| IT-PO-WIN-U-Local_folder_access Agent Policy | |
| Data collected on: 2-9-2025 10:06:16 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\padiglione.5-adm |
| Created | 23-11-2021 10:58:36 |
| Modified | 9-2-2023 15:11:56 |
| User Revisions | 10 (AD), 10 (SYSVOL) |
| Computer Revisions | 1 (AD), 1 (SYSVOL) |
| Unique ID | {5eb84dbf-ecc1-45f5-80ce-09987abe61a5} |
| GPO Status | Computer settings disabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Agents | No | Enabled | emea.tpg.ads/IT/Agents |
| Name |
|---|
| EMEA\IT-G-ORG-Agents_Localfolders |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\IT-G-ORG-Agents_Localfolders | Read (from Security Filtering) | No |
| EMEA\IT-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\IT-L-SEC-Delegation Full Access | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| S-1-5-21-513466819-3096973226-347852806-255910 | Edit settings, delete, modify security | No |
| Enforcement | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Designated File Types | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Trusted Publishers | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| Policy | Setting |
|---|---|
| Default Security Level | Unrestricted |
| HelpPane.exe (6.3.9600.18722); HelpPane.exe; Microsoft Help and Support; Microsoft® Windows® Operating System; Microsoft Corporation | ||||||
| ||||||
| MSPAINT.EXE (6.3.9600.17415); MSPAINT; Paint; Microsoft® Windows® Operating System; Microsoft Corporation | ||||||
| ||||||
| NOTEPAD.EXE (6.3.9600.17930); Notepad; Notepad; Microsoft® Windows® Operating System; Microsoft Corporation | ||||||
| ||||||
| Taskmgr.exe (6.3.9600.17415); Taskmgr.exe; Task Manager; Microsoft® Windows® Operating System; Microsoft Corporation | ||||||
| ||||||
| WORDPAD.EXE (6.3.9600.19060); wordpad; Windows Wordpad Application; Microsoft® Windows® Operating System; Microsoft Corporation | ||||||
|
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% | ||||||
| ||||||
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% | ||||||
| ||||||
| C:\Program Files\Windows NT\Accessories\wordpad.exe | ||||||
| ||||||
| C:\Windows\helppane.exe | ||||||
| ||||||
| C:\Windows\System32\notepad.exe | ||||||
| ||||||
| C:\Windows\System32\StikyNot.exe | ||||||
| ||||||
| c:\Windows\System32\taskmgr.exe | ||||||
|
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Always open All Control Panel Items when opening Control Panel | Enabled | |||||
| Prohibit access to Control Panel and PC settings | Enabled | |||||
| Settings Page Visibility | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Show only specified Control Panel items | Enabled | |||||
| ||||||
| Policy | Setting | Comment |
|---|---|---|
| Disable the Display Control Panel | Enabled | |
| Hide Settings tab | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide the Programs Control Panel | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not add shares of recently opened documents to Network Locations | Enabled | |
| Don't save settings at exit | Enabled | |
| Hide and disable all items on the desktop | Disabled | |
| Prevent adding, dragging, dropping and closing the Taskbar's toolbars | Enabled | |
| Prohibit adjusting desktop toolbars | Enabled | |
| Prohibit User from manually redirecting Profile Folders | Enabled | |
| Remove Computer icon on the desktop | Enabled | |
| Remove My Documents icon on the desktop | Enabled | |
| Remove Properties from the Computer icon context menu | Enabled | |
| Remove Properties from the Documents icon context menu | Enabled | |
| Remove Properties from the Recycle Bin context menu | Enabled | |
| Remove Recycle Bin icon from desktop | Enabled | |
| Remove the Desktop Cleanup Wizard | Enabled | |
| Turn off Aero Shake window minimizing mouse gesture | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable all items | Disabled | |
| Prohibit adding items | Disabled | |
| Prohibit changes | Disabled | |
| Prohibit closing items | Disabled | |
| Prohibit deleting items | Disabled | |
| Prohibit editing items | Disabled |
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Block access to a list of URLs | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Configure extension installation blocklist | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Add "Run in Separate Memory Space" check box to Run dialog box | Disabled | |||
| Add Logoff to the Start Menu | Enabled | |||
| Add Search Internet link to Start Menu | Disabled | |||
| Clear history of recently opened documents on exit | Enabled | |||
| Do not keep history of recently opened documents | Enabled | |||
| Do not search communications | Enabled | |||
| Do not search for files | Enabled | |||
| Do not search Internet | Enabled | |||
| Do not search programs and Control Panel items | Enabled | |||
| Do not use the search-based method when resolving shell shortcuts | Enabled | |||
| Do not use the tracking-based method when resolving shell shortcuts | Enabled | |||
| Force classic Start Menu | Disabled | |||
| Gray unavailable Windows Installer programs Start Menu shortcuts | Enabled | |||
| Lock the Taskbar | Enabled | |||
| Prevent changes to Taskbar and Start Menu Settings | Enabled | |||
| Prevent grouping of taskbar items | Enabled | |||
| Prevent users from customizing their Start Screen | Enabled | |||
| Prevent users from moving taskbar to another screen dock location | Enabled | |||
| Prevent users from rearranging toolbars | Enabled | |||
| Remove access to the context menus for the taskbar | Enabled | |||
| Remove All Programs list from the Start menu | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands | Enabled | |||
| Remove Balloon Tips on Start Menu items | Enabled | |||
| Remove common program groups from Start Menu | Enabled | |||
| Remove Default Programs link from the Start menu. | Enabled | |||
| Remove Documents icon from Start Menu | Enabled | |||
| Remove Downloads link from Start Menu | Enabled | |||
| Remove Favorites menu from Start Menu | Enabled | |||
| Remove frequent programs list from the Start Menu | Enabled | |||
| Remove Games link from Start Menu | Enabled | |||
| Remove Help menu from Start Menu | Enabled | |||
| Remove Homegroup link from Start Menu | Enabled | |||
| Remove links and access to Windows Update | Enabled | |||
| Remove Music icon from Start Menu | Enabled | |||
| Remove Network Connections from Start Menu | Enabled | |||
| Remove Network icon from Start Menu | Enabled | |||
| Remove Pictures icon from Start Menu | Enabled | |||
| Remove pinned programs from the Taskbar | Enabled | |||
| Remove programs on Settings menu | Enabled | |||
| Remove Recent Items menu from Start Menu | Enabled | |||
| Remove Search Computer link | Enabled | |||
| Remove Search link from Start Menu | Enabled | |||
| Remove the networking icon | Enabled | |||
| Remove user folder link from Start Menu | Enabled | |||
| Remove user's folders from the Start Menu | Enabled | |||
| Turn off notification area cleanup | Enabled | |||
| Turn off personalized menus | Enabled | |||
| Policy | Setting | Comment | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Do not display the Getting Started welcome screen at logon | Enabled | ||||||||||||||||||
| Don't run specified Windows applications | Enabled | ||||||||||||||||||
| |||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||
| Prevent access to registry editing tools | Enabled | ||||||||||||||||||
| |||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||
| Prevent access to the command prompt | Enabled | ||||||||||||||||||
| |||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||
| Restrict these programs from being launched from Help | Enabled | ||||||||||||||||||
| |||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Remove Task Manager | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| All Removable Storage classes: Deny all access | Enabled | |
| CD and DVD: Deny read access | Enabled | |
| CD and DVD: Deny write access | Enabled | |
| Removable Disks: Deny read access | Enabled | |
| Removable Disks: Deny write access | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent the wizard from running. | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Turn off Autoplay | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Display the menu bar in File Explorer | Disabled | |||
| Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon | Disabled | |||
| Do not move deleted files to the Recycle Bin | Enabled | |||
| Hide these specified drives in My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Hides the Manage item on the File Explorer context menu | Enabled | |||
| No Computers Near Me in Network Locations | Enabled | |||
| No Entire Network in Network Locations | Enabled | |||
| Prevent access to drives from My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Prevent users from adding files to the root of their Users Files folder. | Disabled | |||
| Remove "Map Network Drive" and "Disconnect Network Drive" | Enabled | |||
| Remove CD Burning features | Enabled | |||
| Remove File Explorer's default context menu | Enabled | |||
| Remove File menu from File Explorer | Enabled | |||
| Remove Hardware tab | Enabled | |||
| Remove Search button from File Explorer | Enabled | |||
| Remove Security tab | Enabled | |||
| Remove Shared Documents from My Computer | Enabled | |||
| Remove the Search the Internet "Search again" link | Enabled | |||
| Remove UI to change keyboard navigation indicator setting | Enabled | |||
| Remove UI to change menu animation setting | Enabled | |||
| Request credentials for network installations | Enabled | |||
| Turn off caching of thumbnail pictures | Enabled | |||
| Turn off common control and window animations | Enabled | |||
| Turn off display of recent search entries in the File Explorer search box | Enabled | |||
| Turn off Windows Key hotkeys | Enabled | |||
| Turn on Classic Shell | Disabled | |||
| Policy | Setting | Comment |
|---|---|---|
| Restrict the user from entering author mode | Enabled | |
| Restrict users to the explicitly permitted list of snap-ins | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable Directory services | Enabled | |
| Prevent adding Directory servers | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent users from sharing files within their profile. | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Snipping Tool to run | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off the communities features | Enabled | |
| Turn off Windows Mail application | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Media Center to run | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent CD and DVD Media Information Retrieval | Enabled | |
| Prevent Music File Media Information Retrieval | Enabled | |
| Prevent Radio Station Preset Retrieval | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide Network Tab | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Messenger to be run | Enabled | |
| Do not automatically start Windows Messenger initially | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Windows SideShow | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box | Enabled |
| Action | Update |
| Target type | URL |
| Shortcut path | %FavoritesDir%\Password Manager |
| Target URL | https://pm.emea.tpg.ads |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |