| UA-PO-WIN-C-Default Systems Policy | |
| Data collected on: 2-9-2025 08:51:28 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\efimov.6 |
| Created | 9-9-2014 12:05:44 |
| Modified | 12-6-2025 05:56:24 |
| User Revisions | 1 (AD), 1 (SYSVOL) |
| Computer Revisions | 251 (AD), 251 (SYSVOL) |
| Unique ID | {398b8dd2-90d8-4041-88cd-106462cb3fef} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Systems | No | Enabled | emea.tpg.ads/UA/Systems |
| Name |
|---|
| None |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\UA-G-ORG-Server Systems | Custom | No |
| Policy | Setting |
|---|---|
| Audit account logon events | Success, Failure |
| Audit account management | Success, Failure |
| Audit logon events | Success, Failure |
| Audit object access | Success, Failure |
| Audit policy change | Success, Failure |
| Audit privilege use | Success, Failure |
| Audit process tracking | Success, Failure |
| Audit system events | Success, Failure |
| Policy | Setting |
|---|---|
| Deny log on as a batch job | BUILTIN\Guests |
| Deny log on as a service | BUILTIN\Guests |
| Deny log on locally | BUILTIN\Guests, EMEA\UA-L-SEC-GPO Deny log on locally |
| Deny log on through Terminal Services | BUILTIN\Guests, EMEA\UA-L-SEC-GPO Deny log on locally |
| Policy | Setting |
|---|---|
| Accounts: Guest account status | Disabled |
| Accounts: Rename administrator account | "uoincs" |
| Accounts: Rename guest account | "xGuest" |
| Policy | Setting |
|---|---|
| Audit: Audit the access of global system objects | Disabled |
| Audit: Audit the use of Backup and Restore privilege | Disabled |
| Audit: Shut down system immediately if unable to log security audits | Disabled |
| Policy | Setting |
|---|---|
| Domain member: Digitally encrypt or sign secure channel data (always) | Enabled |
| Domain member: Digitally encrypt secure channel data (when possible) | Enabled |
| Domain member: Digitally sign secure channel data (when possible) | Enabled |
| Domain member: Require strong (Windows 2000 or later) session key | Enabled |
| Policy | Setting |
|---|---|
| Interactive logon: Do not require CTRL+ALT+DEL | Disabled |
| Interactive logon: Don't display last signed-in | Enabled |
| Interactive logon: Message text for users attempting to log on | Це комп’ютерне обладнання (включаючи апаратну частину, програмне, забезпечення та периферійні пристрої), є власністю компанії Teleperformance., Використання даного обладнання обмежене, потребами робочих процесів Teleperformance., Teleperformance залишає за собою право контролю, використання комп’ютерних систем, в будь-який час. Використання цих системи означає згоду з таким моніторингом., Будь-який несанкціонований доступ, використання, або модифікація комп'ютерної, системи може привести до громадянської та/або кримінальної відповідальності., ---, This computer system (including all hardware, software, and peripheral, equipment) is the property of Teleperformance. Usage of this computer, system is restricted to official Teleperformance business., Teleperformance reserves the right to monitor usage of this computer, system at any time. Usage of this system constitutes consent to such, monitoring. Any unauthorized access, usage, or modification of this, computer system can result in civil liability and/or criminal penalties. |
| Interactive logon: Message title for users attempting to log on | "Попередження / Warning" |
| Interactive logon: Number of previous logons to cache (in case domain controller is not available) | 50 logons |
| Interactive logon: Prompt user to change password before expiration | 5 days |
| Policy | Setting |
|---|---|
| Microsoft network client: Digitally sign communications (always) | Enabled |
| Microsoft network client: Digitally sign communications (if server agrees) | Enabled |
| Policy | Setting |
|---|---|
| Microsoft network server: Digitally sign communications (always) | Enabled |
| Microsoft network server: Digitally sign communications (if client agrees) | Enabled |
| Policy | Setting |
|---|---|
| Network access: Allow anonymous SID/Name translation | Disabled |
| Network access: Do not allow anonymous enumeration of SAM accounts | Enabled |
| Network access: Do not allow anonymous enumeration of SAM accounts and shares | Enabled |
| Network access: Let Everyone permissions apply to anonymous users | Disabled |
| Network access: Named Pipes that can be accessed anonymously | COMNAP, COMNODE, SQL\QUERY, LLSRPC, LSARPC, samr, SPOOLSS, NETLOGON |
| Policy | Setting | ||||
|---|---|---|---|---|---|
| Network security: Do not store LAN Manager hash value on next password change | Enabled | ||||
| Network security: Force logoff when logon hours expire | Disabled | ||||
| Network security: LAN Manager authentication level | Send NTLMv2 response only. Refuse LM & NTLM | ||||
| Network security: Minimum session security for NTLM SSP based (including secure RPC) servers | Enabled | ||||
| |||||
| Policy | Setting |
|---|---|
| Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings | Enabled |
| Issued To | Issued By | Expiration Date | Intended Purposes |
|---|---|---|---|
| DStver CA | DStver CA | 30-5-2031 10:56:12 | <All> |
| IISBV Root CA v3 | IISBV Root CA v3 | 9-6-2036 11:13:31 | <All> |
| Issued To | Issued By | Expiration Date | Intended Purposes |
|---|---|---|---|
| IKEA Issuing CA V3 | IISBV Root CA v3 | 5-7-2026 15:55:00 | <All> |
| Issued To | Issued By | Expiration Date | Intended Purposes |
|---|---|---|---|
| TPRUCodeSigningCertificate | DStver CA | 25-1-2017 11:52:19 | Time Stamping, Code Signing |
| TPRUCodeSigningCertificate | DStver CA | 25-1-2022 14:12:23 | Time Stamping, Code Signing |
| TPRUCodeSigningCertificate | DStver CA | 1-2-2027 13:03:35 | Time Stamping, Code Signing |
| TPRUPackagesSigningCertificate | DStver CA | 25-1-2022 16:04:08 | Time Stamping, Code Signing |
| TPRUPackagesSigningCertificate | DStver CA | 6-3-2017 14:42:46 | Time Stamping, Code Signing |
| TPRUPackagesSigningCertificate | DStver CA | 1-2-2027 13:06:20 | Time Stamping, Code Signing |
| Policy | Setting |
|---|---|
| Audit Credential Validation | Success, Failure |
| Audit Kerberos Authentication Service | Success, Failure |
| Audit Kerberos Service Ticket Operations | Success, Failure |
| Audit Other Account Logon Events | Success, Failure |
| Policy | Setting |
|---|---|
| Audit Application Group Management | Success, Failure |
| Audit Computer Account Management | Success, Failure |
| Audit Distribution Group Management | No Auditing |
| Audit Other Account Management Events | Success, Failure |
| Audit Security Group Management | Success, Failure |
| Audit User Account Management | Success, Failure |
| Policy | Setting |
|---|---|
| Audit DPAPI Activity | No Auditing |
| Audit PNP Activity | No Auditing |
| Audit Process Creation | Success, Failure |
| Audit Process Termination | Success, Failure |
| Audit RPC Events | No Auditing |
| Policy | Setting |
|---|---|
| Audit Account Lockout | Success |
| Audit User / Device Claims | No Auditing |
| Audit IPsec Extended Mode | No Auditing |
| Audit IPsec Main Mode | No Auditing |
| Audit IPsec Quick Mode | No Auditing |
| Audit Logoff | Success, Failure |
| Audit Logon | Success, Failure |
| Audit Network Policy Server | Success, Failure |
| Audit Other Logon/Logoff Events | Success, Failure |
| Audit Special Logon | Success, Failure |
| Policy | Setting |
|---|---|
| Audit Detailed File Share | No Auditing |
| Audit File Share | Failure |
| Audit Filtering Platform Connection | No Auditing |
| Audit Filtering Platform Packet Drop | No Auditing |
| Audit Handle Manipulation | No Auditing |
| Audit Kernel Object | No Auditing |
| Audit Other Object Access Events | No Auditing |
| Audit Registry | No Auditing |
| Audit Removable Storage | Success, Failure |
| Audit SAM | No Auditing |
| Audit Central Access Policy Staging | No Auditing |
| Policy | Setting |
|---|---|
| Audit Audit Policy Change | Success, Failure |
| Audit Authentication Policy Change | Success, Failure |
| Audit Authorization Policy Change | No Auditing |
| Audit Filtering Platform Policy Change | No Auditing |
| Audit MPSSVC Rule-Level Policy Change | No Auditing |
| Audit Other Policy Change Events | No Auditing |
| Policy | Setting |
|---|---|
| Audit Non Sensitive Privilege Use | No Auditing |
| Audit Other Privilege Use Events | No Auditing |
| Audit Sensitive Privilege Use | Success, Failure |
| Policy | Setting |
|---|---|
| Audit IPsec Driver | No Auditing |
| Audit Other System Events | Success, Failure |
| Audit Security State Change | Success, Failure |
| Audit Security System Extension | Success, Failure |
| Audit System Integrity | Success, Failure |
| Action | Replace |
| Source file(s) | \\emea.tpg.ads\SYSVOL\emea.tpg.ads\Policies\{398B8DD2-90D8-4041-88CD-106462CB3FEF}\Machine\files\Uber.jpg |
| Destination file | %systemroot%\TPWallpaper.jpg |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\UACHE-G-ORG-Computers Uber |
| sid | S-1-5-21-513466819-3096973226-347852806-1712480 |
| userContext | 0 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Replace |
| Source file(s) | \\uachefs01.emea.tpg.ads\reminst\Software\Teleperformance\TP Branding\TPWallpaper.KIE.jpg |
| Destination file | %systemroot%\TPWallpaper.jpg |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| path | \\uachefs01.emea.tpg.ads\reminst\Software\Teleperformance\TP Branding\TPWallpaper.KIE.jpg |
| type | EXISTS |
| folder | 0 |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | OU=KIE,OU=Clients,OU=Systems,OU=UA,DC=emea,DC=tpg,DC=ads |
| userContext | 0 |
| directMember | 0 |
| Action | Replace |
| Source file(s) | \\emea.tpg.ads\SYSVOL\emea.tpg.ads\Policies\{398B8DD2-90D8-4041-88CD-106462CB3FEF}\Machine\files\TPWallpaper.jpg |
| Destination file | %systemroot%\TPWallpaper.jpg |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| Value name | NoDriveTypeAutoRun |
| Value type | REG_DWORD |
| Value data | 0xFF (255) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Policies\Microsoft\Windows\GameDVR |
| Value name | AllowgameDVR |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat |
| Value name | cadca5fe-87d3-4b96-b7fb-a231484277cc |
| Value type | REG_DWORD |
| Value data | 0x0 (0) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Driver Signing |
| Value name | Policy |
| Value type | REG_BINARY |
| Value data | 01 |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SYSTEM\CurrentControlSet\Control\Session Manager |
| Value name | CWDIllegalInDllSearch |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Stop processing items on this extension if an error occurs on this item | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_PRINT_INFO_DISCLOSURE_FIX |
| Value name | iexplore.exe |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_PRINT_INFO_DISCLOSURE_FIX |
| Value name | iexplore.exe |
| Value type | REG_DWORD |
| Value data | 0x1 (1) |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| variableName | PROCESSOR_ARCHITECTURE |
| value | AMD64 |
| Stop processing items on this extension if an error occurs on this item | No |
| Apply once and do not reapply | No |
| Action | Create |
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\system_a.exe |
| Value name | Debugger |
| Value type | REG_SZ |
| Value data | "c:\windows\system32\systray.exe" /z |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |