Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
GR-PO-SEC-C-WIN 10 COMPUTER POLICIES
Data collected on: 2-9-2025 08:59:01
General
Details
Domainemea.tpg.ads
OwnerEMEA\tentolouris.5
Created4-7-2016 11:22:42
Modified13-1-2025 10:08:04
User Revisions0 (AD), 0 (SYSVOL)
Computer Revisions232 (AD), 232 (SYSVOL)
Unique ID{d06ec331-9cba-4b1a-ab2b-c984b316b39e}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
ClientsNoEnabledemea.tpg.ads/GR/Systems/Clients

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
NT AUTHORITY\Authenticated Users
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\Domain AdminsEdit settings, delete, modify securityNo
EMEA\Domain ComputersReadNo
EMEA\GR-G-ORG-OU AdminsEdit settings, delete, modify securityNo
EMEA\tentolouris.5Edit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersRead (from Security Filtering)No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
S-1-5-21-513466819-3096973226-347852806-203252ReadNo
Computer Configuration (Enabled)
Policies
Windows Settings
Scripts
Startup
For this GPO, Script order: Windows PowerShell scripts will run first
NameParameters
\\grkalfs01\netconfigfiles\GlobalSettings\LayoutPowershell\LayoutAdd.ps1
Security Settings
File System
%SystemRoot%\ImmersiveControlPanel
Configure this file or folder then: Propagate inheritable permissions to all subfolders and files
Owner
Permissions
TypeNamePermissionApply To
AllowAPPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGESRead and ExecuteThis folder, subfolders and files
AllowCREATOR OWNERFull ControlSubfolders and files only
AllowNT AUTHORITY\SYSTEMFull ControlThis folder, subfolders and files
AllowEMEA\GR-G-ORG-ITRead and ExecuteThis folder, subfolders and files
AllowBUILTIN\AdministratorsFull ControlThis folder, subfolders and files
AllowBUILTIN\UsersRead and ExecuteThis folder, subfolders and files
Allow inheritable permissions from the parent to propagate to this object and all child objectsDisabled
Auditing
No auditing specified
Application Control Policies
Appx Rules
No rules of type 'Appx Rules' are defined.
Dll Rules
No rules of type 'Dll Rules' are defined.
Executable Rules
PolicySetting
Enforce rules of this typeFalse

No rules of type 'Executable Rules' are defined.
Windows Installer Rules
No rules of type 'Windows Installer Rules' are defined.
Script Rules
No rules of type 'Script Rules' are defined.
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Control Panel
PolicySettingComment
Settings Page VisibilityEnabled
Settings Page Visibility:showonly:display;regionlanguage;mousetouchpad;taskbar;colors;defaultapps;dateandtime;easeofaccess-highcontrast;windowsupdate;sound;easeofaccess-audio;nightlight;devices-touchpad;about;personalization-colors;bluetooth;easeofaccess-magnifier
System/Power Management
PolicySettingComment
Select an active power planEnabled
Active Power Plan:High Performance
System/Power Management/Button Settings
PolicySettingComment
Select the lid switch action (on battery)Enabled
Lid Switch ActionTake no action
PolicySettingComment
Select the lid switch action (plugged in)Enabled
Lid Switch ActionTake no action
PolicySettingComment
Select the Power button action (on battery)Enabled
Power Button ActionShut down
PolicySettingComment
Select the Power button action (plugged in)Enabled
Power Button ActionShut down
PolicySettingComment
Select the Sleep button action (on battery)Enabled
Sleep Button ActionShut down
PolicySettingComment
Select the Sleep button action (plugged in)Enabled
Sleep Button ActionShut down
PolicySettingComment
Select the Start menu Power button action (on battery)Enabled
User Interface Sleep Button ActionShut down
PolicySettingComment
Select the Start menu Power button action (plugged in)Enabled
User Interface Sleep Button ActionShut down
System/Power Management/Hard Disk Settings
PolicySettingComment
Turn Off the hard disk (on battery)Enabled
Turn Off the Hard Disk (seconds):4294967295
PolicySettingComment
Turn Off the hard disk (plugged in)Enabled
Turn Off the Hard Disk (seconds):4294967295
System/Power Management/Sleep Settings
PolicySettingComment
Require a password when a computer wakes (on battery)Enabled
Require a password when a computer wakes (plugged in)Enabled
Specify the system hibernate timeout (on battery)Enabled
System Hibernate Timeout (seconds):4294967295
PolicySettingComment
Specify the system hibernate timeout (plugged in)Enabled
System Hibernate Timeout (seconds):4294967295
PolicySettingComment
Specify the system sleep timeout (on battery)Enabled
System Sleep Timeout (seconds):4294967295
PolicySettingComment
Specify the system sleep timeout (plugged in)Enabled
System Sleep Timeout (seconds):4294967295
PolicySettingComment
Specify the unattended sleep timeout (on battery)Enabled
Unattended Sleep Timeout (seconds):4294967295
PolicySettingComment
Specify the unattended sleep timeout (plugged in)Enabled
Unattended Sleep Timeout (seconds):4294967295
PolicySettingComment
Turn off hybrid sleep (plugged in)Enabled
System/Power Management/Video and Display Settings
PolicySettingComment
Turn off the display (on battery)Enabled
Turn Off the Display (seconds):4294967295
PolicySettingComment
Turn off the display (plugged in)Enabled
Turn Off the Display (seconds):4294967295
Windows Components/Add features to Windows 10
PolicySettingComment
Prevent the wizard from running.Enabled
Windows Components/App Privacy
PolicySettingComment
Let Windows apps access account informationEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
 
