| PL-PR-WIN-C-Nessus Vulnerability Scan Remediation Disable TLS 1.0&TLS 1.1 | |
| Data collected on: 2-9-2025 09:21:04 | |
| Domain | emea.tpg.ads |
| Owner | S-1-5-21-513466819-3096973226-347852806-156882 |
| Created | 3-12-2018 23:28:54 |
| Modified | 14-4-2025 12:30:56 |
| User Revisions | 0 (AD), 0 (SYSVOL) |
| Computer Revisions | 349 (AD), 349 (SYSVOL) |
| Unique ID | {8bb57560-cef1-49b8-8eeb-ff2434eeff98} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | No | Enabled | emea.tpg.ads/PL/Systems/Clients |
| Name |
|---|
| EMEA\CustomerService |
| EMEA\PLKATDS4JW9466$ |
| EMEA\PLKATDS4JW9489$ |
| EMEA\PLKATDT00305$ |
| EMEA\PLKATDT00309$ |
| EMEA\PLKATDT00339$ |
| EMEA\PLKATDT2005395$ |
| EMEA\PLKATDT2007047$ |
| EMEA\PLKATDT2007052$ |
| EMEA\PLKATDT2007067$ |
| EMEA\PLKATDT2007070$ |
| EMEA\PLKATDT2007074$ |
| EMEA\PLKATDT2007075$ |
| EMEA\PLKATDT2007078$ |
| EMEA\PLKATDT2007080$ |
| EMEA\PLKATDT2007140$ |
| EMEA\PLKATDT2007142$ |
| EMEA\PLKATDT2007145$ |
| EMEA\PLKATDT2007146$ |
| EMEA\PLKATDT2007148$ |
| EMEA\PLKATDT2007149$ |
| EMEA\PLKATDT2007150$ |
| EMEA\PLKATDT2007161$ |
| EMEA\PLKATDT2007244$ |
| EMEA\PLKATDT2007246$ |
| EMEA\PLKATDT2007249$ |
| EMEA\PLKATDT2007253$ |
| EMEA\PLKATDT2007256$ |
| EMEA\PLKATDT2007258$ |
| EMEA\PLKATDT2007277$ |
| EMEA\PLKATDT2007278$ |
| EMEA\PLKATDT2007285$ |
| EMEA\PLKATDT2007287$ |
| EMEA\PLKATDT2007294$ |
| EMEA\PLKATDT2007296$ |
| EMEA\PLKATDT2007304$ |
| EMEA\PLKATDT2007312$ |
| EMEA\PLWA2-G-ORG-Computers Glovo |
| EMEA\PLWA2-G-ORG-Computers InPost |
| EMEA\PLWAW-G-ORG-Computers PnG |
| EMEA\PLWAW-G-ORG-Computers Verifone |
| S-1-5-21-513466819-3096973226-347852806-230311 |
| S-1-5-21-513466819-3096973226-347852806-245479 |
| S-1-5-21-513466819-3096973226-347852806-273198 |
| S-1-5-21-513466819-3096973226-347852806-273202 |
| S-1-5-21-513466819-3096973226-347852806-334778 |
| S-1-5-21-513466819-3096973226-347852806-484176 |
| S-1-5-21-513466819-3096973226-347852806-649168 |
| S-1-5-21-513466819-3096973226-347852806-649196 |
| S-1-5-21-513466819-3096973226-347852806-670841 |
| S-1-5-21-513466819-3096973226-347852806-670875 |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\CustomerService | Read (from Security Filtering) | No |
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\Domain Computers | Read | No |
| EMEA\PLKATDS4JW9466$ | Read (from Security Filtering) | No |
| EMEA\PLKATDS4JW9489$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT00305$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT00309$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT00339$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2005395$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007047$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007052$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007067$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007070$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007074$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007075$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007078$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007080$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007140$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007142$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007145$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007146$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007148$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007149$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007150$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007161$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007244$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007246$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007249$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007253$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007256$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007258$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007277$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007278$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007285$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007287$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007294$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007296$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007304$ | Read (from Security Filtering) | No |
| EMEA\PLKATDT2007312$ | Read (from Security Filtering) | No |
| EMEA\PL-L-SEC-Delegation Modify Group Policy Settings Access | Edit settings, delete, modify security | No |
| EMEA\PLWA2-G-ORG-Computers Glovo | Read (from Security Filtering) | No |
| EMEA\PLWA2-G-ORG-Computers InPost | Read (from Security Filtering) | No |
| EMEA\PLWAW-G-ORG-Computers PnG | Read (from Security Filtering) | No |
| EMEA\PLWAW-G-ORG-Computers Verifone | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| S-1-5-21-513466819-3096973226-347852806-156882 | Edit settings, delete, modify security | No |
| S-1-5-21-513466819-3096973226-347852806-230311 | Read (from Security Filtering) | No |
| S-1-5-21-513466819-3096973226-347852806-245479 | Read (from Security Filtering) | No |
| S-1-5-21-513466819-3096973226-347852806-273198 | Read (from Security Filtering) | No |
| S-1-5-21-513466819-3096973226-347852806-273202 | Read (from Security Filtering) | No |
| S-1-5-21-513466819-3096973226-347852806-334778 | Read (from Security Filtering) | No |
| S-1-5-21-513466819-3096973226-347852806-484176 | Read (from Security Filtering) | No |
| S-1-5-21-513466819-3096973226-347852806-649168 | Read (from Security Filtering) | No |
| S-1-5-21-513466819-3096973226-347852806-649196 | Read (from Security Filtering) | No |
| S-1-5-21-513466819-3096973226-347852806-670841 | Read (from Security Filtering) | No |
| S-1-5-21-513466819-3096973226-347852806-670875 | Read (from Security Filtering) | No |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Turn off encryption support | Enabled | |||
| ||||
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Require use of specific security layer for remote (RDP) connections | Enabled | |||||
| ||||||
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Policies\Microsoft\FVE |
| Value name | EncryptionMethodWithXtsFdv |
| Value type | REG_DWORD |
| Value data | 0x7 (7) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Policies\Microsoft\FVE |
| Value name | EncryptionMethodWithXtsRdv |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client |
| Value name | DisabledByDefault |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Policies\Microsoft\FVE |
| Value name | EncryptionMethodWithXtsRdv |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management |
| Value name | FeatureSettingsOverride |
| Value type | REG_DWORD |
| Value data | 0x2048 (8264) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management |
| Value name | FeatureSettingsOverrideMask |
| Value type | REG_DWORD |
| Value data | 0x3 (3) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server |
| Value name | DisabledByDefault |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server |
| Value name | DisabledByDefault |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Client |
| Value name | DisabledByDefault |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client |
| Value name | Enabled |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client |
| Value name | DisabledByDefault |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server |
| Value name | DisabledByDefault |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |