Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
ROBUH-PO-C-WIN-Citrix Registry Policy Uber
Data collected on: 2-9-2025 10:56:08
General
Details
Domainemea.tpg.ads
OwnerS-1-5-21-513466819-3096973226-347852806-612167
Created17-11-2022 16:09:30
Modified9-2-2023 16:39:32
User Revisions0 (AD), 0 (SYSVOL)
Computer Revisions24 (AD), 24 (SYSVOL)
Unique ID{3047cdbf-44d6-49b3-a230-ff4d26277322}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
ClientsYesEnabledemea.tpg.ads/RO/Systems/Clients

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
EMEA\ROBUH-L-SEC-Citrix Registry Policy Uber
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
EMEA\Domain AdminsEdit settings, delete, modify securityNo
EMEA\ROBUH-L-SEC-Citrix Registry Policy UberRead (from Security Filtering)No
EMEA\RO-G-ORG-OU AdminsEdit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersReadNo
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ROOT\Enterprise AdminsEdit settings, delete, modify securityNo
S-1-5-21-513466819-3096973226-347852806-612167Edit settings, delete, modify securityNo
Computer Configuration (Enabled)
Preferences
Windows Settings
Registry
DeviceRules (Order: 1)
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\WOW6432Node\Citrix\ICA Client\GenericUSB
Value nameDeviceRules
Value typeREG_MULTI_SZ
Lines
LineValue
1# Syntax is an ordered list of case insensitive rules where # is line comment
2# and each rule is (ALLOW | DENY) : ( match )*
3# and each match is (class|subclass|prot|vid|pid|rel) = hex-number
4# Maximum hex value for class/subclass/prot is FF, and for vid/pid/rel is FFFF
5DENY: vid=17e9 # All DisplayLink USB displays
6DENY: class=02 # Communications and CDC-Control
7DENY: class=09 # Hub devices
8DENY:vid=045e pid=079A # Microsoft Surface Pro 1 Touch Cover
9DENY:vid=045e pid=079c # Microsoft Surface Pro 1 Type Cover
10DENY:vid=045e pid=07dc # Microsoft Surface Pro 3 Type Cover
11DENY:vid=045e pid=07dd # Microsoft Surface Pro JP 3 Type Cover
12DENY:vid=045e pid=07de # Microsoft Surface Pro 3_2 Type Cover
13DENY:vid=045e pid=07e2 # Microsoft Surface Pro 3 Type Cover
14DENY:vid=045e pid=07e4 # Microsoft Surface Pro 4 Type Cover with fingerprint reader
15DENY:vid=045e pid=07e8 # Microsoft Surface Pro 4_2 Type Cover
16DENY:vid=03eb pid=8209 # Surface Pro Atmel maXTouch Digitizer
17ALLOW:vid=056a pid=0315 class=03 # Wacom Intuos tablet
18ALLOW:vid=056a pid=0314 class=03 # Wacom Intuos tablet
19ALLOW:vid=056a pid=00fb class=03 # Wacom DTU tablet
20ALLOW:vid=1050 pid=0401 class=0b # Yubikey Rebel
21ALLOW:vid=1050 pid=0402 class=0b # Yubikey Rebel
22ALLOW:vid=1050 pid=0403 class=0b # Yubikey Rebel
23ALLOW:vid=1050 pid=0404 class=0b # Yubikey Rebel
24ALLOW:vid=1050 pid=0405 class=0b # Yubikey Rebel
25ALLOW:vid=1050 pid=0406 class=0b # Yubikey Rebel
26ALLOW:vid=1050 pid=0407 class=0b # Yubikey Rebel
27#DENY: class=03 subclass=01 prot=01 # HID Boot keyboards
28DENY: class=03 subclass=01 prot=02 # HID Boot mice
29DENY: class=0a # CDC-Data
30#DENY: class=0b # Smartcard
31DENY: class=e0 # Wireless controller
32DENY: class=ef subclass=04 # Miscellaneous network devices
33ALLOW: # Otherwise allow everything else
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
User Configuration (Enabled)
No settings defined.