| GR-PO-WIN-C-Servers Extra Hardening SQL | |
| Data collected on: 2-9-2025 10:49:23 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\tentolouris.5-adm |
| Created | 4-10-2022 11:01:32 |
| Modified | 9-2-2023 16:10:40 |
| User Revisions | 0 (AD), 0 (SYSVOL) |
| Computer Revisions | 87 (AD), 87 (SYSVOL) |
| Unique ID | {53233848-14f2-4c4b-85d9-a6d6f3c214f1} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Servers | Yes | Enabled | emea.tpg.ads/GR/Systems/Servers |
| Name |
|---|
| EMEA\GRATHDB03$ |
| EMEA\GRATHDB04$ |
| EMEA\GRATHDB05$ |
| EMEA\GRATHDEVDB$ |
| EMEA\GRATHPAYROLL01$ |
| EMEA\GRATHRPT01$ |
| EMEA\GRATHSDEDB$ |
| EMEA\GRATHSTAGE$ |
| EMEA\GRATHTPDASHDB$ |
| EMEA\GR-L-SEC-Servers Extra Hardening SQL |
| EMEA\GRMKTDB03$ |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\GRATHDB03$ | Read (from Security Filtering) | No |
| EMEA\GRATHDB04$ | Read (from Security Filtering) | No |
| EMEA\GRATHDB05$ | Read (from Security Filtering) | No |
| EMEA\GRATHDEVDB$ | Read (from Security Filtering) | No |
| EMEA\GRATHPAYROLL01$ | Read (from Security Filtering) | No |
| EMEA\GRATHRPT01$ | Read (from Security Filtering) | No |
| EMEA\GRATHSDEDB$ | Read (from Security Filtering) | No |
| EMEA\GRATHSTAGE$ | Read (from Security Filtering) | No |
| EMEA\GRATHTPDASHDB$ | Read (from Security Filtering) | No |
| EMEA\GR-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\GR-L-SEC-Servers Extra Hardening SQL | Read (from Security Filtering) | No |
| EMEA\GRMKTDB03$ | Read (from Security Filtering) | No |
| EMEA\tentolouris.5-adm | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Policy | Setting |
|---|---|
| Account lockout duration | 60 minutes |
| Account lockout threshold | 6 invalid logon attempts |
| Reset account lockout counter after | 30 minutes |
| Policy | Setting |
|---|---|
| Audit object access | Success, Failure |
| Policy | Setting |
|---|---|
| Access this computer from the network | BUILTIN\Administrators, NT AUTHORITY\Authenticated Users |
| Allow log on locally | BUILTIN\Administrators |
| Allow log on through Terminal Services | BUILTIN\Administrators, BUILTIN\Remote Desktop Users |
| Change the system time | BUILTIN\Administrators, NT AUTHORITY\LOCAL SERVICE |
| Deny access to this computer from the network | NT AUTHORITY\ANONYMOUS LOGON, BUILTIN\Guests |
| Force shutdown from a remote system | BUILTIN\Administrators |
| Increase scheduling priority | Increase Schedulling priority, BUILTIN\Administrators |
| Load and unload device drivers | BUILTIN\Administrators |
| Manage auditing and security log | BUILTIN\Administrators, Manage Auditing and Security Log |
| Modify firmware environment values | BUILTIN\Administrators |
| Perform volume maintenance tasks | BUILTIN\Administrators, Perform Volume Maintenance Tasks |
| Profile single process | BUILTIN\Administrators |
| Remove computer from docking station | BUILTIN\Administrators |
| Restore files and directories | BUILTIN\Administrators |
| Shut down the system | BUILTIN\Administrators |
| Take ownership of files or other objects | BUILTIN\Administrators |
| Action | Create |
| Group name | Manage Auditing and Security Log |
| Description | Manage Auditing and Security Log |
| Delete all member users | Disabled |
| Delete all member groups | Disabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Group name | Perform Volume Maintenance Tasks |
| Description | Perform Volume Maintenance Tasks |
| Delete all member users | Disabled |
| Delete all member groups | Disabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Group name | Administrators (built-in) |
| Delete all member users | Disabled |
| Delete all member groups | Disabled |
| EMEA\Domain Admins | S-1-5-21-513466819-3096973226-347852806-512 |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Group name | Logon as a Service |
| Description | Logon as a Service |
| Delete all member users | Disabled |
| Delete all member groups | Disabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Group name | Logon As Batch |
| Description | Logon As Batch |
| Delete all member users | Disabled |
| Delete all member groups | Disabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Group name | Increase Schedulling priority |
| Description | Increase Schedulling priority |
| Delete all member users | Disabled |
| Delete all member groups | Disabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |