| ROBUH-PO-WIN-C-DESKTOP HARDENING-AGENT-ANT | |
| Data collected on: 2-9-2025 11:34:58 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\trifan.5-adm |
| Created | 11-10-2023 11:31:10 |
| Modified | 12-10-2023 08:58:44 |
| User Revisions | 59 (AD), 59 (SYSVOL) |
| Computer Revisions | 0 (AD), 0 (SYSVOL) |
| Unique ID | {073d9f0f-ddd8-40b9-9ed1-cc1c0fa18295} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| ANT | No | Enabled | emea.tpg.ads/RO/Systems/Clients/ANT |
| Name |
|---|
| EMEA\ROBU1VMANT01$ |
| S-1-5-21-513466819-3096973226-347852806-1108829 |
| S-1-5-21-513466819-3096973226-347852806-1504198 |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\ROBU1VMANT01$ | Read (from Security Filtering) | No |
| EMEA\RO-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\trifan.5-adm | Edit settings, delete, modify security | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| S-1-5-21-513466819-3096973226-347852806-1108829 | Read (from Security Filtering) | No |
| S-1-5-21-513466819-3096973226-347852806-1504198 | Read (from Security Filtering) | No |
| Enforcement | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Designated File Types | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Trusted Publishers | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
| Policy | Setting |
|---|---|
| Default Security Level | Disallowed |
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% | ||||||
| ||||||
| %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% | ||||||
|
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Prohibit access to Control Panel and PC settings | Disabled | |||
| Settings Page Visibility | Enabled | |||
| ||||
| Policy | Setting | Comment |
|---|---|---|
| Prevent changing desktop icons | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Browse the network to find printers | Enabled | |
| Prevent addition of printers | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Hide "Programs and Features" page | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow shared folders to be published | Enabled |
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Don't run specified Windows applications | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Prevent access to registry editing tools | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Prevent access to the command prompt | Enabled | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Remove Task Manager | Enabled |
| Policy | Setting | Comment | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Set Group Policy refresh interval for users | Enabled | |||||||||||||||||
| ||||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| All Removable Storage classes: Deny all access | Enabled | |
| CD and DVD: Deny read access | Enabled | |
| CD and DVD: Deny write access | Enabled | |
| Removable Disks: Deny read access | Enabled | |
| Removable Disks: Deny write access | Enabled | |
| WPD Devices: Deny read access | Enabled | |
| WPD Devices: Deny write access | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Turn off Autoplay | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Hide these specified drives in My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Prevent access to drives from My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Remove "Map Network Drive" and "Disconnect Network Drive" | Enabled | |||
| Remove File menu from File Explorer | Enabled | |||
| Turn off Windows Key hotkeys | Enabled | |||
| Policy | Setting | Comment |
|---|---|---|
| Prevent access to Internet Explorer Help | Enabled | |
| Turn on the auto-complete feature for user names and passwords on forms | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| File menu: Disable Open menu option | Enabled | |
| Tools menu: Disable Internet Options... menu option | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow deleting browsing history on exit | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Disable the Connections page | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Computer Management | Enabled | |
| Device Manager | Enabled | |
| Disk Management | Enabled | |
| Event Viewer | Enabled | |
| Event Viewer (Windows Vista) | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Prevent users from sharing files within their profile. | Disabled |
| Action | Update |
| Letter | Z |
| Reconnect | Disabled |
| Label as | Z |
| Use first available | Disabled |
| Hide/Show this drive | Show |
| Hide/Show all drives | Hide |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Policies\Google\Chrome |
| Value name | DefaultCookiesSetting |
| Value type | REG_DWORD |
| Value data | 0x4 (4) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |