| XK-PO-WIN-C-Disable ADM Users for Local Computers | |
| Data collected on: 2-9-2025 10:20:15 | |
| Domain | emea.tpg.ads |
| Owner | EMEA\bahtiri.5-adm |
| Created | 1-4-2022 17:24:20 |
| Modified | 9-2-2023 15:21:34 |
| User Revisions | 0 (AD), 0 (SYSVOL) |
| Computer Revisions | 14 (AD), 14 (SYSVOL) |
| Unique ID | {889c08ad-cdaf-4184-a082-6c79bb4f9ca2} |
| GPO Status | Enabled |
| Location | Enforced | Link Status | Path |
|---|---|---|---|
| PRN | No | Enabled | emea.tpg.ads/XK/Systems/Clients/PRN |
| Name |
|---|
| EMEA\XK-L-SEC-Disable ADM Users to Local Computers |
| Name | Allowed Permissions | Inherited |
|---|---|---|
| EMEA\bahtiri.5-adm | Edit settings, delete, modify security | No |
| EMEA\Domain Admins | Edit settings, delete, modify security | No |
| EMEA\Domain Computers | Read | No |
| EMEA\XK-G-ORG-OU Admins | Edit settings, delete, modify security | No |
| EMEA\XK-L-SEC-Disable ADM Users to Local Computers | Read (from Security Filtering) | No |
| NT AUTHORITY\Authenticated Users | Read | No |
| NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No |
| NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No |
| ROOT\Enterprise Admins | Edit settings, delete, modify security | No |
| Policy | Setting |
|---|---|
| Deny access to this computer from the network | EMEA\XK-G-ORG-OU Admins, EMEA\XK-G-ORG-Delegation Local Administration Rights Tier1 |
| Deny log on as a batch job | EMEA\XK-G-ORG-OU Admins, EMEA\XK-G-ORG-Delegation Local Administration Rights Tier1 |
| Deny log on as a service | EMEA\XK-G-ORG-OU Admins, EMEA\XK-G-ORG-Delegation Local Administration Rights Tier1 |
| Deny log on locally | EMEA\XK-G-ORG-OU Admins, EMEA\XK-G-ORG-Delegation Local Administration Rights Tier1 |
| Deny log on through Terminal Services | EMEA\XK-G-ORG-OU Admins, EMEA\XK-G-ORG-Delegation Local Administration Rights Tier1 |