabled | Disable Windows APPs. | ||
| ||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Don't run specified Windows applications | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Prevent access to registry editing tools | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Prevent access to the command prompt | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Remove Task Manager | Enabled | Disable Windows APPs |
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Configure Group Policy slow link detection | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Turn off Autoplay | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Turn off all Windows spotlight features | Enabled | Disable Windows APPs |
| Turn off Windows Spotlight on Action Center | Enabled | Disable Windows APPs |
| Policy | Setting | Comment |
|---|---|---|
| Disable help tips | Enabled | Disable Windows APPs |
| Turn off tracking of app usage | Enabled | Disable Windows APPs |
| Policy | Setting | Comment | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Disable Known Folders | Enabled | Disable Windows APPs | ||||||||||||
| ||||||||||||||
| Policy | Setting | Comment | ||||||||||||
| Display confirmation dialog when deleting files | Enabled | Disable Windows APPs | ||||||||||||
| Display the menu bar in File Explorer | Disabled | Disable Windows APPs | ||||||||||||
| Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon | Enabled | Disable Windows APPs | ||||||||||||
| Hides the Manage item on the File Explorer context menu | Enabled | Disable Windows APPs | ||||||||||||
| No Computers Near Me in Network Locations | Enabled | Disable Windows APPs | ||||||||||||
| No Entire Network in Network Locations | Enabled | |||||||||||||
| Prevent access to drives from My Computer | Enabled | |||||||||||||
| ||||||||||||||
| Policy | Setting | Comment | ||||||||||||
| Remove "Map Network Drive" and "Disconnect Network Drive" | Enabled | Disable Windows APPs | ||||||||||||
| Remove CD Burning features | Enabled | Disable Windows APPs | ||||||||||||
| Remove DFS tab | Enabled | Disable Windows APPs | ||||||||||||
| Remove File Explorer's default context menu | Enabled | Disable Windows APPs | ||||||||||||
| Remove File menu from File Explorer | Enabled | Disable Windows APPs | ||||||||||||
| Turn off Windows Key hotkeys | Enabled | |||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Allow Developer Tools | Disabled | |
| Allow Saving History | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Restrict the user from entering author mode | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Access 2013 backup only | Disabled | Disable Windows APPs |
| Access 2016 backup only | Disabled | Disable Windows APPs |
| Calculator | Disabled | Disable Windows APPs |
| Common 2013 backup only | Disabled | Disable Windows APPs |
| Common 2016 backup only | Disabled | Disable Windows APPs |
| Excel 2013 backup only | Disabled | Disable Windows APPs |
| Excel 2016 backup only | Disabled | Disable Windows APPs |
| InfoPath 2013 backup only | Disabled | Disable Windows APPs |
| Internet Explorer 10 | Disabled | Disable Windows APPs |
| Internet Explorer 11 | Disabled | Disable Windows APPs |
| Internet Explorer 8 | Disabled | Disable Windows APPs |
| Internet Explorer 9 | Disabled | Disable Windows APPs |
| Internet Explorer Common Settings | Disabled | Disable Windows APPs |
| Lync 2013 backup only | Disabled | Disable Windows APPs |
| Lync 2016 backup only | Disabled | Disable Windows APPs |
| Microsoft Access 2010 | Disabled | Disable Windows APPs |
| Microsoft Access 2013 | Disabled | Disable Windows APPs |
| Microsoft Access 2016 | Disabled | Disable Windows APPs |
| Microsoft Excel 2010 | Disabled | Disable Windows APPs |
| Microsoft Excel 2013 | Disabled | |
| Microsoft Excel 2016 | Disabled | Disable Windows APPs |
| Microsoft InfoPath 2010 | Disabled | Disable Windows APPs |
| Microsoft InfoPath 2013 | Disabled | |
| Microsoft Lync 2010 | Disabled | Disable Windows APPs |
| Microsoft Lync 2013 | Disabled | Disable Windows APPs |
| Microsoft Lync 2016 | Disabled | Disable Windows APPs |
| Microsoft Office 2010 Common Settings | Disabled | Disable Windows APPs |
| Microsoft Office 2013 Common Settings | Disabled | Disable Windows APPs |
| Microsoft Office 2013 Upload Center | Disabled | Disable Windows APPs |
| Microsoft Office 2016 Common Settings | Disabled | Disable Windows APPs |
| Microsoft Office 2016 Upload Center | Disabled | Disable Windows APPs |
| Microsoft Office 365 Access 2013 | Disabled | Disable Windows APPs |
| Microsoft Office 365 Access 2016 | Disabled | Disable Windows APPs |
| Microsoft Office 365 Common 2013 | Disabled | Disable Windows APPs |
| Microsoft Office 365 Common 2016 | Disabled | Disable Windows APPs |
| Microsoft Office 365 Excel 2013 | Disabled | Disable Windows APPs |
| Microsoft Office 365 Excel 2016 | Disabled | Disable Windows APPs |
| Microsoft Office 365 InfoPath 2013 | Disabled | Disable Windows APPs |
| Microsoft Office 365 Lync 2013 | Disabled | Disable Windows APPs |
| Microsoft Office 365 Lync 2016 | Disabled | Disable Windows APPs |
| Microsoft Office 365 OneNote 2013 | Disabled | Disable Windows APPs |
| Microsoft Office 365 OneNote 2016 | Disabled | Disable Windows APPs |
| Microsoft Office 365 Outlook 2013 | Disabled | Disable Windows APPs |
| Microsoft Office 365 Outlook 2016 | Not Configured | Disable Windows APPs |
| Microsoft OneDrive for Business 2013 | Disabled | |
| Microsoft OneDrive for Business 2016 | Disabled | |
| Microsoft OneNote 2010 | Disabled | |
| Microsoft OneNote 2013 | Disabled | |
| Microsoft OneNote 2016 | Disabled | |
| Microsoft Outlook 2010 | Disabled | |
| Microsoft Outlook 2013 | Disabled | |
| Microsoft Outlook 2016 | Disabled | |
| Microsoft PowerPoint 2010 | Disabled | |
| Microsoft PowerPoint 2013 | Disabled | |
| Microsoft PowerPoint 2016 | Disabled | |
| Microsoft Project 2010 | Disabled | |
| Microsoft Project 2013 | Disabled | |
| Microsoft Project 2016 | Disabled | |
| Microsoft Publisher 2010 | Disabled | |
| Microsoft Publisher 2013 | Disabled | |
| Microsoft Publisher 2016 | Disabled | |
| Microsoft SharePoint Designer 2010 | Disabled | |
| Microsoft SharePoint Designer 2013 | Disabled | |
| Microsoft SharePoint Workspace 2010 | Disabled | |
| Microsoft Visio 2010 | Disabled | |
| Microsoft Visio 2016 | Disabled | |
| Microsoft Word 2010 | Disabled | |
| Microsoft Word 2013 | Disabled | |
| Microsoft Word 2016 | Disabled | |
| OneNote 2013 backup only | Disabled | |
| OneNote 2016 backup only | Disabled | |
| Outlook 2016 backup only | Disabled | |
| PowerPoint 2016 backup only | Disabled | |
| Project 2013 backup only | Disabled | |
| Project 2016 backup only | Disabled | |
| Publisher 2013 backup only | Disabled | |
| Publisher 2016 backup only | Disabled | |
| SharePoint Designer 2013 backup only | Disabled | |
| Visio 2013 backup only | Disabled | |
| Visio 2016 backup only | Disabled | |
| Word 2013 backup only | Disabled | |
| Word 2016 backup only | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Sound Recorder to run | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off the Store application | Enabled | Disabale Windows Store |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Inkball to run | Enabled | Disable Sniping tool & Win+Shift+S |
| Do not allow printing to Journal Note Writer | Enabled | Disable Sniping tool & Win+Shift+S |
| Do not allow Snipping Tool to run | Enabled | Disable Sniping tool & Win+Shift+S |
| Do not allow Windows Journal to be run | Enabled | Disable Sniping tool & Win+Shift+S |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Windows Calendar | Enabled | Disable Windows APPs. |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Messenger to be run | Enabled | |
| Do not automatically start Windows Messenger initially | Enabled |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\Keyboard Layout |
| Value name | Scancode Map |
| Value type | REG_BINARY |
| Value data | 00,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,00 00,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,00 00,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,0000,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,00 00,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,00 00,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,00 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Disable Sniping tool & Win+Shift+S |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Keyboard |
| Value name | PrintScreenKeyForSnippingEnabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Disable Sniping tool & Win+Shift+S |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Value name | NoWinKeys |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Disable Sniping tool & Win+Shift+S |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\PolicyManager\default\Experience\AllowScreenCapture |
| Value name | value |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Disable Sniping tool & Win+Shift+S |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Keyboard Layout\Toggle |
| Value name | (Default) |
| Value type | REG_SZ |
| Value data | 1 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Keyboard Layout\Preload |
| Value name | 1 |
| Value type | REG_SZ |
| Value data | 00000409 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Keyboard Layout\Preload |
| Value name | 2 |
| Value type | REG_SZ |
| Value data | 00000401 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Target type | File system object |
| Shortcut path | %DesktopDir%\Zscaler |
| Target path | C:\Program Files\Zscaler\ZSATray\ZSATray.exe |
| Start in | C:\Program Files\Zscaler\ZSATray\ZSATray.exe |
| Icon path | C:\Program Files\Zscaler\ZSATray\ZSATray.exe |
| Icon index | 0 |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Target type | File system object |
| Shortcut path | %DesktopDir%\Google Chrome |
| Target path | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Start in | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Icon path | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Icon index | 0 |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Target type | File system object |
| Shortcut path | %DesktopDir%\InteractionWorkspace |
| Target path | C:\Workspace Desktop Edition\InteractionWorkspace.exe |
| Start in | C:\Workspace Desktop Edition\InteractionWorkspace.exe |
| Icon path | C:\Workspace Desktop Edition\InteractionWorkspace.exe |
| Icon index | 0 |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Target type | File system object |
| Shortcut path | %DesktopDir%\Forti VPN |
| Target path | C:\Program Files\Fortinet\FortiClient\FortiClient.exe |
| Start in | C:\Program Files\Fortinet\FortiClient\FortiClient.exe |
| Icon path | %SystemRoot%\Installer\{32123CA3-C24D-4A99-9347-70049B8E4C23}\Icon_FCTLogo |
| Icon index | 0 |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |