| RU-PO-WIN-U-Agents Software Restriction | |
| Data collected on: 2-9-2025 09:11:42 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\chumakov.5 |
| Created | 6-3-2018 10:42:20 |
| Modified | 12-12-2023 15:02:34 |
| User Revisions | 328 (AD), 328 (SYSVOL) |
| Computer Revisions | 6 (AD), 6 (SYSVOL) |
| Unique ID | {1b17c11d-e3f1-442e-8c3c-c958647f0a67} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Agents | No | Enabled | emea.tpg.ads/RU/Agents |
| Staff | No | Enabled | emea.tpg.ads/RU/Staff |
| Name |
|---|
| EMEA\RU-L-SEC-GPO Software Restriction MSEdge |
| EMEA\RU-L-SEC-GPO Software Restriction Office 365 |
| EMEA\RU-L-SEC-GPO Software Restriction SnippingTool |
| EMEA\RU-L-SEC-GPO Software Restriction Stamina |
| EMEA\RU-L-SEC-GPO Software Restriction Text Editors & Tools |
| EMEA\RU-L-SEC-GPO Software Restriction WordPad |
| EMEA\RU-L-SEC-GPO Software Restriction X5 Notepad and Edge |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\chumakov.5 | Edit settings, delete, modify security | No |
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\RU-L-SEC-Delegation Group Policy Objects Modify Access | Edit settings, delete, modify security | No |
| EMEA\RU-L-SEC-GPO Software Restriction MSEdge | Read (from Security Filtering) | No |
| EMEA\RU-L-SEC-GPO Software Restriction Office 365 | Read (from Security Filtering) | No |
| EMEA\RU-L-SEC-GPO Software Restriction SnippingTool | Read (from Security Filtering) | No |
| EMEA\RU-L-SEC-GPO Software Restriction Stamina | Read (from Security Filtering) | No |
| EMEA\RU-L-SEC-GPO Software Restriction Text Editors & Tools | Read (from Security Filtering) | No |
| EMEA\RU-L-SEC-GPO Software Restriction WordPad | Read (from Security Filtering) | No |
| EMEA\RU-L-SEC-GPO Software Restriction X5 Notepad and Edge | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Policy | Setting | Comment | ||
|---|---|---|---|---|
| Add Search Internet link to Start Menu | Disabled | |||
| Do not allow pinning programs to the Taskbar | Enabled | |||
| Lock all taskbar settings | Enabled | |||
| Prevent users from adding or removing toolbars | Enabled | |||
| Prevent users from moving taskbar to another screen dock location | Enabled | |||
| Remove All Programs list from the Start menu | Enabled | |||
| ||||
| Policy | Setting | Comment | |||||
|---|---|---|---|---|---|---|---|
| Don't run specified Windows applications | Enabled | ||||||
| |||||||
| Policy | Setting | Comment |
|---|---|---|
| Turn off the communities features | Enabled | |
| Turn off Windows Mail application | Enabled |
| Policy | Setting | Comment |
|---|---|---|
| Do not allow Windows Media Center to run | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 5 |
| Value type | REG_SZ |
| Value data | SnippingTool.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\RU-L-SEC-GPO Software Restriction SnippingTool |
| sid | S-1-5-21-513466819-3096973226-347852806-400621 |
| userContext | 1 |
| primaryGroup | 0 |
| localGroup | 0 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 5 |
| Value type | REG_SZ |
| Value data | wordpad.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\RU-L-SEC-GPO Software Restriction WordPad |
| sid | S-1-5-21-513466819-3096973226-347852806-400622 |
| userContext | 1 |
| primaryGroup | 0 |
| localGroup | 0 |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\RU-L-SEC-GPO Software Restriction Text Editors & Tools |
| sid | S-1-5-21-513466819-3096973226-347852806-394520 |
| userContext | 1 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 5 |
| Value type | REG_SZ |
| Value data | notepad.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 6 |
| Value type | REG_SZ |
| Value data | wordpad.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 7 |
| Value type | REG_SZ |
| Value data | SnippingTool.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 8 |
| Value type | REG_SZ |
| Value data | calc.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 9 |
| Value type | REG_SZ |
| Value data | mspaint.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\RU-L-SEC-GPO Software Restriction Project Fedex |
| sid | S-1-5-21-513466819-3096973226-347852806-381350 |
| userContext | 1 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 5 |
| Value type | REG_SZ |
| Value data | mspaint.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 6 |
| Value type | REG_SZ |
| Value data | SnippingTool.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 7 |
| Value type | REG_SZ |
| Value data | wordpad.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 8 |
| Value type | REG_SZ |
| Value data | notepad.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\RU-L-SEC-GPO Software Restriction Stramina |
| sid | S-1-5-21-513466819-3096973226-347852806-400672 |
| userContext | 1 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 5 |
| Value type | REG_SZ |
| Value data | Stamina.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\RU-L-SEC-GPO Software Restriction Office 365 |
| sid | S-1-5-21-513466819-3096973226-347852806-442269 |
| userContext | 1 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 5 |
| Value type | REG_SZ |
| Value data | outlook.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 6 |
| Value type | REG_SZ |
| Value data | ONENOTE.EXE |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 7 |
| Value type | REG_SZ |
| Value data | ONENOTEM.EXE |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 8 |
| Value type | REG_SZ |
| Value data | OneDriveSetup.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 9 |
| Value type | REG_SZ |
| Value data | OneDrive.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 10 |
| Value type | REG_SZ |
| Value data | teams.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 11 |
| Value type | REG_SZ |
| Value data | onenoteim.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 12 |
| Value type | REG_SZ |
| Value data | lync.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 13 |
| Value type | REG_SZ |
| Value data | GROOVE.EXE |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\RU-L-SEC-GPO Software Restriction MSEdge |
| sid | S-1-5-21-513466819-3096973226-347852806-1401800 |
| userContext | 1 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 5 |
| Value type | REG_SZ |
| Value data | msedge.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\RU-L-SEC-GPO Software Restriction Notepad |
| sid | S-1-5-21-513466819-3096973226-347852806-1401822 |
| userContext | 1 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 5 |
| Value type | REG_SZ |
| Value data | notepad.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\RU-L-SEC-GPO Software Restriction WordPad |
| sid | S-1-5-21-513466819-3096973226-347852806-400622 |
| userContext | 1 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Update |
| Hive | HKEY_CURRENT_USER |
| Key path | Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun |
| Value name | 6 |
| Value type | REG_SZ |
| Value data | msedge.exe |
| Stop processing items on this extension if an error occurs on this item | No |
| Run in logged-on user's security context (user policy option) | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |