| PL-A-Computers ZTA scoring | |
| Data collected on: 2-9-2025 11:32:11 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\polok.5-adm |
| Created | 20-9-2023 11:30:30 |
| Modified | 23-5-2024 15:01:12 |
| User Revisions | 0 (AD), 0 (SYSVOL) |
| Computer Revisions | 26 (AD), 26 (SYSVOL) |
| Unique ID | {ec7bdfaf-2351-4f14-bcbc-f3eeac6b33a4} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | No | Enabled | emea.tpg.ads/PL/Systems/Clients |
| Name |
|---|
| EMEA\PLKATDCC91235J9$ |
| EMEA\PLKATLT02416$ |
| EMEA\PL-L-SEC-Computers Crowdstrike ZTA Scoring |
| EMEA\PLWA2DCC0090JHL$ |
| EMEA\PLWA2DT00407$ |
| EMEA\PLWAWDT01004$ |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\PLKATDCC91235J9$ | Read (from Security Filtering) | No |
| EMEA\PLKATLT02416$ | Read (from Security Filtering) | No |
| EMEA\PL-L-SEC-Computers Crowdstrike ZTA Scoring | Read (from Security Filtering) | No |
| EMEA\PL-L-SEC-Delegation Modify Group Policy Settings Access | Edit settings, delete, modify security | No |
| EMEA\PLWA2DCC0090JHL$ | Read (from Security Filtering) | No |
| EMEA\PLWA2DT00407$ | Read (from Security Filtering) | No |
| EMEA\PLWAWDT01004$ | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\DeviceGuard |
| Value name | EnableVirtualizationBasedSecurity |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\DeviceGuard |
| Value name | RequirePlatformSecurityFeatures |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\DeviceGuard |
| Value name | Locked |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity |
| Value name | Locked |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |