| LTVNO-PO-WIN-U-Agents Security Settings | |
| Data collected on: 2-9-2025 09:02:07 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\efimov.6 |
| Created | 1-3-2017 08:25:06 |
| Modified | 12-7-2024 08:53:38 |
| User Revisions | 301 (AD), 301 (SYSVOL) |
| Computer Revisions | 34 (AD), 34 (SYSVOL) |
| Unique ID | {52616f4e-a85e-48dd-b386-122c5b616cf5} |
| GPO Status | Computer settings disabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Agents | No | Disabled | emea.tpg.ads/LT/Agents |
| Staff | No | Enabled | emea.tpg.ads/LT/Staff |
| Name |
|---|
| EMEA\LT-L-SEC-GPO Agents Security Settings |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\efimov.6 | Edit settings, delete, modify security | No |
| EMEA\LT-L-SEC-Delegation Group Policy Objects Modify Access | Edit settings, delete, modify security | No |
| EMEA\LT-L-SEC-GPO Agents Security Settings | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Policy | Setting | Comment |
|---|---|---|
| Always open All Control Panel Items when opening Control Panel | Enabled | |
| Prohibit access to Control Panel and PC settings | Enabled |
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Enable screen saver | Enabled | |||||||
| Password protect the screen saver | Enabled | |||||||
| Prevent changing screen saver | Enabled | |||||||
| Screen saver timeout | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment |
|---|---|---|
| Prevent addition of printers | Enabled | |
| Prevent deletion of printers | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not add shares of recently opened documents to Network Locations | Enabled | |
| Don't save settings at exit | Enabled | |
| Hide Internet Explorer icon on desktop | Disabled | |
| Hide Network Locations icon on desktop | Enabled | |
| Prevent adding, dragging, dropping and closing the Taskbar's toolbars | Enabled | |
| Prohibit adjusting desktop toolbars | Enabled | |
| Prohibit User from manually redirecting Profile Folders | Enabled | |
| Remove Computer icon on the desktop | Disabled | |
| Remove My Documents icon on the desktop | Enabled | |
| Remove Properties from the Computer icon context menu | Enabled | |
| Remove Properties from the Documents icon context menu | Enabled | |
| Remove Properties from the Recycle Bin context menu | Enabled | |
| Remove Recycle Bin icon from desktop | Enabled | |
| Remove the Desktop Cleanup Wizard | Enabled | |
| Turn off Aero Shake window minimizing mouse gesture | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Maximum size of Active Directory searches | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Disable Developer Tools | Enabled |
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Allow access to a list of URLs | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Block access to a list of URLs | Enabled | |||||
| ||||||
| Policy | Setting | Comment |
|---|---|---|
| Ability to Enable/Disable a LAN connection | Enabled | |
| Prohibit access to properties of a LAN connection | Enabled | |
| Prohibit access to properties of components of a LAN connection | Enabled | |
| Prohibit access to properties of components of a remote access connection | Enabled | |
| Prohibit access to the Advanced Settings item on the Advanced menu | Enabled | |
| Prohibit access to the New Connection Wizard | Enabled | |
| Prohibit access to the Remote Access Preferences item on the Advanced menu | Enabled | |
| Prohibit adding and removing components for a LAN or remote access connection | Enabled | |
| Prohibit changing properties of a private remote access connection | Enabled | |
| Prohibit connecting and disconnecting a remote access connection | Enabled | |
| Prohibit Enabling/Disabling components of a LAN connection | Enabled | |
| Prohibit TCP/IP advanced configuration | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prohibit access of the Windows Connect Now wizards | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Add "Run in Separate Memory Space" check box to Run dialog box | Disabled | |||
| Add Logoff to the Start Menu | Enabled | |||
| Add Search Internet link to Start Menu | Disabled | |||
| Add the Run command to the Start Menu | Disabled | |||
| Clear history of recently opened documents on exit | Enabled | |||
| Clear the recent programs list for new users | Enabled | |||
| Clear tile notifications during log on | Enabled | |||
| Do not allow pinning Store app to the Taskbar | Enabled | |||
| Do not display or track items in Jump Lists from remote locations | Enabled | |||
| Do not keep history of recently opened documents | Enabled | |||
| Do not search communications | Enabled | |||
| Do not search for files | Enabled | |||
| Do not search Internet | Enabled | |||
| Do not search programs and Control Panel items | Enabled | |||
| Do not use the search-based method when resolving shell shortcuts | Enabled | |||
| Do not use the tracking-based method when resolving shell shortcuts | Enabled | |||
| Force Start to be either full screen size or menu size | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Go to the desktop instead of Start when signing in | Enabled | |||
| Gray unavailable Windows Installer programs Start Menu shortcuts | Enabled | |||
| Lock all taskbar settings | Enabled | |||
| Lock the Taskbar | Enabled | |||
| Prevent changes to Taskbar and Start Menu Settings | Enabled | |||
| Prevent grouping of taskbar items | Enabled | |||
| Prevent users from customizing their Start Screen | Enabled | |||
| Prevent users from moving taskbar to another screen dock location | Enabled | |||
| Prevent users from rearranging toolbars | Enabled | |||
| Prevent users from uninstalling applications from Start | Enabled | |||
| Remove access to the context menus for the taskbar | Enabled | |||
| Remove All Programs list from the Start menu | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Remove Balloon Tips on Start Menu items | Enabled | |||
| Remove Default Programs link from the Start menu. | Enabled | |||
| Remove Documents icon from Start Menu | Enabled | |||
| Remove Downloads link from Start Menu | Enabled | |||
| Remove Favorites menu from Start Menu | Enabled | |||
| Remove frequent programs list from the Start Menu | Enabled | |||
| Remove Games link from Start Menu | Enabled | |||
| Remove Help menu from Start Menu | Enabled | |||
| Remove Homegroup link from Start Menu | Enabled | |||
| Remove links and access to Windows Update | Enabled | |||
| Remove Music icon from Start Menu | Enabled | |||
| Remove Network Connections from Start Menu | Enabled | |||
| Remove Network icon from Start Menu | Enabled | |||
| Remove Notifications and Action Center | Enabled | |||
| Remove Pictures icon from Start Menu | Enabled | |||
| Remove pinned programs list from the Start Menu | Enabled | |||
| Remove programs on Settings menu | Enabled | |||
| Remove Recent Items menu from Start Menu | Enabled | |||
| Remove Recorded TV link from Start Menu | Enabled | |||
| Remove Run menu from Start Menu | Enabled | |||
| Remove Search Computer link | Enabled | |||
| Remove Search link from Start Menu | Enabled | |||
| Remove See More Results / Search Everywhere link | Enabled | |||
| Remove the "Undock PC" button from the Start Menu | Enabled | |||
| Remove the networking icon | Enabled | |||
| Remove the Security and Maintenance icon | Enabled | |||
| Remove user folder link from Start Menu | Enabled | |||
| Remove user's folders from the Start Menu | Enabled | |||
| Remove Videos link from Start Menu | Enabled | |||
| Show "Run as different user" command on Start | Enabled | |||
| Show Windows Store apps on the taskbar | Disabled | |||
| Turn off notification area cleanup | Enabled | |||
| Turn off personalized menus | Enabled | |||
| Policy | Setting | Comment | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Do not display the Getting Started welcome screen at logon | Enabled | ||||||||||||
| Don't run specified Windows applications | Enabled | ||||||||||||
| |||||||||||||
| Policy | Setting | Comment | |||||||||||
| Prevent access to registry editing tools | Enabled | ||||||||||||
| |||||||||||||
| Policy | Setting | Comment | |||||||||||
| Prevent access to the command prompt | Enabled | ||||||||||||
| |||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Remove Task Manager | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| All Removable Storage classes: Deny all access | Enabled | |
| CD and DVD: Deny read access | Enabled | |
| CD and DVD: Deny write access | Enabled | |
| Floppy Drives: Deny read access | Enabled | |
| Floppy Drives: Deny write access | Enabled | |
| Removable Disks: Deny read access | Enabled | |
| Removable Disks: Deny write access | Enabled | |
| Tape Drives: Deny read access | Enabled | |
| Tape Drives: Deny write access | Enabled | |
| WPD Devices: Deny read access | Enabled | |
| WPD Devices: Deny write access | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent the wizard from running. | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Program Compatibility Assistant | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Turn off Autoplay | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Do not display the password reveal button | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off desktop gadgets | Enabled | |
| Turn Off user-installed desktop gadgets | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow window animations | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Digital Locker to run | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable help tips | Enabled | |
| Do not show recent apps when the mouse is pointing to the upper-left corner of the screen | Enabled | |
| Prevent users from replacing the Command Prompt with Windows PowerShell in the menu they see when they right-click the lower-left corner or press the Windows logo key+X | Enabled | |
| Search, Share, Start, Devices, and Settings don't appear when the mouse is pointing to the upper-right corner of the screen | Enabled | |
| Turn off tracking of app usage | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Allow only per user or approved shell extensions | Enabled | |||
| Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon | Enabled | |||
| Do not display the Welcome Center at user logon | Enabled | |||
| Do not move deleted files to the Recycle Bin | Enabled | |||
| Do not request alternate credentials | Enabled | |||
| Hide these specified drives in My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Hides the Manage item on the File Explorer context menu | Enabled | |||
| No Computers Near Me in Network Locations | Enabled | |||
| No Entire Network in Network Locations | Enabled | |||
| Prevent access to drives from My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Remove "Map Network Drive" and "Disconnect Network Drive" | Enabled | |||
| Remove CD Burning features | Enabled | |||
| Remove DFS tab | Enabled | |||
| Remove File Explorer's default context menu | Enabled | |||
| Remove File menu from File Explorer | Enabled | |||
| Remove Hardware tab | Enabled | |||
| Remove Search button from File Explorer | Enabled | |||
| Remove Security tab | Enabled | |||
| Remove Shared Documents from My Computer | Enabled | |||
| Remove UI to change keyboard navigation indicator setting | Enabled | |||
| Remove UI to change menu animation setting | Enabled | |||
| Turn off caching of thumbnail pictures | Enabled | |||
| Turn off shell protocol protected mode | Enabled | |||
| Turn off the caching of thumbnails in hidden thumbs.db files | Enabled | |||
| Turn off Windows Key hotkeys | Enabled | |||
| Turn off Windows Libraries features that rely on indexed file data | Enabled | |||
| Policy | Setting | Comment |
|---|---|---|
| Hide previous versions of files on backup location | Enabled | |
| Prevent restoring previous versions from backups | Enabled |
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar | Disabled | |||||||
| Automatically activate newly installed add-ons | Enabled | |||||||
| Disable caching of Auto-Proxy scripts | Enabled | |||||||
| Disable changing accessibility settings | Enabled | |||||||
| Disable changing Advanced page settings | Enabled | |||||||
| Disable changing Automatic Configuration settings | Enabled | |||||||
| Disable changing Calendar and Contact settings | Enabled | |||||||
| Disable changing certificate settings | Enabled | |||||||
| Disable changing color settings | Enabled | |||||||
| Disable changing connection settings | Enabled | |||||||
| Disable changing default browser check | Enabled | |||||||
| Disable changing font settings | Enabled | |||||||
| Disable changing home page settings | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Disable changing language settings | Enabled | |||||||
| Disable changing link color settings | Enabled | |||||||
| Disable changing Messaging settings | Enabled | |||||||
| Disable changing Profile Assistant settings | Enabled | |||||||
| Disable changing ratings settings | Enabled | |||||||
| Disable changing Temporary Internet files settings | Enabled | |||||||
| Disable Import/Export Settings wizard | Enabled | |||||||
| Disable Internet Connection wizard | Enabled | |||||||
| Disable the Reset Web Settings feature | Enabled | |||||||
| Do not allow users to enable or disable add-ons | Enabled | |||||||
| Notify users if Internet Explorer is not the default web browser | Disabled | |||||||
| Pop-up allow list | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Prevent access to Internet Explorer Help | Enabled | |||||||
| Prevent changing proxy settings | Enabled | |||||||
| Prevent changing the default search provider | Enabled | |||||||
| Prevent participation in the Customer Experience Improvement Program | Enabled | |||||||
| Prevent running First Run wizard | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Specify default behavior for a new tab | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Turn off add-on performance notifications | Enabled | |||||||
| Turn off Crash Detection | Enabled | |||||||
| Turn off Reopen Last Browsing Session | Enabled | |||||||
| Turn on compatibility logging | Disabled | |||||||
| Turn on Suggested Sites | Enabled | |||||||
| Turn on the auto-complete feature for user names and passwords on forms | Disabled | |||||||
| Use Automatic Detection for dial-up connections | Disabled | |||||||
| Policy | Setting | Comment |
|---|---|---|
| Audio/Video Player | Disabled | |
| Carpoint | Disabled | |
| Investor | Disabled | |
| Microsoft Agent | Disabled | |
| Microsoft Chat | Disabled | |
| MSNBC | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable Save this program to disk option | Enabled | |
| File menu: Disable New menu option | Enabled | |
| File menu: Disable Open menu option | Enabled | |
| File menu: Disable Save As Web Page Complete | Enabled | |
| File menu: Disable Save As... menu option | Enabled | |
| Help menu: Remove 'For Netscape Users' menu option | Enabled | |
| Help menu: Remove 'Send Feedback' menu option | Enabled | |
| Help menu: Remove 'Tip of the Day' menu option | Enabled | |
| Help menu: Remove 'Tour' menu option | Enabled | |
| Tools menu: Disable Internet Options... menu option | Enabled | |
| Turn off Shortcut Menu | Enabled | |
| Turn off the ability to launch report site problems using a menu option | Enabled | |
| View menu: Disable Full Screen menu option | Enabled | |
| View menu: Disable Source menu option | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Allow deleting browsing history on exit | Enabled | |||
| Disable "Configuring History" | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Disable the Advanced page | Enabled | |
| Disable the Connections page | Enabled | |
| Disable the Content page | Enabled | |
| Disable the General page | Enabled | |
| Disable the Privacy page | Enabled | |
| Disable the Programs page | Enabled | |
| Disable the Security page | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Automatically check for Internet Explorer updates | Disabled | |
| Do not allow resetting Internet Explorer settings | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn on script debugging | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Start the Internet Connection Wizard automatically | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Windows Search AutoComplete | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off InPrivate Browsing | Enabled |
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Configure Toolbar Buttons | Enabled | |||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||
| Disable customizing browser toolbar buttons | Enabled | |||||||||||||||||||||||||||||||||||||||||
| Disable customizing browser toolbars | Enabled | |||||||||||||||||||||||||||||||||||||||||
| Lock location of Stop and Refresh buttons | Enabled | |||||||||||||||||||||||||||||||||||||||||
| Turn off Developer Tools | Enabled | |||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Restrict the user from entering author mode | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent users from sharing files within their profile. | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off storage and display of search history | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Sound Recorder to run | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off the offer to update to the latest version of Windows | Enabled | |
| Turn off the Store application | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Windows Calendar | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Automatically send memory dumps for OS-generated error reports | Disabled | |
| Disable Windows Error Reporting | Enabled | |
| Do not send additional data | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off the communities features | Enabled | |
| Turn off Windows Mail application | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Media Center to run | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent CD and DVD Media Information Retrieval | Enabled | |
| Prevent Music File Media Information Retrieval | Enabled | |
| Prevent Radio Station Preset Retrieval | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide Network Tab | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Messenger to be run | Enabled | |
| Do not automatically start Windows Messenger initially | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Windows Mobility Center | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off automatic wake | Enabled | |
| Turn off Windows SideShow | Enabled |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Search |
| Value name | SearchboxTaskbarMode |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |