Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
PL-PO-ADM-C-Common Client System Configuration
Data collected on: 2-9-2025 09:09:32
General
Details
Domainemea.tpg.ads
OwnerS-1-5-21-513466819-3096973226-347852806-305342
Created14-12-2017 14:59:18
Modified28-3-2025 12:47:00
User Revisions16 (AD), 16 (SYSVOL)
Computer Revisions396 (AD), 396 (SYSVOL)
Unique ID{639b912e-f41a-48ef-946e-5e15898c0708}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
ClientsNoEnabledemea.tpg.ads/PL/Systems/Clients

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
NT AUTHORITY\Authenticated Users
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\Domain AdminsEdit settings, delete, modify securityNo
EMEA\PL-L-SEC-Delegation Modify Group Policy Settings AccessEdit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersRead (from Security Filtering)No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Local Policies/Security Options
Network Security
PolicySetting
Network security: LAN Manager authentication levelSend NTLMv2 response only. Refuse LM & NTLM
Shutdown
PolicySetting
Shutdown: Clear virtual memory pagefileEnabled
Other
PolicySetting
Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settingsEnabled
Event Log
PolicySetting
Maximum application log size3145728 kilobytes
Maximum security log size3145728 kilobytes
Maximum system log size3145728 kilobytes
Retention method for application logAs needed
Retention method for security logAs needed
Retention method for system logAs needed
System Services
Windows Security Service (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Windows Defender Advanced Threat Protection Service (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Microsoft Defender Antivirus Network Inspection Service (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Microsoft Defender Antivirus Service (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Windows Management Instrumentation (Startup Mode: Automatic)
Permissions
No permissions specified
Auditing
No auditing specified
xbgm (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
XblAuthManager (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
XblGameSave (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
XboxGipSvc (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
XboxNetApiSvc (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Public Key Policies/Trusted Root Certification Authorities
Certificates
Issued ToIssued ByExpiration DateIntended Purposes
plwa2fwvip.emea.tpg.adsplwa2fwvip.emea.tpg.ads31-3-2025 11:35:16<All>
TPPLTPPL27-3-2030 11:31:01<All>

For additional information about individual settings, launch the Local Group Policy Object Editor.
Public Key Policies/Trusted Publishers Certificates
Issued ToIssued ByExpiration DateIntended Purposes
plwa2fwvip.emea.tpg.adsplwa2fwvip.emea.tpg.ads31-3-2025 11:35:16<All>
TPPLTPPL27-3-2030 11:31:01<All>

For additional information about individual settings, launch the Local Group Policy Object Editor.
Advanced Audit Configuration
Account Logon
PolicySetting
Audit Credential ValidationSuccess, Failure
Audit Kerberos Authentication ServiceSuccess, Failure
Audit Kerberos Service Ticket OperationsSuccess, Failure
Audit Other Account Logon EventsSuccess, Failure
Account Management
PolicySetting
Audit Application Group ManagementSuccess, Failure
Audit Computer Account ManagementSuccess, Failure
Audit Distribution Group ManagementSuccess, Failure
Audit Other Account Management EventsSuccess, Failure
Audit Security Group ManagementSuccess, Failure
Audit User Account ManagementSuccess, Failure
Detailed Tracking
PolicySetting
Audit DPAPI ActivityNo Auditing
Audit PNP ActivityNo Auditing
Audit Process CreationSuccess, Failure
Audit Process TerminationSuccess, Failure
Audit RPC EventsNo Auditing
DS Access
PolicySetting
Audit Detailed Directory Service ReplicationNo Auditing
Audit Directory Service AccessSuccess, Failure
Audit Directory Service ChangesSuccess, Failure
Audit Directory Service ReplicationNo Auditing
Logon/Logoff
PolicySetting
Audit Account LockoutSuccess, Failure
Audit User / Device ClaimsNo Auditing
Audit IPsec Extended ModeNo Auditing
Audit IPsec Main ModeNo Auditing
Audit IPsec Quick ModeNo Auditing
Audit LogoffSuccess, Failure
Audit LogonSuccess, Failure
Audit Network Policy ServerSuccess, Failure
Audit Other Logon/Logoff EventsSuccess, Failure
Audit Special LogonSuccess, Failure
Object Access
PolicySetting
Audit Application GeneratedSuccess, Failure
Audit Certification ServicesSuccess, Failure
Audit Detailed File ShareSuccess, Failure
Audit File ShareSuccess, Failure
Audit File SystemNo Auditing
Audit Filtering Platform ConnectionFailure
Audit Filtering Platform Packet DropFailure
Audit Handle ManipulationNo Auditing
Audit Kernel ObjectNo Auditing
Audit Other Object Access EventsSuccess, Failure
Audit RegistrySuccess, Failure
Audit Removable StorageSuccess, Failure
Audit SAMSuccess, Failure
Audit Central Access Policy StagingSuccess, Failure
Policy Change
PolicySetting
Audit Audit Policy ChangeSuccess, Failure
Audit Authentication Policy ChangeSuccess, Failure
Audit Authorization Policy ChangeSuccess, Failure
Audit Filtering Platform Policy ChangeNo Auditing
Audit MPSSVC Rule-Level Policy ChangeSuccess, Failure
Audit Other Policy Change EventsNo Auditing
Privilege Use
PolicySetting
Audit Non Sensitive Privilege UseNo Auditing
Audit Other Privilege Use EventsNo Auditing
Audit Sensitive Privilege UseNo Auditing
System
PolicySetting
Audit IPsec DriverSuccess, Failure
Audit Other System EventsSuccess, Failure
Audit Security State ChangeSuccess, Failure
Audit Security System ExtensionSuccess, Failure
Audit System IntegritySuccess, Failure
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Network/IPv6 Configuration
PolicySettingComment
IPv6 Configuration PolicyEnabled
IPv6 ConfigurationDisable all IPv6 components
System/Internet Communication Management/Internet Communication settings
PolicySettingComment
Turn off Windows Error ReportingEnabled
System/OS Policies
PolicySettingComment
Enables Activity FeedDisabled
Windows Components/Microsoft Defender Antivirus
PolicySettingComment
Turn off Microsoft Defender AntivirusEnabled
Windows Components/Remote Desktop Services/Remote Desktop Session Host/Connections
PolicySettingComment
Allow users to connect remotely by using Remote Desktop ServicesEnabled
Windows Components/Remote Desktop Services/Remote Desktop Session Host/Session Time Limits
PolicySettingComment
Set time limit for active but idle Remote Desktop Services sessionsEnabled
Idle session limit:15 minutes
PolicySettingComment
Set time limit for disconnected sessionsEnabled
End a disconnected session15 minutes
Windows Components/Windows Remote Management (WinRM)/WinRM Service
PolicySettingComment
Allow remote server management through WinRMEnabled
IPv4 filter:*
IPv6 filter:*
Syntax:
Type "*" to allow messages from any IP address, or leave the
field empty to listen on no IP address. You can specify one
or more ranges of IP addresses.
Example IPv4 filters:
2.0.0.1-2.0.0.20, 24.0.0.1-24.0.0.22
*
Example IPv6 filters:
3FFE:FFFF:7654:FEDA:1245:BA98:0000:0000-3FFE:FFFF:7654:FEDA:1245:BA98:3210:4562
*
Windows Components/Windows Security/Notifications
PolicySettingComment
Hide all notificationsEnabled
Windows Components/Windows Update/Manage end user experience
PolicySettingComment
Turn off auto-restart for updates during active hoursEnabled
Active Hours
Start: 8 AM
End:10 PM
Preferences
Windows Settings
Registry
InitialKeyboardIndicators (Order: 1)
General
ActionReplace
Properties
HiveHKEY_USERS
Key path.DEFAULT\Control Panel\Keyboard
Value nameInitialKeyboardIndicators
Value typeREG_SZ
Value data2
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
InitialKeyboardIndicators (Order: 2)
General
ActionReplace
Properties
HiveHKEY_CURRENT_USER (HKU\.DEFAULT)
Key pathControl Panel\Keyboard
Value nameInitialKeyboardIndicators
Value typeREG_SZ
Value data2
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
1 (Order: 3)
General
ActionReplace
Properties
HiveHKEY_CURRENT_USER (HKU\.DEFAULT)
Key pathSoftware\Microsoft\Edge\SmartScreenEnabled
Value name1
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
WebCaptureEnabled (Order: 4)
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Policies\Microsoft\Edge
Value nameWebCaptureEnabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
UserFeedbackAllowed (Order: 5)
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Policies\Microsoft\Edge
Value nameUserFeedbackAllowed
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Control Panel Settings
Services
Service (Name: WinRM)
WinRM (Order: 1)
General
Service nameWinRM
ActionNo change
Startup type:No change
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:Restart the service
Second failure:Restart the service
Subsequent failures:No change
Reset fail count after:0 days
Restart service after:1 minute
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
User Configuration (Enabled)
No settings defined.