Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
GCRUH-PO-SEC-C-Thamanyah Agent Policy
Data collected on: 2-9-2025 13:13:26
General
Details
Domainemea.tpg.ads
OwnerEMEA\atyya.6-adm
Created27-7-2025 12:07:14
Modified24-8-2025 10:13:18
User Revisions5 (AD), 5 (SYSVOL)
Computer Revisions1 (AD), 1 (SYSVOL)
Unique ID{4a31875c-863a-467a-b5b3-86b7c9e9fec0}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
AgentsYesEnabledemea.tpg.ads/Special-Services/GC/Agents

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
EMEA\GC-G-ORG-RUH-Thamanyah Agent
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\atyya.6-admEdit settings, delete, modify securityNo
EMEA\GC-G-ORG-RUH-Thamanyah AgentRead (from Security Filtering)No
EMEA\GC-G-ORG-ServerAdminEdit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersReadNo
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Software Restriction Policies
Enforcement
PolicySetting
Apply Software Restriction Policies to the followingAll software files except libraries (such as DLLs)
Apply Software Restriction Policies to the following usersAll users
When applying Software Restriction PoliciesIgnore certificate rules
Designated File Types
File ExtensionFile Type
ADEADE File
ADPADP File
BASBAS File
BATWindows Batch File
CHMCompiled HTML Help file
CMDWindows Command Script
COMMS-DOS Application
CPLControl panel item
CRTSecurity Certificate
EXEApplication
HLPHelp file
HTAHTML Application
INFSetup Information
INSINS File
ISPISP File
LNKShortcut
MDBMDB File
MDEMDE File
MSCMicrosoft Common Console Document
MSIWindows Installer Package
MSPWindows Installer Patch
MSTMST File
OCXActiveX control
PCDPCD File
PIFShortcut to MS-DOS Program
REGRegistration Entries
SCRScreen saver
SHSSHS File
URLInternet Shortcut
VBVisual Basic Source File
WSCWindows Script Component
Trusted Publishers
Trusted publisher managementAllow all administrators and users to manage user's own Trusted Publishers
Certificate verificationNone
Software Restriction Policies/Security Levels
PolicySetting
Default Security LevelUnrestricted
Software Restriction Policies/Additional Rules
Path Rules
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
Security LevelUnrestricted
Description
Date last modified11-5-2025 11:48:26
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
Security LevelUnrestricted
Description
Date last modified11-5-2025 11:48:26
User Configuration (Enabled)
Policies
Windows Settings
Scripts
Logon
For this GPO, Script order: Windows PowerShell scripts will run first
NameParameters
CleanUserFiles.ps1
Security Settings
Software Restriction Policies
Enforcement
PolicySetting
Apply Software Restriction Policies to the followingAll software files except libraries (such as DLLs)
Apply Software Restriction Policies to the following usersAll users
When applying Software Restriction PoliciesIgnore certificate rules
Designated File Types
File ExtensionFile Type
ADEADE File
ADPADP File
BASBAS File
BATWindows Batch File
CHMCompiled HTML Help file
CMDWindows Command Script
COMMS-DOS Application
CPLControl panel item
CRTSecurity Certificate
EXEApplication
HLPHelp file
HTAHTML Application
INFSetup Information
INSINS File
ISPISP File
LNKShortcut
MDBMDB File
MDEMDE File
MSCMicrosoft Common Console Document
MSIWindows Installer Package
MSPWindows Installer Patch
MSTMST File
OCXActiveX control
PCDPCD File
PIFShortcut to MS-DOS Program
REGRegistration Entries
SCRScreen saver
SHSSHS File
URLInternet Shortcut
VBVisual Basic Source File
WSCWindows Script Component
Trusted Publishers
Trusted publisher managementAllow all administrators and users to manage user's own Trusted Publishers
Certificate verificationNone
Software Restriction Policies/Security Levels
PolicySetting
Default Security LevelUnrestricted
Software Restriction Policies/Additional Rules
Path Rules
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
Security LevelUnrestricted
Description
Date last modified12-5-2025 12:45:45
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
Security LevelUnrestricted
Description
Date last modified12-5-2025 12:45:45
%ProgramFiles%\WindowsApps\microsoft.windowscommunicationsapps_*\App\HxCalendarApp.exe
Security LevelDisallowed
DescriptionDisallow Calendar
Date last modified15-5-2025 12:17:54
%programfiles%\WindowsApps\Microsoft.WindowsStore*
Security LevelDisallowed
DescriptionDisable WindowsStore
Date last modified15-5-2025 12:18:39
%userprofile%\AppData\Local\Microsoft\OneDrive
Security LevelDisallowed
DescriptionDisable OneDrive
Date last modified16-7-2025 13:10:03
%windir%\system32\mspaint.exe
Security LevelDisallowed
DescriptionDisable MSpaint
Date last modified15-5-2025 12:19:14
%windir%\system32\osk.exe
Security LevelDisallowed
DescriptionDisable OSK
Date last modified15-5-2025 12:19:45
%WINDIR%\SystemApps\Microsoft.MicrosoftEdge*
Security LevelDisallowed
DescriptionDisable Edge
Date last modified15-5-2025 12:20:20
C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe
Security LevelDisallowed
DescriptionMath Input Panel
Date last modified15-5-2025 09:32:18
C:\Program Files\Windows NT\Accessories\Wordpad.exe
Security LevelDisallowed
DescriptionDisable Wordpad
Date last modified15-5-2025 09:36:26
C:\Program Files\WindowsApps\Microsoft.BingNews*
Security LevelDisallowed
DescriptionDisable Bing app
Date last modified16-7-2025 13:40:13
C:\Program Files\WindowsApps\Microsoft.BingWeather*
Security LevelDisallowed
DescriptionDisable BingWeather
Date last modified16-7-2025 13:40:29
C:\Program Files\WindowsApps\Microsoft.GetHelp*
Security LevelDisallowed
DescriptionDisable Microsoft.GetHelp
Date last modified16-7-2025 13:11:40
C:\Program Files\WindowsApps\Microsoft.Getstarted*
Security LevelDisallowed
DescriptionDisable Getstarted
Date last modified16-7-2025 13:12:06
C:\Program Files\WindowsApps\Microsoft.Messaging*
Security LevelDisallowed
DescriptionDisable Microsoft Messaging
Date last modified16-7-2025 13:39:01
C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer*
Security LevelDisallowed
DescriptionDisable Microsoft3DViewer
Date last modified16-7-2025 13:39:50
C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub*
Security LevelDisallowed
DescriptionMicrosoftOfficeHub
Date last modified16-7-2025 13:41:06
C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection*
Security LevelDisallowed
DescriptionMicrosoftSolitaireCollection
Date last modified16-7-2025 13:41:32
C:\Program Files\WindowsApps\Microsoft.MicrosoftSticky*
Security LevelDisallowed
DescriptionDisable MicrosoftStickyNotes
Date last modified15-5-2025 12:22:20
C:\Program Files\WindowsApps\Microsoft.MicrosoftSticky*
Security LevelDisallowed
DescriptionDisable MicrosoftSticky
Date last modified15-5-2025 09:37:32
C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes*
Security LevelDisallowed
DescriptionDisable MicrosoftStickyNotes
Date last modified15-5-2025 12:23:08
C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes*
Security LevelDisallowed
DescriptionDisable MicrosoftStickyNotes
Date last modified15-5-2025 12:23:44
C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes*
Security LevelDisallowed
DescriptionDisable Microsoft Sticky Notes
Date last modified15-5-2025 09:38:29
C:\Program Files\WindowsApps\Microsoft.Office.OneNote*
Security LevelDisallowed
DescriptionOneNote
Date last modified16-7-2025 13:42:32
C:\Program Files\WindowsApps\Microsoft.Office.Sway*
Security LevelDisallowed
DescriptionMicrosoft.Office.Sway
Date last modified16-7-2025 13:42:58
C:\Program Files\WindowsApps\Microsoft.OfficeLens*
Security LevelDisallowed
DescriptionMicrosoft.OfficeLens
Date last modified16-7-2025 13:43:17
C:\Program Files\WindowsApps\Microsoft.OneConnect*
Security LevelDisallowed
DescriptionMicrosoft.OneConnect
Date last modified16-7-2025 13:43:38
C:\Program Files\WindowsApps\Microsoft.People*
Security LevelDisallowed
DescriptionMicrosoft.People
Date last modified16-7-2025 13:43:59
C:\Program Files\WindowsApps\Microsoft.Print3D*
Security LevelDisallowed
DescriptionMicrosoft.Print3D
Date last modified16-7-2025 13:44:30
C:\Program Files\WindowsApps\Microsoft.RemoteDesktop*
Security LevelDisallowed
DescriptionRemoteDesktop
Date last modified16-7-2025 13:44:55
C:\Program Files\WindowsApps\Microsoft.SkypeApp*
Security LevelDisallowed
DescriptionSkype
Date last modified16-7-2025 13:45:25
C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp*
Security LevelDisallowed
DescriptionStorePurchaseApp
Date last modified16-7-2025 13:46:03
C:\Program Files\WindowsApps\Microsoft.Todos*
Security LevelDisallowed
DescriptionMicrosoft.Todos
Date last modified16-7-2025 13:46:22
C:\Program Files\WindowsApps\Microsoft.Wallet*
Security LevelDisallowed
DescriptionMicrosoft.Wallet
Date last modified16-7-2025 13:46:56
C:\Program Files\WindowsApps\Microsoft.Whiteboard*
Security LevelDisallowed
DescriptionMicrosoft.Whiteboard
Date last modified16-7-2025 13:47:19
C:\Program Files\WindowsApps\Microsoft.Windows.Photos*
Security LevelUnrestricted
DescriptionMicrosoft.Windows.Photos
Date last modified16-7-2025 13:51:02
C:\Program Files\WindowsApps\Microsoft.WindowsAlarms*
Security LevelDisallowed
DescriptionMicrosoft.WindowsAlarms
Date last modified16-7-2025 13:50:39
C:\Program Files\WindowsApps\Microsoft.WindowsCalc*
Security LevelDisallowed
DescriptionDisable Windows Calc
Date last modified15-5-2025 09:39:13
C:\Program Files\WindowsApps\Microsoft.WindowsCalculator*
Security LevelUnrestricted
DescriptionWindowsCalculator
Date last modified16-7-2025 13:53:32
C:\Program Files\WindowsApps\Microsoft.WindowsCalculator*
Security LevelUnrestricted
DescriptionWindowsCalculator
Date last modified16-7-2025 13:51:39
C:\Program Files\WindowsApps\Microsoft.WindowsCamera*
Security LevelDisallowed
DescriptionMicrosoft.WindowsCamera
Date last modified16-7-2025 13:53:51
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps*
Security LevelDisallowed
Description
Date last modified16-7-2025 13:54:45
C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub*
Security LevelDisallowed
Description
Date last modified16-7-2025 13:55:11
C:\Program Files\WindowsApps\Microsoft.WindowsMaps*
Security LevelDisallowed
DescriptionWindowsMaps
Date last modified16-7-2025 13:56:05
C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder*
Security LevelDisallowed
DescriptionWindowsSoundRecorder
Date last modified16-7-2025 13:56:22
C:\Program Files\WindowsApps\Microsoft.WindowsStore*
Security LevelDisallowed
DescriptionWindowsStore
Date last modified16-7-2025 13:56:49
C:\Program Files\WindowsApps\Microsoft.Xbox.TCUI*
Security LevelDisallowed
DescriptionMicrosoft.Xbox
Date last modified16-7-2025 13:57:17
C:\Program Files\WindowsApps\Microsoft.XboxApp*
Security LevelDisallowed
DescriptionXboxApp
Date last modified16-7-2025 13:57:37
C:\Program Files\WindowsApps\Microsoft.YourPhone*
Security LevelDisallowed
DescriptionMicrosoft.YourPhone
Date last modified16-7-2025 13:58:09
C:\Program Files\WindowsApps\Microsoft.ZuneMusic*
Security LevelDisallowed
DescriptionMicrosoft.ZuneMusic
Date last modified16-7-2025 13:58:31
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
Security LevelDisallowed
DescriptionDisable OneDrive
Date last modified15-5-2025 17:59:21
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sticky Notes (new).lnk
Security LevelDisallowed
DescriptionDisable Sticky Notes
Date last modified15-5-2025 17:58:22
C:\Windows\regedit.exe
Security LevelDisallowed
DescriptionDisabel Regedit
Date last modified15-5-2025 09:40:31
C:\windows\system32\charmap.exe
Security LevelDisallowed
DescriptionDisable Character Map
Date last modified15-5-2025 09:43:00
C:\Windows\System32\mspaint.exe
Security LevelDisallowed
DescriptionDisable MS Paint
Date last modified15-5-2025 09:44:34
C:\Windows\System32\notepad.exe
Security LevelDisallowed
DescriptionDisable Notepad
Date last modified15-5-2025 09:45:11
C:\windows\system32\psr.exe
Security LevelDisallowed
DescriptionDisable PrintScreen
Date last modified15-5-2025 09:45:58
C:\Windows\System32\regedt32.exe
Security LevelDisallowed
DescriptionDisable Regedit
Date last modified15-5-2025 09:47:07
C:\windows\system32\WFS.exe
Security LevelDisallowed
DescriptionDisable FAX
Date last modified15-5-2025 09:47:39
C:\Windows\SystemApps\Microsoft.PPIProjection*
Security LevelDisallowed
DescriptionConnect WIFI
Date last modified16-7-2025 13:58:59
C:\Windows\SystemApps\Microsoft.Windows.Cortana*
Security LevelDisallowed
DescriptionMicrosoft.Windows.Cortana
Date last modified16-7-2025 13:59:25
C:\Windows\SystemApps\Microsoft.Windows.HolographicFirstRun*
Security LevelDisallowed
DescriptionMixed reality
Date last modified16-7-2025 13:59:40
C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI*
Security LevelDisallowed
DescriptionWindows Defender
Date last modified16-7-2025 14:00:19
C:\Windows\SystemApps\Microsoft.XboxGameCallableUI*
Security LevelDisallowed
DescriptionXboxGame
Date last modified16-7-2025 14:00:50
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Control Panel
PolicySettingComment
Hide specified Control Panel itemsEnabledDisable Panel Control
List of disallowed Control Panel items
*
PolicySettingComment
Prohibit access to Control Panel and PC settingsEnabledDisable Panel Control
Show only specified Control Panel itemsEnabled
List of allowed Control Panel items
update.cpl
Control Panel/Add or Remove Programs
PolicySettingComment
Hide Add New Programs pageEnabledDisable Control Panel Policy
Hide Add/Remove Windows Components pageEnabledDisable Control Panel Policy
