| GR-PO-ADM-U-Restrict Windows Components for Agents | |
| Data collected on: 2-9-2025 08:57:20 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\tentolouris.5 |
| Created | 3-2-2016 13:21:20 |
| Modified | 9-2-2023 14:45:24 |
| User Revisions | 192 (AD), 192 (SYSVOL) |
| Computer Revisions | 0 (AD), 0 (SYSVOL) |
| Unique ID | {c590c4b3-78f6-4344-9f52-2508fca5ec7c} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| External | No | Enabled | emea.tpg.ads/GR/Administration/External |
| Taskuser | No | Enabled | emea.tpg.ads/GR/Administration/Taskuser |
| Agents | No | Enabled | emea.tpg.ads/GR/Agents |
| Name |
|---|
| EMEA\GR-L-SEC-Restrict Windows Components for Agents |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\GR-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\GR-L-SEC-Restrict Windows Components for Agents | Read (from Security Filtering) | No |
| EMEA\tentolouris.5 | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| S-1-5-21-513466819-3096973226-347852806-203252 | Read | No |
| Policy | Setting | Comment |
|---|---|---|
| Remove Task Manager | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent the wizard from running. | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Block launching desktop apps associated with a file. | Enabled | |
| Block launching desktop apps associated with a URI scheme | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent backing up to network location | Enabled | |
| Prevent backing up to optical media (CD/DVD) | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off desktop gadgets | Enabled | |
| Turn Off user-installed desktop gadgets | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable help tips | Enabled | |
| Do not show recent apps when the mouse is pointing to the upper-left corner of the screen | Enabled | |
| Prevent users from replacing the Command Prompt with Windows PowerShell in the menu they see when they right-click the lower-left corner or press the Windows logo key+X | Enabled | |
| Turn off switching between recent apps | Enabled | |
| Turn off tracking of app usage | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Display confirmation dialog when deleting files | Enabled | |
| Display the menu bar in File Explorer | Disabled | |
| Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon | Enabled | |
| Do not display the Welcome Center at user logon | Enabled | |
| Hides the Manage item on the File Explorer context menu | Enabled | |
| No Computers Near Me in Network Locations | Enabled | |
| No Entire Network in Network Locations | Enabled | |
| Prevent users from adding files to the root of their Users Files folder. | Enabled | |
| Remove "Map Network Drive" and "Disconnect Network Drive" | Enabled | |
| Remove CD Burning features | Enabled | |
| Remove DFS tab | Enabled | |
| Remove File menu from File Explorer | Enabled | |
| Remove Hardware tab | Enabled | |
| Remove Search button from File Explorer | Enabled | |
| Remove Security tab | Enabled | |
| Remove Shared Documents from My Computer | Enabled | |
| Remove the Search the Internet "Search again" link | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide the common dialog places bar | Enabled | |
| Hide the dropdown list of recent files | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Disable changing accessibility settings | Enabled | |||
| Disable changing Advanced page settings | Enabled | |||
| Disable changing Automatic Configuration settings | Enabled | |||
| Disable changing connection settings | Enabled | |||
| Disable changing home page settings | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Disable changing Profile Assistant settings | Enabled | |||
| Disable Import/Export Settings wizard | Enabled | |||
| Disable Internet Connection wizard | Enabled | |||
| Prevent "Fix settings" functionality | Enabled | |||
| Prevent access to Internet Explorer Help | Enabled | |||
| Prevent changing pop-up filter level | Enabled | |||
| Prevent changing proxy settings | Enabled | |||
| Prevent participation in the Customer Experience Improvement Program | Enabled | |||
| Prevent running First Run wizard | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Search: Disable Find Files via F3 within the browser | Enabled | |||
| Turn off browser geolocation | Enabled | |||
| Turn off the Security Settings Check feature | Enabled | |||
| Turn on menu bar by default | Enabled | |||
| Policy | Setting | Comment |
|---|---|---|
| View menu: Disable Source menu option | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable the Advanced page | Enabled | |
| Disable the Connections page | Enabled | |
| Disable the Content page | Enabled | |
| Disable the General page | Enabled | |
| Disable the Privacy page | Enabled | |
| Disable the Programs page | Enabled | |
| Disable the Security page | Enabled |
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Intranet Sites: Include all local (intranet) sites not listed in other zones | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||
| Intranet Sites: Include all network paths (UNCs) | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||
| Site to Zone Assignment List | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Start the Internet Connection Wizard automatically | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable adding channels | Enabled | |
| Disable adding schedules for offline pages | Enabled | |
| Disable all scheduled offline pages | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Lock all toolbars | Enabled | |
| Turn off Developer Tools | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off location | Enabled | |
| Turn off location scripting | Enabled | |
| Turn off sensors | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow Developer Tools | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Restrict users to the explicitly permitted list of snap-ins | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| .Net Framework Configuration | Enabled | |
| Active Directory Domains and Trusts | Disabled | |
| Active Directory Sites and Services | Disabled | |
| Active Directory Users and Computers | Disabled | |
| ActiveX Control | Enabled | |
| ADSI Edit | Disabled | |
| Certificate Templates | Enabled | |
| Certificates | Enabled | |
| Certification Authority | Disabled | |
| Component Services | Disabled | |
| Computer Management | Disabled | |
| Device Manager | Disabled | |
| DFS Management | Disabled | |
| Disk Defragmenter | Disabled | |
| Disk Management | Disabled | |
| Distributed File System | Disabled | |
| Enterprise PKI | Disabled | |
| Event Viewer | Enabled | |
| Event Viewer (Windows Vista) | Enabled | |
| Failover Clusters Manager | Disabled | |
| FAX Service | Enabled | |
| File Server Resource Manager | Disabled | |
| FrontPage Server Extensions | Disabled | |
| Health Registration Authority (HRA) | Disabled | |
| Indexing Service | Enabled | |
| Internet Authentication Service (IAS) | Disabled | |
| Internet Information Services | Disabled | |
| IP Security Monitor | Disabled | |
| IP Security Policy Management | Disabled | |
| Link to Web Address | Enabled | |
| Local Users and Groups | Disabled | |
| NAP Client Configuration | Disabled | |
| Network Policy Server (NPS) | Disabled | |
| Online Responder | Disabled | |
| Performance Logs and Alerts | Enabled | |
| QoS Admission Control | Disabled | |
| Remote Desktop Services Configuration | Disabled | |
| Remote Desktops | Disabled | |
| Removable Storage Management | Disabled | |
| Routing and Remote Access | Disabled | |
| Security Configuration and Analysis | Disabled | |
| Security Templates | Disabled | |
| Server Manager | Disabled | |
| Services | Disabled | |
| Share and Storage Management | Disabled | |
| Shared Folders | Disabled | |
| Storage Manager for SANs | Disabled | |
| System Information | Enabled | |
| Telephony | Disabled | |
| TPM Management | Enabled | |
| Windows Firewall with Advanced Security | Disabled | |
| Wireless Monitor | Disabled | |
| WMI Control | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent users from sharing files within their profile. | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent adding UNC locations to index from Control Panel | Enabled | |
| Prevent customization of indexed locations in Control Panel | Enabled | |
| Turn off storage and display of search history | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off the Store application | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Inkball to run | Enabled | |
| Do not allow printing to Journal Note Writer | Enabled | |
| Do not allow Windows Journal to be run | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent launch an application | Enabled | |
| Prevent press and hold | Enabled | |
| Turn off hardware buttons | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide Advanced Properties Checkbox in Add Scheduled Task Wizard | Enabled | |
| Hide Property Pages | Enabled | |
| Prevent Task Run or End | Enabled | |
| Prohibit Browse | Enabled | |
| Prohibit Drag-and-Drop | Enabled | |
| Prohibit New Task Creation | Enabled | |
| Prohibit Task Deletion | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Media Center to run | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent CD and DVD Media Information Retrieval | Enabled | |
| Prevent Music File Media Information Retrieval | Enabled | |
| Prevent Radio Station Preset Retrieval | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide Network Tab | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow Screen Saver | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Messenger to be run | Enabled | |
| Do not automatically start Windows Messenger initially | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Windows Mobility Center | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Windows SideShow | Enabled |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds |
| Value name | ShellFeedsTaskbarViewMode |
| Value type | REG_DWORD |
| Value data | 0x2 (2) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | DisabledHotkeys |
| Value type | REG_SZ |
| Value data | S |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |