Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
GR-PO-WIN-C-PMI PC Settings
Data collected on: 2-9-2025 09:03:58
General
Details
Domainemea.tpg.ads
OwnerEMEA\tentolouris.5
Created20-6-2017 14:44:32
Modified29-11-2024 10:09:34
User Revisions0 (AD), 0 (SYSVOL)
Computer Revisions205 (AD), 205 (SYSVOL)
Unique ID{b1787499-aac3-4299-a25f-ada759fa02e8}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
ClientsYesEnabledemea.tpg.ads/GR/Systems/Clients

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
EMEA\GR-L-SEC-Systems Clients PMI Computers
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\Domain AdminsEdit settings, delete, modify securityNo
EMEA\Domain ComputersReadNo
EMEA\GR-G-ORG-OU AdminsEdit settings, delete, modify securityNo
EMEA\GR-L-SEC-Systems Clients PMI ComputersRead (from Security Filtering)No
EMEA\tentolouris.5Edit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersReadNo
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Windows Settings
Scripts
Startup
For this GPO, Script order: Not configured
NameParameters
\\grkalfs01\netconfigfiles\PMI\TPAuxiliaryToolAgent.bat
\\grkalfs01\netconfigfiles\GlobalSettings\WAHA\tpaux_waha.bat
\\grkalfs01\netconfigfiles\GlobalSettings\Setups\AvayaOneXandAgent\AVAYA_Agent_Installation.bat
C:\checkquota\checkquota.bat
Shutdown
For this GPO, Script order: Not configured
NameParameters
\\grkalfs01\netconfigfiles\PMI\TPAuxiliaryToolAgent.bat
Security Settings
Software Restriction Policies
Enforcement
PolicySetting
Apply Software Restriction Policies to the followingAll software files except libraries (such as DLLs)
Apply Software Restriction Policies to the following usersAll users
When applying Software Restriction PoliciesIgnore certificate rules
Designated File Types
File ExtensionFile Type
ADEADE File
ADPADP File
BASBAS File
BATWindows Batch File
CHMCompiled HTML Help file
CMDWindows Command Script
COMMS-DOS Application
CPLControl panel item
CRTSecurity Certificate
EXEApplication
HLPHelp file
HTAHTML Application
INFSetup Information
INSINS File
ISPISP File
LNKShortcut
MDBMDB File
MDEMDE File
MSCMicrosoft Common Console Document
MSIWindows Installer Package
MSPWindows Installer Patch
MSTMST File
OCXActiveX control
PCDPCD File
PIFShortcut to MS-DOS Program
REGRegistration Entries
SCRScreen saver
SHSSHS File
URLInternet Shortcut
VBVisual Basic Source File
WSCWindows Script Component
Trusted Publishers
Trusted publisher managementAllow all administrators and users to manage user's own Trusted Publishers
Certificate verificationNone
Software Restriction Policies/Security Levels
PolicySetting
Default Security LevelUnrestricted
Software Restriction Policies/Additional Rules
Path Rules
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
Security LevelUnrestricted
Description
Date last modified21-6-2017 11:18:58
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
Security LevelUnrestricted
Description
Date last modified21-6-2017 11:18:58
C:\Program Files (x86)\Juniper Networks\
Security LevelUnrestricted
Description
Date last modified21-6-2017 11:19:39
C:\Program Files\Juniper Networks\
Security LevelUnrestricted
Description
Date last modified21-6-2017 11:19:50
C:\Users\%Username%\AppData\Roaming\Juniper Networks\
Security LevelUnrestricted
Description
Date last modified21-6-2017 11:20:02
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Google/Google Chrome
PolicySettingComment
Block access to a list of URLsEnabled
Block access to a list of URLs
https://www.youtube.com/
youtube.com
www.youtube.com
file:///C:/
file:///D:/
chrome://System
chrome://Net-Internals
chrome://Net-export
chrome://Inspect
chrome://Policy
*/c$
Google/Google Chrome/Removed policies
PolicySettingComment
Block access to a list of URLsEnabled
Block access to a list of URLs
https://www.youtube.com/
youtube.com
www.youtube.com
file:///C:/
file:///D:/
chrome://flags
Network/Offline Files
PolicySettingComment
Allow or Disallow use of the Offline Files featureDisabled
Windows Components/File Explorer
PolicySettingComment
Set a default associations configuration fileEnabled
Default Associations Configuration File\\grkalfs01\netconfigfiles\PMI\default_apps.xml
Windows Components/Windows Update/Manage updates offered from Windows Server Update Service
PolicySettingComment
Enable client-side targetingEnabled
Target group name for this computerPMI
Preferences
Windows Settings
Files
File (Target Path: C:\Program Files\TPTools-Apps\ContactStoreDesktop)
ContactStoreDesktop (Order: 1)
General
ActionUpdate
Properties
Source file(s)\\kalfs1.tphellas.legacy\Installers and Apps\ContactStoreDesktop
Destination fileC:\Program Files\TPTools-Apps\ContactStoreDesktop
Suppress errors on individual file actionsEnabled
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveDisabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Control Panel Settings
Local Users and Groups
Group (Name: Users (built-in))
Users (built-in) (Order: 1)
Local Group
ActionUpdate
Properties
Group nameUsers (built-in)
Delete all member usersDisabled
Delete all member groupsEnabled
Add members
EMEA\GR-G-ORG-Remote Admin UsersS-1-5-21-513466819-3096973226-347852806-613115
tpadmin
EMEA\GR-G-ORG-USERS PMI SLAM AccessS-1-5-21-513466819-3096973226-347852806-1300036
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Group (Name: Administrators (built-in))
Administrators (built-in) (Order: 2)
Local Group
ActionUpdate
Properties
Group nameAdministrators (built-in)
Delete all member usersDisabled
Delete all member groupsEnabled
Add members
EMEA\GR-G-ORG-Remote Admin UsersS-1-5-21-513466819-3096973226-347852806-613115
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Scheduled Tasks
Scheduled Task (At least Windows 7) (Name: Shutdown_V1)
Shutdown_V1 (Order: 1)
General
ActionUpdate
Task
Name Shutdown_V1
Author EMEA\tentolouris.5-adm
Description
Run only when user is logged on
GroupId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.3
Enabled Yes
Triggers
1. Daily
Activate 17-2-2020 03:56:26Synchronize across time zones No
Enabled Yes
Recur every 1 days
Actions
1. Start a program
Program/script C:\Windows\System32\shutdown.exe
Arguments /r
Settings
Start the task only if the computer is idle for 1 hour
Wait for idle for Immediately
Stop if the computer ceases to be idle Yes
Restart if the idle state resumes Yes
Start the task only if the computer is on AC power Yes
Stop if the computer switches to battery power Yes
Wake the computer to run this task Yes
Allow task to be run on demand Yes
Stop task if it runs longer than 3 days
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies IgnoreNew
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Scheduled Task (At least Windows 7) (Name: DisableNetowrkSleep)
DisableNetowrkSleep (Order: 2)
General
ActionCreate
Task
Name DisableNetowrkSleep
Author EMEA\tentolouris.5
Description
Run only when user is logged on
GroupId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden Yes
Configure for 1.3
Enabled Yes
Triggers
1. At task creation/modification
Enabled Yes
Actions
1. Start a program
Program/script Powershell.exe
Arguments -ExecutionPolicy Bypass \\kalfs1.tphellas.legacy\netconfigfiles\GlobalSettings\DonotSleepNetwork\DisableNetworkAdapterPnPCapabilities.ps1
Settings
Stop if the computer ceases to be idle Yes
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power Yes
Allow task to be run on demand Yes
Stop task if it runs longer than 8 hours
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies StopExisting
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyYes
Scheduled Task (At least Windows 7) (Name: LandeskStartUP)
LandeskStartUP (Order: 3)
General
ActionDelete
Task
Name LandeskStartUP
Author EMEA\tentolouris.5
Description
Run only when user is logged on
GroupId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.3
Enabled Yes
Actions
1. Start a program
Program/script \\grkalfs01\netconfigfiles\GlobalSettings\Landesk\Landesk_startup.bat
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Scheduled Task (At least Windows 7) (Name: Check Quota Copy)
Check Quota Copy (Order: 4)
General
ActionUpdate
Task
Name Check Quota Copy
Author EMEA\pisogiannakis.5-adm
Description Check Quota Copy
Run only when user is logged on InteractiveToken
UserId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.2
Enabled Yes
Triggers
1. Run at user logon
Delay task for 30 seconds
Activate 30-11-2020 18:55:24Synchronize across time zones No
Enabled Yes
Actions
1. Start a program
Program/script \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Check Quota\copy.bat
Settings
Stop if the computer ceases to be idle No
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power No
Allow task to be run on demand Yes
Stop task if it runs longer than 3 days
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies IgnoreNew
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Scheduled Task (At least Windows 7) (Name: TP calculator copy)
TP calculator copy (Order: 5)
General
ActionUpdate
Task
Name TP calculator copy
Author EMEA\pisogiannakis.5-adm
Description TP calculator copy
Run only when user is logged on InteractiveToken
UserId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.2
Enabled Yes
Triggers
1. Run at user logon
Delay task for 30 seconds
Activate 30-11-2020 18:55:24Synchronize across time zones No
Enabled Yes
Actions
1. Start a program
Program/script \\grkalfs01.emea.tpg.ads\netconfigfiles\PMI\pmi_stopwatch.bat
Settings
Stop if the computer ceases to be idle No
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power No
Allow task to be run on demand Yes
Stop task if it runs longer than 3 days
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies IgnoreNew
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Scheduled Task (At least Windows 7) (Name: Office StartUP update)
Office StartUP update (Order: 6)
General
ActionUpdate
Task
Name Office StartUP update
Author EMEA\tentolouris.5-adm
Description
Run only when user is logged on
GroupId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.2
Enabled Yes
Triggers
1. At startup
Enabled Yes
Actions
1. Start a program
Program/script C:\Windows\System32\cmd.exe
Arguments /c if exist "C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe" ( "C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe" /update user displaylevel=false forceappshutdown=true )
Settings
Stop if the computer ceases to be idle No
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power No
Allow task to be run on demand No
Stop task if it runs longer than Immediately
If the running task does not end when requested, force it to stop No
If the task is already running, then the following rule applies IgnoreNew
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Scheduled Task (At least Windows 7) (Name: Remove_MS3DViewer)
Remove_MS3DViewer (Order: 7)
General
ActionUpdate
Task
Name Remove_MS3DViewer
Author EMEA\tentolouris.5
Description
Run only when user is logged on
GroupId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.3
Enabled Yes
Triggers
1. Run at user logon
Delay task for 30 seconds
Repeat task every 5 minutes for a duration of 30 minutes
Stop all running tasks at end of repetition duration No
Activate 26-3-2021 17:00:02Synchronize across time zones No
Enabled Yes
2. At task creation/modification
Enabled Yes
Actions
1. Start a program
Program/script Powershell.exe
Arguments -ExecutionPolicy Bypass \\grkalfs01\netconfigfiles\GlobalSettings\Setups\RemoveMS3DViewerAPPX\Uninstall_MS3DViewerAPPX.ps1
Settings
Stop if the computer ceases to be idle Yes
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power Yes
Allow task to be run on demand Yes
Run task as soon as possible after a scheduled start is missed Yes
Stop task if it runs longer than 3 days
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies IgnoreNew
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Scheduled Task (At least Windows 7) (Name: Remove_Uninstall_Microsoft.MSPaint)
Remove_Uninstall_Microsoft.MSPaint (Order: 8)
General
ActionUpdate
Task
Name Remove_Uninstall_Microsoft.MSPaint
Author EMEA\tentolouris.5
Description
Run only when user is logged on
GroupId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.3
Enabled Yes
Triggers
1. Run at user logon
Delay task for 30 seconds
Repeat task every 5 minutes for a duration of 30 minutes
Stop all running tasks at end of repetition duration No
Activate 26-3-2021 17:00:02Synchronize across time zones No
Enabled Yes
2. At task creation/modification
Enabled Yes
Actions
1. Start a program
Program/script Powershell.exe
Arguments -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_Microsoft.MSPaint.ps1
Settings
Stop if the computer ceases to be idle Yes
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power Yes
Allow task to be run on demand Yes
Run task as soon as possible after a scheduled start is missed Yes
Stop task if it runs longer than 3 days
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies IgnoreNew
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Scheduled Task (At least Windows 7) (Name: Remove_Uninstall_VP9VideoExtensions)
Remove_Uninstall_VP9VideoExtensions (Order: 10)
General
ActionUpdate
Task
Name Remove_Uninstall_VP9VideoExtensions
Author EMEA\tentolouris.5
Description
Run only when user is logged on
GroupId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.3
Enabled Yes
Triggers
1. Run at user logon
Delay task for 30 seconds
Repeat task every 5 minutes for a duration of 30 minutes
Stop all running tasks at end of repetition duration No
Activate 26-3-2021 17:00:02Synchronize across time zones No
Enabled Yes
2. At task creation/modification
Enabled Yes
Actions
1. Start a program
Program/script Powershell.exe
Arguments -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_VP9VideoExtensions.ps1
Settings
Stop if the computer ceases to be idle Yes
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power Yes
Allow task to be run on demand Yes
Run task as soon as possible after a scheduled start is missed Yes
Stop task if it runs longer than 3 days
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies IgnoreNew
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Remove_Uninstall_VP9VideoExtensions (Order: 9)
General
ActionUpdate
Task
Name Remove_Uninstall_VP9VideoExtensions
Author EMEA\tentolouris.5
Description
Run only when user is logged on
GroupId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.3
Enabled Yes
Triggers
1. Run at user logon
Delay task for 30 seconds
Repeat task every 5 minutes for a duration of 30 minutes
Stop all running tasks at end of repetition duration No
Activate 26-3-2021 17:00:02Synchronize across time zones No
Enabled Yes
2. At task creation/modification
Enabled Yes
Actions
1. Start a program
Program/script Powershell.exe
Arguments -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_VP9VideoExtensions.ps1
Settings
Stop if the computer ceases to be idle Yes
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power Yes
Allow task to be run on demand Yes
Run task as soon as possible after a scheduled start is missed Yes
Stop task if it runs longer than 3 days
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies IgnoreNew
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Scheduled Task (At least Windows 7) (Name: Remove_Uninstall_WebpImageExtension)
Remove_Uninstall_WebpImageExtension (Order: 11)
General
ActionUpdate
Task
Name Remove_Uninstall_WebpImageExtension
Author EMEA\tentolouris.5
Description
Run only when user is logged on
GroupId NT AUTHORITY\SYSTEM
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.3
Enabled Yes
Triggers
1. Run at user logon
Delay task for 30 seconds
Repeat task every 5 minutes for a duration of 30 minutes
Stop all running tasks at end of repetition duration No
Activate 26-3-2021 17:00:02Synchronize across time zones No
Enabled Yes
2. At task creation/modification
Enabled Yes
Actions
1. Start a program
Program/script Powershell.exe
Arguments -ExecutionPolicy Bypass \\grkalfs01.emea.tpg.ads\netconfigfiles\GlobalSettings\Setups\RemoveAPPX\Uninstall_WebpImageExtension.ps1
Settings
Stop if the computer ceases to be idle Yes
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power Yes
Allow task to be run on demand Yes
Run task as soon as possible after a scheduled start is missed Yes
Stop task if it runs longer than 3 days
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies IgnoreNew
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Services
Service (Name: VDIQoSService)
VDIQoSService (Order: 1)
General
Service nameVDIQoSService
ActionStop service
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Service (Name: iClarityQoSService)
iClarityQoSService (Order: 2)
General
Service nameiClarityQoSService
ActionStop service
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
User Configuration (Enabled)
No settings defined.