| UA-PO-WIN-C-VPN Create IKEv2 Connection | |
| Data collected on: 2-9-2025 09:42:41 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\chumakov.5-adm |
| Created | 24-3-2020 14:56:22 |
| Modified | 2-12-2024 17:16:44 |
| User Revisions | 0 (AD), 0 (SYSVOL) |
| Computer Revisions | 120 (AD), 120 (SYSVOL) |
| Unique ID | {f3a535ce-895b-4656-bc0e-d2ffc7b78f05} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| Clients | No | Enabled | emea.tpg.ads/UA/Systems/Clients |
| Name |
|---|
| None |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\UA-L-SEC-GPO VPN Create IKEv2 Connection without DNS | Custom | No |
| Policy | Setting | ||||||
|---|---|---|---|---|---|---|---|
| Automatic certificate management | Enabled | ||||||
| |||||||
| Namespace | ||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Any | ||||||||||||||||||||||||||||||
|
| Action | Replace |
| Source file(s) | \\uachefs01\REMINST\Software\__connect_to_VPN.cmd |
| Destination file | C:\Windows\System32\__connect_to_VPN.cmd |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Replace |
| Source file(s) | \\uachefs01.emea.tpg.ads\REMINST\Software\rasphone_vpn13.services-secure.net.pbk |
| Destination file | c:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\UA-L-SEC-GPO WAHA LLS |
| sid | S-1-5-21-513466819-3096973226-347852806-1083499 |
| userContext | 0 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Replace |
| Source file(s) | \\uachefs01.emea.tpg.ads\REMINST\Software\rasphone_vpn11.services-secure.net.pbk |
| Destination file | c:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\UA-L-SEC-GPO WAHA LT |
| sid | S-1-5-21-513466819-3096973226-347852806-1082076 |
| userContext | 0 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Replace |
| Source file(s) | \\uachefs01\REMINST\Software\rasphone_vpn9.services-secure.net.pbk |
| Destination file | c:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\UA-L-SEC-GPO WAHA UA |
| sid | S-1-5-21-513466819-3096973226-347852806-751472 |
| userContext | 0 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Replace |
| Source file(s) | \\uachefs01\REMINST\Software\rasphone_vpn.services-secure.net.pbk |
| Destination file | c:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\UA-L-SEC-GPO WAHA RU |
| sid | S-1-5-21-513466819-3096973226-347852806-751466 |
| userContext | 0 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Replace |
| Source file(s) | \\uachefs01\REMINST\Software\rasphone_vpn8.services-secure.net.pbk |
| Destination file | c:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\UA-L-SEC-GPO WAHA PMI |
| sid | S-1-5-21-513466819-3096973226-347852806-751220 |
| userContext | 0 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Replace |
| Source file(s) | \\uachefs01\reminst\Software\__connect_to_VPN.ps1 |
| Destination file | C:\Windows\System32\__connect_to_VPN.ps1 |
| Suppress errors on individual file actions | Disabled |
| Read-only | Disabled |
| Hidden | Disabled |
| Archive | Enabled |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Action | Update |
| Name | Connect to VPN | |||
| Author | EMEA\chumakov.5-adm | |||
| Description | ||||
| Run only when user is logged on | ||||
| GroupId | BUILTIN\СИСТЕМА | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.2 | |||
| Enabled | Yes |
| 1. On an event | ||||
| Delay task for | 1 minute | |||
| Activate | 30-6-2023 13:09:03 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| Subscription | <QueryList><Query Id="0" Path="Microsoft-Windows-NetworkProfile/Operational"><Select Path="Microsoft-Windows-NetworkProfile/Operational">*[System[Provider[@Name='Microsoft-Windows-NetworkProfile'] and EventID=10000]]</Select></Query></QueryList> | |||
| 2. At startup | ||||
| Delay task for | 1 minute | |||
| Activate | 30-6-2023 13:11:34 | Synchronize across time zones | No | |
| Enabled | Yes | |||
| 1. Start a program | ||||
| Program/script | C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | |||
| Arguments | -ExecutionPolicy Bypass -file C:\Windows\System32\__connect_to_VPN.ps1 |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | Yes | |||
| Stop if the computer switches to battery power | Yes | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 1 hour | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |
| Attribute | Value |
|---|---|
| bool | AND |
| not | 0 |
| name | EMEA\UA-L-SEC-GPO WAHA Test |
| sid | S-1-5-21-513466819-3096973226-347852806-1459116 |
| userContext | 0 |
| primaryGroup | 0 |
| localGroup | 0 |
| Action | Update |
| Name | Connect to VPN | |||
| Author | EMEA\chumakov.5-adm | |||
| Description | ||||
| Run only when user is logged on | InteractiveToken | |||
| UserId | NT AUTHORITY\System | |||
| Run with highest privileges | HighestAvailable | |||
| Hidden | No | |||
| Configure for | 1.3 | |||
| Enabled | Yes |
| 1. On an event | ||||
| Enabled | Yes | |||
| Subscription | <QueryList><Query Id="0" Path="Microsoft-Windows-NetworkProfile/Operational"><Select Path="Microsoft-Windows-NetworkProfile/Operational">*[System[Provider[@Name='Microsoft-Windows-NetworkProfile'] and EventID=10000]]</Select></Query></QueryList> | |||
| 2. On an event | ||||
| Enabled | Yes | |||
| Subscription | <QueryList><Query Id="0" Path="Microsoft-Windows-NetworkProfile/Operational"><Select Path="Microsoft-Windows-NetworkProfile/Operational">*[System[Provider[@Name='Microsoft-Windows-NetworkProfile'] and EventID=4004]]</Select></Query></QueryList> |
| 1. Start a program | ||||
| Program/script | C:\Windows\System32\__connect_to_VPN.cmd | |||
| Start in | c:\Windows\System32\ |
| Stop if the computer ceases to be idle | Yes | |||
| Restart if the idle state resumes | No | |||
| Start the task only if the computer is on AC power | No | |||
| Stop if the computer switches to battery power | No | |||
| Start only if the following network connection is available | Any connection | |||
| Allow task to be run on demand | Yes | |||
| Stop task if it runs longer than | 1 day | |||
| If the running task does not end when requested, force it to stop | Yes | |||
| If the task is already running, then the following rule applies | IgnoreNew |
| Stop processing items on this extension if an error occurs on this item | No |
| Remove this item when it is no longer applied | No |
| Apply once and do not reapply | No |