Hide Change or Remove Programs pageEnabledDisable Control Panel Policy
Hide the "Add a program from CD-ROM or floppy disk" optionEnabledDisable Control Panel Policy
Hide the "Add programs from Microsoft" optionEnabledDisable Control Panel Policy
Hide the "Add programs from your network" optionEnabledDisable Control Panel Policy
Hide the Set Program Access and Defaults pageEnabledDisable Control Panel Policy
Remove Add or Remove ProgramsEnabledDisable Control Panel Policy
Remove Support InformationEnabledDisable Control Panel Policy
Control Panel/Display
PolicySettingComment
Disable the Display Control PanelEnabled
Hide Settings tabEnabledDisable Control Panel Policy
Control Panel/Personalization
PolicySettingComment
Prevent changing desktop backgroundEnabledDisable Control Panel Policy
Control Panel/Printers
PolicySettingComment
Browse a common web site to find printersDisabled
Browse the network to find printersDisabled
Prevent addition of printersEnabledDisable Control Panel Policy
Prevent deletion of printersEnabledDisable Control Panel Policy
Control Panel/Programs
PolicySettingComment
Hide "Get Programs" pageEnabledDisable Control Panel Policy
Hide "Programs and Features" pageEnabledDisable Control Panel Policy
Hide the Programs Control PanelEnabledDisable Control Panel Policy
Control Panel/Regional and Language Options
PolicySettingComment
Restrict selection of Windows menus and dialogs languageDisabled
Desktop
PolicySettingComment
Don't save settings at exitEnabledDisable Control Panel Policy
Hide and disable all items on the desktopNot ConfiguredDisable Control Panel
Hide Internet Explorer icon on desktopEnabled
Hide Network Locations icon on desktopEnabledDisable Control Panel Policy
Prevent adding, dragging, dropping and closing the Taskbar's toolbarsEnabledDisable Control Panel Policy
Prohibit User from manually redirecting Profile FoldersEnabled
Remove Computer icon on the desktopEnabledDisable Control Panel Policy
Remove My Documents icon on the desktopEnabledDisable Control Panel Policy
Remove Properties from the Computer icon context menuEnabledDisable Control Panel Policy
Remove Properties from the Documents icon context menuEnabledDisable Control Panel Policy
Remove Properties from the Recycle Bin context menuEnabledDisable Control Panel Policy
Remove Recycle Bin icon from desktopEnabled
Remove the Desktop Cleanup WizardEnabledDisable Control Panel Policy
Desktop/Desktop
PolicySettingComment
Enable Active DesktopEnabled
Allows HTML and JPEG Wallpaper
Google/Google Chrome
PolicySettingComment
Allow Dinosaur Easter Egg GameDisabledGoogle Chrome Policy
Allow download restrictionsEnabledGoogle Chrome Policy
Download restrictionsBlock all downloads.
PolicySettingComment
Allow invocation of file selection dialogsEnabledGoogle Chrome Policy
Allow queries to a Google time serviceDisabledGoogle Chrome Policy
Allow remote debuggingDisabledGoogle Chrome Policy
Allow user feedbackDisabledGoogle Chrome Policy
Always Open PDF files externallyDisabledGoogle Chrome Policy
Block access to a list of URLsEnabledGoogle Chrome Policy
Block access to a list of URLs
chrome://image-editor
chrome://Flags
chrome://System
chrome://Net-Internals
chrome://Net-export
chrome://Inspect
file://*
file:///*
data:*
chrome://chrome-urls
C:
file://C:
file://C:
data:*
PolicySettingComment
Continue running background apps when Google Chrome is closedDisabledGoogle Chrome Policy
Control SafeSites adult content filtering.EnabledGoogle Chrome Policy
Control SafeSites adult content filtering.Filter top level sites (but not embedded iframes) for adult content
PolicySettingComment
Control where Developer Tools can be usedNot ConfiguredGoogle Chrome Policy
Define domains allowed to access Google WorkspaceEnabledGoogle Chrome Policy
Define domains allowed to access Google Workspaceemea.teleperformance.com,majorel.com,mj.teleperformance.com
PolicySettingComment
Disable saving browser historyEnabledGoogle Chrome Policy
Disable synchronization of data with GoogleEnabledGoogle Chrome Policy
Disable taking screenshotsEnabledGoogle Chrome Policy
Enable AutoFill for addressesDisabledGoogle Chrome Policy
Enable AutoFill for credit cardsDisabledGoogle Chrome Policy
Enable Bookmark BarDisabledGoogle Chrome Policy
Enable guest mode in browserDisabledGoogle Chrome Policy
Enable or disable bookmark editingDisabledGoogle Chrome Policy
Enable reporting of usage and crash-related dataDisabledGoogle Chrome Policy
Enable Safe Browsing for trusted sourcesDisabledGoogle Chrome Policy
Enable search suggestionsDisabledGoogle Chrome Policy
Enable TranslateEnabledGoogle Chrome Policy
Enforce browser guest modeDisabledGoogle Chrome Policy
Hide the web store from the New Tab Page and app launcherEnabledGoogle Chrome Policy
Import autofill form data from default browser on first runDisabledGoogle Chrome Policy
Import bookmarks from default browser on first runDisabledGoogle Chrome Policy
Import browsing history from default browser on first runDisabledGoogle Chrome Policy
Import saved passwords from default browser on first runDisabledGoogle Chrome Policy
Import search engines from default browser on first runDisabledGoogle Chrome Policy
Incognito mode availabilityEnabledGoogle Chrome Policy
Incognito mode availabilityIncognito mode disabled
PolicySettingComment
Set Google Chrome as Default BrowserEnabledGoogle Chrome Policy
Google/Google Chrome - Default Settings (users can override)
PolicySettingComment
Always Open PDF files externallyDisabledGoogle Chrome Policy
Enable AutoFill for addressesDisabledGoogle Chrome Policy
Enable AutoFill for credit cardsDisabled
Enable Bookmark BarDisabledGoogle Chrome Policy
Enable or disable spell checking web serviceDisabledGoogle Chrome Policy
Enable search suggestionsDisabledGoogle Chrome Policy
Enable TranslateDisabledGoogle Chrome Policy
Import autofill form data from default browser on first runDisabled
Import bookmarks from default browser on first runDisabledGoogle Chrome Policy
Import browsing history from default browser on first runDisabledGoogle Chrome Policy
Import saved passwords from default browser on first runDisabledGoogle Chrome Policy
Import search engines from default browser on first runDisabledGoogle Chrome Policy
Google/Google Chrome - Default Settings (users can override)/Password manager
PolicySettingComment
Enable saving passwords to the password managerDisabledGoogle Chrome Policy
Google/Google Chrome/Allow or deny screen capture
PolicySettingComment
Allow or deny screen captureDisabledGoogle Chrome Policy
Google/Google Chrome/Extensions
PolicySettingComment
Blocks external extensions from being installedEnabled
Configure extension installation blocklistEnabled
Extension IDs the user should be prevented from installing (or * for all)
*
Google/Google Chrome/Google Cast
PolicySettingComment
Enable Google CastDisabledGoogle Chrome Policy
Google/Google Chrome/Printing
PolicySettingComment
Enable printingDisabled
Google/Google Chrome/Removed policies
PolicySettingComment
Block access to a list of URLsEnabled
Block access to a list of URLs
file:///C:/
file:///D:/
file:///E:/
Google/Google Chrome/Safe Browsing settings
PolicySettingComment
Disable proceeding from the Safe Browsing warning pageEnabled
Keyboard Layout
PolicySettingComment
Keyboard layoutEnabled
Enable EnglishEnabled
Enable ArabicEnabled
PolicySettingComment
Keyboard Layout switchingEnabled
Microsoft Outlook 2016/Account Settings/E-mail
PolicySettingComment
Specify Offline Address Book pathDisabled
Network/Network Connections
PolicySettingComment
Prohibit access to properties of a LAN connectionEnabled
Prohibit viewing of status for an active connectionEnabled
Start Menu and Taskbar
PolicySettingComment
Add Search Internet link to Start MenuEnabledDisable Windows APPs
Add the Run command to the Start MenuEnabledDisable Windows APPs
Clear history of recently opened documents on exitEnabledDisable Windows APPs
Clear the recent programs list for new usersEnabledDisable Windows APPs
Disable context menus in the Start MenuEnabledDisable Windows APPs.
Do not keep history of recently opened documentsEnabledDisable Windows APPs.
Force classic Start MenuDisabledDisable Windows APPs
Lock the TaskbarEnabledDisable Windows APPs
Prevent users from customizing their Start ScreenEnabled
Remove "Recently added" list from Start MenuEnabledDisable Windows APPs.
Remove access to the context menus for the taskbarEnabledDisable Windows APPs
Remove All Programs list from the Start menuEnabledDisable Windows APPs.
Choose one of the following actionsRemove and disable setting
PolicySettingComment
Remove Balloon Tips on Start Menu itemsEnabledDisable Windows APPs
Remove common program groups from Start MenuEnabledDisable Windows APPs
Remove Default Programs link from the Start menu.Enabled
Remove Documents icon from Start MenuEnabledDisable Windows APPs
Remove frequent programs list from the Start MenuEnabledDisable Windows APPs.
Remove Music icon from Start MenuEnabled
Remove Network Connections from Start MenuEnabledDisable Windows APPs
Remove Network icon from Start MenuEnabledDisable Windows APPs
Remove Pictures icon from Start MenuEnabledDisable Windows APPs
Remove Search link from Start MenuEnabledDisable Windows APPs
Show or hide "Most used" list from Start menuEnabledDisable Windows APPs.
Choose one of the following actionsHide
System
PolicySettingComment
Don't run specified Windows applicationsEnabled
List of disallowed applications
SnippingTool.exe
ScreenClippingHost.exe
psr.exe
mspaaint.exe
Paint3D.exe
Microsoft.Sketch
notepad.exe
mspaint.exe
MSACCESS.EXE
Notepad*.exe
stickynote.exe
notepad.exe
Microsoft.StickyNote.exe
Compmgmt.msc
Eventvwr.msc
Lusrmgr.msc
Msconfig.exe
appwiz.cpl
gpedit.msc
regedit.exe
schedtasks.exe
services.msc
taskmgr.exe
mmc.exe
Powershell.exe
Powershell_ISE.exe
freecell.exe
magnify.exe
mmc.exe
mobsync.exe
msimn.exe
mstsc.exe
narrator.exe
osk.exe
spider.exe
utilman.exe
wab.exe
winmine.exe
StikyNot.exe
wordpad.exe
notepad.exe
firefox.exe
control.exe
chess.exe
hearts.exe
SpiderSolitaire.exe
regedit32.exe
appwiz.cpl
helpctr.exe
vncviewer.exe
PINBALL.EXE
MineSweeper.exe
ScreenSketch.exe
microsoft.notes.exe
mspaint.exe
psr.exe
PaintStudio.View.exe
quickassist.exe
mip.exe
Microsoft.Msn.weather.exe
MicrosoftSearchInBing.exe
HxCalendarAppImm.exe
HxTsr.exe
Solitaire.exe
iexplore.exe
System/Ctrl+Alt+Del Options
PolicySettingComment
Remove Task ManagerEnabledDisable Windows APPs
Windows Components/AutoPlay Policies
PolicySettingComment
Turn off AutoplayEnabled
Turn off Autoplay on:All drives
Windows Components/Cloud Content
PolicySettingComment
Turn off all Windows spotlight featuresEnabledDisable Windows APPs
Turn off Windows Spotlight on Action CenterEnabledDisable Windows APPs
Windows Components/Edge UI
PolicySettingComment
Disable help tipsEnabledDisable Windows APPs
Turn off tracking of app usageEnabledDisable Windows APPs
Windows Components/File Explorer
PolicySettingComment
Disable Known FoldersEnabledDisable Windows APPs
Disable these Known Folders.
Recent Places
Documents
Music
Pictures
Videos
Desktops
Liabraries
Favorites
Network
Downloads
PolicySettingComment
Display confirmation dialog when deleting filesEnabledDisable Windows APPs
Display the menu bar in File Explorer DisabledDisable Windows APPs
Do not allow Folder Options to be opened from the Options button on the View tab of the ribbonEnabledDisable Windows APPs
Hide these specified drives in My ComputerEnabled
Pick one of the following combinationsRestrict A, B, C and D drives only
PolicySettingComment
Hides the Manage item on the File Explorer context menuEnabledDisable Windows APPs
No Computers Near Me in Network LocationsEnabledDisable Windows APPs
No Entire Network in Network LocationsEnabled
Prevent access to drives from My ComputerEnabled
Pick one of the following combinationsRestrict all drives
PolicySettingComment
Remove "Map Network Drive" and "Disconnect Network Drive"EnabledDisable Windows APPs
Remove CD Burning featuresEnabledDisable Windows APPs
Remove DFS tabEnabledDisable Windows APPs
Remove File Explorer's default context menuEnabledDisable Windows APPs
Remove File menu from File ExplorerEnabledDisable Windows APPs
Remove Search button from File ExplorerEnabled
Turn off Windows Key hotkeysEnabled
Windows Components/Internet Explorer
PolicySettingComment
Disable changing connection settingsEnabled
Disable changing language settingsDisabled
Prevent changing proxy settingsEnabled
Turn on the auto-complete feature for user names and passwords on formsDisabled
Windows Components/Microsoft Edge
PolicySettingComment
Allow Developer ToolsDisabled
Prevent access to the about:flags page in Microsoft EdgeEnabled
Windows Components/Microsoft Management Console
PolicySettingComment
Restrict the user from entering author modeEnabled
Windows Components/Microsoft User Experience Virtualization/Applications
PolicySettingComment
Access 2013 backup onlyDisabledDisable Windows APPs
Access 2016 backup onlyDisabledDisable Windows APPs
CalculatorDisabledDisable Windows APPs
Common 2013 backup onlyDisabledDisable Windows APPs
Common 2016 backup onlyDisabledDisable Windows APPs
Excel 2013 backup onlyDisabledDisable Windows APPs
Excel 2016 backup onlyDisabledDisable Windows APPs
InfoPath 2013 backup onlyDisabledDisable Windows APPs
Internet Explorer 10DisabledDisable Windows APPs
Internet Explorer 11DisabledDisable Windows APPs
Internet Explorer 8DisabledDisable Windows APPs
Internet Explorer 9DisabledDisable Windows APPs
Internet Explorer Common SettingsDisabledDisable Windows APPs
Lync 2013 backup onlyDisabledDisable Windows APPs
Lync 2016 backup onlyDisabledDisable Windows APPs
Microsoft Access 2010DisabledDisable Windows APPs
Microsoft Access 2013DisabledDisable Windows APPs
Microsoft Access 2016DisabledDisable Windows APPs
Microsoft Excel 2010DisabledDisable Windows APPs
Microsoft Excel 2013DisabledDisable Windows APPs
Microsoft Excel 2016DisabledDisable Windows APPs
Microsoft InfoPath 2010DisabledDisable Windows APPs
Microsoft InfoPath 2013DisabledDisable Windows APPs
Microsoft Lync 2010DisabledDisable Windows APPs
Microsoft Lync 2013DisabledDisable Windows APPs
Microsoft Lync 2016DisabledDisable Windows APPs
Microsoft Office 2010 Common SettingsDisabledDisable Windows APPs
Microsoft Office 2013 Common SettingsDisabledDisable Windows APPs
Microsoft Office 2013 Upload CenterDisabledDisable Windows APPs
Microsoft Office 2016 Common SettingsDisabledDisable Windows APPs
Microsoft Office 2016 Upload CenterDisabledDisable Windows APPs
Microsoft Office 365 Access 2013DisabledDisable Windows APPs
Microsoft Office 365 Access 2016DisabledDisable Windows APPs
Microsoft Office 365 Common 2013DisabledDisable Windows APPs
Microsoft Office 365 Common 2016DisabledDisable Windows APPs
Microsoft Office 365 Excel 2013DisabledDisable Windows APPs
Microsoft Office 365 Excel 2016DisabledDisable Windows APPs
Microsoft Office 365 InfoPath 2013DisabledDisable Windows APPs
Microsoft Office 365 Lync 2013DisabledDisable Windows APPs
Microsoft Office 365 Lync 2016DisabledDisable Windows APPs
Microsoft Office 365 OneNote 2013DisabledDisable Windows APPs
Microsoft Office 365 OneNote 2016DisabledDisable Windows APPs
Microsoft Office 365 Outlook 2013DisabledDisable Windows APPs
Microsoft Office 365 Outlook 2016Not ConfiguredDisable Windows APPs
Microsoft OneDrive for Business 2013DisabledDisable Windows APPs
Microsoft OneNote 2010DisabledDisable Windows APPs
Microsoft OneNote 2013DisabledDisable Windows APPs
Microsoft Outlook 2010DisabledDisable Windows APPs
Microsoft Outlook 2013DisabledDisable Windows APPs
Microsoft PowerPoint 2010DisabledDisable Windows APPs
Microsoft PowerPoint 2013DisabledDisable Windows APPs
Microsoft Project 2010DisabledDisable Windows APPs
Microsoft Project 2013DisabledDisable Windows APPs
Microsoft Publisher 2010DisabledDisable Windows APPs
Microsoft Publisher 2013DisabledDisable Windows APPs
Microsoft SharePoint Designer 2010DisabledDisable Windows APPs
Microsoft SharePoint Designer 2013DisabledDisable Windows APPs
Microsoft SharePoint Workspace 2010DisabledDisable Windows APPs
Microsoft Visio 2010DisabledDisable Windows APPs
Microsoft Visio 2013DisabledDisable Windows APPs
Microsoft Word 2010DisabledDisable Windows APPs
Microsoft Word 2013DisabledDisable Windows APPs
NotepadDisabledDisable Windows APPs
OneNote 2013 backup onlyDisabledDisable Windows APPs
Outlook 2013 backup onlyDisabledDisable Windows APPs
PowerPoint 2013 backup onlyDisabledDisable Windows APPs
Project 2013 backup onlyDisabledDisable Windows APPs
Publisher 2013 backup onlyDisabledDisable Windows APPs
SharePoint Designer 2013 backup onlyDisabledDisable Windows APPs
Visio 2013 backup onlyDisabledDisable Windows APPs
Word 2013 backup onlyDisabledDisable Windows APPs
Windows Components/Store
PolicySettingComment
Turn off the Store applicationEnabledDisabale Windows Store
Windows Components/Tablet PC/Accessories
PolicySettingComment
Do not allow Inkball to runEnabledDisable Sniping tool & Win+Shift+S
Do not allow printing to Journal Note WriterEnabledDisable Sniping tool & Win+Shift+S
Do not allow Snipping Tool to runEnabledDisable Sniping tool & Win+Shift+S
Do not allow Windows Journal to be runEnabledDisable Sniping tool & Win+Shift+S
Windows Components/Windows Calendar
PolicySettingComment
Turn off Windows CalendarEnabledDisable Windows APPs.
Windows Components/Windows Installer
PolicySettingComment
Prevent removable media source for any installationEnabled
Windows Components/Windows Messenger
PolicySettingComment
Do not allow Windows Messenger to be runEnabled
Do not automatically start Windows Messenger initiallyEnabled
Preferences
Windows Settings
Folders
Folder (Path: %USERPROFILE%\AppData\Local\Microsoft\Windows\WinX\Group2)
Group2 (Order: 1)
General
ActionUpdate
Attributes
Path%USERPROFILE%\AppData\Local\Microsoft\Windows\WinX\Group2
Read-onlyDisabled
HiddenEnabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Folder (Path: %USERPROFILE%\AppData\Local\Microsoft\Windows\WinX\Group3)
Group3 (Order: 2)
General
ActionUpdate
Attributes
Path%USERPROFILE%\AppData\Local\Microsoft\Windows\WinX\Group3
Read-onlyDisabled
HiddenEnabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry
Scancode Map (Order: 1)
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSYSTEM\CurrentControlSet\Control\Keyboard Layout
Value nameScancode Map
Value typeREG_BINARY
Value data00,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,00 00,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,00 00,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,0000,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,00 00,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,00 00,00,00,00,00,00,00,00,04,00,00,00,00,00,2a,e0,00,00,37,e0,00,00,54,00,00,00,00,00
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Description
Disable Sniping tool & Win+Shift+S
PrintScreenKeyForSnippingEnabled (Order: 2)
General
ActionUpdate
Properties
HiveHKEY_CURRENT_USER
Key pathControl Panel\Keyboard
Value namePrintScreenKeyForSnippingEnabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Description
Disable Sniping tool & Win+Shift+S
NoWinKeys (Order: 3)
General
ActionUpdate
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer
Value nameNoWinKeys
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Description
Disable Sniping tool & Win+Shift+S
value (Order: 4)
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Microsoft\PolicyManager\default\Experience\AllowScreenCapture
Value namevalue
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Description
Disable Sniping tool & Win+Shift+S
HidePeopleBar (Order: 5)
General
ActionUpdate
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Policies\Microsoft\Windows\Explorer
Value nameHidePeopleBar
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Shortcuts
Shortcut (Path: %DesktopDir%\Zscaler)
Zscaler (Order: 1)
General
ActionCreate
Attributes
Target typeFile system object
Shortcut path%DesktopDir%\Zscaler
Target pathC:\Program Files\Zscaler\ZSATray\ZSATray.exe
Start inC:\Program Files\Zscaler\ZSATray\ZSATray.exe
Icon pathC:\Program Files\Zscaler\ZSATray\ZSATray.exe
Icon index0
Shortcut keyNone
RunNormal window
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)Yes
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Shortcut (Path: %DesktopDir%\Google Chrome)
Google Chrome (Order: 2)
General
ActionCreate
Attributes
Target typeFile system object
Shortcut path%DesktopDir%\Google Chrome
Target pathC:\Program Files\Google\Chrome\Application\chrome.exe
Start inC:\Program Files\Google\Chrome\Application\chrome.exe
Icon path%ProgramFiles%\Google\Chrome\Application\chrome.exe
Icon index0
Shortcut keyNone
RunNormal window
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)Yes
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Shortcut (Path: %DesktopDir%\Forti VPN)
Forti VPN (Order: 3)
General
ActionCreate
Attributes
Target typeFile system object
Shortcut path%DesktopDir%\Forti VPN
Target pathC:\Program Files\Fortinet\FortiClient\FortiClient.exe
Start inC:\Program Files\Fortinet\FortiClient\FortiClient.exe
Icon path%SystemRoot%\Installer\{32123CA3-C24D-4A99-9347-70049B8E4C23}\Icon_FCTLogo
Icon index0
Shortcut keyNone
RunNormal window
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)Yes
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Shortcut (Path: %DesktopDir%\InteractionWorkspace)
InteractionWorkspace (Order: 4)
General
ActionCreate
Attributes
Target typeFile system object
Shortcut path%DesktopDir%\InteractionWorkspace
Target pathC:\Workspace Desktop Edition\InteractionWorkspace.exe
Start inC:\Workspace Desktop Edition
Icon pathC:\Workspace Desktop Edition\InteractionWorkspace.exe
Icon index0
Shortcut keyNone
RunNormal window
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)Yes
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo