| IT-PO-WIN-C-Customer Computer Policy | |
| Data collected on: 2-9-2025 09:28:25 | |
| Domain | emea.tpg.ads |
| Owner | S-1-5-21-513466819-3096973226-347852806-255910 |
| Created | 18-6-2019 13:00:30 |
| Modified | 8-5-2024 16:57:16 |
| User Revisions | 6 (AD), 6 (SYSVOL) |
| Computer Revisions | 60 (AD), 60 (SYSVOL) |
| Unique ID | {4e219cd1-0961-47f1-a142-2e9f059afe34} |
| GPO Status | User settings disabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | No | Enabled | emea.tpg.ads/IT/Systems/Clients |
| Name |
|---|
| EMEA\IT-L-SEC-Computer Customers |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\IT-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\IT-L-SEC-Computer Customers | Read (from Security Filtering) | No |
| EMEA\IT-L-SEC-Delegation Full Access | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| S-1-5-21-513466819-3096973226-347852806-255910 | Edit settings, delete, modify security | No |
| Name | Parameters |
|---|---|
| \\ittarfs01\IT\Taranto\Personal\Configuration\Scripts\Uninstall-Paint3DApp.ps1 | -DeploymentType "Uninstall" -DeployMode "Silent" |
| Name | Parameters |
|---|---|
| \\ittarfs01\IT\Taranto\Personal\Configuration\Scripts\Uninstall-Paint3DApp.ps1 | -DeploymentType "Uninstall" -DeployMode "Silent" |
| Policy | Setting |
|---|---|
| User Account Control: Admin Approval Mode for the Built-in Administrator account | Enabled |
| User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop | Disabled |
| User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode | Prompt for credentials |
| User Account Control: Behavior of the elevation prompt for standard users | Automatically deny elevation requests |
| User Account Control: Detect application installations and prompt for elevation | Enabled |
| User Account Control: Only elevate UIAccess applications that are installed in secure locations | Enabled |
| User Account Control: Run all administrators in Admin Approval Mode | Enabled |
| User Account Control: Switch to the secure desktop when prompting for elevation | Enabled |
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Configure extension installation blocklist | Enabled | |||||
| ||||||
| Policy | Setting | Comment |
|---|---|---|
| Use OneDrive Files On-Demand | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow publishing of User Activities | Disabled |
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Configure Offer Remote Assistance | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment |
|---|---|---|
| All Removable Storage classes: Deny all access | Enabled | |
| All Removable Storage: Allow direct access in remote sessions | Enabled | |
| Removable Disks: Deny execute access | Enabled | |
| Removable Disks: Deny read access | Enabled | |
| Removable Disks: Deny write access | Enabled | |
| WPD Devices: Deny read access | Enabled | |
| WPD Devices: Deny write access | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off System Restore | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Delete user profiles older than a specified number of days on system restart | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Turn off Autoplay | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Set a default associations configuration file | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Enable news and interests on the taskbar | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent the usage of OneDrive for file storage | Enabled | |
| Prevent the usage of OneDrive for file storage on Windows 8.1 | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow users to connect remotely by using Remote Desktop Services | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Require user authentication for remote connections by using Network Level Authentication | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off the offer to update to the latest version of Windows | Enabled | |
| Turn off the Store application | Enabled |