Force allow these specific apps (use Package Family Names):
 
Force deny these specific apps (use Package Family Names):
 
PolicySettingComment
Let Windows apps access call historyEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
 
Force allow these specific apps (use Package Family Names):
 
Force deny these specific apps (use Package Family Names):
 
PolicySettingComment
Let Windows apps access contactsEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
 
Force allow these specific apps (use Package Family Names):
 
Force deny these specific apps (use Package Family Names):
 
PolicySettingComment
Let Windows apps access emailEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
 
Force allow these specific apps (use Package Family Names):
 
Force deny these specific apps (use Package Family Names):
 
PolicySettingComment
Let Windows apps access locationEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
 
Force allow these specific apps (use Package Family Names):
 
Force deny these specific apps (use Package Family Names):
 
PolicySettingComment
Let Windows apps access messagingEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
 
Force allow these specific apps (use Package Family Names):
 
Force deny these specific apps (use Package Family Names):
 
PolicySettingComment
Let Windows apps access motionEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
 
Force allow these specific apps (use Package Family Names):
 
Force deny these specific apps (use Package Family Names):
 
PolicySettingComment
Let Windows apps access the calendarEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
 
Force allow these specific apps (use Package Family Names):
 
Force deny these specific apps (use Package Family Names):
 
PolicySettingComment
Let Windows apps access the cameraEnabled
Default for all apps:Force Allow
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access trusted devicesEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
 
Force allow these specific apps (use Package Family Names):
 
Force deny these specific apps (use Package Family Names):
 
PolicySettingComment
Let Windows apps communicate with unpaired devicesEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
 
Force allow these specific apps (use Package Family Names):
 
Force deny these specific apps (use Package Family Names):
 
PolicySettingComment
Let Windows apps control radiosEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
 
Force allow these specific apps (use Package Family Names):
 
Force deny these specific apps (use Package Family Names):
 
Windows Components/App runtime
PolicySettingComment
Block launching desktop apps associated with a URI schemeEnabled
Block launching Universal Windows apps with Windows Runtime API access from hosted content.Enabled
Windows Components/Cloud Content
PolicySettingComment
Do not show Windows tipsEnabled
Turn off Microsoft consumer experiencesEnabled
Windows Components/Desktop Gadgets
PolicySettingComment
Restrict unpacking and installation of gadgets that are not digitally signed.Enabled
Turn off desktop gadgetsEnabled
Turn Off user-installed desktop gadgetsEnabled
Windows Components/Edge UI
PolicySettingComment
Disable help tipsEnabled
Windows Components/Microsoft Defender Antivirus
PolicySettingComment
Turn off Microsoft Defender AntivirusEnabled
Windows Components/OneDrive
PolicySettingComment
Prevent the usage of OneDrive for file storageEnabled
Windows Components/Security Center
PolicySettingComment
Turn on Security Center (Domain PCs only)Disabled
Windows Components/Store
PolicySettingComment
Disable all apps from Microsoft Store Enabled
Turn off Automatic Download and Install of updatesEnabled
Turn off the offer to update to the latest version of WindowsEnabled
Turn off the Store applicationEnabled
Windows Components/Sync your settings
PolicySettingComment
Do not syncEnabled
Allow users to turn syncing on.Disabled
PolicySettingComment
Do not sync app settingsEnabled
Allow users to turn "app settings" syncing on.Disabled
PolicySettingComment
Do not sync AppsEnabled
Allow users to turn "AppSync" syncing on.Disabled
PolicySettingComment
Do not sync browser settingsEnabled
Allow users to turn "browser" syncing on.Disabled
PolicySettingComment
Do not sync desktop personalizationEnabled
Allow users to turn "desktop personalization" syncing on.Disabled
PolicySettingComment
Do not sync on metered connectionsEnabled
Do not sync other Windows settingsEnabled
Allow users to turn "other Windows settings" syncing on.Disabled
PolicySettingComment
Do not sync passwordsEnabled
Allow users to turn "passwords" syncing on.Disabled
PolicySettingComment
Do not sync personalizeEnabled
Allow users to turn "personalize" syncing on.Disabled
PolicySettingComment
Do not sync start settingsEnabled
Allow users to turn "start layout" syncing on.Disabled
Windows Components/Windows Game Recording and Broadcasting
PolicySettingComment
Enables or disables Windows Game Recording and BroadcastingDisabled
Windows Components/Windows Ink Workspace
PolicySettingComment
Allow Windows Ink WorkspaceEnabled
Choose one of the following actionsDisabled
Preferences
Windows Settings
Registry
DisableStoreApps (Order: 1)
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Policies\Microsoft\WindowsStore
Value nameDisableStoreApps
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
EnableMtcUvc (Order: 2)
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSoftware\Microsoft\Windows NT\CurrentVersion\MTCUVC
Value nameEnableMtcUvc
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
SetDisablePauseUXAccess (Order: 3)
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
Value nameSetDisablePauseUXAccess
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Control Panel Settings
Scheduled Tasks
Scheduled Task (At least Windows 7) (Name: OneDriveRemove on Login)
OneDriveRemove on Login (Order: 1)
General
ActionDelete
Task
Name OneDriveRemove on Login
Author EMEA\tentolouris.5
Description
Run only when user is logged on
GroupId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.3
Enabled Yes
Actions
1. Start a program
Program/script \\grkalfs01\netconfigfiles\GlobalSettings\Win81\OneDriveRemove.bat
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
User Configuration (Enabled)
No settings defined.