| NGLAG-PO-WIN-ADM-U-Restrictions Staff | |
| Data collected on: 2-9-2025 09:38:22 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\greschner.5-adm |
| Created | 18-2-2020 08:50:56 |
| Modified | 9-2-2023 14:51:10 |
| User Revisions | 21 (AD), 21 (SYSVOL) |
| Computer Revisions | 0 (AD), 0 (SYSVOL) |
| Unique ID | {62e6dfd2-3104-4285-b9cc-41bb605d6cba} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| NG | No | Enabled | emea.tpg.ads/NG |
| Name |
|---|
| EMEA\NG-L-SEC-User Restrictions Staff |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\NG-L-SEC-Delegation Full Access OU | Edit settings, delete, modify security | No |
| EMEA\NG-L-SEC-User Restrictions Staff | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Enforcement | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Designated File Types | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Trusted Publishers | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| Policy | Setting |
|---|---|
| Default Security Level | Unrestricted |
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% | ||||||
| ||||||
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% | ||||||
| ||||||
| %SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe | ||||||
| ||||||
| %windir%\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe | ||||||
| ||||||
| %windir%\syswow64\WindowsPowerShell\v1.0\powershell.exe | ||||||
| ||||||
| %windir%\syswow64\WindowsPowerShell\v1.0\PowerShell_ISE.exe | ||||||
|
| Policy | Setting | Comment |
|---|---|---|
| Browse the network to find printers | Disabled | |
| Prevent addition of printers | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Prevent access to registry editing tools | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Prevent access to the command prompt | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| All Removable Storage classes: Deny all access | Enabled |