Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
PT-PO-WIN-C-VDI-Optimization
Data collected on: 2-9-2025 09:43:29
General
Details
Domainemea.tpg.ads
OwnerS-1-5-21-513466819-3096973226-347852806-510149
Created25-3-2020 23:30:32
Modified29-5-2025 17:46:04
User Revisions12 (AD), 12 (SYSVOL)
Computer Revisions414 (AD), 414 (SYSVOL)
Unique ID{6d3eeba5-cc17-4528-be63-f01639c4f4d4}
GPO StatusUser settings disabled
Links
LocationEnforcedLink StatusPath
ClientsNoEnabledemea.tpg.ads/PT/Systems/Clients

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
EMEA\PT-L-SEC-Client System VDI Optimization
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\Domain AdminsEdit settings, delete, modify securityNo
EMEA\PT-L-SEC-Client System VDI OptimizationRead (from Security Filtering)No
EMEA\PT-L-SEC-Delegation Modify Group Policy Settings AccessEdit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersReadNo
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
S-1-5-21-513466819-3096973226-347852806-510149Edit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Local Policies/Security Options
Other
PolicySetting
Interactive logon: Machine inactivity limit300 seconds
System Services
AllJoyn Router Service (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Application Layer Gateway Service (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
BITS (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Bluetooth Support Service (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Offline Files (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Optimize drives (Startup Mode: Manual)
Permissions
No permissions specified
Auditing
No auditing specified
Device Association Service (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Encrypting File System (EFS) (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Function Discovery Provider Host (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Function Discovery Resource Publication (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Windows Installer (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Sensor Monitoring Service (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Internet Connection Sharing (ICS) (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Shell Hardware Detection (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Print Spooler (Startup Mode: Manual)
Permissions
No permissions specified
Auditing
No auditing specified
SSDP Discovery (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Windows Modules Installer (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
UPnP Device Host (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Diagnostic Service Host (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Diagnostic System Host (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Windows Error Reporting Service (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Windows Media Player Network Sharing Service (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Windows Search (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Windows Update (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
Windows Firewall with Advanced Security
Global Settings
PolicySetting
Policy versionNot Configured
Disable stateful FTPNot Configured
Disable stateful PPTPNot Configured
IPsec exemptNot Configured
IPsec through NATNot Configured
Preshared key encodingNot Configured
SA idle timeNot Configured
Strong CRL checkNot Configured
Domain Profile Settings
PolicySetting
Firewall stateOff
Inbound connectionsNot Configured
Outbound connectionsNot Configured
Apply local firewall rulesNot Configured
Apply local connection security rulesNot Configured
Display notificationsNot Configured
Allow unicast responsesNot Configured
Log dropped packetsNot Configured
Log successful connectionsNot Configured
Log file pathNot Configured
Log file maximum size (KB)Not Configured
Connection Security Settings
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Google/Google Update/Applications
PolicySettingComment
Update policy override defaultEnabled
PolicyUpdates disabled
Network/Network Connections
PolicySettingComment
Prohibit use of Internet Connection Firewall on your DNS domain networkEnabled
Network/Network Connections/Windows Defender Firewall/Domain Profile
PolicySettingComment
Windows Defender Firewall: Protect all network connectionsDisabled
Network/Network Connections/Windows Defender Firewall/Standard Profile
PolicySettingComment
Windows Defender Firewall: Protect all network connectionsDisabled
System
PolicySettingComment
Display highly detailed status messagesEnabled
System/Group Policy
PolicySettingComment
Specify startup policy processing wait timeEnabled
Amount of time to wait (in seconds):3
System/Logon
PolicySettingComment
Always wait for the network at computer startup and logonEnabled
Do not display network selection UIEnabled
Do not display the Getting Started welcome screen at logonEnabled
Hide entry points for Fast User SwitchingEnabled
Show first sign-in animation Disabled
Turn off picture password sign-inEnabled
System/Power Management
PolicySettingComment
Specify a custom active power planEnabled
Custom Active Power Plan (GUID):e9a42b02-d5df-448d-aa00-03f14749eb61
System/System Restore
PolicySettingComment
Turn off System RestoreEnabled
Windows Components/Add features to Windows 10
PolicySettingComment
Prevent the wizard from running.Enabled
Windows Components/App Package Deployment
PolicySettingComment
Allow deployment operations in special profilesEnabled
Windows Components/App runtime
PolicySettingComment
Allow Microsoft accounts to be optionalEnabled
Windows Components/Application Compatibility
PolicySettingComment
Turn off Application TelemetryEnabled
Windows Components/AutoPlay Policies
PolicySettingComment
Turn off AutoplayEnabled
Turn off Autoplay on:All drives
Windows Components/Cloud Content
PolicySettingComment
Do not show Windows tipsEnabled
Turn off Microsoft consumer experiencesEnabled
Windows Components/Edge UI
PolicySettingComment
Allow edge swipeDisabled
Disable help tipsEnabled
Windows Components/MDM
PolicySettingComment
Disable MDM EnrollmentEnabled
Windows Components/OneDrive
PolicySettingComment
Prevent the usage of OneDrive for file storageEnabled
Windows Components/Online Assistance
PolicySettingComment
Turn off Active HelpEnabled
Windows Components/Search
PolicySettingComment
Allow CortanaDisabled
Allow search and Cortana to use locationDisabled
Windows Components/Store
PolicySettingComment
Disable all apps from Microsoft Store Enabled
Turn off Automatic Download and Install of updatesEnabled
Turn off the offer to update to the latest version of WindowsEnabled
Turn off the Store applicationEnabled
Windows Components/Windows Update/Manage end user experience
PolicySettingComment
Configure Automatic UpdatesDisabled
Windows Components/Windows Update/Manage updates offered from Windows Update
PolicySettingComment
Do not include drivers with Windows UpdatesEnabled
Preferences
Control Panel Settings
Services
Service (Name: AdobeARMservice)
AdobeARMservice (Order: 1)
General
Service nameAdobeARMservice
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Service (Name: AdobeFlashPlayerUpdateSvc)
AdobeFlashPlayerUpdateSvc (Order: 2)
General
Service nameAdobeFlashPlayerUpdateSvc
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Service (Name: ClickToRunSvc)
ClickToRunSvc (Order: 3)
General
Service nameClickToRunSvc
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Service (Name: edgeupdate)
edgeupdate (Order: 5)
General
Service nameedgeupdate
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Service (Name: MapsBroker)
MapsBroker (Order: 6)
General
Service nameMapsBroker
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Service (Name: UsoSvc)
UsoSvc (Order: 7)
General
Service nameUsoSvc
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Service (Name: FDResPub)
FDResPub (Order: 8)
General
Service nameFDResPub
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Description
Function Discovery Resource Publication
Service (Name: wcncsvc)
wcncsvc (Order: 9)
General
Service namewcncsvc
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Description
Windows Connect Now – Config Registrar
Service (Name: BDESVC)
BDESVC (Order: 10)
General
Service nameBDESVC
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Description
BitLocker Drive Encryption Service
Service (Name: wbengine)
wbengine (Order: 11)
General
Service namewbengine
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Description
Block Level Backup Engine Service
Service (Name: PeerDistSvc)
PeerDistSvc (Order: 12)
General
Service namePeerDistSvc
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Description
BranchCache Service
Service (Name: RetailDemo)
RetailDemo (Order: 13)
General
Service nameRetailDemo
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Description
Retail Demo
Service (Name: WlanSvc)
WlanSvc (Order: 14)
General
Service nameWlanSvc
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Description
WLAN AutoConfig
Service (Name: XblAuthManager)
XblAuthManager (Order: 15)
General
Service nameXblAuthManager
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Description
Xbox Live Auth Manager
Service (Name: XboxGipSvc)
XboxGipSvc (Order: 16)
General
Service nameXboxGipSvc
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Description
Xbox Accessory Management Service
Service (Name: XblGameSave)
XblGameSave (Order: 17)
General
Service nameXblGameSave
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Description
Xbox Live Game Save
Service (Name: XboxNetApiSvc)
XboxNetApiSvc (Order: 18)
General
Service nameXboxNetApiSvc
ActionNo change
Startup type:Disabled
Wait timeout if service is locked:30 seconds
Service Account
Log on service as:No change
Recovery
First failure:No change
Second failure:No change
Subsequent failures:No change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Description
Xbox Live Networking Service
User Configuration (Disabled)
No settings defined.