Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
IT-PO-WIN-C-Customer Computer Policy
Data collected on: 2-9-2025 09:28:25
General
Details
Domainemea.tpg.ads
OwnerS-1-5-21-513466819-3096973226-347852806-255910
Created18-6-2019 13:00:30
Modified8-5-2024 16:57:16
User Revisions6 (AD), 6 (SYSVOL)
Computer Revisions60 (AD), 60 (SYSVOL)
Unique ID{4e219cd1-0961-47f1-a142-2e9f059afe34}
GPO StatusUser settings disabled
Links
LocationEnforcedLink StatusPath
ClientsNoEnabledemea.tpg.ads/IT/Systems/Clients

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
EMEA\IT-L-SEC-Computer Customers
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\Domain AdminsEdit settings, delete, modify securityNo
EMEA\IT-G-ORG-OU AdminsEdit settings, delete, modify securityNo
EMEA\IT-L-SEC-Computer CustomersRead (from Security Filtering)No
EMEA\IT-L-SEC-Delegation Full AccessEdit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersReadNo
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
S-1-5-21-513466819-3096973226-347852806-255910Edit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Windows Settings
Scripts
Startup
For this GPO, Script order: Not configured
NameParameters
\\ittarfs01\IT\Taranto\Personal\Configuration\Scripts\Uninstall-Paint3DApp.ps1-DeploymentType "Uninstall" -DeployMode "Silent"
Shutdown
For this GPO, Script order: Not configured
NameParameters
\\ittarfs01\IT\Taranto\Personal\Configuration\Scripts\Uninstall-Paint3DApp.ps1-DeploymentType "Uninstall" -DeployMode "Silent"
Security Settings
Local Policies/Security Options
User Account Control
PolicySetting
User Account Control: Admin Approval Mode for the Built-in Administrator accountEnabled
User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktopDisabled
User Account Control: Behavior of the elevation prompt for administrators in Admin Approval ModePrompt for credentials
User Account Control: Behavior of the elevation prompt for standard usersAutomatically deny elevation requests
User Account Control: Detect application installations and prompt for elevationEnabled
User Account Control: Only elevate UIAccess applications that are installed in secure locationsEnabled
User Account Control: Run all administrators in Admin Approval ModeEnabled
User Account Control: Switch to the secure desktop when prompting for elevationEnabled
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Google/Google Chrome/Removed policies
PolicySettingComment
Configure extension installation blocklistEnabled
Extension IDs the user should be prevented from installing (or * for all)
*
OneDrive
PolicySettingComment
Use OneDrive Files On-DemandEnabled
System/OS Policies
PolicySettingComment
Allow publishing of User ActivitiesDisabled
System/Remote Assistance
PolicySettingComment
Configure Offer Remote AssistanceEnabled
Permit remote control of this computer:Allow helpers to remotely control the computer
Helpers:
IT-L-SEC-Delegation Local Administration Rights Client Systems
System/Removable Storage Access
PolicySettingComment
All Removable Storage classes: Deny all accessEnabled
All Removable Storage: Allow direct access in remote sessionsEnabled
Removable Disks: Deny execute accessEnabled
Removable Disks: Deny read accessEnabled
Removable Disks: Deny write accessEnabled
WPD Devices: Deny read accessEnabled
WPD Devices: Deny write accessEnabled
System/System Restore
PolicySettingComment
Turn off System RestoreEnabled
System/User Profiles
PolicySettingComment
Delete user profiles older than a specified number of days on system restartEnabled
Delete user profiles older than (days)20
Windows Components/AutoPlay Policies
PolicySettingComment
Turn off AutoplayEnabled
Turn off Autoplay on:All drives
Windows Components/File Explorer
PolicySettingComment
Set a default associations configuration fileEnabled
Default Associations Configuration File\\ittarfs01\Configuration\Workstation\defaultassociations.xml
Windows Components/News and interests
PolicySettingComment
Enable news and interests on the taskbarDisabled
Windows Components/OneDrive
PolicySettingComment
Prevent the usage of OneDrive for file storageEnabled
Prevent the usage of OneDrive for file storage on Windows 8.1Enabled
Windows Components/Remote Desktop Services/Remote Desktop Session Host/Connections
PolicySettingComment
Allow users to connect remotely by using Remote Desktop ServicesEnabled
Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security
PolicySettingComment
Require user authentication for remote connections by using Network Level AuthenticationEnabled
Windows Components/Store
PolicySettingComment
Turn off the offer to update to the latest version of WindowsEnabled
Turn off the Store applicationEnabled
User Configuration (Disabled)
No settings defined.