| GR-PO-WIN-C-EFKA PC Settings | |
| Data collected on: 2-9-2025 09:59:01 | |
| Domain | emea.tpg.ads |
| Owner | S-1-5-21-513466819-3096973226-347852806-624555 |
| Created | 29-6-2021 16:32:02 |
| Modified | 25-4-2024 09:15:30 |
| User Revisions | 0 (AD), 0 (SYSVOL) |
| Computer Revisions | 61 (AD), 61 (SYSVOL) |
| Unique ID | {9ce0735a-6ce9-4c3f-aaa4-68b3176da7d9} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | Yes | Enabled | emea.tpg.ads/GR/Systems/Clients |
| Name |
|---|
| EMEA\GR-L-SEC-Systems Clients EFKA Computers |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\Domain Computers | Read | No |
| EMEA\GR-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\GR-L-SEC-Systems Clients EFKA Computers | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| S-1-5-21-513466819-3096973226-347852806-624555 | Edit settings, delete, modify security | No |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Set a default associations configuration file | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Intranet Zone Template | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Access data sources across domains | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow active content over restricted protocols to access my computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow active scripting | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow binary and script behaviors | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow cut, copy or paste operations from the clipboard via script | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow drag and drop or copy and paste files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow file downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow font downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow installation of desktop items | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XAML Browser Applications | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XAML files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XPS files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow META REFRESH | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow only approved domains to use ActiveX controls without prompt | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow only approved domains to use the TDC ActiveX control | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow scripting of Internet Explorer WebBrowser controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow script-initiated windows without size or position constraints | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow scriptlets | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow updates to status bar via script | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow video and animation on a webpage that uses an older media player | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow websites to open windows without status bar or Address bar | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow websites to prompt for information by using scripted windows | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Automatic prompting for ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Automatic prompting for file downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Display mixed content | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Do not prompt for client certificate selection when no certificates or only one certificate exists. | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Download signed ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Download unsigned ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Enable MIME Sniffing | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Include local path when user is uploading files to a server | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Initialize and script ActiveX controls not marked as safe | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Java permissions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Launching applications and files in an IFRAME | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Logon options | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Navigate windows and frames across different domains | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run .NET Framework-reliant components not signed with Authenticode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run .NET Framework-reliant components signed with Authenticode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run ActiveX controls and plugins | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Script ActiveX controls marked safe for scripting | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Scripting of Java applets | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Software channel permissions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Submit non-encrypted form data | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off .NET Framework Setup | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off first-run prompt | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on Cross-Site Scripting Filter | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on Protected Mode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on SmartScreen Filter scan | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Use Pop-up Blocker | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Userdata persistence | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Web sites in less privileged Web content zones can navigate into this zone | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Enable client-side targeting | Enabled | |||
| ||||
| Stop processing items on this extension if an error occurs on this item | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tpg.ads |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tpg.ads\emea |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tpg.ads\emea |
| Value name | * |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tpg.ads |
| Value name | * |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grkalfs01 |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grkalfs01 |
| Value name | * |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Group name | Administrators (built-in) |
| Delete all member users | Disabled |
| Delete all member groups | Enabled |
| EMEA\GR-G-ORG-Remote Admin Users | S-1-5-21-513466819-3096973226-347852806-613115 |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Group name | Users (built-in) |
| Delete all member users | Disabled |
| Delete all member groups | Enabled |
| EMEA\GR-G-ORG-Remote Admin Users | S-1-5-21-513466819-3096973226-347852806-613115 |
| tpadmin | |
| EMEA\GR-G-ORG-USERS EFKA ACM | S-1-5-21-513466819-3096973226-347852806-890821 |
| EMEA\GR-G-ORG-USERS EFKA Admin | S-1-5-21-513466819-3096973226-347852806-890823 |
| EMEA\GR-G-ORG-USERS EFKA Agents | S-1-5-21-513466819-3096973226-347852806-890825 |
| EMEA\GR-G-ORG-USERS EFKA CCM | S-1-5-21-513466819-3096973226-347852806-890820 |
| EMEA\GR-G-ORG-USERS EFKA QA | S-1-5-21-513466819-3096973226-347852806-890824 |
| EMEA\GR-G-ORG-USERS EFKA Supervisors | S-1-5-21-513466819-3096973226-347852806-890822 |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Host_File_Copy | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. Run at user logon | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 5 minutes for a duration of 1 hour | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 6-4-2020 14:33:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | \\emea.tpg.ads\GR\Kalithea\Personal\Profiles\EFKA\Hosts_File\CopyHostFile_EFKA.bat |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Name | Run Admin Infinity | |||
| Author | EMEA\tentolouris.5-adm | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.2 | |||
| Enabled | Yes |
| 1. At task creation/modification | ||||
| Expire | 31-8-2021 15:21:35 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | \\grkalfs01\Installers and Apps\Infinity\Live45\Infinity.Launcher.exe |
| Stop if the computer ceases to be idle | No | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | No | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | Immediately | |||
| If the running task does not end when requested, force it to stop | No | |||
| If the task is not scheduled to run again, delete it after | 30 days | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | TPAUX_File_Copy | |||
| Author | EMEA\tentolouris.5 | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. At task creation/modification | ||||
| Delay task for | 30 seconds | |||
| Repeat task every 30 minutes for a duration of 1 hour | ||||
| Stop all running tasks at end of repetition duration | No | |||
| Activate | 6-4-2020 14:33:02 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | \\grkalfs01\netconfigfiles\GlobalSettings\WAHA\tpaux_waha.bat |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 3 days | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Delete |
| Name | Landesk Startup | |||
| Author | EMEA\tentolouris.5-adm | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | NT AUTHORITY\SYSTEM | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.2 | |||
| Enabled | Yes |
| 1. Start a program | ||||
| Program/script | \\grkalfs01\netconfigfiles\GlobalSettings\Landesk\Landesk_startup.bat |
| Stop processing items on this extension if an error occurs on this item | No |
| Apply once and do not reapply | No |