Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available

AEC01_ClientPolicy_ND_1.1
Data collected on: 26/05/2015 14:40:26 |

General
Details

Domain | aecuk.aec.local
Owner | AECUK\Domain Admins
Created | 27/06/2013 10:11:54
Modified | 27/06/2013 11:09:34
User Revisions | 1 (AD), 1 (sysvol)
Computer Revisions | 1 (AD), 1 (sysvol)
Unique ID | {6E12F441-9E1F-4F87-92D9-F913FD11A5B7}
GPO Status | Enabled

Links

Location | Enforced | Link Status | Path
--- | --- | --- | ---
AECTEST | No | Disabled | aecuk.aec.local/AECTEST

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:

Name
NT AUTHORITY\Authenticated Users

Delegation
These groups and users have the specified permission for this GPO

Name | Allowed Permissions | Inherited
--- | --- | ---
AEC\Enterprise Admins | Edit settings, delete, modify security | No
AECUK\Domain Admins | Edit settings, delete, modify security | No
NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No
NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No

Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Registry
MACHINE\SYSTEM\ControlSet001\Control
Configure this key then: Propagate inheritable permissions to all subkeys

Owner |

Permissions

Type | Name | Permission | Apply To
--- | --- | --- | ---
Allow | CREATOR OWNER | Full control | Subkeys only
Allow | NT AUTHORITY\SYSTEM | Full control | This key and subkeys
Allow | BUILTIN\Administrators | Full control | This key and subkeys
Allow | AECUK\Domain Users | Full control | This key and subkeys
Allow | BUILTIN\Users | Read | This key and subkeys

Allow inheritable permissions from the parent to propagate to this object and all child objects | Disabled

Auditing
No auditing specified
Windows Firewall with Advanced Security
Global Settings

Policy | Setting
--- | ---
Policy version | Not Configured
Disable stateful FTP | Not Configured
Disable stateful PPTP | Not Configured
IPsec exempt | Not Configured
IPsec through NAT | Not Configured
Preshared key encoding | Not Configured
SA idle time | Not Configured
Strong CRL check | Not Configured

Domain Profile Settings

Policy | Setting
--- | ---
Firewall state | Off
Inbound connections | Not Configured
Outbound connections | Not Configured
Apply local firewall rules | Not Configured
Apply local connection security rules | Not Configured
Display notifications | Not Configured
Allow unicast responses | Not Configured
Log dropped packets | Not Configured
Log successful connections | Not Configured
Log file path | Not Configured
Log file maximum size (KB) | Not Configured

Connection Security Settings
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Network/Network Connections/Windows Firewall/Domain Profile

Policy | Setting | Comment
--- | --- | ---
Windows Firewall: Protect all network connections | Disabled |

Network/Network Connections/Windows Firewall/Standard Profile

Policy | Setting | Comment
--- | --- | ---
Windows Firewall: Protect all network connections | Disabled |

System/Group Policy

Policy | Setting | Comment
--- | --- | ---
Turn off background refresh of Group Policy | Disabled |

System/Logon

Policy | Setting | Comment
--- | --- | ---
Don't display the Getting Started welcome screen at logon | Enabled |

System/Scripts

Policy | Setting | Comment
--- | --- | ---
Run logon scripts synchronously | Enabled |

System/User Profiles

Policy | Setting | Comment
--- | --- | ---
Add the Administrators security group to roaming user profiles | Enabled |
Do not check for user ownership of Roaming Profile Folders | Enabled |
Prompt user when a slow network connection is detected | Enabled |

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone

Policy | Setting | Comment
--- | --- | ---
Java permissions | Enabled |
Java permissions | Low safety

Windows Components/Windows Installer

Policy | Setting | Comment
--- | --- | ---
Always install with elevated privileges | Enabled |
This setting must be set for the machine and the user to be enforced.
Policy | Setting | Comment
Enable user to browse for source while elevated | Enabled |
Enable user to patch elevated products | Enabled |

User Configuration (Enabled)
Policies
Windows Settings
Scripts
Logon
For this GPO, Script order: Not configured

Name | Parameters
--- | ---
ecs.bhx1.default_aec-users.vbs |

Internet Explorer Maintenance
Connection/Proxy Settings

Enable proxy settings
Protocol | Server | Port
--- | --- | ---
HTTP | aecuk-proxy | 8080
Secure | aecuk-proxy | 8080
FTP | aecuk-proxy | 8080
Gopher | aecuk-proxy | 8080
Socks | aecuk-proxy | 8080
Exceptions: | Do not use proxy server for addresses beginning with | aecrev2.proxy, *.local, *.root.local, *.adphc.com, 126.14.40.85, Hrpsoft.goodrich.com, *.ecs.goodrich.com, 149.223.*, 168.204.*, talentstream.goodrich.com, onesite.goodrich.com, 10.102.95.*, 10.201.*, 10.204.*, travel.goodrich.com, exports.goodrich.com, km.goodrich.com, recordsmanagement.goodrich.com, hrpsoftnew.goodrich.com, *.itss.goodrich.com, 1.1.1.1,
Do not use proxy server for local (intranet) addresses | Enabled

URLs/Important URLs

Name | URL
--- | ---
Home page URL | http://intranet.lecs.goodrich.root.local/default.aspx
Search bar URL | Not configured
Online support page URL | Not configured

URLs/Favorites and Links

Policy | Setting
--- | ---
Place favorites and links at the top of the list in the order specified below | Not configured
Delete existing Favorites and Links, if present | Not configured
Delete existing channels, if present | Not configured

Favorites
Name | URL
--- | ---
Citrix Web Access | http://icalecsweb
Outlook Web Access | https://owa.aeroenginecontrols.com/owa
IT Service Desk | http://aec01a-wwdev01/ITSDLIVE/infraEnterprise.aspx?LITE&Form;clcid=0x409
Links
Name | URL
--- | ---
Citrix Web Access | http://icalecsweb
Outlook Web Access | https://owa.aeroenginecontrols.com/owa
IT Service Desk | http://aec01a-wwdev01/ITSDLIVE/infraEnterprise.aspx?LITE&Form;clcid=0x409

Security/Security Zones and Content Ratings
Security Zones and Privacy
These settings will not apply to users that log on to computers that have the Internet Explorer Enhanced Security Configuration (ESC) enabled. To create settings for users on computers that have ESC enabled, create a new GPO and edit that GPO on a computer where ESC is enabled.
Internet (Security Level: Medium-high)
.NET Framework-reliant components

Run components not signed with Authenticode | Enable
Run components signed with Authenticode | Enable

ActiveX controls and plug-ins

Download signed ActiveX controls | Prompt
Download unsigned ActiveX controls | Disable
Initialize and script ActiveX controls not marked as safe | Disable
Run ActiveX controls and plug-ins | Enable
Script ActiveX controls marked safe for scripting | Enable

Downloads

File download | Enable
Font download | Enable

Microsoft VM

Java permissions | High safety

Miscellaneous

Access data sources across domains | Disable
Allow META REFRESH | Enable
Display mixed content | Prompt
Don't prompt for client certificate selection when no certificates or only one certificate exists | Disable
Drag and drop or copy and paste files | Enable
Installation of desktop items | Prompt
Launching programs and files in an IFRAME | Prompt
Navigate sub-frames across different domains | Disable
Submit nonencrypted form data | Enable
Userdata persistence | Enable

Scripting

Active scripting | Enable
Allow paste operations via script | Prompt
Scripting of Java applets | Enable

User Authentication

Logon | Automatic logon only in Intranet zone

Local intranet (Security Level: Custom)
.NET Framework-reliant components

Run components not signed with Authenticode | Enable
Run components signed with Authenticode | Enable

ActiveX controls and plug-ins

Run ActiveX controls and plug-ins | Enable

Scripting

Active scripting | Enable

Sites

Require server verification (https:) for all sites in this zone | Disabled
Include all local (intranet) sites not listed in other zones | Disabled
Include all sites that bypass the proxy server | Disabled
Include all network paths (UNCs) | Disabled

Sites in this zone
None

Trusted sites (Security Level: Custom)
.NET Framework-reliant components

Run components not signed with Authenticode | Enable
Run components signed with Authenticode | Enable

ActiveX controls and plug-ins

Download signed ActiveX controls | Prompt
Download unsigned ActiveX controls | Prompt
Initialize and script ActiveX controls not marked as safe | Prompt
Run ActiveX controls and plug-ins | Enable
Script ActiveX controls marked safe for scripting | Enable

Downloads

File download | Enable
Font download | Enable

Microsoft VM

Java permissions | High safety

Miscellaneous

Access data sources across domains | Enable
Allow META REFRESH | Enable
Display mixed content | Prompt
Don't prompt for client certificate selection when no certificates or only one certificate exists | Enable
Drag and drop or copy and paste files | Enable
Installation of desktop items | Enable
Launching applications and unsafe files | Enable
Launching programs and files in an IFRAME | Enable
Navigate sub-frames across different domains | Enable
Submit nonencrypted form data | Enable
Userdata persistence | Enable

Scripting

Active scripting | Enable
Allow paste operations via script | Prompt
Scripting of Java applets | Enable

User Authentication

Logon | Automatic logon with current username and password

Sites

Require server verification (https:) for all sites in this zone | Enabled

Sites in this zone
None

Restricted sites (Security Level: Custom)
.NET Framework-reliant components

Run components not signed with Authenticode | Disable
Run components signed with Authenticode | Disable

ActiveX controls and plug-ins

Run ActiveX controls and plug-ins | Disable

Microsoft VM

Java permissions | Disable Java

Scripting

Active scripting | Disable

Sites

Sites in this zone
None

Privacy

Privacy Level | Medium
Web Sites
Always allow | None
Always block | None

Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Control Panel/Personalization

Policy | Setting | Comment
--- | --- | ---
Enable screen saver | Enabled |
Password protect the screen saver | Enabled |
Prevent changing screen saver | Enabled |
Screen saver timeout | Enabled |
Number of seconds to wait to enable the screen saver
Seconds: | 700

System/Scripts

Policy | Setting | Comment
--- | --- | ---
Run logon scripts synchronously | Disabled |

Windows Components/Internet Explorer/Internet Control Panel/Advanced Page

Policy | Setting | Comment
--- | --- | ---
Empty Temporary Internet Files folder when browser is closed | Enabled |

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone

Policy | Setting | Comment
--- | --- | ---
Java permissions | Enabled |
Java permissions | Medium safety

Windows Components/Windows Explorer

Policy | Setting | Comment
--- | --- | ---
No Computers Near Me in Network Locations | Enabled |

Windows Components/Windows Explorer/Common Open File Dialog

Policy | Setting | Comment
--- | --- | ---
Hide the dropdown list of recent files | Disabled |