| PL-PO-ADM-U-Default Restrictions Agent&Supervisor W11 | |
| Data collected on: 2-9-2025 12:21:57 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\dykas.6-adm |
| Created | 8-10-2024 14:20:38 |
| Modified | 19-11-2024 13:48:20 |
| User Revisions | 14 (AD), 14 (SYSVOL) |
| Computer Revisions | 1 (AD), 1 (SYSVOL) |
| Unique ID | {fcd25eff-bf64-4c47-ad20-b2a1da343288} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| None | |||
| Name |
|---|
| None |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\dykas.6-adm | Edit settings, delete, modify security | No |
| EMEA\PL-L-SEC-Delegation Modify Group Policy Settings Access | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Enforcement | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Designated File Types | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Trusted Publishers | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| Policy | Setting |
|---|---|
| Default Security Level | Unrestricted |
| %UserProfile%\*.bat | ||||||
| ||||||
| %UserProfile%\Downloads\* | ||||||
| ||||||
| C:\Program Files\WindowsApps\Microsoft.WindowsStore* | ||||||
| ||||||
| C:\Windows\SystemApps\Microsoft.Windows.Cortana* | ||||||
| ||||||
| C:\Windows\SystemApps\Microsoft.Windows.Search* | ||||||
|
| Policy | Setting | Comment | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Settings Page Visibility | Enabled | ||||||||||
| |||||||||||
| Policy | Setting | Comment | |||||||||
| Show only specified Control Panel items | Enabled | ||||||||||
| |||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Prevent changing desktop background | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent addition of printers | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Remove Recycle Bin icon from desktop | Enabled |
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Block access to a list of URLs | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Control where Developer Tools can be used | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Disable saving browser history | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Configure the home page URL | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Use New Tab Page as homepage | Enabled | |||
| Policy | Setting | Comment | |||||
|---|---|---|---|---|---|---|---|
| Configure extension installation allow list | Enabled | ||||||
| |||||||
| Policy | Setting | Comment | |||||
| Configure extension installation blocklist | Enabled | ||||||
| |||||||
| Policy | Setting | Comment | |||||
| Configure the list of force-installed apps and extensions | Enabled | ||||||
| |||||||
| Policy | Setting | Comment |
|---|---|---|
| Enable saving passwords to the password manager | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Enable printing | Disabled |
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Allow importing of favorites | Disabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Allow user feedback | Disabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Block access to a list of URLs | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Control where developer tools can be used | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Disable saving browser history | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Enable the Collections feature | Disabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Restrict which accounts can be used to sign in to Microsoft Edge | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Configure the home page URL | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Set the new tab page as the home page | Enabled | |||
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Allow specific extensions to be installed | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Control which extensions are installed silently | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Control which extensions cannot be installed | Enabled | |||||
| ||||||
| Policy | Setting | Comment |
|---|---|---|
| Enable saving passwords to the password manager | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Enable printing | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Configure Microsoft Defender SmartScreen | Disabled |
| Policy | Setting | Comment | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Block about:config | Enabled | |||||||||||||||||
| Block about:profiles | Enabled | |||||||||||||||||
| Block Add-ons Manager | Enabled | |||||||||||||||||
| Blocked websites | Enabled | |||||||||||||||||
| ||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||
| Customize Firefox Home | Enabled | |||||||||||||||||
| ||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||
| Disable Developer Tools | Enabled | |||||||||||||||||
| Disable Pocket | Enabled | |||||||||||||||||
| Do not allow passwords to be revealed in saved logins | Enabled | |||||||||||||||||
| Don't Check Default Browser | Enabled | |||||||||||||||||
| Download Directory | Enabled | |||||||||||||||||
| ||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||
| Override the first run page | Enabled | |||||||||||||||||
| ||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||
| Password Manager | Disabled | |||||||||||||||||
| Password Manager Exceptions | Enabled | |||||||||||||||||
| ||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||
| Printing | Disabled | |||||||||||||||||
| Prompt for download location | Disabled | |||||||||||||||||
| Windows SSO | Enabled | |||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Allow add-on installs from websites | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow preferences to be changed | Enabled | |
| Improve the Firefox Suggest experience | Disabled | |
| Suggestions from sponsors | Disabled | |
| Suggestions from the web | Disabled |
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Show Home button on toolbar | Enabled | |||||||
| Start Page | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||||
| URL for Home page | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Clear history of recently opened documents on exit | Enabled | |||||
| Clear the recent programs list for new users | Enabled | |||||
| Do not allow pinning Store app to the Taskbar | Enabled | |||||
| Do not keep history of recently opened documents | Enabled | |||||
| Remove "Recently added" list from Start Menu | Enabled | |||||
| Remove access to the context menus for the taskbar | Enabled | |||||
| Remove All Programs list from the Start menu | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Remove frequent programs list from the Start Menu | Enabled | |||||
| Remove Notifications and Action Center | Enabled | |||||
| Remove Personalized Website Recommendations from the Recommended section in the Start Menu | Enabled | |||||
| Remove Recommended section from Start Menu | Enabled | |||||
| Remove Run menu from Start Menu | Enabled | |||||
| Show or hide "Most used" list from Start menu | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Show Windows Store apps on the taskbar | Disabled | |||||
| Start Layout | Enabled | |||||
| ||||||
| Policy | Setting | Comment | ||||
| Turn off user tracking | Enabled | |||||
| Policy | Setting | Comment | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Don't run specified Windows applications | Enabled | |||||||||||||||||
| ||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||
| Prevent access to registry editing tools | Enabled | |||||||||||||||||
| ||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||
| Prevent access to the command prompt | Enabled | |||||||||||||||||
| ||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Remove Task Manager | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| All Removable Storage classes: Deny all access | Enabled | |
| CD and DVD: Deny read access | Enabled | |
| CD and DVD: Deny write access | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Default risk level for file attachments | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Do not preserve zone information in file attachments | Enabled | |||
| Inclusion list for low file types | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon | Enabled | |||
| Hide these specified drives in My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Hides the Manage item on the File Explorer context menu | Enabled | |||
| Prevent access to drives from My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Remove "Map Network Drive" and "Disconnect Network Drive" | Enabled | |||
| Remove CD Burning features | Enabled | |||
| Remove File Explorer's default context menu | Enabled | |||
| Turn off Windows Key hotkeys | Enabled | |||
| Policy | Setting | Comment |
|---|---|---|
| Restrict the user from entering author mode | Enabled | |
| Restrict users to the explicitly permitted list of snap-ins | Enabled |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Search |
| Value name | (Default) |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Search |
| Value name | SearchboxTaskbarMode |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| Value name | TaskbarDa |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Always show icons, never thumbnails | Disabled |
| Always show menus | Disabled |
| Display file icon on thumbnails | Enabled |
| Display file size information in folder tips | Enabled |
| Display simple folder view in Navigation pane | Enabled |
| Display the full path in the titlebar (classic folders only) | Disabled |
| Hidden files and folders | Do not show hidden files and folders |
| Hide extensions for known file types | Enabled |
| Hide protected operating system files (Recommended) | Enabled |
| Launch folder windows in separate process | Disabled |
| Remember each folder's view settings | Enabled |
| Restore previous folder windows at logon | Disabled |
| Show drive letters | Enabled |
| Show encrypted or compressed NTFS files in color | Enabled |
| Show pop-up description for folder and desktop items | Enabled |
| Show preview handlers in preview pane | Enabled |
| Use check boxes to select items | Disabled |
| Use sharing wizard (Recommended) | Enabled |
| When typing into list view | Select the typed item in the view |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | Yes |
| Apply once and do not reapply | No |