| ROBUH-PO-WIN-U-PCI Restrictions Waha | |
| Data collected on: 2-9-2025 09:39:19 | |
| Domain | emea.tpg.ads |
| Owner | S-1-5-21-513466819-3096973226-347852806-569432 |
| Created | 5-3-2020 16:35:38 |
| Modified | 7-8-2025 08:42:16 |
| User Revisions | 48 (AD), 48 (SYSVOL) |
| Computer Revisions | 1 (AD), 1 (SYSVOL) |
| Unique ID | {f870e0de-e15c-41ae-a5e4-5f88f88bb98a} |
| GPO Status | Computer settings disabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Agents | No | Enabled | emea.tpg.ads/CZ/Agents |
| HR | No | Enabled | emea.tpg.ads/HR |
| PL | No | Enabled | emea.tpg.ads/PL |
| Taskuser | No | Enabled | emea.tpg.ads/RO/Administration/Taskuser |
| Agents | Yes | Enabled | emea.tpg.ads/RO/Agents |
| Citrix | No | Enabled | emea.tpg.ads/RO/Systems/Citrix |
| Name |
|---|
| EMEA\RO-L-SEC-User Restrictions PCI |
| EMEA\RO-L-SEC-User Restrictions PCI WAHA |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\RO-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\RO-L-SEC-User Restrictions PCI | Read (from Security Filtering) | No |
| EMEA\RO-L-SEC-User Restrictions PCI WAHA | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Policy | Setting | Comment | ||||||
|---|---|---|---|---|---|---|---|---|
| Always open All Control Panel Items when opening Control Panel | Enabled | |||||||
| Prohibit access to Control Panel and PC settings | Enabled | |||||||
| Show only specified Control Panel items | Enabled | |||||||
| ||||||||
| Policy | Setting | Comment |
|---|---|---|
| Prevent changing desktop background | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not add shares of recently opened documents to Network Locations | Enabled | |
| Hide Network Locations icon on desktop | Enabled | |
| Prevent adding, dragging, dropping and closing the Taskbar's toolbars | Enabled | |
| Prohibit User from manually redirecting Profile Folders | Enabled | |
| Remove My Documents icon on the desktop | Enabled | |
| Remove Properties from the Computer icon context menu | Enabled | |
| Remove Properties from the Documents icon context menu | Enabled | |
| Remove Properties from the Recycle Bin context menu | Enabled | |
| Remove Recycle Bin icon from desktop | Enabled | |
| Remove the Desktop Cleanup Wizard | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Enable filter in Find dialog box | Disabled | |
| Hide Active Directory folder | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Ability to Enable/Disable a LAN connection | Enabled | |
| Turn off notifications when a connection has only limited or no connectivity | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Allow shared folders to be published | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Add Logoff to the Start Menu | Enabled | |
| Disable context menus in the Start Menu | Enabled | |
| Force classic Start Menu | Enabled | |
| Prevent users from adding or removing toolbars | Enabled | |
| Remove Balloon Tips on Start Menu items | Disabled | |
| Remove Documents icon from Start Menu | Enabled | |
| Remove Favorites menu from Start Menu | Enabled | |
| Remove Games link from Start Menu | Enabled | |
| Remove Help menu from Start Menu | Enabled | |
| Remove Homegroup link from Start Menu | Enabled | |
| Remove links and access to Windows Update | Enabled | |
| Remove Music icon from Start Menu | Enabled | |
| Remove Network icon from Start Menu | Enabled | |
| Remove Pictures icon from Start Menu | Enabled | |
| Remove programs on Settings menu | Enabled | |
| Remove Recent Items menu from Start Menu | Enabled | |
| Remove Run menu from Start Menu | Enabled | |
| Remove Search Computer link | Enabled | |
| Remove Search link from Start Menu | Enabled | |
| Remove user folder link from Start Menu | Enabled | |
| Remove Videos link from Start Menu | Enabled | |
| Show QuickLaunch on Taskbar | Enabled |
| Policy | Setting | Comment | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Don't run specified Windows applications | Enabled | |||||||||||||||
| ||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||
| Prevent access to registry editing tools | Enabled | |||||||||||||||
| ||||||||||||||||
| Policy | Setting | Comment | ||||||||||||||
| Prevent access to the command prompt | Enabled | |||||||||||||||
| ||||||||||||||||
| Policy | Setting | Comment |
|---|---|---|
| Remove Task Manager | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| All Removable Storage classes: Deny all access | Enabled | |
| CD and DVD: Deny read access | Enabled | |
| CD and DVD: Deny write access | Enabled |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Default risk level for file attachments | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Do not preserve zone information in file attachments | Enabled | |||
| Inclusion list for low file types | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Display the menu bar in File Explorer | Disabled | |||
| Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon | Enabled | |||
| Hide these specified drives in My Computer | Enabled | |||
| ||||
| Policy | Setting | Comment | ||
| Hides the Manage item on the File Explorer context menu | Enabled | |||
| No Computers Near Me in Network Locations | Enabled | |||
| No Entire Network in Network Locations | Enabled | |||
| Remove "Map Network Drive" and "Disconnect Network Drive" | Enabled | |||
| Remove CD Burning features | Enabled | |||
| Remove File Explorer's default context menu | Enabled | |||
| Remove File menu from File Explorer | Enabled | |||
| Remove Search button from File Explorer | Enabled | |||
| Remove Shared Documents from My Computer | Enabled | |||
| Turn off caching of thumbnail pictures | Enabled | |||
| Turn off Windows Key hotkeys | Enabled | |||
| Turn on Classic Shell | Disabled | |||
| Policy | Setting | Comment |
|---|---|---|
| Turn off tabbed browsing | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Empty Temporary Internet Files folder when browser is closed | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Deny all add-ons unless specifically allowed in the Add-on List | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Computer Management | Disabled | |
| Local Users and Groups | Disabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Snipping Tool to run | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Messenger to be run | Enabled | |
| Do not automatically start Windows Messenger initially | Enabled |
| Setting | State |
|---|---|
| Software\Policies\Microsoft\WindowsMovieMaker\MovieMaker | 1 |
| Action | Delete |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{031E4825-7B94-4dc3-B131-E946B44C8DD5} |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Delete |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Value name | NoRun |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Value name | NoRun |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | Yes |
| Action | Delete |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{26EE0668-A00A-44D7-9371-BEB064C98683} |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Delete |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum |
| Value name | {59031a47-3f72-44a7-89c5-5595fe6b30ee} |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | Yes |