| GR-PO-SEC-C-Dell PC Settings | |
| Data collected on: 2-9-2025 09:01:52 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\tentolouris.5 |
| Created | 21-2-2017 09:51:28 |
| Modified | 19-4-2024 11:43:32 |
| User Revisions | 0 (AD), 0 (SYSVOL) |
| Computer Revisions | 111 (AD), 111 (SYSVOL) |
| Unique ID | {9f0c669e-6b30-47ae-a5ed-ecbe8ba902a7} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | Yes | Enabled | emea.tpg.ads/GR/Systems/Clients |
| Name |
|---|
| EMEA\GR-L-SEC-Systems Clients Dell Computers |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\Domain Computers | Read | No |
| EMEA\GR-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\GR-L-SEC-Systems Clients Dell Computers | Read (from Security Filtering) | No |
| EMEA\tentolouris.5 | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Name | Defender Soft Token for Windows 5.8.1 |
| Version | 5.8 |
| Language | English (United States) |
| Platform | x86 |
| Support URL | https://support.software.dell.com/defender/ |
| General | Setting |
|---|---|
| Deployment type | Assigned |
| Deployment source | \\grkalfs01.emea.tpg.ads\netconfigfiles\Dell\DefenderSoftToken_x86_reg.msi |
| Uninstall this application when it falls out of the scope of management | Disabled |
| Advanced Deployment Options | Setting |
|---|---|
| Ignore language when deploying this package | Disabled |
| Make this 32-bit X86 application available to Win64 computers | Enabled |
| Include OLE class and product information | Enabled |
| Diagnostic Information | Setting |
|---|---|
| Product code | {d9c31078-0a29-403f-8364-5e1f3d1c5886} |
| Deployment Count | 0 |
| Type | Name | Permission | Inherited |
|---|---|---|---|
| Allow | EMEA\Domain Admins | Full control | No |
| Allow | NT AUTHORITY\Authenticated Users | Read | No |
| Allow | NT AUTHORITY\SYSTEM | Full control | No |
| Allow | EMEA\Domain Computers | Read | Yes |
| Allow | EMEA\GR-L-SEC-Systems Clients Dell Computers | Read | Yes |
| Allow | EMEA\GR-G-ORG-OU Admins | Read | Yes |
| Allow | ROOT\Enterprise Admins | Read, Write | Yes |
| Allow | EMEA\Domain Admins | Read, Write | Yes |
| Allow | NT AUTHORITY\Authenticated Users | Read | Yes |
| Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | Yes |
| Allow | NT AUTHORITY\SYSTEM | Read, Write | Yes |
| Allow | EMEA\tentolouris.5 | Read, Write | Yes |
| Allow | CREATOR OWNER | Read, Write | Yes |
| Allow inheritable permissions from the parent to propagate to this object and all child objects | Enabled |
| Upgrades | Setting | ||||
|---|---|---|---|---|---|
| Required upgrade for existing packages | Enabled | ||||
| |||||
| Packages in the current GPO that will upgrade this package | None | ||||
| Categories |
|---|
| None |
| Transforms |
|---|
| None |
| Name | Defender Soft Token for Windows 5.8.1 (2) |
| Version | 5.8 |
| Language | English (United States) |
| Platform | x64 |
| Support URL | https://support.software.dell.com/defender/ |
| General | Setting |
|---|---|
| Deployment type | Assigned |
| Deployment source | \\grkalfs01.emea.tpg.ads\netconfigfiles\Dell\DefenderSoftToken_x64_reg (1).msi |
| Uninstall this application when it falls out of the scope of management | Disabled |
| Advanced Deployment Options | Setting |
|---|---|
| Ignore language when deploying this package | Disabled |
| Make this 32-bit X86 application available to Win64 computers | Enabled |
| Include OLE class and product information | Enabled |
| Diagnostic Information | Setting |
|---|---|
| Product code | {e2f2a6a8-b65b-4303-8b62-f8d8472ab297} |
| Deployment Count | 0 |
| Type | Name | Permission | Inherited |
|---|---|---|---|
| Allow | EMEA\Domain Admins | Full control | No |
| Allow | NT AUTHORITY\Authenticated Users | Read | No |
| Allow | NT AUTHORITY\SYSTEM | Full control | No |
| Allow | EMEA\Domain Computers | Read | Yes |
| Allow | EMEA\GR-L-SEC-Systems Clients Dell Computers | Read | Yes |
| Allow | EMEA\GR-G-ORG-OU Admins | Read | Yes |
| Allow | ROOT\Enterprise Admins | Read, Write | Yes |
| Allow | EMEA\Domain Admins | Read, Write | Yes |
| Allow | NT AUTHORITY\Authenticated Users | Read | Yes |
| Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | Yes |
| Allow | NT AUTHORITY\SYSTEM | Read, Write | Yes |
| Allow | EMEA\tentolouris.5 | Read, Write | Yes |
| Allow | CREATOR OWNER | Read, Write | Yes |
| Allow inheritable permissions from the parent to propagate to this object and all child objects | Enabled |
| Upgrades | Setting | ||||
|---|---|---|---|---|---|
| Required upgrade for existing packages | Enabled | ||||
| |||||
| Packages in the current GPO that will upgrade this package | None | ||||
| Categories |
|---|
| None |
| Transforms |
|---|
| None |
| Name | Parameters |
|---|---|
| \\grkalfs01\netconfigfiles\Dell\ddmsilent.bat | |
| \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\WAHA\tpaux_waha.bat |
| Name | Parameters |
|---|---|
| \\grkalfs01.emea.tpg.ads\netconfigfiles\Dell\Citrix\install.bat | |
| \\grkalfs01\netconfigfiles\GlobalSettings\WAHA\tpaux_waha.bat |
| Policy | Setting | Comment |
|---|---|---|
| Enable Horizon Client online update | Disabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Enable client-side targeting | Enabled | |||
| ||||
| Action | Update |
| Source file(s) | \\grkalfs01\netconfigfiles\GlobalSettings\Landesk\LandeskRepairVuln.bat |
| Destination file | C:\TPSTUFF\LandeskRepairVuln.bat |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Disabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Policies\Citrix\ICA Client\AutoUpdate |
| Value name | Enable |
| Value type | REG_SZ |
| Value data | False |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Apply once and do not reapply | No |
| Action | Update |
| Group name | Administrators (built-in) |
| Delete all member users | Disabled |
| Delete all member groups | Enabled |
| EMEA\GR-G-ORG-Remote Admin Users | S-1-5-21-513466819-3096973226-347852806-613115 |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Group name | Users (built-in) |
| Delete all member users | Disabled |
| Delete all member groups | Enabled |
| EMEA\GR-G-ORG-Remote Admin Users | S-1-5-21-513466819-3096973226-347852806-613115 |
| tpadmin | |
| EMEA\GR-G-ORG-USERS Dell Sales SLAM Access | S-1-5-21-513466819-3096973226-347852806-1300096 |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Daily Shutdown_New | |||
| Author | EMEA\lewke.7 | |||
| Description | ||||
| Run only when user is logged on | S4U | |||
| UserId | NT AUTHORITY\System | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Daily | ||||
| Activate | 28-9-2018 02:00:00 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| Recur every 1 days |
| 1. Start a program | ||||
| Program/script | C:\Windows\System32\shutdown.exe | |||
| Arguments | -r -f -t 0 |
| Stop if the computer ceases to be idle | No | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | No | |||
| Wake the computer to run this task | Yes | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Daily Shutdown_New_2 | |||
| Author | EMEA\lewke.7 | |||
| Description | ||||
| Run only when user is logged on | S4U | |||
| UserId | NT AUTHORITY\System | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Daily | ||||
| Activate | 28-9-2018 05:00:00 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| Recur every 1 days |
| 1. Start a program | ||||
| Program/script | C:\Windows\System32\shutdown.exe | |||
| Arguments | -r -f -t 0 |
| Stop if the computer ceases to be idle | No | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | No | |||
| Wake the computer to run this task | Yes | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | LandeskRepairVuln | |||
| Author | EMEA\tentolouris.5-adm | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.2 | |||
| Enabled | Yes |
| 1. Weekly | ||||
| Stop task if it runs longer than | 8 hours | |||
| Activate | 7-7-2020 21:53:37 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| Recur every 1 weeks on maandag |
| 1. Start a program | ||||
| Program/script | C:\TPSTUFF\LandeskRepairVuln.bat |
| Stop if the computer ceases to be idle | No | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | No | |||
| Wake the computer to run this task | Yes | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | Yes | |||
| Stop task if it runs longer than | 12 hours | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | StopExisting |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Office StartUP update | |||
| Author | EMEA\tentolouris.5-adm | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.2 | |||
| Enabled | Yes |
| 1. At startup | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | C:\Windows\System32\cmd.exe | |||
| Arguments | /c if exist "C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe" ( "C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe" /update user displaylevel=false forceappshutdown=true ) |
| Stop if the computer ceases to be idle | No | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | No | |||
| Allow task to be run on demand | No | |||
| Stop task if it runs longer than | Immediately | |||
| If the running task does not end when requested, force it to stop | No | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |