| GR-PO-SEC-C-Symantec Clients Settings | |
| Data collected on: 2-9-2025 09:01:54 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\tentolouris.5 |
| Created | 22-2-2017 10:28:40 |
| Modified | 7-5-2025 10:24:20 |
| User Revisions | 4 (AD), 4 (SYSVOL) |
| Computer Revisions | 181 (AD), 181 (SYSVOL) |
| Unique ID | {253178a0-7553-46fe-a17b-eadb144ce61d} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | Yes | Enabled | emea.tpg.ads/GR/Systems/Clients |
| Name |
|---|
| EMEA\GR-L-SEC-SYSTEMS CLIENTS SYMANTEC |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\Domain Computers | Read | No |
| EMEA\GR-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\GR-L-SEC-SYSTEMS CLIENTS SYMANTEC | Read (from Security Filtering) | No |
| EMEA\tentolouris.5 | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Name | Parameters |
|---|---|
| \\grkalfs01.emea.tpg.ads\netconfigfiles\Symantec\RemoveJava192.bat | |
| \\grkalfs01\netconfigfiles\Symantec\Avaya_reg.bat | |
| \\grkalfs01\netconfigfiles\GlobalSettings\Setups\AvayaOneXandAgent\AVAYA_Agent_Installation.bat |
| Name | Parameters |
|---|---|
| \\grkalfs01.emea.tpg.ads\netconfigfiles\Symantec\AdobeAIR\adobeairsetup.bat | |
| \\grkalfs01.emea.tpg.ads\netconfigfiles\Symantec\AdobeAIR\InstalLinkBuilder.bat |
| Policy | Setting |
|---|---|
| Account lockout duration | 60 minutes |
| Account lockout threshold | 3 invalid logon attempts |
| Reset account lockout counter after | 60 minutes |
| Owner |
| Type | Name | Permission | Apply To |
|---|---|---|---|
| Allow | BUILTIN\Administrators | Full Control | This folder, subfolders and files |
| Allow | CREATOR OWNER | Full Control | Subfolders and files only |
| Allow | NT AUTHORITY\SYSTEM | Full Control | This folder, subfolders and files |
| Allow | BUILTIN\Users | Read and Execute | This folder, subfolders and files |
| Allow | APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES | Read and Execute | This folder, subfolders and files |
| Allow inheritable permissions from the parent to propagate to this object and all child objects | Disabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| DNS suffix search list | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Set a default associations configuration file | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Enable client-side targeting | Enabled | |||
| ||||
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Policies\Adobe\AIR |
| Value name | AppInstallDisabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Policies\Adobe\AIR |
| Value name | UntrustedAppInstallDisabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Policies\Adobe\AIR |
| Value name | UpdateDisabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\WOW6432Node\Tanium\Tanium Client\Sensor Data\Tags |
| Value name | NortonLifeLock |
| Value type | REG_SZ |
| Value data |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Group name | Users (built-in) |
| Delete all member users | Disabled |
| Delete all member groups | Enabled |
| EMEA\GR-G-ORG-Remote Admin Users | S-1-5-21-513466819-3096973226-347852806-613115 |
| tpadmin | |
| EMEA\GR-G-ORG-USERS Symantec Trainers | S-1-5-21-513466819-3096973226-347852806-399546 |
| EMEA\GR-G-ORG-USERS Symantec Supervisors | S-1-5-21-513466819-3096973226-347852806-309012 |
| EMEA\GR-G-ORG-USERS Symantec QA | S-1-5-21-513466819-3096973226-347852806-309013 |
| EMEA\GR-G-ORG-USERS Symantec CCM | S-1-5-21-513466819-3096973226-347852806-220701 |
| EMEA\GR-G-ORG-USERS Symantec Agents | S-1-5-21-513466819-3096973226-347852806-309014 |
| EMEA\GR-G-ORG-USERS Symantec Admin | S-1-5-21-513466819-3096973226-347852806-309015 |
| EMEA\GR-G-ORG-USERS Symantec ACM | S-1-5-21-513466819-3096973226-347852806-309011 |
| EMEA\GR-G-ORG-USERS Symantec LMI Monitor | S-1-5-21-513466819-3096973226-347852806-613526 |
| EMEA\GR-G-ORG-USERS Symantec BA | S-1-5-21-513466819-3096973226-347852806-1248040 |
| EMEA\GR-G-ORG-USERS Symantec WFM | S-1-5-21-513466819-3096973226-347852806-1248039 |
| EMEA\GR-G-ORG-USERS Symantec Agents SME | S-1-5-21-513466819-3096973226-347852806-1299865 |
| EMEA\GR-G-ORG-USERS Symantec SLAM Access | S-1-5-21-513466819-3096973226-347852806-1300029 |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Group name | Administrators (built-in) |
| Delete all member users | Disabled |
| Delete all member groups | Enabled |
| EMEA\GR-G-ORG-Remote Admin Users | S-1-5-21-513466819-3096973226-347852806-613115 |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Daily Shutdown2 | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\System | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Daily | ||||
| Activate | 24-1-2018 03:10:28 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| Recur every 1 days |
| 1. Start a program | ||||
| Program/script | C:\Windows\System32\shutdown.exe | |||
| Arguments | -r -f -t 0 |
| Stop if the computer ceases to be idle | No | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | No | |||
| Wake the computer to run this task | Yes | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Daily Shutdown3 | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | %userdomain%\%username% | |||
| Run with highest privileges | LeastPrivilege | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Daily | ||||
| Activate | 24-1-2018 03:25:28 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| Recur every 1 days |
| 1. Start a program | ||||
| Program/script | C:\Windows\System32\shutdown.exe | |||
| Arguments | -r -f -t 0 |
| Stop if the computer ceases to be idle | No | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | No | |||
| Wake the computer to run this task | Yes | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Name | CiscoCert | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | Yes | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | \\grkalfs01\netconfigfiles\GlobalSettings\Setups\Cisco-pbvpn\Cert\import-certificate.bat.vbs |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Delete |
| Name | Host_File_Copy | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Start a program | ||||
| Program/script | \\grkalfs01\netconfigfiles\Symantec\Hosts_file\CopyHostFile_Symantec.bat |
| Stop processing items on this extension if an error occurs on this item | No |
| Apply once and do not reapply | No |
| Action | Create |
| Name | DisableNetowrkSleep | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | Yes | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | Powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass \\grkalfs01\netconfigfiles\GlobalSettings\DonotSleepNetwork\DisableNetworkAdapterPnPCapabilities.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 8 hours | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | StopExisting |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Delete |
| Name | LandeskStartUP | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Start a program | ||||
| Program/script | \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Landesk\Landesk_startup.bat |
| Stop processing items on this extension if an error occurs on this item | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Host_File_Copyv2 | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 1 hour | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 6-4-2020 14:33:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | \\grkalfs01.emea.tpg.ads\netconfigfiles\Symantec\Hosts_norton\CopyHostFile_Norton.bat |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Remove_MS3DViewer | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 30 minutes | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 26-3-2021 17:00:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 2. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | Powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass \\grkalfs01\netconfigfiles\GlobalSettings\Setups\RemoveMS3DViewerAPPX\Uninstall_MS3DViewerAPPX.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Remove_Uninstall_Microsoft.MSPaint | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 30 minutes | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 26-3-2021 17:00:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 2. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | Powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_Microsoft.MSPaint.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Remove_Uninstall_VP9VideoExtensions | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 30 minutes | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 26-3-2021 17:00:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 2. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | Powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_VP9VideoExtensions.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Remove_Uninstall_WebMediaExtensions | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 30 minutes | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 26-3-2021 17:00:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 2. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | Powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_WebMediaExtensions.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Remove_Uninstall_WebpImageExtension | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 30 minutes | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 26-3-2021 17:00:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 2. At task creation/modification | ||||
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | Powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_WebpImageExtension.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Run task as soon as possible after a scheduled start is missed | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |