Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
GR-PO-WIN-C-Priviledged Unrestricted PC Settings
Data collected on: 2-9-2025 09:28:37
General
Details
Domainemea.tpg.ads
OwnerEMEA\tentolouris.5
Created20-6-2019 17:03:02
Modified23-1-2025 13:26:24
User Revisions0 (AD), 0 (SYSVOL)
Computer Revisions74 (AD), 74 (SYSVOL)
Unique ID{fd966b7e-e1cb-4243-826e-85eab1b50da0}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
ClientsYesEnabledemea.tpg.ads/GR/Systems/Clients

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
EMEA\GR-L-SEC-Priviledged Unrestricted PC Settings
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\Domain AdminsEdit settings, delete, modify securityNo
EMEA\Domain ComputersReadNo
EMEA\GR-G-ORG-OU AdminsEdit settings, delete, modify securityNo
EMEA\GR-L-SEC-Priviledged Unrestricted PC SettingsRead (from Security Filtering)No
EMEA\tentolouris.5Edit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersReadNo
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Local Policies/Security Options
Interactive Logon
PolicySetting
Interactive logon: Do not require CTRL+ALT+DELEnabled
Interactive logon: Don't display last signed-inDisabled
Application Control Policies
Appx Rules
ActionUserNameRule TypeExceptions
AllowEveryoneSigned by *PublisherNo
Dll Rules
No rules of type 'Dll Rules' are defined.
Executable Rules
ActionUserNameRule TypeExceptions
AllowEveryone(Default Rule) All files located in the Program Files folderPathNo
AllowEveryone(Default Rule) All files located in the Windows folderPathNo
AllowEveryone*PathNo
AllowBUILTIN\Administrators(Default Rule) All filesPathNo
Windows Installer Rules
ActionUserNameRule TypeExceptions
AllowEveryone(Default Rule) All digitally signed Windows Installer filesPublisherNo
AllowEveryone*PathNo
AllowEveryone(Default Rule) All Windows Installer files in %systemdrive%\Windows\InstallerPathNo
AllowBUILTIN\Administrators(Default Rule) All Windows Installer filesPathNo
Script Rules
ActionUserNameRule TypeExceptions
AllowEveryone(Default Rule) All scripts located in the Program Files folderPathNo
AllowEveryone*PathNo
AllowEveryone(Default Rule) All scripts located in the Windows folderPathNo
AllowBUILTIN\Administrators(Default Rule) All scriptsPathNo
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Control Panel
PolicySettingComment
Settings Page VisibilityDisabled
Control Panel/Personalization
PolicySettingComment
Force a specific default lock screen and logon imageDisabled
Prevent changing lock screen and logon imageDisabled
Prevent enabling lock screen cameraDisabled
Prevent enabling lock screen slide showDisabled
System/Power Management
PolicySettingComment
Select an active power planDisabled
System/Power Management/Button Settings
PolicySettingComment
Select the lid switch action (on battery)Disabled
Select the lid switch action (plugged in)Disabled
Select the Power button action (on battery)Disabled
Select the Power button action (plugged in)Disabled
Select the Sleep button action (on battery)Disabled
Select the Sleep button action (plugged in)Disabled
Select the Start menu Power button action (on battery)Disabled
Select the Start menu Power button action (plugged in)Disabled
System/Power Management/Sleep Settings
PolicySettingComment
Allow standby states (S1-S3) when sleeping (on battery)Enabled
Allow standby states (S1-S3) when sleeping (plugged in)Enabled
Specify the system hibernate timeout (on battery)Disabled
Specify the system hibernate timeout (plugged in)Disabled
Specify the system sleep timeout (on battery)Disabled
Specify the system sleep timeout (plugged in)Disabled
Specify the unattended sleep timeout (on battery)Disabled
Specify the unattended sleep timeout (plugged in)Disabled
Turn off hybrid sleep (on battery)Disabled
Turn off hybrid sleep (plugged in)Disabled
Turn on the ability for applications to prevent sleep transitions (on battery)Disabled
Turn on the ability for applications to prevent sleep transitions (plugged in)Disabled
Windows Components/Add features to Windows 10
PolicySettingComment
Prevent the wizard from running.Disabled
Windows Components/App Privacy
PolicySettingComment
Let Windows apps access account informationEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access an eye tracker deviceEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access call historyEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access contactsEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access diagnostic information about other appsEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access emailEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access locationEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access messagingEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access motionEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access notificationsEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access TasksEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access the calendarEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access the cameraEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access the microphoneEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access trusted devicesEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps communicate with unpaired devicesEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps control radiosEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps make phone callsEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps run in the backgroundEnabled
Default for all apps:User is in control
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
Windows Components/App runtime
PolicySettingComment
Block launching desktop apps associated with a file.Disabled
Block launching desktop apps associated with a URI schemeDisabled
Block launching Universal Windows apps with Windows Runtime API access from hosted content.Disabled
Windows Components/Cloud Content
PolicySettingComment
Do not show Windows tipsDisabled
Turn off Microsoft consumer experiencesDisabled
Windows Components/Desktop Gadgets
PolicySettingComment
Turn off desktop gadgetsDisabled
Turn Off user-installed desktop gadgetsDisabled
Windows Components/File Explorer
PolicySettingComment
Show hibernate in the power options menuEnabled
Show sleep in the power options menuEnabled
Windows Components/Windows Ink Workspace
PolicySettingComment
Allow Windows Ink WorkspaceEnabled
Choose one of the following actionsOn
Windows Components/Windows Media Center
PolicySettingComment
Do not allow Windows Media Center to runDisabled
Windows Components/Windows Update/Manage updates offered from Windows Server Update Service
PolicySettingComment
Enable client-side targetingEnabled
Target group name for this computerUpperManagement
Preferences
Windows Settings
Registry
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/MTCUVC
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: EnableMtcUvc
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC
Value nameEnableMtcUvc
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
User Configuration (Enabled)
No settings defined.