| GR-PO-CPS-C-Appx Vuln remove | |
| Data collected on: 2-9-2025 10:03:31 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\tentolouris.5-adm |
| Created | 1-11-2021 11:29:48 |
| Modified | 9-2-2023 15:10:34 |
| User Revisions | 0 (AD), 0 (SYSVOL) |
| Computer Revisions | 10 (AD), 10 (SYSVOL) |
| Unique ID | {4a2fdbc4-9b67-4f09-97bf-c64706c6849d} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | No | Enabled | emea.tpg.ads/GR/Systems/Clients |
| Name |
|---|
| EMEA\GR-L-SEC-Vuln Appx Remove Apps |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\Domain Computers | Read | No |
| EMEA\GR-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\GR-L-SEC-Vuln Appx Remove Apps | Read (from Security Filtering) | No |
| EMEA\tentolouris.5-adm | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Action | Update |
| Name | Remove_MS3DViewer | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 30 minutes | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 26-3-2021 17:00:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 2. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | Powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass \\grkalfs01\netconfigfiles\GlobalSettings\Setups\RemoveMS3DViewerAPPX\Uninstall_MS3DViewerAPPX.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Remove_Uninstall_Microsoft.MSPaint | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 30 minutes | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 26-3-2021 17:00:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 2. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | Powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_Microsoft.MSPaint.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Remove_Uninstall_VP9VideoExtensions | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 30 minutes | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 26-3-2021 17:00:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 2. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | Powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_VP9VideoExtensions.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Remove_Uninstall_WebMediaExtensions | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 30 minutes | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 26-3-2021 17:00:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 2. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | Powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_WebMediaExtensions.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Remove_Uninstall_WebpImageExtension | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 30 minutes | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 26-3-2021 17:00:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 2. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | Powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_WebpImageExtension.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |