| ND-PO-ADM-C-Additional Computer Restrictions | |
| Data collected on: 2-9-2025 09:08:02 | |
| Domain | emea.tpg.ads |
| Owner | S-1-5-21-513466819-3096973226-347852806-367141 |
| Created | 14-11-2017 10:12:22 |
| Modified | 30-7-2025 08:17:34 |
| User Revisions | 2 (AD), 2 (SYSVOL) |
| Computer Revisions | 78 (AD), 78 (SYSVOL) |
| Unique ID | {881bdc93-9db7-46f7-9286-72251489b67b} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | No | Enabled | emea.tpg.ads/DK/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/FI/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/NO/Systems/Clients |
| Clients | No | Enabled | emea.tpg.ads/SE/Systems/Clients |
| Name |
|---|
| EMEA\ND-L-SEC-Additional Computer Restrictions |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\Domain Computers | Read | No |
| EMEA\ND-L-SEC-Additional Computer Restrictions | Read (from Security Filtering) | No |
| EMEA\ND-L-SEC-Delegation Modify Group Policy Settings | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| S-1-5-21-513466819-3096973226-347852806-367141 | Edit settings, delete, modify security | No |
| Enforcement | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Designated File Types | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Trusted Publishers | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| Policy | Setting |
|---|---|
| Default Security Level | Unrestricted |
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% | ||||||
| ||||||
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% | ||||||
| ||||||
| %programfiles%\WindowsApps\Microsoft.WindowsStore* | ||||||
|
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Allow Online Tips | Disabled | |||
| Settings Page Visibility | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Prevent changing lock screen and logon image | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Restricts the UI language Windows uses for all logged users | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Allow user feedback | Disabled | |||
| Browser sign in settings | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Allow sign in to Google Chrome | Disabled | |
| Disable Developer Tools | Disabled |
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Configure extension installation blocklist | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Update policy override | Enabled | |||
| ||||
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Control which extensions cannot be installed | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Delete user profiles older than a specified number of days on system restart | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Do not show Windows tips | Enabled | |
| Turn off Microsoft consumer experiences | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn On/Off Find My Device | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Automatic Download and Update of Map Data | Enabled | |
| Turn off unsolicited network traffic on the Offline Maps settings page | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow Message Service Cloud Sync | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Microsoft Defender Antivirus | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Monitor file and program activity on your computer | Disabled | |
| Scan all downloaded files and attachments | Disabled | |
| Turn off real-time protection | Enabled | |
| Turn on behavior monitoring | Disabled | |
| Turn on process scanning whenever real-time protection is enabled | Disabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Prevent OneDrive files from syncing over metered connections | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Prevent OneDrive from generating network traffic until the user signs in to OneDrive | Enabled | |||
| Prevent the usage of OneDrive for file storage | Enabled | |||
| Prevent the usage of OneDrive for file storage on Windows 8.1 | Enabled | |||
| Save documents to OneDrive by default | Disabled | |||
| Policy | Setting | Comment |
|---|---|---|
| Turn off Push To Install service | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow Cloud Search | Disabled | |
| Allow Cortana | Disabled | |
| Allow Cortana above lock screen | Disabled | |
| Allow search and Cortana to use location | Disabled | |
| Do not allow web search | Enabled | |
| Don't search the web or display web results in Search | Enabled | |
| Don't search the web or display web results in Search over metered connections | Enabled | |
| Fully disable Search UI | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable all apps from Microsoft Store | Enabled | |
| Turn off the Store application | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow widgets | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Enables or disables Windows Game Recording and Broadcasting | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide the App and browser protection area | Enabled | |
| Prevent users from modifying settings | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Remove access to use all Windows Update features | Disabled |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Services\SecurityHealthService |
| Value name | Start |
| Value type | REG_DWORD |
| Value data | 0x4 (4) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |