| NLCTX-PO-WIN-U-Loopback User Restrictions and Hardening | |
| Data collected on: 2-9-2025 10:15:13 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\cloots.5-adm |
| Created | 8-2-2022 11:38:08 |
| Modified | 31-10-2024 06:48:24 |
| User Revisions | 635 (AD), 635 (SYSVOL) |
| Computer Revisions | 1 (AD), 1 (SYSVOL) |
| Unique ID | {e05ea728-29c3-4183-8334-648e617c31c9} |
| GPO Status | Computer settings disabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| SBC | No | Enabled | emea.tpg.ads/NL/Systems/CitrixBNL/SBC |
| Staging | No | Disabled | emea.tpg.ads/NL/Systems/CitrixBNL/Staging |
| HSD | No | Enabled | emea.tpg.ads/SR/Systems/Citrix/HSD |
| VDI | No | Enabled | emea.tpg.ads/SR/Systems/Citrix/VDI |
| Bol | No | Enabled | emea.tpg.ads/TR/Systems/Citrix/VDI/Bol |
| Name |
|---|
| NT AUTHORITY\Authenticated Users |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\cloots.5-adm | Edit settings, delete, modify security | No |
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\NL-L-SEC-Delegation Modify Group Policy Settings Access | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Enforcement | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Designated File Types | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Trusted Publishers | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| Policy | Setting |
|---|---|
| Default Security Level | Unrestricted |
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% | ||||||
| ||||||
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% | ||||||
| ||||||
| C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe | ||||||
| ||||||
| C:\Program Files\Windows NT\Accessories\wordpad.exe | ||||||
| ||||||
| C:\Program Files\WindowsApps\Microsoft.MSPaint* | ||||||
| ||||||
| c:\Program Files\WindowsApps\Microsoft.MSPaint_2019.729.2301.0_neutral_~_8wekyb3d8bbwe | ||||||
| ||||||
| c:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe | ||||||
| ||||||
| C:\Program Files\WindowsApps\Microsoft.Paint* | ||||||
| ||||||
| c:\Program Files\WindowsApps\Microsoft.ScreenSketch* | ||||||
| ||||||
| C:\Program Files\WindowsApps\Microsoft.Windows.Photos* | ||||||
| ||||||
| c:\Program Files\WindowsApps\Microsoft.WindowsNotepad* | ||||||
| ||||||
| C:\Windows\System32\notepad.exe | ||||||
| ||||||
| C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy | ||||||
| ||||||
| C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy | ||||||
| ||||||
| c:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy | ||||||
| ||||||
| C:\Windows\SysWOW64\notepad.exe | ||||||
| ||||||
| C:\Windows\WinSxS\amd64_microsoft-windows-wordpad* | ||||||
|
| Grant user exclusive rights to Desktop | Disabled |
| Move the contents of Desktop to the new location | Disabled |
| Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systems | Disabled |
| Policy Removal Behavior | Restore contents |
| Configuration Control | Group Policy |
| Primary Computer Evaluation | Not evaluated because primary computer policy is not enabled |
| Group | Path |
|---|---|
| EMEA\NLAMS-L-SEC-Folder Redirection Start Menu ALL | \\emea.tpg.ads\NL\Amsterdam\Settings\FRD |
| EMEA\NLAMS-L-SEC-Folder Redirection Citrix Laptop Users | \\emea.tpg.ads\NL\Amsterdam\Settings\FRD |
| EMEA\SRPAR-L-SEC-Folder Redirection Start Menu ALL | \\emea.tpg.ads\NL\Amsterdam\Settings\FRD |
| Grant user exclusive rights to Start Menu | Disabled |
| Move the contents of Start Menu to the new location | Disabled |
| Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systems | Enabled |
| Policy Removal Behavior | Restore contents |
| Configuration Control | Group Policy |
| Primary Computer Evaluation | Not evaluated because primary computer policy is not enabled |
| Policy | Setting | Comment | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Settings Page Visibility | Enabled | ||||||||||||
| |||||||||||||
| Policy | Setting | Comment | |||||||||||
| Show only specified Control Panel items | Enabled | ||||||||||||
| |||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Enable screen saver | Enabled | |||||||||||||||||||
| Force a specific visual style file or force Windows Classic | Enabled | |||||||||||||||||||
| ||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||
| Password protect the screen saver | Enabled | |||||||||||||||||||
| Prevent changing desktop background | Enabled | |||||||||||||||||||
| Prevent changing screen saver | Enabled | |||||||||||||||||||
| Prevent changing theme | Enabled | |||||||||||||||||||
| Screen saver timeout | Enabled | |||||||||||||||||||
| ||||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Point and Print Restrictions | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide "Installed Updates" page | Enabled | |
| Hide "Programs and Features" page | Enabled | |
| Hide "Windows Features" | Enabled | |
| Hide the Programs Control Panel | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not add shares of recently opened documents to Network Locations | Enabled | |
| Hide and disable all items on the desktop | Enabled | |
| Hide Network Locations icon on desktop | Enabled | |
| Prevent adding, dragging, dropping and closing the Taskbar's toolbars | Enabled | |
| Prohibit User from manually redirecting Profile Folders | Enabled | |
| Remove My Documents icon on the desktop | Enabled | |
| Remove Properties from the Computer icon context menu | Enabled | |
| Remove Properties from the Documents icon context menu | Enabled | |
| Remove Properties from the Recycle Bin context menu | Enabled | |
| Remove the Desktop Cleanup Wizard | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Default search provider name | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Default search provider search URL | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Default search provider suggest URL | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Enable the default search provider | Enabled | |||
| Parameter providing search-by-image feature for the default search provider | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Parameters for image URL which uses POST | Enabled | |||
| ||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Ads setting for sites with intrusive ads | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow feature recommendations and browser assistance notifications from Microsoft Edge | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow Google Cast to connect to Cast devices on all IP addresses | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of autofill form data | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of browser settings | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of browsing history | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of Cookies | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of extensions | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of favorites | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of home page settings | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of open tabs | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of payment info | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of saved passwords | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of search engine settings | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow importing of shortcuts | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow or deny screen capture | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow personalization of ads, Microsoft Edge, search, news and other Microsoft services by sending browsing history, favorites and collections, usage and other browsing data to Microsoft | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow Pin to taskbar wizard | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow remote debugging | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow Save page as in Internet Explorer mode | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow surf game | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow the Search bar at Windows startup (deprecated) | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow user feedback | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow users to access the games menu (deprecated) | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow users to configure Family safety and Kids Mode | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow websites to query for available payment methods | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Ask where to save downloaded files | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Block access to a list of URLs | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Block all ads on Bing search results | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Block tracking of users' web-browsing activity | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Browser sign-in settings | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Clear browsing data when Microsoft Edge closes | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Clear cached images and files when Microsoft Edge closes | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Configure Automatic HTTPS | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Configure Do Not Track | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Configure Internet Explorer integration | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Configure Online Text To Speech | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Configure Speech Recognition | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Configure the Enterprise Mode Site List | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Configure the Share experience | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Control where developer tools can be used | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Define a list of allowed URLs | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Disable saving browser history | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Disable taking screenshots | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Discover feature In Microsoft Edge (obsolete) | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable AutoFill for addresses | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable AutoFill for payment instruments | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable favorites bar | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable Follow service in Microsoft Edge (obsolete) | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable guest mode | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable Microsoft Search in Bing suggestions in the address bar | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable search suggestions | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable specific spellcheck languages | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable spellcheck | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable the Collections feature | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable the Search bar (deprecated) | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable Translate | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enhance images enabled (obsolete) | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Hide restore pages dialog after browser crash | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Hide the First-run experience and splash screen | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| In-app support Enabled | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Let screen reader users get image descriptions from Microsoft | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Let users snip a Math problem and get the solution with a step-by-step explanation in Microsoft Edge (obsolete) | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| List of file types that should be automatically opened on download | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Microsoft Edge Insider Promotion Enabled | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Notify a user that a browser restart is recommended or required for pending updates | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Restrict which accounts can be used to sign in to Microsoft Edge | Enabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Shopping in Microsoft Edge Enabled | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Show Hubs Sidebar | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Show Microsoft Office shortcut in favorites bar (deprecated) | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Show Microsoft Rewards experiences | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Use graphics acceleration when available | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Visual search enabled | Disabled | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Default search provider name | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Default search provider search URL | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Default search provider URL for suggestions | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Enable the default search provider | Enabled | |||
| Parameters for an image URL that uses POST | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Configure Edge Website Typo Protection | Enabled |
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Control which extensions cannot be installed | Enabled | |||||
| ||||||
| Policy | Setting | Comment |
|---|---|---|
| Enable saving passwords to the password manager | Disabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Configure when efficiency mode should become active | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Allow Desktop, Window, and Tab capture by these origins | Disabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Configure sleeping tabs | Enabled | |||
| Set the background tab inactivity timeout for sleeping tabs | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Action to take on Microsoft Edge startup | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Configure the background types allowed for the new tab page layout | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Hide the default top sites from the new tab page | Enabled | |||
| Set new tab page quick links | Disabled | |||
| Policy | Setting | Comment |
|---|---|---|
| Turn off screen clipping | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable Weather Bar | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow shared folders to be published | Disabled |
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Add Logoff to the Start Menu | Enabled | |||||
| Do not search communications | Enabled | |||||
| Do not search for files | Enabled | |||||
| Do not search Internet | Enabled | |||||
| Do not search programs and Control Panel items | Enabled | |||||
| Force classic Start Menu | Enabled | |||||
| Hide the notification area | Enabled | |||||
| Prevent changes to Taskbar and Start Menu Settings | Enabled | |||||
| Prevent users from adding or removing toolbars | Enabled | |||||
| Prevent users from customizing their Start Screen | Enabled | |||||
| Remove access to the context menus for the taskbar | Enabled | |||||
| Remove Balloon Tips on Start Menu items | Enabled | |||||
| Remove common program groups from Start Menu | Enabled | |||||
| Remove Default Programs link from the Start menu. | Enabled | |||||
| Remove Documents icon from Start Menu | Enabled | |||||
| Remove Downloads link from Start Menu | Enabled | |||||
| Remove Favorites menu from Start Menu | Enabled | |||||
| Remove Games link from Start Menu | Enabled | |||||
| Remove Help menu from Start Menu | Enabled | |||||
| Remove Homegroup link from Start Menu | Enabled | |||||
| Remove links and access to Windows Update | Enabled | |||||
| Remove Music icon from Start Menu | Enabled | |||||
| Remove Network Connections from Start Menu | Enabled | |||||
| Remove Network icon from Start Menu | Enabled | |||||
| Remove Notifications and Action Center | Enabled | |||||
| Remove Pictures icon from Start Menu | Enabled | |||||
| Remove Recent Items menu from Start Menu | Enabled | |||||
| Remove Recorded TV link from Start Menu | Enabled | |||||
| Remove Run menu from Start Menu | Enabled | |||||
| Remove Search Computer link | Enabled | |||||
| Remove Search link from Start Menu | Enabled | |||||
| Remove See More Results / Search Everywhere link | Enabled | |||||
| Remove the "Undock PC" button from the Start Menu | Enabled | |||||
| Remove the networking icon | Enabled | |||||
| Remove the Security and Maintenance icon | Enabled | |||||
| Remove user folder link from Start Menu | Enabled | |||||
| Remove Videos link from Start Menu | Enabled | |||||
| Show QuickLaunch on Taskbar | Disabled | |||||
| Start Layout | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Turn off all balloon notifications | Enabled | |||||
| Turn off feature advertisement balloon notifications | Enabled | |||||
| Turn off notification area cleanup | Enabled | |||||
| Turn off personalized menus | Enabled | |||||
| Turn off user tracking | Enabled | |||||
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Don't run specified Windows applications | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Prevent access to registry editing tools | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Prevent access to the command prompt | Enabled | |||||
| ||||||
| Policy | Setting | Comment |
|---|---|---|
| Remove Task Manager | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off Windows Update device driver search prompt | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not automatically make all redirected folders available offline | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| All Removable Storage classes: Deny all access | Enabled | |
| CD and DVD: Deny read access | Enabled | |
| CD and DVD: Deny write access | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Default risk level for file attachments | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Do not preserve zone information in file attachments | Enabled | |||
| Inclusion list for low file types | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Do not suggest third-party content in Windows spotlight | Enabled | |
| Do not use diagnostic data for tailored experiences | Enabled | |
| Turn off all Windows spotlight features | Enabled | |
| Turn off the Windows Welcome Experience | Enabled | |
| Turn off Windows Spotlight on Action Center | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Display the menu bar in File Explorer | Disabled | |||
| Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon | Enabled | |||
| Hide these specified drives in My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Hides the Manage item on the File Explorer context menu | Enabled | |||
| No Computers Near Me in Network Locations | Enabled | |||
| No Entire Network in Network Locations | Enabled | |||
| Prevent access to drives from My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Remove "Map Network Drive" and "Disconnect Network Drive" | Enabled | |||
| Remove CD Burning features | Enabled | |||
| Remove DFS tab | Enabled | |||
| Remove File Explorer's default context menu | Enabled | |||
| Remove File menu from File Explorer | Enabled | |||
| Remove Search button from File Explorer | Enabled | |||
| Remove Security tab | Enabled | |||
| Remove Shared Documents from My Computer | Enabled | |||
| Turn off caching of thumbnail pictures | Enabled | |||
| Turn off Windows Key hotkeys | Enabled | |||
| Turn on Classic Shell | Disabled | |||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Turn off Preview Pane | Enabled | |||
| Turn on or off details pane | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Hide previous versions list for local files | Enabled | |
| Hide previous versions list for remote files | Enabled | |
| Hide previous versions of files on backup location | Enabled |
| Policy | Setting | Comment | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Disable changing Automatic Configuration settings | Enabled | |||||||||||
| Disable changing home page settings | Enabled | |||||||||||
| ||||||||||||
| Policy | Setting | Comment | ||||||||||
| Pop-up allow list | Enabled | |||||||||||
| ||||||||||||
| Policy | Setting | Comment | ||||||||||
| Prevent changing proxy settings | Enabled | |||||||||||
| Prevent running First Run wizard | Enabled | |||||||||||
| ||||||||||||
| Policy | Setting | Comment | ||||||||||
| Turn off tabbed browsing | Disabled | |||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Tools menu: Disable Internet Options... menu option | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable the Content page | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Empty Temporary Internet Files folder when browser is closed | Enabled | |||
| Turn off encryption support | Enabled | |||
| ||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Site to Zone Assignment List | Enabled | |||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Turn off Developer Tools | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow a shared Books folder | Disabled | |
| Allow extended telemetry for the Books tab | Disabled | |
| Allow web content on New Tab page | Disabled | |
| Always show the Books Library in Microsoft Edge | Disabled | |
| Configure Autofill | Disabled | |
| Configure Password Manager | Disabled | |
| Prevent access to the about:flags page in Microsoft Edge | Enabled | |
| Prevent bypassing Windows Defender SmartScreen prompts for files | Enabled | |
| Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start | Enabled | |
| Prevent the First Run webpage from opening on Microsoft Edge | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Restrict the user from entering author mode | Enabled | |
| Restrict users to the explicitly permitted list of snap-ins | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Turn off the offer to update to the latest version of Windows | Enabled | |
| Turn off the Store application | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent bypassing Windows Defender SmartScreen prompts for sites | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Messenger to be run | Enabled | |
| Do not automatically start Windows Messenger initially | Enabled |
| Setting | State |
|---|---|
| Software\Policies\Microsoft\WindowsMovieMaker\MovieMaker | 1 |
| Action | Replace |
| Source file(s) | \\emea.tpg.ads\NL\Amsterdam\Settings\Pushfiles\User_Rest_Hard_Pol\java\exception.sites |
| Destination file | %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security\exception.sites |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Path | %userprofile%\AppData\Local\Microsoft\Windows\WinX |
| Read-only | Disabled |
| Hidden | Enabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Path | %userprofile%\AppData\Local\Microsoft\Windows\WinX\Group1 |
| Read-only | Disabled |
| Hidden | Enabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Path | %userprofile%\AppData\Local\Microsoft\Windows\WinX\Group2 |
| Read-only | Disabled |
| Hidden | Enabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Path | %userprofile%\AppData\Local\Microsoft\Windows\WinX\Group3 |
| Read-only | Disabled |
| Hidden | Enabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Value name | NoRun |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Microsoft\Office\15.0\Outlook\Preferences |
| Value name | DelegateSentItemsStyle |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings |
| Value name | NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Internet Settings |
| Value name | EnableNegotiate |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings |
| Value name | EnableAutodial |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings |
| Value name | NoNetAutodial |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum |
| Value name | {F02C1A0D-BE21-4350-88B0-7367FC96EF3C} |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | ShowInfoTip |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | Start_ShowPrinters |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | System\GameConfigStore |
| Value name | GameDVR_Enabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Search |
| Value name | SearchboxTaskbarMode |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Policies\Google\Chrome\URLBlocklist |
| Value name | 1 |
| Value type | REG_SZ |
| Value data | https://teams.microsoft.com/ |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Policies\Microsoft\Cloud\Office\16.0\Teams |
| Value name | RestrictTeamsSignInToAccountsFromTenantList |
| Value type | REG_SZ |
| Value data | 638fcbaf-ba4c-43e1-adae-5475c970fe10,80bd712d-fd46-45a1-bc47-4a0faecb675c,89125fb5-f9e5-4c45-a9a2-271c23bc7518 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Policies\Microsoft\Office\16.0\Teams |
| Value name | RestrictTeamsSignInToAccountsFromTenantList |
| Value type | REG_SZ |
| Value data | 638fcbaf-ba4c-43e1-adae-5475c970fe10,80bd712d-fd46-45a1-bc47-4a0faecb675c,89125fb5-f9e5-4c45-a9a2-271c23bc7518 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Microsoft\Office\16.0\Teams |
| Value name | RestrictTeamsSignInToAccountsFromTenantList |
| Value type | REG_SZ |
| Value data | 638fcbaf-ba4c-43e1-adae-5475c970fe10,80bd712d-fd46-45a1-bc47-4a0faecb675c,89125fb5-f9e5-4c45-a9a2-271c23bc7518 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Policies\Microsoft\Edge |
| Value name | ConfigureShare |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | DisabledHotkeys |
| Value type | REG_SZ |
| Value data | S |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Keyboard |
| Value name | PrintScreenKeyForSnippingEnabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Policies\Microsoft\Edge |
| Value name | ConfigureKeyboardShortcuts |
| Value type | REG_SZ |
| Value data | {"disabled": ["web_select"]} |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Delete |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{031E4825-7B94-4dc3-B131-E946B44C8DD5} |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | Software\Policies\Microsoft\Windows\WorkplaceJoin |
| Value name | BlockAADWorkplaceJoin |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | Software\IM Providers |
| Value name | DefaultIMApp |
| Value type | REG_SZ |
| Value data | Teams |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | Software\IM Providers\Teams |
| Value name | FriendlyName |
| Value type | REG_SZ |
| Value data | Microsoft Teams |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Delete |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Value name | NoRun |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | Software\IM Providers\Teams |
| Value name | ProcessName |
| Value type | REG_SZ |
| Value data | Teams.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | System\CurrentControlSet\Control\Keyboard Layout |
| Value name | Scancode Map |
| Value type | REG_BINARY |
| Value data | 000000000000000003000000000037E00000540000000000 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | Software\IM Providers\Teams |
| Value name | (Default) |
| Value type | REG_SZ |
| Value data |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | Software\Microsoft\Windows\CurrentVersion\CapbilityAccessManager\ConsentStore\graphicsCaptureProgrammatic |
| Value name | Value |
| Value type | REG_SZ |
| Value data | Deny |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\CapbilityAccessManager\ConsentStore\graphicsCaptureProgrammatic |
| Value name | Value |
| Value type | REG_SZ |
| Value data | Deny |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | ShowTaskViewButton |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Office\16.0\Common\ExperimentEcs\Overrides |
| Value name | Microsoft.Office.Outlook.Hub.HubBar |
| Value type | REG_SZ |
| Value data | False |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | HideFileExt |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | ShowSuperHidden |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Delete |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Classes\Extensions\ContractId\Windows.Protocol\PackageId\MicrosoftWindows.Client.CBS_120.2212.4190.0_x64__cw5n1h2txyewy\ActivatableClassId\ScreenClipping.AppX4qm9f5mxaxadptn1dx5ecnnw9b9tddbz.mca |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist |
| Value name | 67 |
| Value type | REG_SZ |
| Value data | hdppkjifljbdpckfajcmlblbchhledln;https://clients2.google.com/service/update2/crx |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_CURRENT_USER |
| Key path | SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallAllowlist |
| Value name | 67 |
| Value type | REG_SZ |
| Value data | hdppkjifljbdpckfajcmlblbchhledln |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Citrix Content Redirection Extension |
| Action | Replace |
| Target type | File system object |
| Shortcut path | %NetPlacesDir%\Amsterdam - Clients |
| Target path | \\emea.tpg.ads\nl\Amsterdam\Clients |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | Yes |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 1 |
| useIPv6 | 0 |
| min | 10.13.0.0 |
| max | 10.13.255.254 |
| Action | Replace |
| Target type | File system object |
| Shortcut path | %NetPlacesDir%\Amsterdam - Departments |
| Target path | \\emea.tpg.ads\nl\Amsterdam\Departments |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | Yes |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| useIPv6 | 0 |
| min | 10.13.0.0 |
| max | 10.13.255.254 |
| Action | Replace |
| Target type | File system object |
| Shortcut path | %NetPlacesDir%\Amsterdam - Public |
| Target path | \\emea.tpg.ads\nl\Amsterdam\Public |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | Yes |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| useIPv6 | 0 |
| min | 10.13.0.0 |
| max | 10.13.255.254 |
| Action | Replace |
| Target type | File system object |
| Shortcut path | %NetPlacesDir%\Amsterdam - Zalando AL Staging |
| Target path | \\emea.tpg.ads\NL\Amsterdam\CEMEA CTX\AL\Zalando\Staging |
| Shortcut key | None |
| Run | Normal window |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Remove this item when it is no longer applied | Yes |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\NLAMS-L-SEC-Filesystem CemeaCTX AL Zalando Staging RW |
| sid | S-1-5-21-513466819-3096973226-347852806-1103834 |
| userContext | 1 |
| primaryGroup | 0 |
| localGroup | 0 |