| IT-DefaultDomainPolicy | |
| Data collected on: 2-9-2025 09:25:04 | |
| Domain | emea.tpg.ads |
| Owner | S-1-5-21-513466819-3096973226-347852806-255909 |
| Created | 22-3-2019 11:09:14 |
| Modified | 9-2-2023 14:48:42 |
| User Revisions | 12 (AD), 12 (SYSVOL) |
| Computer Revisions | 120 (AD), 120 (SYSVOL) |
| Unique ID | {6b51324f-8fbc-4c1b-8e5b-5ec7fc486af2} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| IT | No | Enabled | emea.tpg.ads/IT |
| Name |
|---|
| NT AUTHORITY\Authenticated Users |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\IT-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\IT-L-SEC-Delegation Full Access | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| S-1-5-21-513466819-3096973226-347852806-255909 | Edit settings, delete, modify security | No |
| Policy | Setting |
|---|---|
| Audit account logon events | Success, Failure |
| Audit account management | Success, Failure |
| Audit directory service access | Success, Failure |
| Audit logon events | Success, Failure |
| Audit object access | Success, Failure |
| Audit policy change | Success, Failure |
| Audit privilege use | Success, Failure |
| Audit process tracking | Success, Failure |
| Audit system events | Success, Failure |
| Policy | Setting |
|---|---|
| Accounts: Rename administrator account | "tpitadm" |
| Accounts: Rename guest account | "localguest" |
| Policy | Setting |
|---|---|
| Interactive logon: Do not require CTRL+ALT+DEL | Disabled |
| Interactive logon: Don't display last signed-in | Enabled |
| Interactive logon: Message text for users attempting to log on | Questo sistema è di proprietà di Teleperformance e dovrà essere usato nel rispetto delle procedure interne in vigore., La Società si riserva la possibilità di effettuare eventuali verifiche per ragioni di sicurezza. |
| Interactive logon: Message title for users attempting to log on | "Legal Notice" |
| Interactive logon: Prompt user to change password before expiration | 14 days |
| Interactive logon: Require Windows Hello for Business or smart card | Disabled |
| Policy | Setting |
|---|---|
| Microsoft network client: Digitally sign communications (always) | Enabled |
| Microsoft network client: Digitally sign communications (if server agrees) | Enabled |
| Policy | Setting |
|---|---|
| Microsoft network server: Digitally sign communications (always) | Enabled |
| Microsoft network server: Digitally sign communications (if client agrees) | Enabled |
| Policy | Setting |
|---|---|
| Network access: Allow anonymous SID/Name translation | Disabled |
| Network access: Do not allow storage of passwords and credentials for network authentication | Enabled |
| Network access: Let Everyone permissions apply to anonymous users | Disabled |
| Policy | Setting |
|---|---|
| Network security: Do not store LAN Manager hash value on next password change | Enabled |
| Network security: Force logoff when logon hours expire | Disabled |
| Network security: LAN Manager authentication level | Send NTLMv2 response only. Refuse LM & NTLM |
| Policy | Setting |
|---|---|
| Shutdown: Clear virtual memory pagefile | Enabled |
| Policy | Setting |
|---|---|
| Maximum application log size | 110656 kilobytes |
| Maximum security log size | 110656 kilobytes |
| Maximum system log size | 110656 kilobytes |
| Prevent local guests group from accessing application log | Enabled |
| Prevent local guests group from accessing security log | Enabled |
| Prevent local guests group from accessing system log | Enabled |
| Retain security log | 7 days |
| Retention method for application log | As needed |
| Retention method for security log | By days |
| Retention method for system log | As needed |
| Policy | Setting |
|---|---|
| Audit Credential Validation | Success, Failure |
| Audit Kerberos Authentication Service | Success, Failure |
| Audit Kerberos Service Ticket Operations | Success, Failure |
| Audit Other Account Logon Events | Success, Failure |
| Policy | Setting |
|---|---|
| Audit Computer Account Management | Success, Failure |
| Audit Security Group Management | Success |
| Audit User Account Management | Success |
| Policy | Setting |
|---|---|
| Audit Process Creation | Success, Failure |
| Audit Process Termination | Success, Failure |
| Policy | Setting |
|---|---|
| Audit Account Lockout | Success, Failure |
| Audit Logoff | Success, Failure |
| Audit Logon | Success, Failure |
| Audit Special Logon | Success, Failure |
| Policy | Setting |
|---|---|
| Audit Audit Policy Change | Success, Failure |
| Audit Authentication Policy Change | Success, Failure |
| Policy | Setting |
|---|---|
| Audit Sensitive Privilege Use | Success, Failure |
| Policy | Setting |
|---|---|
| Audit IPsec Driver | Success, Failure |
| Audit Security State Change | Success, Failure |
| Audit Security System Extension | Success, Failure |
| Audit System Integrity | Success, Failure |
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Enable screen saver | Enabled | |||||||
| Force specific screen saver | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Password protect the screen saver | Enabled | |||||||
| Prevent changing color and appearance | Enabled | |||||||
| Prevent changing desktop background | Enabled | |||||||
| Prevent changing screen saver | Enabled | |||||||
| Screen saver timeout | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Desktop Wallpaper | Enabled | |||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Enable Active Desktop | Enabled | |||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Prohibit changes | Enabled | |||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Turn off Autoplay | Enabled | |||
| ||||