Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
GR-PO-SEC-C-Windows10 ENTERPRISE Settings
Data collected on: 2-9-2025 09:15:44
General
Details
Domainemea.tpg.ads
OwnerEMEA\tentolouris.5
Created30-7-2018 11:54:12
Modified15-5-2024 09:42:24
User Revisions0 (AD), 0 (SYSVOL)
Computer Revisions198 (AD), 198 (SYSVOL)
Unique ID{6decaeca-5f92-44f8-8bb5-180329d4e824}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
ClientsYesEnabledemea.tpg.ads/GR/Systems/Clients

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
EMEA\GR-L-SEC-Windows Enterprise Control by Applocker
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\Domain AdminsEdit settings, delete, modify securityNo
EMEA\Domain ComputersReadNo
EMEA\GR-G-ORG-OU AdminsEdit settings, delete, modify securityNo
EMEA\GR-L-SEC-Windows Enterprise Control by ApplockerRead (from Security Filtering)No
EMEA\tentolouris.5Edit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersReadNo
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
System Services
Application Identity (Startup Mode: Automatic)
Permissions
No permissions specified
Auditing
No auditing specified
File System
%ProgramFiles%\WindowsApps
Configure this file or folder then: Propagate inheritable permissions to all subfolders and files
Owner
Permissions
TypeNamePermissionApply To
AllowBUILTIN\AdministratorsFull ControlThis folder, subfolders and files
AllowCREATOR OWNERFull ControlSubfolders and files only
AllowNT AUTHORITY\SYSTEMFull ControlThis folder, subfolders and files
AllowBUILTIN\UsersRead and ExecuteThis folder, subfolders and files
AllowAPPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGESRead and ExecuteThis folder, subfolders and files
Allow inheritable permissions from the parent to propagate to this object and all child objectsDisabled
Auditing
No auditing specified
%SystemRoot%\ImmersiveControlPanel
Configure this file or folder then: Propagate inheritable permissions to all subfolders and files
Owner
Permissions
TypeNamePermissionApply To
AllowAPPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGESRead and ExecuteThis folder, subfolders and files
AllowCREATOR OWNERFull ControlSubfolders and files only
AllowNT AUTHORITY\SYSTEMFull ControlThis folder, subfolders and files
AllowBUILTIN\AdministratorsFull ControlThis folder, subfolders and files
AllowBUILTIN\UsersRead and ExecuteThis folder, subfolders and files
Allow inheritable permissions from the parent to propagate to this object and all child objectsDisabled
Auditing
No auditing specified
Application Control Policies
Appx Rules
PolicySetting
Enforce rules of this typeTrue

ActionUserNameRule TypeExceptions
AllowEMEA\GR-L-SEC-Apps Cortana AllowedMicrosoft.Windows.Cortana, from Microsoft CorporationPublisherNo
AllowEMEA\GR-G-ORG-USERS AccountingSigned by *PublisherNo
AllowEMEA\GR-L-SEC-Apps Sticky Notes AllowedMicrosoft.MicrosoftStickyNotes, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps Trello Allowed45273LiamForsyth.PawsforTrello, from Trello, Inc.PublisherNo
AllowEMEA\GR-L-SEC-Apps Calculator AllowedMicrosoft.WindowsCalculator, from Microsoft CorporationPublisherNo
AllowEveryoneMicrosoft.Windows.PeopleExperienceHost, from Microsoft CorporationPublisherNo
AllowBUILTIN\AdministratorsSigned by *PublisherNo
AllowEMEA\GR-L-SEC-Apps MSAccountsControl AllowedMicrosoft.Windows.CloudExperienceHost, from Email, phone, or SkypePublisherNo
AllowEMEA\GR-G-ORG-Remote Admin UsersSigned by *PublisherNo
AllowEveryoneMicrosoft.Windows.StartMenuExperienceHost, from ms-resource:StartMenuExperienceHost/PublisherDisplayNamePublisherNo
AllowEveryonewindows.immersivecontrolpanel, from Microsoft CorporationPublisherNo
AllowEveryoneMicrosoft.Windows.Apprep.ChxApp, from Microsoft CorporationPublisherNo
AllowEveryoneMicrosoft.Windows.ShellExperienceHost, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps OneNote AllowedMicrosoft.Office.OneNote, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps Snip & Sketch AllowedMicrosoft.ScreenSketch, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps Netflix AllowedSigned by Netflix, Inc.PublisherNo
AllowEMEA\GR-L-SEC-Apps Photos AllowedMicrosoft.Windows.Photos, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps 3DPaint AllowedMicrosoft.MSPaint, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps Xbox Game Bar AllowedMicrosoft.XboxGamingOverlay, from Microsoft CorporationPublisherNo
AllowEveryoneMicrosoft.WindowsCalculator, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps Search AllowedMicrosoft.Windows.Search, from Microsoft CorporationPublisherNo
AllowEMEA\GR-G-ORG-IT-Systems-ADMSigned by *PublisherNo
AllowEMEA\GR-L-SEC-Apps MicrosoftSwayMicrosoft.Office.Sway, from Microsoft CorporationPublisherNo
AllowEveryoneWindows.PrintDialog, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps Groove Music AllowedMicrosoft.ZuneMusic, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps Camera AllowedMicrosoft.WindowsCamera, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps DesktopAppInstallerMicrosoft.DesktopAppInstaller, from Microsoft CorporationPublisherNo
AllowEveryoneMSTeams, from MicrosoftPublisherNo
AllowEMEA\GR-L-SEC-Apps MSAccountsControl AllowedMicrosoft.AccountsControl, from Microsoft CorporationPublisherNo
AllowEveryoneMicrosoft.WindowsStore, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps PDF Reader Kdan Mobile Allowed0D9A1B2D.PDFReaderUWP, from Kdan Mobile Software Ltd.PublisherNo
AllowEMEA\GR-L-SEC-Apps OneDrive Allowedmicrosoft.microsoftskydrive, from Microsoft CorporationPublisherNo
AllowEveryoneInputApp, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps MicrosoftSmartCardManagerMicrosoft.MicrosoftSmartCardManager, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps Whiteboard AllowedMicrosoft.Whiteboard, from Microsoft CorporationPublisherNo
AllowEMEA\GR-G-ORG-ITSigned by *PublisherNo
AllowNT AUTHORITY\SYSTEMSigned by *PublisherNo
AllowEveryoneMicrosoft.LockApp, from Microsoft CorporationPublisherNo
AllowEveryoneMicrosoft.AAD.BrokerPlugin, from Assigned by your organizationPublisherNo
AllowEMEA\GR-L-SEC-Apps Win Experience Pack AllowedMicrosoftWindows.Client.CBS, from Microsoft WindowsPublisherNo
AllowEveryoneWavesAudio.MaxxAudioProforDell2019, from Waves AudioPublisherNo
AllowEveryoneMicrosoft.MicrosoftEdge, from Microsoft CorporationPublisherNo
AllowEMEA\GR-L-SEC-Apps Win Experience Pack AllowedMicrosoftWindows.Client.CBS, from Microsoft WindowsPublisherNo
AllowEMEA\GR-L-SEC-Apps HEVCVideoExtensions AllowedMicrosoft.ZuneVideo, from CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USPublisherNo
AllowEMEA\GR-L-SEC-Apps MobilePASS Allowed05EB1CFA.SafeNetMobilePASS, from Gemalto Pte LtdPublisherNo
AllowEMEA\GR-L-SEC-Apps HEVCVideoExtensions AllowedMicrosoft.HEVCVideoExtensions, from CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=USPublisherNo
Dll Rules
No rules of type 'Dll Rules' are defined.
Executable Rules
PolicySetting
Enforce rules of this typeFalse

ActionUserNameRule TypeExceptions
AllowEveryone(Default Rule) All files located in the Program Files folderPathNo
AllowEveryone(Default Rule) All files located in the Windows folderPathNo
AllowBUILTIN\Administrators(Default Rule) All filesPathNo
Windows Installer Rules
PolicySetting
Enforce rules of this typeFalse

No rules of type 'Windows Installer Rules' are defined.
Script Rules
PolicySetting
Enforce rules of this typeFalse

No rules of type 'Script Rules' are defined.
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
System
PolicySettingComment
Specify settings for optional component installation and component repairEnabled
Alternate source file path
Never attempt to download payload from Windows UpdateDisabled
Download repair content and optional features directly from Windows Update instead of Windows Server Update Services (WSUS)Enabled
Windows Components/Store
PolicySettingComment
Turn off the Store applicationDisabled
Windows Components/Windows Update/Manage updates offered from Windows Server Update Service
PolicySettingComment
Do not connect to any Windows Update Internet locationsDisabled
Preferences
Windows Settings
Registry
DisableStoreApps (Order: 1)
General
ActionDelete
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Policies\Microsoft\WindowsStore
Value nameDisableStoreApps
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
User Configuration (Enabled)
No settings defined.