Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
IT-PO-WIN-U-Powershell Block
Data collected on: 2-9-2025 09:30:04
General
Details
Domainemea.tpg.ads
OwnerS-1-5-21-513466819-3096973226-347852806-255910
Created23-7-2019 11:24:12
Modified15-2-2024 18:22:58
User Revisions15 (AD), 15 (SYSVOL)
Computer Revisions0 (AD), 0 (SYSVOL)
Unique ID{0c76b427-2e71-458f-8589-ddd41c68ec83}
GPO StatusComputer settings disabled
Links
LocationEnforcedLink StatusPath
AgentsNoEnabledemea.tpg.ads/IT/Agents
StaffNoEnabledemea.tpg.ads/IT/Staff

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
EMEA\IT-L-SEC-Powershell Block
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\Domain AdminsEdit settings, delete, modify securityNo
EMEA\IT-G-ORG-OU AdminsEdit settings, delete, modify securityNo
EMEA\IT-L-SEC-Delegation Full AccessEdit settings, delete, modify securityNo
EMEA\IT-L-SEC-Powershell BlockRead (from Security Filtering)No
NT AUTHORITY\Authenticated UsersReadNo
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
Computer Configuration (Disabled)
No settings defined.
User Configuration (Enabled)
Policies
Windows Settings
Security Settings
Software Restriction Policies
Enforcement
PolicySetting
Apply Software Restriction Policies to the followingAll software files except libraries (such as DLLs)
Apply Software Restriction Policies to the following usersAll users
When applying Software Restriction PoliciesIgnore certificate rules
Designated File Types
File ExtensionFile Type
ADEADE File
ADPADP File
BASBAS File
BATWindows Batch File
CHMCompiled HTML Help file
CMDWindows Command Script
COMMS-DOS Application
CPLControl panel item
CRTSecurity Certificate
EXEApplication
HLPHelp file
HTAHTML Application
INFSetup Information
INSINS File
ISPISP File
LNKShortcut
MDBMDB File
MDEMDE File
MSCMicrosoft Common Console Document
MSIWindows Installer Package
MSPWindows Installer Patch
MSTMST File
OCXActiveX control
PCDPCD File
PIFShortcut to MS-DOS Program
REGRegistration Entries
SCRScreen saver
SHSSHS File
URLInternet Shortcut
VBVisual Basic Source File
WSCWindows Script Component
Trusted Publishers
Trusted publisher managementAllow all administrators and users to manage user's own Trusted Publishers
Certificate verificationNone
Software Restriction Policies/Security Levels
PolicySetting
Default Security LevelUnrestricted
Software Restriction Policies/Additional Rules
Hash Rules
PowerShell.EXE (6.3.9600.17415); POWERSHELL; Windows PowerShell; Microsoft® Windows® Operating System; Microsoft Corporation
Security LevelDisallowed
Description
Date last modified23-7-2019 11:26:24
powershell_ise.EXE (6.3.9600.17399); POWERSHELL_ISE; Windows PowerShell ISE; Microsoft® Windows® Operating System; Microsoft Corporation
Security LevelDisallowed
Description
Date last modified23-7-2019 11:26:33
Path Rules
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
Security LevelUnrestricted
Description
Date last modified23-7-2019 11:25:21
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
Security LevelUnrestricted
Description
Date last modified23-7-2019 11:25:21
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Security LevelDisallowed
Description
Date last modified23-7-2019 11:26:56
C:\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe
Security LevelDisallowed
Description
Date last modified23-7-2019 11:27:05
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
System
PolicySettingComment
Don't run specified Windows applicationsEnabled
List of disallowed applications
powershell.exe
powershell_ise.exe
taskmgr.exe
StikyNot.exe
notepad.exe
helppane.exe
wordpad.exe
cmd.exe
conf.exe
command.com
HELPCTR.EXE
msimn.exe
wmplayer.exe
Winhlp32.exe
ftp.exe
regedit.exe
PolicySettingComment
Restrict these programs from being launched from HelpEnabled
Enter executables separated by commas:regedit.exe,cmd.exe,poweshell.exe,powershell_ise.exe,ftp.exe
Example: calc.exe,paint.exe