| MATEA-PO-WIN-U-Security-CCW-CRC_EngieSC | |
| Data collected on: 2-9-2025 11:37:49 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\haraket.5-adm |
| Created | 27-10-2023 12:39:56 |
| Modified | 3-11-2023 17:30:46 |
| User Revisions | 17 (AD), 17 (SYSVOL) |
| Computer Revisions | 1 (AD), 1 (SYSVOL) |
| Unique ID | {73518e11-a5cb-4d9d-97ed-83b30f28e427} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| MA | No | Enabled | emea.tpg.ads/MA |
| Name |
|---|
| EMEA\MATEA-L-SEC-GPO-Security-CCW-CRC_EngieSC |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\haraket.5-adm | Edit settings, delete, modify security | No |
| EMEA\MATEA-L-SEC-GPO-Security-CCW-CRC_EngieSC | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Policy | Setting | Comment |
|---|---|---|
| Prohibit access to Control Panel and PC settings | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Go directly to Components Wizard | Enabled | |
| Hide Add New Programs page | Enabled | |
| Hide Add/Remove Windows Components page | Enabled | |
| Hide Change or Remove Programs page | Enabled | |
| Hide the "Add a program from CD-ROM or floppy disk" option | Enabled | |
| Hide the "Add programs from Microsoft" option | Enabled | |
| Hide the "Add programs from your network" option | Enabled | |
| Hide the Set Program Access and Defaults page | Enabled | |
| Remove Add or Remove Programs | Enabled | |
| Remove Support Information | Enabled | |
| Specify default category for Add New Programs | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable the Display Control Panel | Enabled | |
| Hide Settings tab | Enabled |
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Enable screen saver | Enabled | |||||||
| Force specific screen saver | Disabled | |||||||
| Password protect the screen saver | Enabled | |||||||
| Prevent changing color and appearance | Enabled | |||||||
| Prevent changing color scheme | Enabled | |||||||
| Prevent changing desktop background | Enabled | |||||||
| Prevent changing desktop icons | Enabled | |||||||
| Prevent changing screen saver | Enabled | |||||||
| Prevent changing theme | Enabled | |||||||
| Prevent changing visual style for windows and buttons | Enabled | |||||||
| Prohibit selection of visual style font size | Enabled | |||||||
| Screen saver timeout | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment |
|---|---|---|
| Browse a common web site to find printers | Disabled | |
| Browse the network to find printers | Disabled | |
| Default Active Directory path when searching for printers | Disabled | |
| Point and Print Restrictions | Disabled | |
| Prevent addition of printers | Enabled | |
| Prevent deletion of printers | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Restrict selection of Windows menus and dialogs language | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Do not add shares of recently opened documents to Network Locations | Enabled | |
| Don't save settings at exit | Enabled | |
| Hide Internet Explorer icon on desktop | Enabled | |
| Hide Network Locations icon on desktop | Enabled | |
| Prevent adding, dragging, dropping and closing the Taskbar's toolbars | Enabled | |
| Prohibit adjusting desktop toolbars | Enabled | |
| Prohibit User from manually redirecting Profile Folders | Enabled | |
| Remove My Documents icon on the desktop | Enabled | |
| Remove Properties from the Computer icon context menu | Enabled | |
| Remove Properties from the Documents icon context menu | Enabled | |
| Remove Properties from the Recycle Bin context menu | Enabled | |
| Remove Recycle Bin icon from desktop | Enabled | |
| Remove the Desktop Cleanup Wizard | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide Active Directory folder | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Desktop Wallpaper | Disabled | |
| Disable Active Desktop | Disabled | |
| Disable all items | Enabled | |
| Enable Active Desktop | Disabled | |
| Prohibit deleting items | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Enable saving passwords to the password manager | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable Developer Tools | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Enable saving passwords to the password manager | Disabled |
| Policy | Setting | Comment | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Allow users to show passwords in Password Manager (deprecated) | Disabled | |||||||||||
| Block access to a list of URLs | Enabled | |||||||||||
| ||||||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Configure Internet Explorer integration | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Synchronize all offline files before logging off | Enabled | |
| Synchronize all offline files when logging on | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Add Logoff to the Start Menu | Enabled | |||
| Add Search Internet link to Start Menu | Disabled | |||
| Add the Run command to the Start Menu | Disabled | |||
| Clear history of recently opened documents on exit | Enabled | |||
| Do not display any custom toolbars in the taskbar | Enabled | |||
| Do not search Internet | Enabled | |||
| Do not search programs and Control Panel items | Enabled | |||
| Do not use the search-based method when resolving shell shortcuts | Enabled | |||
| Do not use the tracking-based method when resolving shell shortcuts | Enabled | |||
| Force classic Start Menu | Enabled | |||
| Gray unavailable Windows Installer programs Start Menu shortcuts | Enabled | |||
| Hide the notification area | Enabled | |||
| Lock all taskbar settings | Enabled | |||
| Lock the Taskbar | Enabled | |||
| Prevent changes to Taskbar and Start Menu Settings | Enabled | |||
| Prevent grouping of taskbar items | Enabled | |||
| Prevent users from adding or removing toolbars | Enabled | |||
| Prevent users from customizing their Start Screen | Enabled | |||
| Prevent users from moving taskbar to another screen dock location | Enabled | |||
| Prevent users from rearranging toolbars | Enabled | |||
| Prevent users from resizing the taskbar | Enabled | |||
| Prevent users from uninstalling applications from Start | Enabled | |||
| Remove access to the context menus for the taskbar | Enabled | |||
| Remove All Programs list from the Start menu | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Remove Balloon Tips on Start Menu items | Enabled | |||
| Remove common program groups from Start Menu | Enabled | |||
| Remove Default Programs link from the Start menu. | Enabled | |||
| Remove Documents icon from Start Menu | Enabled | |||
| Remove Downloads link from Start Menu | Enabled | |||
| Remove Favorites menu from Start Menu | Enabled | |||
| Remove frequent programs list from the Start Menu | Enabled | |||
| Remove Games link from Start Menu | Enabled | |||
| Remove Help menu from Start Menu | Enabled | |||
| Remove Homegroup link from Start Menu | Enabled | |||
| Remove links and access to Windows Update | Enabled | |||
| Remove Music icon from Start Menu | Enabled | |||
| Remove Network Connections from Start Menu | Enabled | |||
| Remove Network icon from Start Menu | Enabled | |||
| Remove Notifications and Action Center | Enabled | |||
| Remove Pictures icon from Start Menu | Enabled | |||
| Remove pinned programs from the Taskbar | Enabled | |||
| Remove pinned programs list from the Start Menu | Enabled | |||
| Remove programs on Settings menu | Enabled | |||
| Remove Recent Items menu from Start Menu | Enabled | |||
| Remove Recorded TV link from Start Menu | Enabled | |||
| Remove Run menu from Start Menu | Enabled | |||
| Remove Search Computer link | Enabled | |||
| Remove Search link from Start Menu | Enabled | |||
| Remove See More Results / Search Everywhere link | Enabled | |||
| Remove the "Undock PC" button from the Start Menu | Enabled | |||
| Remove the networking icon | Enabled | |||
| Remove the People Bar from the taskbar | Enabled | |||
| Remove the Security and Maintenance icon | Enabled | |||
| Remove user folder link from Start Menu | Enabled | |||
| Remove user name from Start Menu | Enabled | |||
| Remove user's folders from the Start Menu | Enabled | |||
| Remove Videos link from Start Menu | Enabled | |||
| Show QuickLaunch on Taskbar | Disabled | |||
| Turn off all balloon notifications | Enabled | |||
| Turn off automatic promotion of notification icons to the taskbar | Enabled | |||
| Turn off feature advertisement balloon notifications | Enabled | |||
| Turn off notification area cleanup | Enabled | |||
| Turn off personalized menus | Enabled | |||
| Turn off taskbar thumbnails | Enabled | |||
| Turn off user tracking | Enabled | |||
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Century interpretation for Year 2000 | Disabled | |||||||
| Custom User Interface | Disabled | |||||||
| Do not display the Getting Started welcome screen at logon | Enabled | |||||||
| Don't run specified Windows applications | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Download missing COM components | Disabled | |||||||
| Prevent access to registry editing tools | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Prevent access to the command prompt | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Restrict these programs from being launched from Help | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Windows Automatic Updates | Enabled | |||||||
| Policy | Setting | Comment |
|---|---|---|
| Remove Change Password | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Code signing for driver packages | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Configure driver search locations | Disabled | |||
| Turn off Windows Update device driver search prompt | Enabled | |||
| Policy | Setting | Comment | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Set Group Policy refresh interval for users | Enabled | |||||||||||||||||
| ||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Turn off downloading of print drivers over HTTP | Enabled | |
| Turn off Help Experience Improvement Program | Enabled | |
| Turn off Internet download for Web publishing and online ordering wizards | Enabled | |
| Turn off Internet File Association service | Enabled | |
| Turn off printing over HTTP | Enabled | |
| Turn off the "Order Prints" picture task | Enabled | |
| Turn off the "Publish to Web" task for files and folders | Enabled | |
| Turn off the Windows Messenger Customer Experience Improvement Program | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| CD and DVD: Deny read access | Enabled | |
| CD and DVD: Deny write access | Enabled | |
| Removable Disks: Deny read access | Enabled | |
| Removable Disks: Deny write access | Enabled |
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Connect home directory to root of the share | Enabled | |||||||
| Exclude directories in roaming profile | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Do not preserve zone information in file attachments | Disabled | |||
| Inclusion list for low file types | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Trust logic for file attachments | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Turn off Autoplay | Enabled | |||
| ||||
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Allow only per user or approved shell extensions | Enabled | |||||||
| Display confirmation dialog when deleting files | Enabled | |||||||
| Display the menu bar in File Explorer | Disabled | |||||||
| Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon | Enabled | |||||||
| Do not display the Welcome Center at user logon | Enabled | |||||||
| Do not move deleted files to the Recycle Bin | Enabled | |||||||
| Do not track Shell shortcuts during roaming | Enabled | |||||||
| Hide these specified drives in My Computer | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Hides the Manage item on the File Explorer context menu | Enabled | |||||||
| Maximum allowed Recycle Bin size | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Maximum number of recent documents | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| No Computers Near Me in Network Locations | Enabled | |||||||
| No Entire Network in Network Locations | Enabled | |||||||
| Prevent access to drives from My Computer | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| Remove "Map Network Drive" and "Disconnect Network Drive" | Enabled | |||||||
| Remove CD Burning features | Enabled | |||||||
| Remove DFS tab | Enabled | |||||||
| Remove File Explorer's default context menu | Enabled | |||||||
| Remove Hardware tab | Enabled | |||||||
| Remove Search button from File Explorer | Enabled | |||||||
| Remove Security tab | Enabled | |||||||
| Remove Shared Documents from My Computer | Enabled | |||||||
| Remove UI to change keyboard navigation indicator setting | Enabled | |||||||
| Remove UI to change menu animation setting | Enabled | |||||||
| Request credentials for network installations | Enabled | |||||||
| Turn off caching of thumbnail pictures | Enabled | |||||||
| Turn off shell protocol protected mode | Disabled | |||||||
| Turn off Windows Key hotkeys | Enabled | |||||||
| Turn on Classic Shell | Disabled | |||||||
| Policy | Setting | Comment | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Disable changing accessibility settings | Enabled | |||||||||
| Disable changing Advanced page settings | Enabled | |||||||||
| Disable changing Automatic Configuration settings | Enabled | |||||||||
| Disable changing Calendar and Contact settings | Enabled | |||||||||
| Disable changing certificate settings | Enabled | |||||||||
| Disable changing color settings | Enabled | |||||||||
| Disable changing connection settings | Enabled | |||||||||
| Disable changing default browser check | Enabled | |||||||||
| Disable changing font settings | Enabled | |||||||||
| Disable changing home page settings | Enabled | |||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Disable changing language settings | Enabled | |||||||||
| Disable changing link color settings | Enabled | |||||||||
| Disable changing Messaging settings | Enabled | |||||||||
| Disable changing Profile Assistant settings | Enabled | |||||||||
| Disable changing ratings settings | Enabled | |||||||||
| Disable changing secondary home page settings | Enabled | |||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Disable changing Temporary Internet files settings | Enabled | |||||||||
| Disable Internet Connection wizard | Enabled | |||||||||
| Disable Internet Explorer 11 as a standalone browser | Enabled | |||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Do not allow users to enable or disable add-ons | Enabled | |||||||||
| Pop-up allow list | Enabled | |||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Prevent changing proxy settings | Enabled | |||||||||
| Turn off Crash Detection | Enabled | |||||||||
| Turn off pop-up management | Enabled | |||||||||
| Turn on the auto-complete feature for user names and passwords on forms | Disabled | |||||||||
| Policy | Setting | Comment |
|---|---|---|
| Disable Save this program to disk option | Enabled | |
| File menu: Disable Save As... menu option | Enabled | |
| Tools menu: Disable Internet Options... menu option | Enabled |
| Policy | Setting | Comment | |||||
|---|---|---|---|---|---|---|---|
| Use Policy List of Internet Explorer 7 sites | Enabled | ||||||
| |||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Disable "Configuring History" | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Allow software to run or install even if the signature is invalid | Enabled |
| Policy | Setting | Comment | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Internet Zone Template | Enabled | |||||||||||
| ||||||||||||
| Policy | Setting | Comment | ||||||||||
| Intranet Zone Template | Enabled | |||||||||||
| ||||||||||||
| Policy | Setting | Comment | ||||||||||
| Restricted Sites Zone Template | Enabled | |||||||||||
| ||||||||||||
| Policy | Setting | Comment | ||||||||||
| Site to Zone Assignment List | Enabled | |||||||||||
| ||||||||||||
| Policy | Setting | Comment | ||||||||||
| Trusted Sites Zone Template | Enabled | |||||||||||
| ||||||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Access data sources across domains | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow active content over restricted protocols to access my computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow active scripting | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow binary and script behaviors | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow cut, copy or paste operations from the clipboard via script | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow drag and drop or copy and paste files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow file downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow font downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow installation of desktop items | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XAML Browser Applications | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XAML files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XPS files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow META REFRESH | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow only approved domains to use ActiveX controls without prompt | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow only approved domains to use the TDC ActiveX control | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow scripting of Internet Explorer WebBrowser controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow script-initiated windows without size or position constraints | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow scriptlets | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow updates to status bar via script | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow video and animation on a webpage that uses an older media player | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow websites to open windows without status bar or Address bar | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow websites to prompt for information by using scripted windows | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Automatic prompting for ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Automatic prompting for file downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Display mixed content | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Do not prompt for client certificate selection when no certificates or only one certificate exists. | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Download signed ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Download unsigned ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Enable MIME Sniffing | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Include local path when user is uploading files to a server | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Initialize and script ActiveX controls not marked as safe | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Java permissions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Launching applications and files in an IFRAME | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Logon options | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Navigate windows and frames across different domains | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run .NET Framework-reliant components not signed with Authenticode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run .NET Framework-reliant components signed with Authenticode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run ActiveX controls and plugins | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Script ActiveX controls marked safe for scripting | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Scripting of Java applets | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Software channel permissions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Submit non-encrypted form data | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off .NET Framework Setup | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off first-run prompt | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on Cross-Site Scripting Filter | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on Protected Mode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on SmartScreen Filter scan | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Use Pop-up Blocker | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Userdata persistence | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Web sites in less privileged Web content zones can navigate into this zone | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Access data sources across domains | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow active content over restricted protocols to access my computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow active scripting | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow binary and script behaviors | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow cut, copy or paste operations from the clipboard via script | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow drag and drop or copy and paste files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow file downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow font downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow installation of desktop items | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XAML Browser Applications | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XAML files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XPS files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow META REFRESH | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow only approved domains to use ActiveX controls without prompt | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow only approved domains to use the TDC ActiveX control | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow scripting of Internet Explorer WebBrowser controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow script-initiated windows without size or position constraints | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow scriptlets | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow updates to status bar via script | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow video and animation on a webpage that uses an older media player | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow websites to open windows without status bar or Address bar | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow websites to prompt for information by using scripted windows | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Automatic prompting for ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Automatic prompting for file downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Display mixed content | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Do not prompt for client certificate selection when no certificates or only one certificate exists. | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Download signed ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Download unsigned ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Enable MIME Sniffing | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Include local path when user is uploading files to a server | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Initialize and script ActiveX controls not marked as safe | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Java permissions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Launching applications and files in an IFRAME | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Logon options | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Navigate windows and frames across different domains | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run .NET Framework-reliant components not signed with Authenticode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run .NET Framework-reliant components signed with Authenticode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run ActiveX controls and plugins | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Script ActiveX controls marked safe for scripting | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Scripting of Java applets | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Software channel permissions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Submit non-encrypted form data | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off .NET Framework Setup | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off first-run prompt | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on Cross-Site Scripting Filter | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on Protected Mode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on SmartScreen Filter scan | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Use Pop-up Blocker | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Userdata persistence | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Web sites in less privileged Web content zones can navigate into this zone | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Access data sources across domains | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow active content over restricted protocols to access my computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow active scripting | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow binary and script behaviors | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow cut, copy or paste operations from the clipboard via script | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow drag and drop or copy and paste files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow file downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow font downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow installation of desktop items | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XAML Browser Applications | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XAML files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XPS files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow META REFRESH | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow only approved domains to use ActiveX controls without prompt | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow only approved domains to use the TDC ActiveX control | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow scripting of Internet Explorer WebBrowser controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow script-initiated windows without size or position constraints | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow scriptlets | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow updates to status bar via script | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow video and animation on a webpage that uses an older media player | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow websites to open windows without status bar or Address bar | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow websites to prompt for information by using scripted windows | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Automatic prompting for ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Automatic prompting for file downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Display mixed content | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Do not prompt for client certificate selection when no certificates or only one certificate exists. | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Download signed ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Download unsigned ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Enable MIME Sniffing | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Include local path when user is uploading files to a server | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Initialize and script ActiveX controls not marked as safe | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Java permissions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Launching applications and files in an IFRAME | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Logon options | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Navigate windows and frames across different domains | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run .NET Framework-reliant components not signed with Authenticode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run .NET Framework-reliant components signed with Authenticode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run ActiveX controls and plugins | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Script ActiveX controls marked safe for scripting | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Scripting of Java applets | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Software channel permissions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Submit non-encrypted form data | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off .NET Framework Setup | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off first-run prompt | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on Cross-Site Scripting Filter | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on Protected Mode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on SmartScreen Filter scan | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Use Pop-up Blocker | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Userdata persistence | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Web sites in less privileged Web content zones can navigate into this zone | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Access data sources across domains | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow active content over restricted protocols to access my computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow active scripting | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow binary and script behaviors | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow cut, copy or paste operations from the clipboard via script | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow drag and drop or copy and paste files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow file downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow font downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow installation of desktop items | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XAML Browser Applications | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XAML files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow loading of XPS files | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow META REFRESH | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow only approved domains to use ActiveX controls without prompt | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow only approved domains to use the TDC ActiveX control | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow scripting of Internet Explorer WebBrowser controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow script-initiated windows without size or position constraints | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow scriptlets | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow updates to status bar via script | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow video and animation on a webpage that uses an older media player | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow websites to open windows without status bar or Address bar | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Allow websites to prompt for information by using scripted windows | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Automatic prompting for ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Automatic prompting for file downloads | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Display mixed content | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Do not prompt for client certificate selection when no certificates or only one certificate exists. | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Download signed ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Download unsigned ActiveX controls | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Enable MIME Sniffing | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Include local path when user is uploading files to a server | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Initialize and script ActiveX controls not marked as safe | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Java permissions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Launching applications and files in an IFRAME | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Logon options | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Navigate windows and frames across different domains | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run .NET Framework-reliant components not signed with Authenticode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run .NET Framework-reliant components signed with Authenticode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Run ActiveX controls and plugins | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Script ActiveX controls marked safe for scripting | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Scripting of Java applets | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Software channel permissions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Submit non-encrypted form data | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off .NET Framework Setup | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn off first-run prompt | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on Cross-Site Scripting Filter | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on Protected Mode | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Turn on SmartScreen Filter scan | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Use Pop-up Blocker | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Userdata persistence | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Web sites in less privileged Web content zones can navigate into this zone | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| All Processes | Enabled | |
| Deny all add-ons unless specifically allowed in the Add-on List | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| All Processes | Disabled | |
| Internet Explorer Processes | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| All Processes | Disabled | |
| Internet Explorer Processes | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Developer Tools | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow Developer Tools | Disabled | |
| Allow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed | Disabled | |
| Configure Password Manager | Disabled | |
| Prevent the First Run webpage from opening on Microsoft Edge | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent CD and DVD Media Information Retrieval | Enabled | |
| Prevent Music File Media Information Retrieval | Enabled | |
| Prevent Radio Station Preset Retrieval | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide Network Tab | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow Screen Saver | Enabled | |
| Prevent Codec Download | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do Not Show Anchor | Enabled | |
| Hide Privacy Tab | Enabled | |
| Hide Security Tab | Enabled |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\services\USBSTOR |
| Value name | USBSTOR |
| Value type | REG_DWORD |
| Value data | 0x4 (4) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 |
| Value name | 1A10 |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Value name | NoNetConnectDisconnect |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Explorer |
| Value name | HubMode |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Internet Settings |
| Value name | ProxyEnable |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Internet Settings |
| Value name | ProxyOverride |
| Value type | REG_SZ |
| Value data | portailfournisseur.grdf.fr;tpgsp.ontp.app;*.ccms.teleperformance.com;*.emea.tpg.ads;*.gdfsuez.net;pilotage.myengie.com;idm.myengie.com;hubeone-ppr.myengie.com;hubeone.myengie.com;*.mygdfsuez.com; *.gazdefrance.com; *.tpg.zone;tntukweb02;app-extranet.teleperformance.fr;iris-b2c-noprod.myengie.com;iris-b2c.myengie.com;portail-sge.myengie.com;microapps-sge.myengie.com |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Internet Settings |
| Value name | ProxyServer |
| Value type | REG_SZ |
| Value data | 10.212.5.74:8888 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Internet Settings |
| Value name | AutoDetect |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |