| PT-PO-WIN-ADM-U-Restrictions PCI - Allow APPDATA Drive D Removable Access | |
| Data collected on: 2-9-2025 09:31:57 | |
| Domain | emea.tpg.ads |
| Owner | S-1-5-21-513466819-3096973226-347852806-649074 |
| Created | 16-9-2019 16:28:06 |
| Modified | 16-7-2025 12:44:20 |
| User Revisions | 189 (AD), 189 (SYSVOL) |
| Computer Revisions | 1 (AD), 1 (SYSVOL) |
| Unique ID | {8d4d3eba-e325-442f-9590-fc12f4562560} |
| GPO Status | Computer settings disabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| PT | No | Enabled | emea.tpg.ads/PT |
| Name |
|---|
| None |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\PT-L-SEC-User-Restrictions-PCI Allow Drive D Edge Print | Custom | No |
| Name | Parameters |
|---|---|
| DisableDesktop.ps1 | |
| Restore_PWA_Edge_Chrome.ps1 |
| Enforcement | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Designated File Types | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Trusted Publishers | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| Policy | Setting |
|---|---|
| Default Security Level | Unrestricted |
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% | ||||||
| ||||||
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% | ||||||
| ||||||
| C:\Users\%username%\AppData\Local\R-Link 2 Toolbox | ||||||
|
| Policy | Setting | Comment | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Always open All Control Panel Items when opening Control Panel | Enabled | ||||||||
| Show only specified Control Panel items | Enabled | ||||||||
| |||||||||
| Policy | Setting | Comment |
|---|---|---|
| Prevent changing desktop background | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not add shares of recently opened documents to Network Locations | Enabled | |
| Hide and disable all items on the desktop | Enabled | GESCP: #22032762 |
| Hide Network Locations icon on desktop | Enabled | |
| Prevent adding, dragging, dropping and closing the Taskbar's toolbars | Enabled | |
| Prohibit User from manually redirecting Profile Folders | Enabled | |
| Remove My Documents icon on the desktop | Enabled | |
| Remove Properties from the Computer icon context menu | Enabled | |
| Remove Properties from the Documents icon context menu | Enabled | |
| Remove Properties from the Recycle Bin context menu | Enabled | |
| Remove Recycle Bin icon from desktop | Enabled | |
| Remove the Desktop Cleanup Wizard | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable all items | Enabled | GESCP: #22032762 |
| Prohibit adding items | Enabled | GESCP: #22032762 |
| Policy | Setting | Comment | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Allow importing of payment info | Disabled | |||||||||
| Allow importing of saved passwords | Disabled | |||||||||
| Allow user feedback | Disabled | |||||||||
| Block access to a list of URLs | Enabled | |||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Control where developer tools can be used | Enabled | GESCP | ||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Define a list of allowed URLs | Enabled | |||||||||
| ||||||||||
| Policy | Setting | Comment | ||||||||
| Enable AutoFill for addresses | Disabled | |||||||||
| Enable AutoFill for payment instruments | Disabled | |||||||||
| Enable the Collections feature | Disabled | CO 439951 - Disable "Enable Collections feature" | ||||||||
| Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge | Disabled | GESCP | ||||||||
| Hide the First-run experience and splash screen | Enabled | |||||||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Configure cookies | Enabled | |||
| ||||
| Policy | Setting | Comment | ||||
|---|---|---|---|---|---|---|
| Control which extensions cannot be installed | Enabled | |||||
| ||||||
| Policy | Setting | Comment |
|---|---|---|
| Enable saving passwords to the password manager | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow shared folders to be published | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Add Logoff to the Start Menu | Enabled | |
| Disable context menus in the Start Menu | Enabled | |
| Force classic Start Menu | Enabled | |
| Remove Balloon Tips on Start Menu items | Disabled | |
| Remove common program groups from Start Menu | Enabled | |
| Remove Documents icon from Start Menu | Enabled | |
| Remove Favorites menu from Start Menu | Enabled | |
| Remove Help menu from Start Menu | Enabled | |
| Remove links and access to Windows Update | Enabled | |
| Remove Music icon from Start Menu | Enabled | |
| Remove Network Connections from Start Menu | Enabled | |
| Remove Network icon from Start Menu | Enabled | |
| Remove Pictures icon from Start Menu | Enabled | |
| Remove programs on Settings menu | Enabled | |
| Remove Recent Items menu from Start Menu | Enabled | |
| Remove Run menu from Start Menu | Enabled | |
| Remove Search link from Start Menu | Enabled | |
| Remove user folder link from Start Menu | Enabled | |
| Show QuickLaunch on Taskbar | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Prevent access to registry editing tools | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Prevent access to the command prompt | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Remove Task Manager | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| All Removable Storage classes: Deny all access | Enabled | |
| CD and DVD: Deny read access | Enabled | |
| CD and DVD: Deny write access | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Default risk level for file attachments | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Do not preserve zone information in file attachments | Enabled | |||
| Inclusion list for low file types | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon | Enabled | |||
| Hide these specified drives in My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Hides the Manage item on the File Explorer context menu | Enabled | |||
| No Computers Near Me in Network Locations | Enabled | |||
| No Entire Network in Network Locations | Enabled | |||
| Prevent access to drives from My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Remove "Map Network Drive" and "Disconnect Network Drive" | Enabled | |||
| Remove CD Burning features | Enabled | |||
| Remove DFS tab | Enabled | CO 388190 | ||
| Remove File Explorer's default context menu | Enabled | |||
| Remove File menu from File Explorer | Enabled | CO 388190 | ||
| Remove Hardware tab | Enabled | CO 388190 | ||
| Remove Search button from File Explorer | Enabled | |||
| Remove Security tab | Enabled | CO 388190 | ||
| Remove Shared Documents from My Computer | Enabled | |||
| Turn off caching of thumbnail pictures | Enabled | |||
| Turn off Windows Key hotkeys | Enabled | |||
| Turn on Classic Shell | Disabled | |||
| Policy | Setting | Comment |
|---|---|---|
| Hide previous versions list for local files | Enabled | CO 388190 |
| Hide previous versions list for remote files | Enabled | CO 388190 |
| Hide previous versions of files on backup location | Enabled | CO 388190 |
| Prevent restoring local previous versions | Enabled | CO 388190 |
| Prevent restoring previous versions from backups | Enabled | CO 388190 |
| Prevent restoring remote previous versions | Enabled | CO 388190 |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Configure Media Explorer Bar | Disabled | |||
| Disable changing accessibility settings | Enabled | |||
| Disable changing Advanced page settings | Enabled | |||
| Disable changing Automatic Configuration settings | Enabled | |||
| Disable changing Calendar and Contact settings | Enabled | |||
| Disable changing certificate settings | Enabled | |||
| Disable changing default browser check | Enabled | |||
| Disable changing font settings | Enabled | |||
| Disable changing language settings | Enabled | |||
| Disable changing Messaging settings | Enabled | |||
| Disable changing Profile Assistant settings | Enabled | |||
| Disable changing ratings settings | Enabled | |||
| Disable changing Temporary Internet files settings | Enabled | |||
| Disable Import/Export Settings wizard | Enabled | |||
| Disable Internet Connection wizard | Enabled | |||
| Disable the Reset Web Settings feature | Enabled | |||
| Do not allow users to enable or disable add-ons | Enabled | |||
| Pop-up allow list | Disabled | |||
| Position the menu bar above the navigation bar | Enabled | |||
| Prevent access to Internet Explorer Help | Enabled | |||
| Prevent changing pop-up filter level | Enabled | |||
| Prevent changing proxy settings | Enabled | |||
| Prevent changing the default search provider | Enabled | |||
| Prevent Internet Explorer Search box from appearing | Enabled | |||
| Prevent participation in the Customer Experience Improvement Program | Enabled | |||
| Prevent running First Run wizard | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Search: Disable Search Customization | Enabled | |||
| Turn off configuration of pop-up windows in tabbed browsing | Disabled | |||
| Turn off Favorites bar | Enabled | |||
| Turn off pop-up management | Enabled | |||
| Policy | Setting | Comment |
|---|---|---|
| Disable Save this program to disk option | Enabled | |
| File menu: Disable New menu option | Enabled | |
| File menu: Disable Open menu option | Enabled | |
| File menu: Disable Save As Web Page Complete | Enabled | |
| File menu: Disable Save As... menu option | Enabled | |
| Help menu: Remove 'For Netscape Users' menu option | Enabled | |
| Help menu: Remove 'Send Feedback' menu option | Enabled | |
| Help menu: Remove 'Tip of the Day' menu option | Enabled | |
| Help menu: Remove 'Tour' menu option | Enabled | |
| Hide Favorites menu | Disabled | |
| Tools menu: Disable Internet Options... menu option | Enabled | |
| View menu: Disable Source menu option | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow deleting browsing history on exit | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable the Advanced page | Enabled | |
| Disable the Connections page | Enabled | |
| Disable the Content page | Enabled | |
| Disable the General page | Enabled | |
| Disable the Privacy page | Enabled | |
| Disable the Programs page | Enabled | |
| Disable the Security page | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Empty Temporary Internet Files folder when browser is closed | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Prevent configuration of search on Address bar | Enabled | |||
| ||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Configure Toolbar Buttons | Enabled | |||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||
| Disable customizing browser toolbar buttons | Enabled | |||||||||||||||||||||||||||||||||||||||||
| Disable customizing browser toolbars | Enabled | |||||||||||||||||||||||||||||||||||||||||
| Hide the Command bar | Enabled | |||||||||||||||||||||||||||||||||||||||||
| Hide the status bar | Disabled | |||||||||||||||||||||||||||||||||||||||||
| Lock all toolbars | Enabled | |||||||||||||||||||||||||||||||||||||||||
| Lock location of Stop and Refresh buttons | Enabled | |||||||||||||||||||||||||||||||||||||||||
| Turn off Developer Tools | Enabled | |||||||||||||||||||||||||||||||||||||||||
| Turn off toolbar upgrade tool | Enabled | |||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Restrict users to the explicitly permitted list of snap-ins | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Computer Management | Disabled | |
| Local Users and Groups | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Messenger to be run | Enabled | |
| Do not automatically start Windows Messenger initially | Enabled |
| Setting | State |
|---|---|
| Software\Policies\Microsoft\WindowsMovieMaker\MovieMaker | 1 |
| Action | Delete |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{031E4825-7B94-4dc3-B131-E946B44C8DD5} |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Delete |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Value name | NoRun |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Value name | NoRun |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | Yes |
| Action | Delete |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{26EE0668-A00A-44D7-9371-BEB064C98683} |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Delete |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum |
| Value name | {59031a47-3f72-44a7-89c5-5595fe6b30ee} |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | Yes |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | software\policies\microsoft\office\16.0\common\insert media\screenshot |
| Value name | disablescreenclippings |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| #28014264 - Block Clipping - ScreenShot O365 |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Accessibility\Keyboard Response |
| Value name | AutoRepeatDelay |
| Value type | REG_SZ |
| Value data | 0 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| CO488542 - Block AutoRepeat Keyboard |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Accessibility\Keyboard Response |
| Value name | AutoRepeatRate |
| Value type | REG_SZ |
| Value data | 0 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| CO488542 - Block AutoRepeat Keyboard |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Accessibility\Keyboard Response |
| Value name | BounceTime |
| Value type | REG_SZ |
| Value data | 0 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| CO488542 - Block AutoRepeat Keyboard |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Accessibility\Keyboard Response |
| Value name | DelayBeforeAcceptance |
| Value type | REG_SZ |
| Value data | 0 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| CO488542 - Block AutoRepeat Keyboard |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Accessibility\Keyboard Response |
| Value name | Flags |
| Value type | REG_SZ |
| Value data | 31 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| CO488542 - Block AutoRepeat Keyboard |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Accessibility\Keyboard Response |
| Value name | Last BounceKey Setting |
| Value type | REG_DWORD |
| Value data | 0x1F4 (500) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| CO488542 - Block AutoRepeat Keyboard |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Accessibility\Keyboard Response |
| Value name | Last Valid Delay |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| CO488542 - Block AutoRepeat Keyboard |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Accessibility\Keyboard Response |
| Value name | Last Valid Repeat |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| CO488542 - Block AutoRepeat Keyboard |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Control Panel\Accessibility\Keyboard Response |
| Value name | Last Valid Wait |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| CO488542 - Block AutoRepeat Keyboard |