Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available

Default Domain Controllers Policy
Data collected on: 7/27/2017 8:02:40 AM |

General
Details

Domain | windomain.local
Owner | WINDOMAIN\Domain Admins
Created | 7/26/2017 8:14:16 PM
Modified | 7/26/2017 8:14:16 PM
User Revisions | 0 (AD), 0 (SYSVOL)
Computer Revisions | 1 (AD), 1 (SYSVOL)
Unique ID | {6AC1786C-016F-11D2-945F-00C04fB984F9}
GPO Status | Enabled

Links

Location | Enforced | Link Status | Path
--- | --- | --- | ---
Domain Controllers | No | Enabled | windomain.local/Domain Controllers

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:

Name
NT AUTHORITY\Authenticated Users

Delegation
These groups and users have the specified permission for this GPO

Name | Allowed Permissions | Inherited
--- | --- | ---
NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No
NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No

Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Local Policies/User Rights Assignment

Policy | Setting
--- | ---
Access this computer from the network | BUILTIN\Pre-Windows 2000 Compatible Access, NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS, NT AUTHORITY\Authenticated Users, BUILTIN\Administrators, Everyone
Add workstations to domain | NT AUTHORITY\Authenticated Users
Adjust memory quotas for a process | BUILTIN\Administrators, NT AUTHORITY\NETWORK SERVICE, NT AUTHORITY\LOCAL SERVICE
Allow log on locally | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS, BUILTIN\Print Operators, BUILTIN\Server Operators, BUILTIN\Account Operators, BUILTIN\Backup Operators, BUILTIN\Administrators
Back up files and directories | BUILTIN\Server Operators, BUILTIN\Backup Operators, BUILTIN\Administrators
Bypass traverse checking | BUILTIN\Pre-Windows 2000 Compatible Access, NT AUTHORITY\Authenticated Users, BUILTIN\Administrators, NT AUTHORITY\NETWORK SERVICE, NT AUTHORITY\LOCAL SERVICE, Everyone
Change the system time | BUILTIN\Server Operators, BUILTIN\Administrators, NT AUTHORITY\LOCAL SERVICE
Create a pagefile | BUILTIN\Administrators
Debug programs | BUILTIN\Administrators
Enable computer and user accounts to be trusted for delegation | BUILTIN\Administrators
Force shutdown from a remote system | BUILTIN\Server Operators, BUILTIN\Administrators
Generate security audits | NT AUTHORITY\NETWORK SERVICE, NT AUTHORITY\LOCAL SERVICE
Increase scheduling priority | BUILTIN\Administrators
Load and unload device drivers | BUILTIN\Print Operators, BUILTIN\Administrators
Log on as a batch job | BUILTIN\Performance Log Users, BUILTIN\Backup Operators, BUILTIN\Administrators
Manage auditing and security log | BUILTIN\Administrators
Modify firmware environment values | BUILTIN\Administrators
Profile single process | BUILTIN\Administrators
Profile system performance | NT SERVICE\WdiServiceHost, BUILTIN\Administrators
Remove computer from docking station | BUILTIN\Administrators
Replace a process level token | NT AUTHORITY\NETWORK SERVICE, NT AUTHORITY\LOCAL SERVICE
Restore files and directories | BUILTIN\Server Operators, BUILTIN\Backup Operators, BUILTIN\Administrators
Shut down the system | BUILTIN\Print Operators, BUILTIN\Server Operators, BUILTIN\Backup Operators, BUILTIN\Administrators
Take ownership of files or other objects | BUILTIN\Administrators

Local Policies/Security Options
Domain Controller

Policy | Setting
--- | ---
Domain controller: LDAP server signing requirements | None

Domain Member

Policy | Setting
--- | ---
Domain member: Digitally encrypt or sign secure channel data (always) | Enabled

Microsoft Network Server

Policy | Setting
--- | ---
Microsoft network server: Digitally sign communications (always) | Enabled
Microsoft network server: Digitally sign communications (if client agrees) | Enabled

User Configuration (Enabled)
No settings defined.